Abstract: A system for automatically creating and merging ontological databases from heterogeneous data sets and for conducting context-based searches, inference, and deduction using those databases. The system has an automated ontology engine which receives data, analyzes it to identify implicit relationships in between its elements, and organizes it into ontologies. The automated index generator creates a searchable index of the created ontologies and instances. The semantic search engine performs context-based searches, inference and deduction based on the index of ontologies and contextual information about the search query and the user or models relating to the constructed knowledge base comprising new relationships not in the original data.

Abstract: A system for web-rendering data-dense geographical regions that correspond to heterogenous sourced data and formats for highly scalable parallel simulations, comprising a multi-dimensional time-series database enabling single-query support over all simulations via individual simulation swimlanes.

Abstract: A system for programmatic and user interactive inclusion of time-series geospatial markers in analyses employing a cyber-decision platform has been developed comprising a module to retrieve an indexed geospatial image tiles and map overlay data corresponding to tiles. The system may attach a unique geo-hash label to each point of an indexed geospatial image tile based upon the point's geographical coordinates such that points in close proximity will have similar geo-hash values. A web application interface allows users to interactively retrieve and visualize indexed geospatial image tiles, add map overlays and create geo-hashes as desired.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. A data packet modifier is used to reveal the IP address of a threat actor behind a port scan and subsequently block the threat actor. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: A system and methods for mitigating Kerberos ticket attacks within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Abstract: A system for improving a distributable model with distributed data is provided, comprising a network-connected distributable model source configured to serve instances of a distributable model; and a directed computation graph module configured to receive at least an instance of the distributable model from the network-connected computing system, create a cleansed dataset from data stored in the memory with at least biases within the data stored in memory corrected, train the instance of the distributable model with the cleansed dataset, and generate an update report based at least in part by updates to the instance of the distributable model.

Abstract: A system for risk-based multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computation graph module configured to receive network traffic data from the multi-dimensional time series data server, determine a network traffic baseline from the network traffic data, and determine a verification score needed before granting access based at least in part by the network traffic baseline. A plurality of verification methods build up a user's verification score to required level to gain access.

Abstract: A system for detecting and mitigating attacks using forged authentication objects within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: There is provided a valve assembly, the valve assembly including a body (8) in which there is housed at least one valve ball (22, 24), a movement assembly (32, 34) for moving the ball between closed and open positions with respect to a channel which passes through the body. At respective ends of the valve body there is provided sealing means (38) including a valve seat, biasing means to bias the valve seat towards contact with the ball, and at least one annular member engaged with the valve body to retain the valve seat, biasing means and at least one ball in the valve body and form a modular unit. Positioned in the valve body outwardly of each of the sealing means, there is provided a fitting means (50) engaged with the valve body and the form of the fitting means is selected and fitted to the modular unit independently of the said at least one annular member.

Abstract: There is provided a valve assembly, the valve assembly including a body (8) in which there is housed at least one valve ball (22, 24), a movement assembly (32, 34) for moving the ball between closed and open positions with respect to a channel which passes through the body. At respective ends of the valve body there is provided sealing means (38) including a valve seat, biasing means to bias the valve seat towards contact with the ball, and at least one annular member engaged with the valve body to retain the valve seat, biasing means and at least one ball in the valve body and form a modular unit. Positioned in the valve body outwardly of each of the sealing means, there is provided a fitting means (50) engaged with the valve body and the form of the fitting means is selected and fitted to the modular unit independently of the said at least one annular member.

Abstract: A closed loop coolant system which ensures the isolation of coolant fluid within an apparatus for producing a metal container by wall ironing. The apparatus includes a die toolpack which reduces the thickness of the container side wall, a ram (5) and a ram guidance assembly (10) which guides the ram along a bore of a tubular assembly. The tubular assembly has a fluid inlet, and the surface of the bore of the tubular assembly has grooves (13) for passage of coolant fluid between the bore and around the outside of the ram (5) and seals for minimizing leakage of oil into the coolant. Coolant is directed back to a tank (20) via a heat exchanger (21) and any oil is skimmer off the coolant by an oil skimmer (24). This oil can then be filtered, cleaned and recycled, or disposed of.

Abstract: A closed loop coolant system which ensures the isolation of coolant fluid within an apparatus for producing a metal container by wall ironing. The apparatus includes a die toolpack which reduces the thickness of the container side wall, a ram 5 and a ram guidance assembly 10 which guides the ram along a bore of a tubular assembly. The tubular assembly has a fluid inlet, and the surface of the bore of the tubular assembly has grooves 13 for passage of coolant fluid between the bore and around the outside of the ram 5 and seals for minimising leakage of oil into the coolant. Coolant is directed back to a tank 20 via a heat exchanger 21 and any oil is skimmer off the coolant by an oil skimmer 24. This oil can then be filtered, cleaned and recycled, or disposed of.

Abstract: A storage stable adhesive paste composition is described. It contains a plurality of first solid particles comprising a surface protected polyisocyanate and a plurality of second solid particles of polymer having functional groups that react with the polyisocyanate. The particles may be protected by encapsulation in a layer of a material that is not reactive to the polyisocyanate. Preferably, the protective layer also is not reactive to the polymer having functional groups that react with the polyisocyanate. The polyisocyanate particles also can be protected by a layer formed by chemically reacting said polyisocyanate particles with isocyanate reactive compounds to form a protective surface layer around said polyisocyanate particles.

Abstract: A storage stable adhesive paste composition is described. It contains a plurality of first solid particles comprising a surface protected polyisocyanate and a plurality of second solid particles of polymer having functional groups that react with the polyisocyanate. The particles may be protected by encapsulation in a layer of a material that is not reactive to the polyisocyanate. Preferably, the protective layer also is not reactive to the polymer having functional groups that react with the polyisocyanate. The polyisocyanate particles also can be protected by a layer formed by chemically reacting said polyisocyanate particles with isocyanate reactive compounds to form a protective surface layer around said polyisocyanate particles.

Abstract: Heat curable compositions, particularly solvent-based adhesive compositions suitable for use e.g. in flocking processes, are described and claimed. Known heat curable compositions require a relatively high temperature for cure. A one part non-toxic storage stable composition is provided which is cured by heat and comprises a polyurethane prepolymer formed from the reaction between a first NCO terminated prepolymer, an oxime blocking agent and a trifunctional primary amino compound used in a substantially stoichiometric amount to the amount of isocyanate groups of the first prepolymer available for reaction. The quantity of blocking agent is so chosen that statistically only one functional group of the triamine is reacted with the NCO groups of the first prepolymer available for reaction leaving two amine groups available for reaction with isocyanate groups of the prepolymer when they are unblocked by heating.