Abstract: A stackable filesystem that transparently tracks process file writes for forensic analysis. The filesystem comprises a base filesystem, and an overlay filesystem. Processes see the union of the upper and lower filesystems, but process writes are only reflected in the overlay. By providing per-process views of the filesystem using this stackable approach, a forensic analyzer can record a process's file-based activity—i.e., file creation, deletion, modification. These activities are then analyzed to identify indicators of compromise (IoCs). These indicators are then fed into a forensics analysis engine, which then quickly decides whether a subject (e.g., process, user) is malicious. If so, the system takes some proactive action to alert a proper authority, to quarantine the potential attack, or to provide other remediation. The approach enables forensic analysis without requiring file access mediation, or conducting system event-level collection and analysis, making it a lightweight, and non-intrusive solution.

Abstract: A fibre optic cable (500, 700, 1420) comprises one or more fibre units (502, 1302). Each fibre unit comprises two or more optical fibres (506, 1306) embedded in a solid resin material (520, 1320) to form a coated fibre bundle and an extruded polymer sheath (524, 1324). The sheath (524, 1324) of each fibre unit is primarily polybutylene terephthalate (PBT), with a friction reducing additive such as polydimethylsiloxane (PDMS). The additive may be polythene based and/or polyacrylate based. The fibre unit may be applied in a pullback cable (500, 800, 1100), as a cable for pulling or pushing or as a blown fibre cable (502, 1302).

Abstract: An intrusion detection system (IDS) for a micro-services environment identifies attacks in substantially real-time and at a container-level. In this approach, behavior models are generated from container images using a binary analysis. A behavior model is a graph data structure having nodes and edges, wherein an edge represents a system call made by at least one process represented as a node in the graph data structure. The model is co-located with a running container, thereby enabling detection of anomalies as the container executes in a container environment on a hardware node. A per-container IDS function is instantiated by checking whether system call telemetry generated by an image's running container satisfies the associated behavior model that has been generated for the container image. If the telemetry indicates activity that deviates from the behavior model, an automated action is then initiated to attempt to address the attack, preferably while it is in progress.

Abstract: A method for moderation in a permissioned blockchain using a hash-oriented scheme includes: storing a blockchain including a most recent block; receiving transaction data values; receiving a first reference value and a second reference value; generating a first hash value by hashing the first reference value; generating a block proof including the first hash value, a second hash value, a third reference value, and a block value; verifying a block header of the most recent block using the block proof; receiving a new block value; generating a new block header including the first reference value, the second reference value, a fourth reference value, and the new block value; generating a new block for the blockchain including the new block header and the transaction data values; and transmitting the new block to one or more additional nodes associated with the blockchain.

Abstract: An automatic ball launcher includes a ball feed control system that includes a meter wheel with radially-spaced ribs or grooves to selectively block and pass balls to the flywheels of the launcher. The meter wheel rotates to selectively block and release a single ball to pass at a time. The controller of the launcher can be programmed to stop the meter wheel when a ball has been metered by monitoring the current at peak of the motor driving the meter wheel. A meter-event can be determined to have occurred when the current of the drive motor drops to a trough by a pre-set magnitude following a rise to a peak value. A remote control can be provided for the user to operate the launching machine and adjust a plurality of parameters.

Abstract: A computer-implemented method, computer program product, and computer system for accessing content on a web page. The method accesses a displayed web page in a web browser of a user computing device and receives a search term for content within the web page. The method accesses contextual information held locally on the user computing device and scans the web page to identify one or more portions of content of the web page relevant to the search term and the contextual information. The method provides a display on the user computing device with links to the relevant web page content.

Abstract: A method, system, and computer program product for performing microservice-aware reference policy checking that accept stateful security policies. The method may include receiving a security policy for a container that is part of a microservice architecture. The method may also include obtaining a first effect graph of the security policy, resulting in a security model for the container. The method may also include identifying execution behavior of the container. The method may also include generating a second effect graph of the execution behavior of the container, where the generating includes summarizing operations and interactions between entities in the execution behavior and results in a behavioral model. The method may also include comparing the behavioral model to the security model. The method may also include determining whether the container has deviated from the security policy based on the comparing. The method may also include enforcing the security policy against the container.

Abstract: Methods and formulations are provided for treating spinobulbar muscular atrophy in a subject in need thereof. By administering a therapeutically effective amount of a selective androgen receptor modulator or a small molecule such as 1-[2-(4-methylphenoxy)ethyl]-2-[(2-phenoxyethyl)sulfanyl]-1H-benzimidazole or a derivative, prodrug, or pharmaceutically acceptable salt thereof, one or more symptoms of spinobulbar muscular atrophy can be ameliorated. The effective amount can be effective to prevent or delay loss of body weight, a loss of mobility, and/or a loss of physical strength in the subject; to prevent or delay neurogenic atrophy and/or to prevent a loss of spinal cord motor neurons in the subject; to restore the frequency of type I myofibers to normal levels for a healthy subject; and/or to reverse testicular atrophy in the subject.

Abstract: The disclosure provides gene therapy vectors, such as adeno-associated virus (AAV), optimized for delivering a transgene to muscles. The optimized vectors contain constitutive or a muscle-specific promoter to deliver whole body or skeletal/heart muscle-specific transgene expression, respectively, in combination with a transgene cDNA to replace the gene mutation found in a muscle disease with a normal copy of the gene, an internal ribosomal entry site (IRES) to allow for production of a second protein from the same transcript, and a muscle growth factor, to build new muscle growth and strength. For example, the invention provides The disclosure provides gene therapy vectors, such as recombinant adeno-associated vims (rAAV), designed for treatment of GNE myopathy in which the rAAV expresses UDP-GlcNAc-epimerase/ManNAc-6 alone or in combination with a muscle growth factor or muscle transdifferentation factor.

Abstract: Provided herein are methods for generating cellular biomass in continuous aerobic fermentation systems. The biomass yield, and the concentration of polyhydroxyalkanoate within the biomass, are each directed to advantageous levels by operating the continuous fermentation system under particular nutrient limitation conditions. Also provided are biomass produced using the provided methods, and animal feed compositions including the provided biomass.

Abstract: Methods and reagents to obtaining a sample enriched in peptides comprising the third complementarity-determining region of the heavy chain (CDRH3) of immunoglobulins, such as IgGs, are described. These methods are based on the use of targeted protease digestion of immunoglobulins and affinity purification of CDRH3 peptides using specific antibodies. Such methods and reagents are useful for analyzing the immunoglobulin repertoire.

Abstract: A patty forming machine for forming heated food patties includes a plurality of mold plates connected together to form an endless loop and driven for circulation around the loop. Each mold plate has a cavity having open top and bottom ends. A manifold is above a lower run of the loop and supplies moldable food material to the cavity of the mold plates. A breather plate is positioned below the lower run and below the manifold. Upper and lower ovens are positioned downstream of the manifold and above and below a lower run of the loop. A knockout mechanism is mounted downstream of the upper oven. A lower heater plate may be positioned below and extend along a substantial portion of the lower run for supporting the food material in the mold plates traverse along the lower run. A wash station cleans the mold plates.

Abstract: A method of detecting deceptive web activity is implemented in an intermediary located between a requesting client device, and a server that hosts a web application. Following a bootstrap phase used to generate a database of information identifying characteristics of clients, the method begins by receiving a page directed to the client from the server. The server injects an invisible DOM element having a set of style properties associated therewith, with one of the set of style properties assigned a random value, to generate a modified page, which is returned to the client. As the client interacts with the modified page, the intermediary tracks the device's styles and uses them to identify the client from information in the database. Once the device is identified, the intermediary then detects whether a spoofing attack has occurred. By leveraging the tracked styles, a spoofing attack on the DOM element's styles may also be detected.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed that produce a pneumatic actuator end cap having an integral volume booster. An example pneumatic actuator end cap includes a first cavity to provide a first fluid passageway to receive a pressurized fluid from a source external to the pneumatic actuator end cap, a second cavity to provide a second fluid passageway to route the pressurized fluid to an internal chamber of a pneumatic actuator in which a piston is disposed, and a third cavity containing a fluid valve to control a flow of the pressurized fluid between the first fluid passageway and the second fluid passageway.

Abstract: A method for moderation in a permissioned blockchain using a hash-oriented scheme includes: storing a blockchain including a most recent block; receiving transaction data values; receiving a first reference value and a second reference value; generating a first hash value by hashing the first reference value; generating a block proof including the first hash value, a second hash value, a third reference value, and a block value; verifying a block header of the most recent block using the block proof; receiving a new block value; generating a new block header including the first reference value, the second reference value, a fourth reference value, and the new block value; generating a new block for the blockchain including the new block header and the transaction data values; and transmitting the new block to one or more additional nodes associated with the blockchain.

Abstract: An agricultural machine, comprising is disclosed, wherein the machine comprises a body frame; a cutting system mounted on the body frame; a drive system mounted on the body frame; a power unit, mounted on the body frame, adapted to provide power to the drive system and/or the cutting system; and a fluid distribution system adapted to provide fluid to the power unit. The fluid distribution system further comprises a dock and a replaceable fluid container adapted to contain fluid to be supplied to the power unit the dock being adapted to retain the replaceable fluid container in fluid communication with the fluid distribution system so as to supply fluid from the replaceable fluid container via the fluid distribution system to the power unit. A method of facilitating an oil change in an agricultural machine is also disclosed.

Abstract: A food product forming machine is configured to form food products, such as food patties. A body which includes a frame, a hopper into which a supply of moldable food material is deposited, and a hydraulic tank form a one-piece weldment. At least one assembly is mounted in the frame and is configured to form a food product. A tunnel extends from the body and is configured to receive food material from the hopper. A single rotatable feed screw is mounted within the hopper and within the tunnel. A ventilation system is provided within the frame.

Abstract: A method, apparatus and computer program product for automated security policy synthesis and use in a container environment. In this approach, a binary analysis of a program associated with a container image is carried out within a binary analysis platform. During the binary analysis, the program is micro-executed directly inside the analysis platform to generate a graph that summarizes the program's expected interactions within the run-time container environment. The expected interactions are identified by analysis of one or more system calls and their arguments found during micro-executing the program. Once the graph is created, a security policy is then automatically synthesized from the graph and instantiated into the container environment. The policy embeds at least one system call argument. During run-time monitoring of an event sequence associated with the program executing in the container environment, an action is taken when the event sequence is determined to violate the security policy.

Abstract: A stackable filesystem architecture that curtails data theft and ensures file integrity protection. In this architecture, processes are grouped into ranked filesystem views, or “security domains.” Preferably, an order theory algorithm is utilized to determine a proper domain in which an application is run. In particular, a root domain provides a single view of the filesystem enabling transparent filesystem operations. Each security domain transparently creates multiple levels of stacking to protect the base filesystem, and to monitor file accesses without incurring significant performance overhead. By combining its layered architecture with view separation via security domains, the filesystem maintains data integrity and confidentiality.