Abstract: A code analyzer implements machine learning to detect vulnerabilities in computer code. The code analyzer trains a machine learning model using training vectors that characterize vulnerable programming patterns. The code analyzer evaluates a topological representation of the computer code using the machine learning model to identify a potential vulnerability. The potential vulnerability corresponds to a portion of the computer code where an attack can be used to bypass a security procedure. The code analyzer tests the potential vulnerability by emulating a fault injection during execution of the portion of the computer code. Upon confirming that the potential vulnerability can be exploited via a fault injection, the code analyzer generates a training vector that characterizes a vulnerable programming pattern associated with the portion of the computer code. The training vector can be used to further train the machine learning model.

Abstract: Implementations are described herein for detecting deepfakes in digital media while preserving the privacy of the source computing device. In various implementations, sensor fingerprints and/or security tokens that signal software-introduced alterations, e.g., introduced by hardware abstraction layers (HALs) or virtual machines (VMs) may be utilized to detect such deepfakes. These signals may be used, separately and/or in combination, for various purposes, such as flagging digital content to a user as being a deepfake, preventing or blocking receipt and/or playback of digital content deemed to be a deepfake, allowing an end user to disable aspect(s) (e.g., layers) of digital content that are determined to be synthetic, etc.

Abstract: Apparatuses, systems, and techniques to enable verification of content, such as media content. Hashes of content can be digitally signed and stored to a distributed ledger, such that a source of content can be verified and any modification determined.

Abstract: A code analyzer implements machine learning to detect vulnerabilities in computer code. The code analyzer trains a machine learning model using training vectors that characterize vulnerable programming patterns. The code analyzer evaluates a topological representation of the computer code using the machine learning model to identify a potential vulnerability. The potential vulnerability corresponds to a portion of the computer code where an attack can be used to bypass a security procedure. The code analyzer tests the potential vulnerability by emulating a fault injection during execution of the portion of the computer code. Upon confirming that the potential vulnerability can be exploited via a fault injection, the code analyzer generates a training vector that characterizes a vulnerable programming pattern associated with the portion of the computer code. The training vector can be used to further train the machine learning model.

Abstract: Baseline data characterizing actions of one or more computing resources associated with one or more entities is received. One or more functional roles performed by the one or more computing resources are identified using a machine learning model, wherein the baseline data is provided as input to the machine learning model. A security-related control to be applied to the one or more computing resources is identified based on the one or more functional roles. The security-related control is applied to the one or more computing resources.

Abstract: In various examples, communications having insecure protocols are dynamically hardened. For example, communications that are formatted in an outdated or otherwise insecure version of a protocol (e.g., sent by a device aged out of a service window) may be isolated within a network, converted to an updated protocol format, or any combination thereof. These systems and methods may be implemented on a general purpose network device (e.g., a hub of a Local Area Network (LAN)).

Abstract: The valve module can be installed regardless of an oil level, for example of an oil level of an oil sump of a motor vehicle. By means of a buffer volume having an overflow it is always guaranteed that a leakage flow conveyed past a valve piston includes no air but consists solely of hydraulic medium, since the overflow guarantees a level of hydraulic medium which lies above an upper face of the valve piston in a preferred installation position. As a result, foaming of the hydraulic medium can be prevented. The valve module can also be installed above the oil sump, for example in an upper region of a gearbox of the motor vehicle. In addition, the oil from the overflow can be used for cooling/lubrication of further drive train components.

Abstract: Statistical analysis can be used to attempt to identify potentially malicious references, such as trap URLs. When a URL is utilized for a request, that request can be intercepted before analysis before that URL is resolved to an address. Portions of this URL, as well as the entire URL, can be compared against one or more lists of known URLs using a probabilistic matching process to determine whether there are any matches that are very close but not quite exact. Any determined match with high probability above a suspicion threshold can be flagged as being suspicious, or associated with a potentially malicious site. An action can then be taken, such as to block that URL or prompt a user for confirmation of intent.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for preserving user privacy when selecting content are described. In some aspects, a method includes receiving a data element identifying a set of candidate digital components and, for each candidate digital component, a set of distribution parameters for the candidate digital component. For each candidate digital component, encrypted selection data for the candidate digital component is provided as input to a cryptographic analysis application running in a trusted hardware module of a client device. The encrypted selection data represents the set of distribution parameters for the candidate digital component and is encrypted using a zero-knowledge proof protocol. The cryptographic analysis application is configured to determine a measure of match between the selection data and user attributes of a user of the client device.

Abstract: In various examples, communications having insecure protocols are dynamically hardened. For example, communications that are formatted in an outdated or otherwise insecure version of a protocol (e.g., sent by a device aged out of a service window) may be isolated within a network, converted to an updated protocol format, or any combination thereof. These systems and methods may be implemented on a general purpose network device (e.g., a hub of a Local Area Network (LAN)).

Abstract: Baseline data characterizing actions of one or more computing resources associated with one or more entities is received. One or more functional roles performed by the one or more computing resources are identified using a machine learning model, wherein the baseline data is provided as input to the machine learning model. A security-related control to be applied to the one or more computing resources is identified based on the one or more functional roles. The security-related control is applied to the one or more computing resources.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for preserving user privacy when selecting content are described. In some aspects, a method includes receiving a data element identifying a set of candidate digital components and, for each candidate digital component, a set of distribution parameters for the candidate digital component. For each candidate digital component, encrypted selection data for the candidate digital component is provided as input to a cryptographic analysis application running in a trusted hardware module of a client device. The encrypted selection data represents the set of distribution parameters for the candidate digital component and is encrypted using a zero-knowledge proof protocol. The cryptographic analysis application is configured to determine a measure of match between the selection data and user attributes of a user of the client device.

Abstract: A method is provided comprising: obtaining a counterparty contract, the counterparty contract including a contract that is being proposed by a counterparty to a user; performing a segmentation of the counterparty contract to identify a plurality of sentence clusters, each of the sentence clusters corresponding to a different provision in the counterparty contract; generating a plurality of counterparty provision vectors based on the counterparty contract, each of the counterparty provision vectors being generated based on a different one of the plurality of sentence clusters; retrieving a user provision vector, the user provision vector corresponding to a user provision; calculating a plurality of similarity scores for the user provision vector; detecting whether the plurality of similarity scores satisfies a condition that is associated with the user provision; and outputting a notification associated with the user provision when the condition is satisfied.

Abstract: The valve module can be installed regardless of an oil level, for example of an oil level of an oil sump of a motor vehicle. By means of a buffer volume having an overflow it is always guaranteed that a leakage flow conveyed past a valve piston includes no air but consists solely of hydraulic medium, since the overflow guarantees a level of hydraulic medium which lies above an upper face of the valve piston in a preferred installation position. As a result, foaming of the hydraulic medium can be prevented. The valve module can also be installed above the oil sump, for example in an upper region of a gearbox of the motor vehicle. In addition, the oil from the overflow can be used for cooling/lubrication of further drive train components.

Abstract: In various examples, firewalls may include machine learning models that are automatically trained and applied to analyze service inputs submitted to input processing services and to identify whether service inputs are desirable (e.g., will result in an undesirable status code if processed by a service). When a service input is determined by a firewall to be desirable, the firewall may push the service input through to the input processing service for normal processing. When a service input is determined by the firewall to be undesirable, the firewall may block or drop the service input before it reaches the input processing service and/or server. This may be used to prevent the service input, which is likely to be undesirable, from touching a server that hosts the input processing service (e.g., preventing a crash).

Abstract: A method is provided comprising: obtaining a counterparty contract, the counterparty contract including a contract that is being proposed by a counterparty to a user; performing a segmentation of the counterparty contract to identify a plurality of sentence clusters, each of the sentence clusters corresponding to a different provision in the counterparty contract; generating a plurality of counterparty provision vectors based on the counterparty contract, each of the counterparty provision vectors being generated based on a different one of the plurality of sentence clusters; retrieving a user provision vector, the user provision vector corresponding to a user provision; calculating a plurality of similarity scores for the user provision vector; detecting whether the plurality of similarity scores satisfies a condition that is associated with the user provision; and outputting a notification associated with the user provision when the condition is satisfied.

Abstract: A method is provided for manufacturing a complex hollow article from a flexible polymer material. The method includes using an additive manufacturing system to form a precursory structure that is formed from a build material and phase change material, melting and removing the phase change material, injecting uncured liquid flexible polymer material into a cavity defined by the build material, curing and solidifying the flexible polymer material, and cracking and removing the build material from the flexible polymer material to provide the hollow article.

Abstract: In various examples, communications from a host device—which may be associated with an entity—and to a client device may be are verified through established channels of communication. Systems and methods are disclosed that use authentication signals and notifications, which may include predetermined passwords and time-sensitive values, to facilitate verification of the communication between the host device and client device. The notifications may be delivered using applications or web-based applications that are associated with an entity. Once the communication has been verified as trusted, the host device and/or the client device may present notifications that the communication is verified as trusted. The notifications may be presented using audio, video, and/or haptic methods.

Abstract: In various examples, communications having insecure protocols are dynamically hardened. For example, communications that are formatted in an outdated or otherwise insecure version of a protocol (e.g., sent by a device aged out of a service window) may be isolated within a network, converted to an updated protocol format, or any combination thereof. These systems and methods may be implemented on a general purpose network device (e.g., a hub of a Local Area Network (LAN)).

Abstract: In various examples, firewalls may include machine learning models that are automatically trained and applied to analyze service inputs submitted to input processing services and to identify whether service inputs are desirable (e.g., will result in an undesirable status code if processed by a service). When a service input is determined by a firewall to be desirable, the firewall may push the service input through to the input processing service for normal processing. When a service input is determined by the firewall to be undesirable, the firewall may block or drop the service input before it reaches the input processing service and/or server. This may be used to prevent the service input, which is likely to be undesirable, from touching a server that hosts the input processing service (e.g., preventing a crash).