Abstract: A computer implemented method includes receiving maritime vessel automatic identification system (AIS) data from a vessel. The method includes determining that the maritime vessel AIS data includes anomalous data. The method also includes estimating a likelihood of malicious vessel intent based on a comparison of the anomalous data to secondary data. In response to the likelihood of malicious vessel intent satisfying a threshold, the method further includes generating an alert that includes an indication of an inferred intent for the vessel.

Abstract: A computer implemented method includes receiving maritime vessel automatic identification system (AIS) data from a vessel. The method includes determining that the maritime vessel AIS data includes anomalous data. The method also includes estimating a likelihood of malicious vessel intent based on a comparison of the anomalous data to secondary data. In response to the likelihood of malicious vessel intent satisfying a threshold, the method further includes generating an alert that includes an indication of an inferred intent for the vessel.

Abstract: A particular method includes receiving a data element at a processor of a computing device and determining whether the received data element is related to a known data set corresponding to one or more known data elements stored in a memory accessible to the processor. The method further includes, when the received data element is related to a particular known data set, forming an aggregate data set by combining the received data element with the particular known data set. The method also includes evaluating one or more analysis templates based on the aggregate data set. Each analysis template corresponds to a different hypothesis. Evaluating the one or more analysis templates results in a determination regarding a probability that a particular hypothesis is true based on the aggregate data set.

Abstract: A particular method includes receiving a data element at a processor of a computing device and determining whether the received data element is related to a known data set corresponding to one or more known data elements stored in a memory accessible to the processor. The method further includes, when the received data element is related to a particular known data set, forming an aggregate data set by combining the received data element with the particular known data set. The method also includes evaluating one or more analysis templates based on the aggregate data set. Each analysis template corresponds to a different hypothesis. Evaluating the one or more analysis templates results in a determination regarding a probability that a particular hypothesis is true based on the aggregate data set.

Abstract: A method of providing real-time information regarding objects in a social network includes receiving updated information regarding the social network, and determining, by a processor, an effect of the updated information on a set of existing social network information. The method also includes incrementally updating, by a processor, the set of existing social network information, and providing the updated set of social network information.

Abstract: A method of providing real-time information regarding objects in a social network includes receiving updated information regarding the social network, and determining, by a processor, an effect of the updated information on a set of existing social network information. The method also includes incrementally updating, by a processor, the set of existing social network information, and providing the updated set of social network information.

Abstract: A particular computer-implemented method includes generating a plurality of intent maps based on a plurality of documents. The plurality of intent maps includes a first intent map based on a first document and a second intent map based on a second document. Each intent map of the plurality of intent maps corresponds to a document of the plurality of documents and includes a set of event structures. Each event structure includes data descriptive of an actor and an action described in the document that corresponds to the intent map. The method also includes performing a comparison of event structures of the first intent map and event structures of the second intent map. The method further includes determining, based on the comparison, whether at least a portion of the first document is duplicative of at least a portion of the second document.

Abstract: Threat assessment modules are disclosed that intelligently review evidence of potential threats posed by detected objects within a region of exo-atmospheric space and generate a most probable threat scenario to facilitate administration of counterspace operations.

Abstract: Threat assessment modules are disclosed that intelligently review evidence of potential threats posed by detected objects within a region of exo-atmospheric space and generate a most probable threat scenario to facilitate administration of counterspace operations.

Abstract: In accordance with an embodiment, a method includes receiving, by a computing environment, one or more answers to one or more questions from an assessing agent at a security checkpoint. The agent interrogates a party attempting to pass through the security checkpoint with questions. The questions are provided to the agent in real time by the computing environment. The party being interrogated providing the answers. Subsequent answers are dynamically correlated in real time with previously received answers, and with either or both of real time and/or stored security data until a security status is established. A security status for the party is determined in real time based on the results of the correlating. The security status of the party is communicated to the assessing agent in real time.