Abstract: Systems and methods for countering the usage of autonomous or semi-autonomous vehicles for ramming attacks on a roadway are disclosed. Digital representations of physical trajectories (e.g., roadway travel routes) across which vehicles are expected or permitted to travel are generated based at least on travel-related data (e.g., sensor readings) received from the vehicles over wireless networks. The disclosed systems and methods further generate digital representations of physical trajectories across which vehicles are not permitted to travel, such that the impermissible physical trajectories constitute a deviation from a safe travel route. Additional travel-related data is continuously received from the vehicles in real-time, and the additional data may be combined with non-vehicle data (e.g.

Abstract: A system for autonomous control in power systems is disclosed. In particular, a secure overlay communication model (“SOCOM”) is disclosed, the system including a combination of hardware and software for detecting power grid states, and determining appropriate actions for addressing detected states. The SOCOM is a logic-based system deployed onto computing devices such as field programmable gate arrays installed at bus controllers, Supervisory Control and Data Acquisition Systems (“SCADAs”), Intelligent Electronic Devices (“IEDs”), or other computing devices in power grid stations and substations. The logic-based nature of the SOCOM allows for seamless integration with preexisting power system equipment. In response to detecting various power grid faults such as line failures and over-current states, the system automatically rearranges power line configurations at the power stations and/or substations.

Abstract: A wireless multi-edge computing (MEC)-based road-side unit (RSU) (RSU-MEC) system and method for traffic management.

Abstract: A computer-implemented method of detecting one or more objects in a driving environment located externally to a vehicle, and a vehicle imaging system configured to detect one or more objects. The computer-implemented method includes training a first neural network to detect objects in a color video stream, the first neural network having a plurality of mid-level color features at a plurality of scales, and training a second neural network, operatively coupled to color neural network and an infrared video stream, to match, at the plurality of scales, mid-level infrared features of the second neural network to mid-level color features of the first neural network. A pixel-level invisibility map is then generated from the color video stream and the infrared video stream by determining differences, at each of the plurality of scales, between mid-level color features at the first neural network and mid-level infrared features at the second infrared neural network, and coupling the result to a fusing function.

Abstract: Automatic Dependent Surveillance Broadcast (ADS-B) is one of the most prominent air traffic surveillance technologies. It can be used not only as a complement in existing radar-based technologies to locate aircraft, but also as a replacement in areas without radar coverage. However, a major flaw in the deployment of this technology is it reliance on clear-text, open broadcast of messages, which makes it vulnerable to attackers. A solution to this vulnerability is ADS-Bsec, a holistic framework that solves the root cause of ADS-B problems by enforcing authenticity and integrity in ADS-B messages. This is accomplished without changing the message format and, along with a proper key exchange mechanism. The framework also leverages results from radio-location add risk-adaptive techniques in order to prevent attacks targeting ADS-B. ADS-Bsec is a promising framework for integrating ADS-B to NextGen infrastructure in a secure and affordable fashion.

Abstract: A system for autonomous control in power systems is disclosed. In particular, a secure overlay communication model (“SOCOM”) is disclosed, the system including a combination of hardware and software for detecting power grid states, and determining appropriate actions for addressing detected states. The SOCOM is a logic-based system deployed onto computing devices such as field programmable gate arrays installed at bus controllers, Supervisory Control and Data Acquisition Systems (“SCADAs”), Intelligent Electronic Devices (“IEDs”), or other computing devices in power grid stations and substations. The logic-based nature of the SOCOM allows for seamless integration with preexisting power system equipment. In response to detecting various power grid faults such as line failures and over-current states, the system automatically rearranges power line configurations at the power stations and/or substations.

Abstract: Disclosed is an access and information flow control framework that includes a series of phases. The first phase includes: receiving raw authorization requirement(s); creating authorization requirement representation(s) from the raw authorization requirement(s) using a language; and analyzing the authorization requirement representation(s) to ensure that they are consistent and conflict-free. The second phase includes: creating case authorization(s) from the authorization requirement representation(s) and validating consistency between the authorization requirement representation(s) and the use case authorization(s). The use case authorization may be created by propagating the authorization requirement representation(s) to a subject hierarchy; enumerating implicit authorization(s) derived from the authorization requirement representation(s); resolving inconsistencies in the use case authorization(s); and completing incomplete use case authorization(s).

Abstract: Disclosed is an access and information flow control framework. The framework includes: creating consistent and conflict-free authorization requirement(s) from the raw authorization requirement(s); creating consistent case authorization(s); creating information flow and propagated information flow requirement(s) that are consistent with an information flow policy; creating operation authorization(s); resolving inconsistencies in operation authorization(s); and ensuring that the operation authorization(s) are conflict-free.

Abstract: The present invention deals with a honeynet based actionable warning system. Automatic decisions to combat attacks learned through a honeynet may be generated by receiving data originating from one or more network analyzers. The data may be classified into a hierarchy of predetermined attributes, as well as sorted using these attributes. Topics relating to one or more of predetermined attributes may be communicated to a client. A request to implement topics may be received from the client. Notification may be sent to the client that includes information related to the request.