Abstract: Embodiments of a present disclosure relate to communication systems and more particularly to a system and a method for detecting a Photon-Number-Splitting (PNS) attack in a secure quantum communication channel during Quantum Key Distribution (QKD). The system comprises source Quantum Key Distribution (QKD) device that transmits quantum states comprising signal and decoy states to destination QKD device through pre-authenticated classical communication channel. The destination QKD device records measurable parameters and sends them back to source QKD device through pre-authenticated classical communication channel. A source security analysis unit in source QKD device analyzes security parameters and detects Photon-Number-Splitting (PNS) attacks using a differential statistical analysis technique. A source key generation unit and source key management unit perform actions for secret key generation based on detected PNS attack.

Abstract: A system can generate a risk indicator associated with a target entity. For example, the system can receive a request for a risk indicator associated with a target entity. For each data source in a set of data sources, the system can: retrieve identity data associated with the target entity based on the identity of the target entity; and generate a set of element risk scores and a set of affiliation scores associated with each element of the set of elements. The system can determine an aggregate element risk score and an aggregate element affiliation score. The system can determine the risk indicator by combining the aggregated element risk scores of the set of elements based on a first set of element weights. The system can transmit, to a remote computing device, a responsive message including at least the risk indicator.

Abstract: Embodiments of a present disclosure relate to communication systems and more particularly to a system and a method for a point-to-point decoy differential phase shift (DPS) Quantum Key Distribution (QKD). The system includes a source QKD device and a destination QKD device. The source QKD device generates and transmits one or more quantum states comprising a series of N coherent pulses with one or more phases to the destination QKD device. The destination QKD device receives, and records time information and corresponding detector units associated with each photon detection event in the received quantum states. The source and destination QKD devices use decoy states to detect and prevent attacks, such as Photon-Number-Splitting (PNS) attacks. The system allows for the secure generation of a secret key between the source and destination QKD devices.

Abstract: A method for self-correcting key generation for a decoy and signal pulses based quantum key distribution (QKD) protocol includes emitting laser light; modulating intensity of the laser light to generate the decoy pulses having a first mean photon number (MPN) and the signal pulses having a second MPN greater than the first MPN; modulating phase of the signal and decoy pulses with key-generation state information and self-correction state information correlated with the key-generation state information, respectively, for being transmitted; detecting a phase and a time-stamp data of the modulated decoy and signal pulses upon being received; determining an error count using the phase and time-stamp data of at least one of the received decoy or signal pulses; and generating a self-corrected key using the self-correction state information when the error count is within a pre-determined threshold.

Abstract: A method for generating decoy and signal pulses for a Decoy differential phase shift (DDPS) quantum key distribution (QKD) protocol includes emitting laser light from a laser source and modulating intensity of the laser light using at least one intensity modulator. The intensity of the laser light is modulated to generate the decoy pulses having a first mean photon number (MPN) and the signal pulses having a second MPN greater than the first MPN. The first and second MPNs are associated with the operation of the at least one intensity modulator operable based on a first quantum random number generator (QRNG). The method further includes modulating phase of the decoy and signal pulses using a phase modulator operable based on a second QRNG, and attenuating the modulated decoy and signal pulses, using at least one attenuator, for being transmitted under the DDPS QKD protocol.

Abstract: Provided are techniques for receiving a packet transmitted in conjunction with a security association associated with Internet Protocol Security (IPSec); determining, based upon the security Association that the packet is faulty; incrementing a count corresponding to previous faulty packets received; determining that the count exceeds a threshold; and disabling IPSec accelerator hardware in response to the determining that the count exceeds the threshold.

Abstract: A method of processing multiple workload using virtualized operating system environments. The creation of a new user in a global operating system may automatically cause the creation of a working partition (WPAR) instance. The user will be associated with the WPAR instance and a virtualized operating system environment will be created from the global operating system within the WPAR instance. Within the WPAR instance, the user may be assigned a root identification which enables the user to have root access privileges to perform operations or processes that may only be performed by a root user. The removal of a user from the system also results in the deletion of the associated WPAR.

Abstract: A method, system, and computer program product for an improved virtualized operating system environment file-system are provided in the illustrative embodiments. A computer receives a write request for a part in the virtualized operating system environment file-system. The computer determines whether the part in the virtualized operating system environment file-system is a link to a second part in a host file-system. The computer, responsive to the part in the virtualized operating system environment file-system being the link, replaces the link with content of the second part the content replacing the link forming a writable copy of the part.

Abstract: A method of processing multiple workload using virtualized operating system environments. The creation of a new user in a global operating system may automatically cause the creation of a working partition (WPAR) instance. The user will be associated with the WPAR instance and a virtualized operating system environment will be created from the global operating system within the WPAR instance. Within the WPAR instance, the user may be assigned a root identification which enables the user to have root access privileges to perform operations or processes that may only be performed by a root user. The removal of a user from the system also results in the deletion of the associated WPAR.