Abstract: According to various embodiments, techniques for anticipatory cyber defense are disclosed. The techniques includes receiving cyber incident reports, extracting keywords from the reports, applying a shallow machine learning technique to obtain an identification of a first subset of the networked assets vulnerable to at least a first threat scenario and an identification of the first threat scenario, applying a deep machine learning technique to at least the first subset, the first threat scenario, the keywords, and the plurality of networked assets, to obtain a second subset of the networked assets vulnerable to at least a second threat scenario and the second threat scenario, simulating the networked assets and the second threat scenario to identify at least one path through the networked assets vulnerable to at least a third threat scenario, and outputting an identification of the at least one path and an identification of the third threat scenario.

Abstract: According to various embodiments, a system for, and method of, predicting and remediating malware threats in an electronic computer network, is provided. The disclosed techniques include storing in an electronic persistent storage library data representing a plurality of malware threats, randomizing, by a computer-implemented evolution engine communicatively coupled to the electronic persistent storage library, data representing malware threats to generate data representing randomized malware threats, and evaluating, by a computer-implemented evaluation engine communicatively coupled to an output of the evolution engine and to the electronic persistent storage library, the data representing the randomized malware threats, where the evaluation engine adds data representing positively evaluated randomized malware threats to the library for proactive detection of future malware threats in the electronic computer network.

Abstract: According to various embodiments, techniques for anticipatory cyber defense are disclosed. The techniques includes receiving cyber incident reports, extracting keywords from the reports, applying a shallow machine learning technique to obtain an identification of a first subset of the networked assets vulnerable to at least a first threat scenario and an identification of the first threat scenario, applying a deep machine learning technique to at least the first subset, the first threat scenario, the keywords, and the plurality of networked assets, to obtain a second subset of the networked assets vulnerable to at least a second threat scenario and the second threat scenario, simulating the networked assets and the second threat scenario to identify at least one path through the networked assets vulnerable to at least a third threat scenario, and outputting an identification of the at least one path and an identification of the third threat scenario.

Abstract: According to various embodiments, a system for, and method of, predicting and remediating malware threats in an electronic computer network, is provided. The disclosed techniques include storing in an electronic persistent storage library data representing a plurality of malware threats, randomizing, by a computer-implemented evolution engine communicatively coupled to the electronic persistent storage library, data representing malware threats to generate data representing randomized malware threats, and evaluating, by a computer-implemented evaluation engine communicatively coupled to an output of the evolution engine and to the electronic persistent storage library, the data representing the randomized malware threats, where the evaluation engine adds data representing positively evaluated randomized malware threats to the library for proactive detection of future malware threats in the electronic computer network.

Abstract: An improved cyber security protection system with differentiated capacity to deal with complex cyber attacks in complex, highly-connected industries. The system architecture is goal-oriented and separates security goals and concerns by layers that are assigned specific functions to address only those goals. The functions operate concurrently within the layers and provide insight on their respective layers. The layers are interconnected with connection modules using bi-directional interfacing to establish a feedback look within the entire system. Complex adaptive systems (CAS) algorithms are used to identify the probably threats to the system.

Abstract: An improved cyber security protection system with differentiated capacity to deal with complex cyber attacks in complex, highly-connected industries. The system architecture is goal-oriented and separates security goals and concerns by layers that are assigned specific functions to address only those goals. The functions operate concurrently within the layers and provide insight on their respective layers. The layers are interconnected with connection modules using bi-directional interfacing to establish a feedback look within the entire system. Complex adaptive systems (CAS) algorithms are used to identify the probably threats to the system.

Abstract: A system, method, and computer readable media for detecting and mitigating the effects of a cyber event on an aircraft's network including an air-based security module and a ground-based security module that monitor the aircraft's networks and detect cyber events. A collaboration module facilitates communications between the air-based security module and the ground-based security module, and also switches the communications between the modules to an alternate, secure channel when a cyber event is detected. A simulation module that is independent from, but functionally substantially equivalent to, the air-based security module simulates network events that are detected on board the aircraft while the aircraft is in flight. A cyber agent module mitigates the effect of a cyber event on the aircraft's network while the aircraft is in flight based on information from the simulation module that is communicated by the ground-based security module to the air-based security via the collaboration module.

Abstract: A system, method, and computer readable media for detecting and mitigating the effects of a cyber event on an aircraft's network including an air-based security module and a ground-based security module that monitor the aircraft's networks and detect cyber events. A collaboration module facilitates communications between the air-based security module and the ground-based security module, and also switches the communications between the modules to an alternate, secure channel when a cyber event is detected. A simulation module that is independent from, but functionally substantially equivalent to, the air-based security module simulates network events that are detected on board the aircraft while the aircraft is in flight. A cyber agent module mitigates the effect of a cyber event on the aircraft's network while the aircraft is in flight based on information from the simulation module that is communicated by the ground-based security module to the air-based security via the collaboration module.

Abstract: Methods and apparatus for use in identifying cyber-security threats for an aircraft are provided. The method includes storing parts information relating to each hardware and software component used on the aircraft in an aircraft parts database, receiving, by a computing device, a cyber-security threat, and determining, by the computing device, a threat is relevant to the aircraft by comparing the received threats to the stored parts information.

Abstract: Methods and apparatus for use in identifying cyber-security threats for an aircraft are provided. The method includes storing parts information relating to each hardware and software component used on the aircraft in an aircraft parts database, receiving, by a computing device, a cyber-security threat, and determining, by the computing device, a threat is relevant to the aircraft by comparing the received threats to the stored parts information.

Abstract: A system and method for monitoring a network data processing system on a mobile platform. Current traffic in the network data processing system may be monitored by a processor unit while the mobile platform is moving. The current traffic is compared by the processor unit with a baseline of traffic in the network processing system to form a comparison. A determination is made as to whether an undesired event has occurred in the traffic based on the comparison. An action may be initiated responsive to a determination that an undesired event has occurred.

Abstract: In an internal combustion engine having a rocker arm provided at one end with a roller contacting an exhaust valve stem for opening the valve, the rocker arm end portion is transversely slotted longitudinally normal to the axis of the valve stem to provide a longitudinally adjustable exhaust valve operating rocker arm. The transverse slot communicates with the transverse bore supporting the roller journalling bolt thus permitting adjusting movement of the roller longitudinally of the rocker arm and relative to the axis of the exhaust valve stem for the optimum friction reducing position of the roller relative to the valve stem.

Abstract: An oil well type of tool for testing a plurality of formations in a single trip into the hole. It has a full bore test tool which has a retrievable packer for making conventional tests. In addition there are a plurality of bridge plugs releasably connected in series below the test tool for plugging the hole above each formation after it is tested, without any additional trips into the hole.