Abstract: A method and system for discovering and testing security assets is provided. Based on source definition data describing sources to monitor on the one or more computer networks, an example system scans the sources to identify security assets. The system analyses the security assets to identify characteristics of the server-based applications. The system stores database records describing the security assets and the identified characteristics. The system queries the database records to select, based at least on the identified characteristics, one or more target assets, from the security assets, on which to conduct one or more security tests. Responsive to selecting the one or more target assets, the system conducts the one or more security tests on the one or more target assets. The system identifies one or more security vulnerabilities at the one or more target assets based on the conducted one or more security tests.

Abstract: A method and system for discovering and testing security assets is provided. Based on source definition data describing sources to monitor on the one or more computer networks, an example system scans the sources to identify security assets. The system analyses the security assets to identify characteristics of the server-based applications. The system stores database records describing the security assets and the identified characteristics. The system queries the database records to select, based at least on the identified characteristics, one or more target assets, from the security assets, on which to conduct one or more security tests. Responsive to selecting the one or more target assets, the system conducts the one or more security tests on the one or more target assets. The system identifies one or more security vulnerabilities at the one or more target assets based on the conducted one or more security tests.

Abstract: Provided herein are systems and methods of managing permissions for applications deployed in a distributed computing infrastructure. An exemplary system includes an access management server having a processing device, a distributed computing infrastructure in communication with the management server having a plurality of resource instances and a request log, an administration system having a security application executing thereon. The security application has access policies associated with each of a plurality of applications. The processing device of the management server: receives application request information from the request log describing requests made by a first application being monitored by the access management server.

Abstract: Provided herein are systems and methods of managing permissions for applications deployed in a distributed computing infrastructure. An exemplary system includes an access management server having a processing device, a distributed computing infrastructure in communication with the management server having a plurality of resource instances and a request log, an administration system having a security application executing thereon. The security application has access policies associated with each of a plurality of applications. The processing device of the management server: receives application request information from the request log describing requests made by a first application being monitored by the access management server.

Abstract: A method and system for discovering and testing security assets is provided. Based on source definition data describing sources to monitor on the one or more computer networks, an example system scans the sources to identify security assets. The system analyses the security assets to identify characteristics of the server-based applications. The system stores database records describing the security assets and the identified characteristics. The system queries the database records to select, based at least on the identified characteristics, one or more target assets, from the security assets, on which to conduct one or more security tests. Responsive to selecting the one or more target assets, the system conducts the one or more security tests on the one or more target assets. The system identifies one or more security vulnerabilities at the one or more target assets based on the conducted one or more security tests.

Abstract: A geospatial modeling system may include a geospatial model database configured to store a digital surface model (DSM) of a geographical area, and to store image data of the geographical area. The image data may have a spectral range indicative of a difference between buildings and vegetation. The geospatial modeling system may also include a processor cooperating with the geospatial model database to separate bare earth data from remaining building and vegetation data in the DSM to define a building and vegetation DSM. The processor may also register the image data with the building and vegetation DSM, and classify each point of the building and vegetation DSM as either building or vegetation based upon the spectral range of the image data.

Abstract: A geospatial modeling system may include a geospatial model data storage device, a user input device, and a display. A processor may be included for cooperating with the geospatial model data storage device, the user input device and the display for displaying a geospatial model data set on the display including at least one group of building data points, and displaying a plurality of user-selectable different building shapes on the display based upon the at least one group of building data points. The plurality of user-selectable different building shapes may have different respective feature detail levels. The processor may further replace the at least one group of building data points with a given one of the user-selectable different building shapes based upon user selection thereof with the user input device.

Abstract: Various embodiments are directed to a computer implemented method for updating a policy that is enforced by a computer program. In one embodiment, a computer communicates, to a user, data regarding one or more decisions made by the program over a period of time according to a policy. Each decision is made on the particular policy in force at the time the decision is made. Policy data for the policy is stored in a machine readable format. The user feedback data indicative of feedback by the user regarding the one or more decisions is stored. The computer identifies and ranks one or more potential variations to the policy based on a score of an objective function for each potential variation. The computer communicates, to the user, one or more suggested modifications based on the ranking of the one or more potential variations to the policy. The computer modifies the policy data based on one or more selections by the user in response to the transmission of the one or more suggested modifications.

Abstract: Computer-implemented systems and methods for providing row-level security. A system can be configured to receive a request for data that is contained in tables and to use one or more row-level security policies to augment the received request with one or more row-level security query-related clauses.

Abstract: A geospatial modeling system may include a geospatial model data storage device, and a processor cooperating with the geospatial model data storage device for merging first and second geospatial data sets for corresponding first and second geospatial regions. The processor may be for generating seam-smoothed geospatial data for a corresponding selected geospatial region between adjacent portions of the first and second geospatial regions by applying Poisson's equation to data from at least one of the first and second geospatial data sets for the selected geospatial region using boundary conditions based upon data along corresponding interfaces between the selected geospatial region and adjacent portions of the first and second geospatial regions.

Abstract: A geospatial modeling system may include a geospatial model data storage device and a processor cooperating with the geospatial model data storage device for inpainting seam-smoothed, void-fill data into a void in a geospatial data set for a geospatial region. The processor may select raw void-fill data from the geospatial data set, and generate the seam-smoothed, void-fill data by applying Poisson's equation to the raw void-fill data using boundary conditions based upon data along a corresponding interface between the void region and adjacent portions of the geospatial region.

Abstract: A geospatial modeling system may include a geospatial model data storage device, and a processor cooperating with the geospatial model data storage device for merging first and second geospatial data sets for corresponding first and second geospatial regions. The processor may be for generating seam-smoothed geospatial data for a corresponding selected geospatial region between adjacent portions of the first and second geospatial regions by applying Poisson's equation to data from at least one of the first and second geospatial data sets for the selected geospatial region using boundary conditions based upon data along corresponding interfaces between the selected geospatial region and adjacent portions of the first and second geospatial regions.

Abstract: A geospatial modeling system may include a geospatial model data storage device and a processor. The processor may cooperate with the geospatial model data storage device for identifying a plurality of localized error regions within a geospatial model data set, calculating an overall error value for the geospatial model data set, and inpainting at least one of the localized error regions and re-calculating the overall error value, and stopping inpainting when the overall error value is below an error threshold.

Abstract: A geospatial modeling system may include a geospatial model data storage device and a processor cooperating therewith for determining a void within a geospatial model data set defining a void boundary region, and selecting at least one raw fill region from within the geospatial model data set for filling the void. The processor may also cooperate with the geospatial model data storage device for adjusting elevation values of the at least one raw fill region based upon elevation differences between corresponding portions of the void boundary region and the at least one raw fill region, and updating the geospatial model based upon the adjusted elevation values of the at least one raw fill region.

Abstract: A geospatial modeling system may include a geospatial model database and a processor cooperating with the geospatial model database. The processor may be configured to determine void regions in a geospatial data set including foliage data points and bare earth data points, where each void region has a boundary and at least one bare earth data point therein. The processor may also be configured to inpaint additional bare earth data points into each void region based upon bare earth data points outside the boundary and the at least one bare earth data point therein.

Abstract: A geospatial modeling system may include a geospatial model database configured to store a digital surface model (DSM) of a geographical area, and to store image data of the geographical area. The image data may have a spectral range indicative of a difference between buildings and vegetation. The geospatial modeling system may also include a processor cooperating with the geospatial model database to separate bare earth data from remaining building and vegetation data in the DSM to define a building and vegetation DSM. The processor may also register the image data with the building and vegetation DSM, and classify each point of the building and vegetation DSM as either building or vegetation based upon the spectral range of the image data.

Abstract: A computer system for registering synthetic aperture radar (SAR) images includes a database for storing SAR images to be registered, and a processor for registering SAR images from the database. The registering includes selecting first and second SAR images to be registered, individually processing the selected first and second SAR images with an anisotropic diffusion algorithm, and registering the first and second SAR images after the processing. A shock filter is applied to the respective first and second processed SAR images before the registering. Elevation data is extracted based on the registered SAR images.

Abstract: A fingerprint processing system may include a fingerprint database for storing fingerprint data having at least one void therein. At least one processor may cooperate with the fingerprint database for inpainting data into the at least one void in the fingerprint data based upon propagating fingerprint contour data from outside the at least one void into the at least one void.

Abstract: A geospatial modeling system may include a geospatial data storage device, and a processor cooperating with the geospatial data storage device for selectively inpainting data into at least one void in geospatial model data using a partial differential equation (PDE) algorithm and an exemplar algorithm.

Abstract: A method and system for reconstructing iris scans for iris recognition is provided. A plurality of iris collection images of an iris is received. A single iris image of the iris is reconstructed using at least two of the plurality of iris collection images. Mosaicing may be used to combine at least two of the plurality of iris collection images into a single iris image. Inpainting methods, including PDE-based and exemplar-based techniques, may also be used to fill in area of missing information in an iris image.