Abstract: A facility is described for analyzing access control configurations. In various embodiments, the facility comprises an operating system having resources and identifications of principals, the principals having access control privileges relating to the resources, the access control privileges described by access control metadata; an access control scanner component that receives the access control metadata, determines relationships between the principals and the resources, and emits access control relations information; and an access control inference engine that receives the emitted access control relations information and an access control policy model, analyzes the received information and model, and emits a vulnerability report.

Abstract: A cryptographic module and a computing device implemented method for securing data using a cryptographic module is provided. The cryptographic module may include an input component for receiving a password, an output component for outputting data to the computing device, a random number generator for generating a random number and a module processor operative to generate at least one cryptographic key using the generated random number, and to record an association between the received password linking the received password with the at least one cryptographic key in a data store accessible to the cryptographic module.

Abstract: A data collection application is executed on a target system. Various data indicative of privilege elevation pathways is collected, including user account data, file permission data, and system registry data. The collected data is analyzed according to heuristics. System accounts are displayed on a graph as nodes. Detected privilege elevations between the accounts are displayed as edges between their corresponding accounts. A user may customize the displayed graph to focus on particular goal accounts, and categories of privilege elevations.

Abstract: A signature scheme is provided in which a message is divided in to a first portion which is hidden and is recovered during verification, and a second portion which is visible and is required as input to the verification algorithm. A first signature component is generated by encrypting the first portion alone. An intermediate component is formed by combining the first component and the visible portion and cryptographically hashing them. A second signature component is then formed using the intermediate component and the signature comprises the first and second components with the visible portion. A verification of the signature combines a first component derived only from the hidden portion of the message with the visible portion and produces a hash of the combination. The computed hash is used together with publicly available information to generate a bit string corresponding to the hidden portion.

Abstract: A method for hindering a cold boot attack on a user equipment (UE) is provided. The method includes, in response to detection of the cold boot attack, executing prioritized security procedures. A user equipment (UE) is also provided that includes a processor configured to execute prioritized security procedures responsive to detection of a cold boot attack.

Abstract: The necklace clasp fastener for a string of beads consists of a male bead member, and a female bead member, that do not have any visible loop or eyelets for assembling and holding a string of beads together when the male and female bead members are snapped together. The resulting bead configured clasp is almost undetectable from the outside of the beaded necklace which creates an unbroken, unified string of beads for a much more aesthetic and beautiful piece of jewelry. The improved clasp of the invention provides a safety feature to guard against breakage. The two parts are designed to snap together with enough force to hold the necklace on the wearer under normal wear and use. If, however, the necklace catches on to something, the clasp will release easily from the wearer instead of breaking the necklace, and releasing the beads all over the place.

Abstract: A vacuum cleaner includes a nozzle, an air-filtering dirt receptacle, and a motor. A fan of the vacuum cleaner is configured to be driven by the motor to drive a flow of air that carries dirt from a surface through the nozzle and into the receptacle to clean the surface. A controller of the vacuum cleaner provides a notification to a user of the vacuum cleaner indicative of an excessive amount of dirt in the receptacle when current drawn by the motor drops below a threshold value.

Abstract: A system and method are provided which employs a key agreement scheme, wherein the agreed-upon-shared key is used in a protocol message in the authentication rather than being employed as a session key.

Abstract: A workpiece carrier for supporting a plurality of workpieces, the workpiece carrier comprising a supporting body including a plurality of workpiece support elements, each for supporting a workpiece and providing for individual positioning of the same, the workpiece support elements each including at least one biasing element for applying a biasing force to an edge of the respective workpiece, at least one first cam for acting on an edge of the respective workpiece at a first location against the bias of the at least one biasing element, and at least one second cam for acting on an edge of the respective workpiece at a second location against the bias of the at least one biasing element, wherein the at least one first cam and the at least one second cam are operable such as to enable the position of the respective workpiece to be set relative to the supporting body.

Abstract: Techniques are disclosed for utilizing a block Montgomery machine designed only to operate at a fixed block length to perform operations using non-block length (flexible)moduli. In one embodiment, a new modulus n? is obtained having a block length equal to the fixed block length of the Montgomery machine or a multiple thereof. At least one modular additive operation is performed with the new modulus n?, and at least one modular multiplicative operation is performed with the non-block length modulus n. In this way, the result of the at least one additive operation is sufficiently reduced when a carry stems from the additive operation.

Abstract: A privilege elevation flaw detection analysis is performed on a host system on a network. In addition, accounts on the host system are identified that have access to, or corresponding accounts on, other systems on the network. Privilege elevation analyses are performed on one or more of the network systems corresponding to the identified accounts. A privilege elevation graph is generated of the host system from the privilege elevation analysis. The graph includes account nodes and edges illustrating the detected privilege elevations between the accounts on the host system. In addition, nodes for the network systems are added to the graphs along with edges connecting to the nodes corresponding to the accounts identified as having access to the particular network systems. The user may then select a particular network system node and view its detected privilege elevations in relation to the host system.

Abstract: A potential bias in the generation of a private key is avoided by selecting the key and comparing it against the system parameters. If a predetermined condition is attained it is accepted. If not it is rejected and a new key is generated.

Abstract: Computer-executable instructions that are directed to the performance of consequential actions and automatically elevate to execute at a higher privilege level to do so can perform such consequential actions only after user notification. Doing so can enable monitoring processes to avoid presenting duplicative user notification upon detection of such auto-elevation. In addition, prior to presenting user notification, input from the execution environment can be ignored and access to DLLs for performing consequential actions can be avoided. A static analyzer can identify non-conforming computer-executable instructions. A wrapper can be utilized to provide compliance by otherwise unknown or non-conforming computer-executable instructions.

Abstract: This invention relates to a method of treatment and dosing regimen for treating disease, such as cancer and mammalian tumors, wherein therapy with a cytotoxic drug is suitable, by the administration of an antibody-toxin conjugate, such as a maytansinoid toxin, by infusion at an initial infusion rate of 1 mg/min or lower on a schedule selected from the group consisting of: (1) an amount of at least about 90 mg/m2 on day 1 and day 8, every three weeks; (2) at least an amount of about 30 mg/m2 on day 1, day 2 and day 3, every three weeks; (3) at least an amount of about 45 mg/m2 on day 1, day 8, and day 15, every 4 weeks; and (4) at least an amount of about 45 mg/m2 on day 1, day 8 and day 15, every 3 weeks.

Abstract: A system and method are described that provide an alternative way in which to produce a Montgomery reduction from below by storing a new precomputed value used to substantially replace the ? and n values used in Montgomery reduction with a single value. By modifying the Montgomery reduction mechanism in this way, the number of multiplications and registers required to effect the Montgomery reduction can be reduced. To avoid having to store both ? and n, a modified reduction value or a logical shift or signed version of such a value can be used in place of ? and n for the bulk of the low-order reduction.

Abstract: A vacuum cleaner includes a nozzle, an air-filtering dirt receptacle, and a motor. A fan of the vacuum cleaner is configured to be driven by the motor to drive a flow of air that carries dirt from a surface through the nozzle and into the receptacle to clean the surface. A controller of the vacuum cleaner provides a notification to a user of the vacuum cleaner indicative of an excessive amount of dirt in the receptacle when current drawn by the motor drops below a threshold value.

Abstract: Nucleosides and nucleotides containing a tricyclic base portion thereof are useful for treating infectious diseases and proliferative disorders, such as viral infections or cancer respectively.

Abstract: The invention relates to the use of bicyclic nucleosides and nucleotides based on formula (II) for the treatment of infectious diseases, and in particular, viral infections.

Abstract: A vacuum cleaner includes a nozzle, an air-filtering dirt receptacle, and a motor. A fan is configured to be driven by the motor to drive a flow of air that carries dirt from a surface through the nozzle and into the receptacle to clean the surface. A controller is configured to provide a notification to a user when the speed of the motor exceeds a threshold value.

Abstract: There are disclosed systems and methods for computing an exponentiatied message. In one embodiment blinding is maintained during the application of a Chinese Remainder Theorem (CRT) algorithm and then removed subsequent to the completion of the CRT algorithm. In another embodiment, fault injection attacks, such as the gcd attack, can be inhibited by applying and retaining blinding during the application of the CRT algorithm to yield a blinded exponentiation value, and then subsequently removing the blinding in a manner that causes an error injected into the CRT computation to cascade into the exponent of the value used to unblind the blinded exponentiated value.