Abstract: Examples provided herein describe a method for providing security for Internet of Things (IoT) devices. For example, a data packet from an IoT device may be received at an edge device. A signature associated with the IoT device may be accessed at the edge device, where the signature includes network layer information about the IoT device. A set of rules may be applied by the edge device to validate the IoT device based on the accessed signature. Responsive to the IoT device being validated based on the accessed signature, received data packet, and the applied set of rules, the edge device may process the data packet from the IoT device.

Abstract: A method and system for enhanced time synchronization with lesser delay and jitter, from a gateway of a network or an external standard time source, over the internet, in a traditional network, including SDN, by NTP clients like newly added devices, spawned VMs and the like, by automatic deployment of the distributed NTP service through DHCP and DNS servers by spawning NTP demons (ntpd), according to the time synchronization requests received, thereby offloading the NTP functionality of the gateway and decreasing NTP traffic.

Abstract: A security client can efficiently authenticate an application during I/O request handling by maintaining a white list that identifies processes that have been created for authenticated applications. The security client can register to be notified when a process is being created. When such a notification is received, the security client can authenticate the application for which the process is being created and then add an entry to the white list that includes the process identifier of the process being created. Then, when the process subsequently generates I/O requests, the security client can use the white list to quickly determine that the process pertains to an authenticated application and allow the I/O requests to modify protected artifacts.

Abstract: One aspect provides a method and system for managing address resolution requests in a network. During operation, a gateway of the network advertises a route for sending address resolution requests and determines whether a cached entry corresponding to an address resolution request received via the route exists in a neighbor table. In response to determining that the cached entry exists, the gateway responds to the address resolution request based on the cached entry; in response to determining that the cached entry does not exist, the gateway replicates the address resolution request to edge devices in the network, thereby facilitating discovery of a target host corresponding to the address resolution request.

Abstract: A computer implemented method and apparatus receive an element of information via a network interface and analyze the element of information. The method further comprises identifying a related entity to a subject of interest (SOI) based on the analyzing. The method further comprises creating a knowledge graph that represents a relationship between the SOI and the related entity, and determining an overall risk score of the SOI that uses the knowledge graph. An alert may be transmitted, via the network interface, based on the overall risk score.

Abstract: In some aspects, the disclosure is directed to methods and systems for detection and classification of stamps in documents. The system can receive image data and textual data of a document. The system can pre-process and filter that data, and covert the textual data to a term frequency inverse document frequency (TF-IDF) vector. The system can detect the presence of a stamp on the document. The system can extract a subset of the image data including the stamp. The system can extract text from the subset of the image data. The system can classify the stamp using the extracted text, the image data, and the TF-IDF vector. The system can store the classification in a database.

Abstract: A computer-implemented system, method and/or computer program product to monitor changes in business risk of a targeted entity includes retrieving one or more industry classifications for one or more core businesses of the targeted entity; receiving news feeds related to the one or more industry classifications; detecting and extracting negative news related to the core businesses of the targeted entity from the news feeds; calculating an industry confidence score based upon the negative news; determining if the industry confidence score is greater than an industry confidence threshold; calculating, in response to the industry confidence score being larger than the industry confidence threshold, an entity confidence score for the targeted entity based upon negative news; and generating, in response to the entity confidence score being larger than an entity confidence threshold, an alert report for the targeted entity.

Abstract: A method includes: detecting, at a computing device coupled to an image sensor, an input request; in response to detecting the input request, capturing a reference image via the image sensor, the reference image containing a virtual keypad having a set of virtual keys; detecting, in the reference image, the set of virtual keys; capturing, via the image sensor, a key-press image of the virtual keypad; detecting, in the key-press image, a subset of the virtual keys; comparing the set of virtual keys and the subset of virtual keys to identify a key-press obscuring one of the virtual keys; and returning input data corresponding to the obscured virtual key.

Abstract: A method includes: detecting, at a computing device coupled to an image sensor, an input request; in response to detecting the input request, capturing a reference image via the image sensor, the reference image containing a virtual keypad having a set of virtual keys; detecting, in the reference image, the set of virtual keys; capturing, via the image sensor, a key-press image of the virtual keypad; detecting, in the key-press image, a subset of the virtual keys; comparing the set of virtual keys and the subset of virtual keys to identify a key-press obscuring one of the virtual keys; and returning input data corresponding to the obscured virtual key.

Abstract: A computer categorizes a news article by an activity and an associated activity phase, includes receiving, by a computer, at least one news article from an article source. The computer assigns for each news article, an activity of focus selected from a list of target activities, using a first machine learning model. The computer identifies, for each news article, at least one activity phase candidate selected from a list of activity phases associated with the activity of focus, using a second machine learning model. The computer determines, for each of new article, an activity phase of focus from among the activity phase candidates. The determination is based, at least in part on a confirmation attribute associated with the article. The computer categorizes each of the articles by said activity of focus and said activity phase of focus.

Abstract: An embodiment may involve storage containing incident logs and mappings between incident logs and vector representations generated by a machine learning (ML) model.

Abstract: A technique manages bandwidth allocated among input/output operations, such as reads and writes, to storage devices coupled to storage nodes of a cluster. The technique balances the writes in a manner that reduces latency of reads, while allowing the writes to complete in a desired amount of time. The writes include write types, such as client writes, data migration writes, block transfer writes, and recycling writes, which are defined by differing characteristics and relative priorities. To ensure timely completion of the write types, the technique provides periodic time intervals over which the writes may be balanced and allocated sufficient bandwidth to access the storage devices. The time intervals may include shuffle intervals within a larger distribution interval. In addition, the technique throttles certain write types at the storage device level to maintain consistent read performance. Throttling is based on a credit system that allocates bandwidth as “credits” based on write type.

Abstract: Systems, methods and devices for adding key chain and key derivative functions (KDF) support for Network time protocol (NTP) authentication using password based key derivation functions-NTP (PBKDF-NTP) are disclosed. In one embodiment, a method includes generating time bound multiple short lived keys instead of long lived keys for NTP security which ensures that attacker will not get enough time to crack the key values. The usage of time bound multiple short lived keys instead of long lived keys for NTP security will ensure that attacker will not get enough time to crack the key values within key lifetime. Hence man-in-middle attack can be avoided in NTP.

Abstract: A switch that can report unavailability in a label-switched network is provided. During operation, the switch can determine that a label-switched path is unavailable for forwarding a packet. The switch can then generate a notification message for collecting unavailability information at a respective upstream hop of the label-switched path. The notification message includes a depth indicator indicating the depth of collected unavailability information and an ingress label of the packet at the switch. If the switch is an intermediate switch on the label-switched path, the switch can forward the notification message to an upstream switch on the label-switched path, thereby allowing the upstream switch to collect further unavailability information in the notification message.

Abstract: In some aspects, the disclosure is directed to methods and systems for detection and classification of stamps in documents. The system can receive image data and textual data of a document. The system can pre-process and filter that data, and covert the textual data to a term frequency inverse document frequency (TF-IDF) vector. The system can detect the presence of a stamp on the document. The system can extract a subset of the image data including the stamp. The system can extract text from the subset of the image data. The system can classify the stamp using the extracted text, the image data, and the TF-IDF vector. The system can store the classification in a database.

Abstract: A computer categorizes a news article by an activity and an associated activity phase, includes receiving, by a computer, at least one news article from an article source. The computer assigns for each news article, an activity of focus selected from a list of target activities, using a first machine learning model. The computer identifies, for each news article, at least one activity phase candidate selected from a list of activity phases associated with the activity of focus, using a second machine learning model. The computer determines, for each of new article, an activity phase of focus from among the activity phase candidates. The determination is based, at least in part on a confirmation attribute associated with the article. The computer categorizes each of the articles by said activity of focus and said activity phase of focus.

Abstract: A semiconductor device includes a substrate, an epitaxial layer, an emitter region, and a collector region. The epitaxial layer is disposed over the substrate and has a first conductivity type. The drift region is disposed in the epitaxial layer and has a second conductivity type that is the opposite of the first conductivity type. The emitter region is disposed in the epitaxial layer outside the drift region. The collector region is disposed in the drift region. The semiconductor device also includes a doped region. The doped region is disposed adjacent to the bottom surface of the drift region and has the first conductivity type.

Abstract: A system and a method for performing programmable analytics on network data are described. A data layer constructs flow behavior information based on information present within headers of data packets flowing across one or more network devices configured in a computer network. An inline heuristics layer performs one or more inline heuristic operations on the flow behavior information to obtain aggregate statistical information. An integrated analytics layer performs one or more analytical operations on the flow behavior information to obtain network insights. A presentation layer filters and plots information obtained from the data layer, the inline heuristics layer, and the integrated analytics layer, based on a user input.

Abstract: A system, computer program product, and method are presented for leveraging structured data and unstructured data, and, more specifically, to ranking documentation from unstructured data sources through leveraging insights provided by the structured data to facilitate associated business risk inquiries. The method includes identifying, by researching subject business entities, one or more structured data sources that include relevant structured data directed to the subject business entities. The method also include extracting the relevant structured data directed toward the subject business entities and leveraging the relevant structured data to identify unstructured data sources. The method further includes identifying documents from the unstructured data sources that have relevant information, thereby identifying relevant unstructured data, and leveraging the relevant structured data to determine relationships with the relevant unstructured data.

Abstract: A computer receives a list of reference topics from a topic database and a set of articles related to said reference topics. The computer generates article n-grams and compares them to the reference topics using NLP to determine a primary theme for each article that corresponds to one of reference topics. The computer collects articles with common primary themes into at least one article group and determining an article comparison value between articles in the article group. Responsive to determining that an article comparison value is below a predetermined similarity threshold, determining a distinguishing feature associated with one of the compared articles that contributed to the article comparison value. The computer assigns articles having the distinguishing feature into a secondary group based, at least in part, on the distinguishing feature.