Abstract: A system and method are provided for controlling the latency of messages to enable a network of devices to detect and respond to potential malware. The system and method receiving a message at a device and determining whether the message represents potential malware and requires a delay to allow time to detect and respond to potential malware. The amount of the delay associated with the message is determined and the message is processed based on the delay amount.

Abstract: An intrusion detection system for detecting and defeating unauthorized intrusion within a computer network of an infrastructure element of a high value target, the system including a pre-processor configured to receive data from a computer network of an infrastructure element of a high value target and to output filtered data, a grammar applicator configured to apply grammars produced using a grammar based compression and learning algorithm to the filtered data, a decision making device configured to provide a recommendation based on an input from the grammar applicator as to whether the data in the computer network constitutes an unauthorized intrusion, and an emulator in communication with the decision making device configured to expand a sampling of the filtered data using a polymorphic transformation to allow the decision making device to further analyze the sampled data to determine an unauthorized intrusion. A method and a computer software code are also disclosed.

Abstract: A method for providing secure communication in an electrical power distribution network includes detecting an enhanced threat level in the electrical power distribution network. A threshold number of different configuration command shadows are received and processed to generate a configuration command data. A verified configuration command data is generated by comparing the configuration command data with a stored configuration commands and a verified configuration command related to the verified configuration command data is executed.

Abstract: A method for providing secure communication in an electrical power distribution network includes detecting an enhanced threat level in the electrical power distribution network. A plurality of configuration command messages including information related to a common configuration command are received. The common configuration commands are certified if the plurality of configuration command messages have originated from a threshold number of command sites. The method further includes executing the certified configuration command.

Abstract: Aspects of the disclosure provide a method of congestion control. The method includes transmitting by a first apparatus to a second apparatus a packet stream corresponding to stream data generated by a variable data rate application, determining a round-trip-time of a packet in the packet stream, updating a congestion measure based on the round-trip-time, and informing the variable data rate application based on the congestion measure to adjust a data rate for generating the stream data.

Abstract: A system and method are provided for controlling the latency of messages to enable a network of devices to detect and respond to potential malware. The system and method receiving a message at a device and determining whether the message represents potential malware and requires a delay to allow time to detect and respond to potential malware. The amount of the delay associated with the message is determined and the message is processed based on the delay amount.

Abstract: An intrusion detection system for detecting and defeating unauthorized intrusion within a computer network of an infrastructure element of a high value target, the system including a pre-processor configured to receive data from a computer network of an infrastructure element of a high value target and to output filtered data, a grammar applicator configured to apply grammars produced using a grammar based compression and learning algorithm to the filtered data, a decision making device configured to provide a recommendation based on an input from the grammar applicator as to whether the data in the computer network constitutes an unauthorized intrusion, and an emulator in communication with the decision making device configured to expand a sampling of the filtered data using a polymorphic transformation to allow the decision making device to further analyze the sampled data to determine an unauthorized intrusion. A method and a computer software code are also disclosed.

Abstract: A system and method for monitoring a network and detecting network vulnerabilities is provided. A communication associated with one or more programs is issued to one or more devices in a network and the response from the devices is detected and analyzed. Based on the analysis, a device response is identified as a threat response if it represents at least an alert, an unexpected response or a response time-out indicating that the device did not response to the communication. The vulnerability of the network is determined based on the threat responses of the devices.

Abstract: System, device and methods that provide proximate environmental and security intelligence to a guard making a security tour or round in an installation, as well as that provide for certifying that the guard has visited designated and known checkpoints on or about the times at which the guard is expected at those checkpoints.

Abstract: Aspects of the disclosure provide a method of congestion control. The method includes transmitting by a first apparatus to a second apparatus a packet stream corresponding to stream data generated by a variable data rate application, determining a round-trip-time of a packet in the packet stream, updating a congestion measure based on the round-trip-time, and informing the variable data rate application based on the congestion measure to adjust a data rate for generating the stream data.

Abstract: A system and method for monitoring a network and detecting network vulnerabilities is provided. A communication associated with one or more programs is issued to one or more devices in a network and the response from the devices is detected and analyzed. Based on the analysis, a device response is identified as a threat response if it represents at least an alert, an unexpected response or a response time-out indicating that the device did not response to the communication. The vulnerability of the network is determined based on the threat responses of the devices.

Abstract: System, device and methods that provide proximate environmental and security intelligence to a guard making a security tour or round in an installation, as well as that provide for certifying that the guard has visited designated and known checkpoints on or about the times at which the guard is expected at those checkpoints.

Abstract: Aspects of the disclosure provide a method for congestion control by implementing congestion aware applications. The congestion aware applications can adjust an occupancy of network resource according to a network congestion status. The method for congestion control can include transmitting data from an application to a transport protocol at a first data rate, transmitting the data over a channel, receiving a feedback signal from the transport protocol that is indicative of a congestion status of the channel, communicating the congestion status of the channel from the transport protocol to the application, and transmitting data from the application to the transport protocol at a second data rate based on the congestion status.

Abstract: A method for activating an optical article includes providing an optical article, wherein at least one mark is disposed on the optical article, wherein the mark comprises an optical-state change material in an initial state, the initial state preventing the optical article from being read by a player; deriving an unlock code by cryptographic operations on an optical article operatively coupled with a POS equipment and a data input from a medium encrypted with a cryptographic algorithm; deriving a toggling signal from an unlock code, and applying the toggling signal to the at least one mark resulting in changing the optical-state change material to a final state, the final state allowing the optical article to be read by the player; wherein the toggling signal comprises a set of values corresponding to the respective states of each of a plurality of marks on the surface of the optical article, and wherein applying the toggling signal results in setting each of the marks to either one of an initial state or a f

Abstract: Aspects of the disclosure provide a method for congestion control by implementing congestion aware applications. The congestion aware applications can adjust an occupancy of network resource according to a network congestion status. The method for congestion control can include transmitting data from an application to a transport protocol at a first data rate, transmitting the data over a channel, receiving a feedback signal from the transport protocol that is indicative of a congestion status of the channel, communicating the congestion status of the channel from the transport protocol to the application, and transmitting data from the application to the transport protocol at a second data rate based on the congestion status.

Abstract: A secure framework for wireless sensor networks. The framework provides a system and method for providing network device authentication. The system and method comprises installing a unique device key in a network device and creating a chain of keys, wherein each subsequent key is encrypted using the previous key. The method executes an authentication process for storing and issuing keys, wherein the authentication process uses a unique device key to install a device site key in the network device and uses the device site key and the unique device key to authenticate the network device for communicating with a wireless network router, wherein the wireless network router creates a unique network-device-router key. The unique network-device-router key is used to authenticate the network device for communicating over the wireless network using an encrypted network session key and allows secure encrypted link-layer communications over the wireless network.

Abstract: A satellite communication system for sending high resolution medically related images from a remote location to a central location for diagnostics, consisting of at least one remote transmitting and receiving station and a central diagnostic station adapted to provide an image based on a standard digital format such as Digital Imaging and Communications in Medicine (DICOM), and the Extended Transmission Control Protocol to transmit medically related images with a transmission efficiency of at least 90 percent to facilitate feed back while the patient remains at the remote transmitting and receiving station.

Abstract: A system and method for managing faults in a distributed system. The fault management system includes a configuration manager that maintains configuration information of components used in the distributed system. A plurality of measurement agents obtain performance information from the components in the distributed system. A diagnostic system has a plurality of rules written according to the configuration information stored therein. The diagnostic system is coupled to the configuration manager and each of the plurality of measurement agents and identifies faults occurring in the distributed system and provides solutions for correcting the faults The diagnostic system receives the configuration information from the configuration manager and the performance information from the plurality of measurement agents and uses the configuration and performance information with the plurality of rules to identify faults and provide solutions for the faults.