Abstract: Computer-implemented techniques for verifying translated access controls for application modernization include an application modernization service of a provider network obtaining a source access control. The service translates the source access control to a target access control. The service compiles the source access control and the target access control into respective automated reasoning solver encodings. The service uses the automated reasoning solver encoding to query an automated reasoning solver such as a Satisfiability Modulo Theories (SMT) solver to determine whether the source access control is less or more permissive than the target access control representing a security issue or an availability issue with the target access control, respectively.

Abstract: Techniques are described for providing a policy refiner application used to analyze and recommend modifications to identity and access management policies created by users of a cloud provider network (e.g., to move the policies toward least-privilege permissions). A policy refiner application receives as input a policy to analyze, and a log of events related to activity associated with one or more accounts of a cloud provider network. The policy refiner application can identify, from the log of events, actions that were permitted based on particular statements contained in the policy. Based on field values contained in the corresponding events, the policy refiner application generates an abstraction of the field values, where the abstraction of the field values may represent a more restrictive version of the field from a policy perspective. These abstractions can be presented to users as recommendations for modifying their policy to reduce the privileges granted by the policy.

Abstract: Various embodiments include method performed by a processor of a roadside unit (RSU) processing system for controlling a message transmissions. In various embodiments, the RSU processing system may receive vehicle-to-everything (V2X) information from a vehicle, determine, based on the received V2X information, a minimum reception distance at which the vehicle or operator of the vehicle will reliably receive a message from the RSU and have time for the vehicle to react to the message, determine a transmission power level based on the determined minimum reception distance, and transmit the message to the vehicle using the determined transmission power level. In various embodiments, the RSU processing system may determine the transmission power level taking into account vehicle speeds, vehicle locations, road conditions, weather conditions and/or the type of message being transmitted.

Abstract: Techniques for analyzing access control policies across multiple provider networks. These techniques compile various policies into a unified policy language broad enough to include diverse policy features, yet specific enough for automated analysis. An automated differential testing method is employed to confirm the accuracy of this compilation by generating access requests, ensuring both original and translated policies consistently grant or deny access. Moreover, an abstraction technique is used to simplify and correlate the complex details of different policies, enabling easier user inquiries about them. For instance, users can determine if an account has write access in one network but not in another. This abstraction sometimes involves replacing actions in original policies, ensuring their compatibility in the target policy language.

Abstract: Synthetic data generation systems and methods are disclosed for augmenting synthetic scenes using neural networks that are conditioned on depth information. The synthetic data generation system may use a guided latent diffusion model to generate (or augment) synthetic images, which can subsequently be used to train other models to perform tasks such as object detection. Input of the model may be an image rendered by a graphic engine with coarsely rendered objects. When the image is rendered, segmentation masks may also be generated for objects in the image. The synthetic data generation system may generate a monocular depth image. During the image generation phase, the corresponding segmentation mask, depth map, and any guiding textual input serve as constraints for the denoising process. During the denoising step, the synthetic data generation system may also crop and adjust the resolution of individual objects during diffusion to enhance the results.

Abstract: Techniques are described for executing satisfiability modulo theories (SMT) solvers in a “shadow” system configuration where input queries are provided to a primary SMT solver system and additionally to one or more secondary SMT solver systems. SMT solver systems can be used by cloud providers and in other computing environments to analyze the implications of configured user account policies defining permissions with respect to users' computing resources and associated actions within a computing environment, to help ensure the security of computing resources and user data, etc. The results generated by a primary SMT solver system can be provided to one or more secondary SMT solver systems, where each of the secondary SMT systems can comprise different system components or different versions of system components, to assess the correctness of the primary SMT solver system, to compare performance metrics, among other possible types of analyses.

Abstract: Techniques are described for providing a SAT-based solver for a quantifier-free theory of strings and bit vectors. The solver can be used by an automated reasoning service of a cloud provider network to analyze policies and the consequences of policies. The solver reduces an input formula to a Boolean satisfiability problem by encoding the input formula into an equisatisfiable propositional formula, where the satisfiability of the equisatisfiable propositional formula is determined by a SAT solver. Rather than using a traditional DPLL(T) style algorithm, the solver described herein bounds the length of variables in an input formula and reduces the problem to a single formula, which can then be solved using incremental SAT solving. The solver can be used independently or as part of a portfolio of solvers used to determine the satisfiability or unsatisfiability of certain formula corresponding, e.g., to questions about users' policies within a cloud provider network.

Abstract: Techniques are described for providing a policy refiner application used to analyze and recommend modifications to identity and access management policies created by users of a cloud provider network (e.g., to move the policies toward least-privilege permissions). A policy refiner application receives as input a policy to analyze, and a log of events related to activity associated with one or more accounts of a cloud provider network. The policy refiner application can identify, from the log of events, actions that were permitted based on particular statements contained in the policy. Based on field values contained in the corresponding events, the policy refiner application generates an abstraction of the field values, where the abstraction of the field values may represent a more restrictive version of the field from a policy perspective. These abstractions can be presented to users as recommendations for modifying their policy to reduce the privileges granted by the policy.

Abstract: Techniques for determining an alternative communication mode for vehicle-to-vehicle communication at a host vehicle can include monitoring the primary mode of RF communication to ensure it is effectively communicating and, if not, intelligently selecting a backup communication mode comprising one or more other sensors and/or systems of the vehicle. The selection of the backup communication mode may take into account various factors that can affect the various modes of communication from which the backup communication mode is selected.

Abstract: Embodiments are disclosed that include systems and methods performed by a processor of a designated platoon vehicle, including establishing an out-of-band vehicle-to-vehicle (V2V) communication link with a target vehicle in response to determining a change in the quantity of vehicles included in the platoon is approved, wherein the out-of-band V2V communication link extends laterally more than a first V2V communication link with an initially-adjacent platoon vehicle, expanding the first V2V communication link for maintaining communications with the initially-adjacent platoon vehicle while changing a relative positioning between the designated platoon vehicle and the initially-adjacent platoon vehicle, establishing a second V2V communication link with the target vehicle, and ending the out-of-band V2V communication link in response to the target vehicle taking the place of the initially-adjacent platoon vehicle immediately adjacent to and either in front of or behind the designated platoon vehicle.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may receive, from a connected device, an indication associated with management of one or more communications between the connected device and a network node of a wireless network, wherein the one or more communications are carried by the UE between the connected device and the network node. The UE may configure, based at least in part on the indication, the UE for carrying the one or more communications between the connected device and the network node. Numerous other aspects are described.

Abstract: Collaborative enhanced sensing systems and techniques are described. A system obtains sensor data of an environment from one or more sensors. The sensor data includes different representations of one or more portions of the environment from multiple perspectives. The system identifies a subset of the different representations of the one or more portions of the environment based on context corresponding to a vehicle in the environment. The context can include, for example, a position, a direction of travel, a speed, and/or a planned movement of the vehicle. The system causes an enhanced representation of the environment for the vehicle to be generated at least in part based on consolidating and/or fusing together the subset of the different representations. The system can cause an indication of the enhanced representation of the environment to be output at the vehicle.

Abstract: Systems and techniques are described for providing an enhanced vehicle-to-everything (V2X) see-though use case. For example, a method for wireless communication at a network entity may include receiving, at the network entity, sensor data from one or more devices, the sensor data comprising at least one of sensing measurements associated with one or more objects in an environment or information associated with a respective device of the one or more devices. The method may include generating, at the network entity, one or more advisory messages for one or more recipient vehicles based on at least a portion of the sensor data. The method may further include transmitting, from the network entity, the one or more advisory messages to the one or more recipient vehicles.

Abstract: Briefly, example methods, apparatuses, and/or articles of manufacture may be implemented to receive or obtain, responsive to transmitting the one or more search terms to a search entity, one or more primary content items that include messages that accord with the one or more search terms. The method may additionally include parsing the messages that accord with the one or more search terms to detect one or more relevant secondary search terms and obtaining secondary content items that accord with the one or more relevant secondary search terms. The method may further include generating signals to represent a report of entities that accord with the one or more relevant secondary search terms.

Abstract: Briefly, example methods, apparatuses, and/or articles of manufacture may be implemented to receive or obtain, responsive to transmitting the one or more search terms to a search entity, one or more primary content items that include messages that accord with the one or more search terms. The method may additionally include parsing the messages that accord with the one or more search terms to detect one or more relevant secondary search terms and obtaining secondary content items that accord with the one or more relevant secondary search terms. The method may further include generating signals to represent a report of entities that accord with the one or more relevant secondary search terms.

Abstract: Techniques for determining an alternative communication mode for vehicle-to-vehicle communication at a host vehicle can include monitoring the primary mode of RF communication to ensure it is effectively communicating and, if not, intelligently selecting a backup communication mode comprising one or more other sensors and/or systems of the vehicle. The selection of the backup communication mode may take into account various factors that can affect the various modes of communication from which the backup communication mode is selected.

Abstract: Various embodiments include method performed by a processor of a roadside unit (RSU) processing system for controlling a message transmissions. In various embodiments, the RSU processing system may receive vehicle-to-everything (V2X) information from a vehicle, determine, based on the received V2X information, a minimum reception distance at which the vehicle or operator of the vehicle will reliably receive a message from the RSU and have time for the vehicle to react to the message, determine a transmission power level based on the determined minimum reception distance, and transmit the message to the vehicle using the determined transmission power level. In various embodiments, the RSU processing system may determine the transmission power level taking into account vehicle speeds, vehicle locations, road conditions, weather conditions and/or the type of message being transmitted.

Abstract: Techniques for determining an alternative communication mode for vehicle-to-vehicle communication at a host vehicle can include monitoring the primary mode of RF communication to ensure it is effectively communicating and, if not, intelligently selecting a backup communication mode comprising one or more other sensors and/or systems of the vehicle. The selection of the backup communication mode may take into account various factors that can affect the various modes of communication from which the backup communication mode is selected.

Abstract: An image processing system for convolving an image includes processing circuitry that is configured to retrieve the image including a set of rows, a merged kernel, multiple skip values and a pixel base address. The merged kernel includes all non-zero coefficients of a set of kernels. Each skip value corresponds to a location offset of each non-zero coefficient with respect to a previous non-zero coefficient. Further, the processing circuitry is configured to execute a multiply-accumulate (MAC) instruction and a load instruction parallelly in one clock cycle for multiple times, on the set of rows and the merged kernel to convolve the image with the merged kernel. Each row on which the MAC and load instructions are executed is associated with a corresponding non-zero coefficient and a corresponding skip value. The load instruction is executed based on the pixel base address, the corresponding skip value, and a width of each row.

Abstract: Embodiments are disclosed that include systems and methods performed by a processor of a designated platoon vehicle, including establishing an out-of-band vehicle-to-vehicle (V2V) communication link with a target vehicle in response to determining a change in the quantity of vehicles included in the platoon is approved, wherein the out-of-band V2V communication link extends laterally more than a first V2V communication link with an initially-adjacent platoon vehicle, expanding the first V2V communication link for maintaining communications with the initially-adjacent platoon vehicle while changing a relative positioning between the designated platoon vehicle and the initially-adjacent platoon vehicle, establishing a second V2V communication link with the target vehicle, and ending the out-of-band V2V communication link in response to the target vehicle taking the place of the initially-adjacent platoon vehicle immediately adjacent to and either in front of or behind the designated platoon vehicle.