Abstract: An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with multiple hardware devices of the IHS. The BMC includes executable instructions for transmitting a broadcast message to the hardware devices in which the broadcast message has a block of data including a digital signature of the BMC. Each of the hardware devices that receive the broadcast message are configured to transmit a broadcast acknowledgment message to the BMC. Using the block of data, the BMC and hardware devices may perform a mutual consensus procedure with other using a cryptographic hash function of the block of data.

Abstract: An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for causing the one hardware device to be inhibited from functioning with the IHS when at least one of the hardware devices is powered on, and performing an authentication procedure with that hardware device. After that hardware device has been successfully authenticated, the instructions then enable the one hardware device to function with the IHS.

Abstract: According to one embodiment, a path obfuscation system includes first and second hardware devices, and first and second interfaces configured to provide communication between the first and second hardware devices using a security protocol and data model (SPDM) protocol. The first hardware device comprises computer-executable instructions to receive a message to be transmitted to the second hardware device, segment the message into multiple groups of packets, and randomly select either the first or second interface to transmit each group of packet to the second hardware device.

Abstract: An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for monitoring the operating characteristics a hardware device that is operating in a fixed pass-through configuration with a workspace in which the workspace has been instantiated by a workspace orchestration service executed on the IHS. The executable instructions may determine that the operating characteristics are indicative of a security breach of the fixed pass-through configuration, and as such, may perform an operation to quarantine the one hardware device when the fixed pass-through configuration is determined to possess the security breach.

Abstract: Described embodiments provide systems and methods for validating a request to access a resource. A device can receive a first request from a client that includes a first uniform resource locator (URL) of the server. The device may receive a response from the server that includes a second URL. The device may update the response by including the client identifier in a set-cookie field, and adding to the second URL a first value of a query parameter determined according to: a client identifier assigned by the device, a key, and the second URL. The device may receive a second request that includes the client identifier, and a third URL having the first value. The device may determine to allow the server to receive the second request when the first value matches a second value determined according to the client identifier from the second request, the third URL and the key.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to detect a request for a sign-up form from a client device to a remote server. The at least one processor is further configured to generate a code module based on the detection. The code module is configured to request a credential vulnerability check from an application management server. The at least one processor is further configured to provide the code module to the client device for execution on the client device in response to an attempted submission of the sign-up form. The at least one processor is further configured to receive a result of the credential vulnerability check from the client device and perform a security action in response to the credential vulnerability check indicating vulnerable credentials.

Abstract: Described embodiments provide systems and methods for preventing unauthorized access of information from a resource. A device intermediary between a client and a server in a session can receive a first request from the client that includes a first uniform resource locator (URL) of the server. The device may receive a response from the server that includes a second URL. The device may update the response by including a client identifier for the session in a set-cookie field, obfuscating the second URL into a string, and replacing the second URL in the response with the string. The device may receive a second request that includes a candidate client identifier, and a third URL. The device may determine whether the second request is valid, by at least one of: matching the candidate client identifier with the client identifier, and determining whether the second URL is recoverable using the third URL.

Abstract: This disclosure relates to HIV envelope proteins or envelope protein fragments, or trimeric complexes thereof which have uses in vaccination methods or therapeutic strategies. In certain embodiments, this disclosure relates to HIV envelope proteins or envelope protein fragments, or trimeric complexes thereof, comprising an arginine (R) at position 166, glutamine (Q) at position 170, and an amino acid histidine (H) at position 173. In certain embodiments, this disclosure relates to nucleic acids and recombinant vectors encoding said proteins.

Abstract: Apparatus and methods for a payment instrument are provided. The apparatus may include a primary chip positioned on an outer face of the payment instrument and a power source. The apparatus may include a first supplementary chip, a second supplementary chip, and a third supplementary chip. Each of the first, second and third supplementary chips may be positioned within a thickness of the payment instrument and configured to draw power from the power source.

Abstract: The present invention is related to the discovery of new oral dosage formulations and combination therapies for 1-(((2S,3S,4S)-3-ethyl-4-fluoro-5-oxopyrrolidin-2-yl)methoxy)-7-methoxyisoquinoline-6-carboxamide, or a pharmaceutically acceptable salt thereof, for treating conditions ameliorated by inhibition of IRAK4.

Abstract: A system for data processing, comprising a management controller operating on a processor and configured to load and execute one or more algorithms that provide the function of transmitting a request to a managed device using a Security Protocol and Data Model (SPDM) protocol and to receive a response from the managed device. A system management bus and security policy system operating on the processor is configured to execute one or more algorithms to process the response from the managed device to apply an SPDM security policy to the response.

Abstract: Apparatus and methods disclosed herein provide technical solution for on-demand manufacturing of a payment instrument that includes an integrated circuit chip. Apparatus and methods provide technical solutions for securely validating and activating the manufactured payment instrument. The customer may submit a request to manufacture a payment instrument through an automated teller machine (“ATM”), online banking channel or mobile banking channel. Apparatus and methods allow a customer to manufacture a payment instrument at home using a 3D printer or use a 3D printer installed at an ATM. Using a secure validation methods, the newly manufactured payment instrument may be activated at an ATM.

Abstract: Methods and systems for monitoring blockages of emergency escape routes and emergency exits of a building include capturing a plurality of images which may correspond to an emergency escape route and/or an emergency exit of a building. The plurality of images may be analyzed to determine when a stationary object is present and at least partially blocking the emergency escape route and/or the emergency exit. If a blockage is detected, a user may be notified of the blockage.

Abstract: A system to identify automated submissions of web pages, such as those submitted by bots, in real time. The system comprising a processor configured to update an initial version of a requested web page with at least one hidden field, transmit the updated web page to the client, then, upon receipt parse the completed web page, and identify if a data entry is associated with the at least one hidden field. Where a data entry is associated with the at least one hidden field, the system blocks the transmission of the completed web page to the server. Where a data entry is not associated with the at least one hidden field the system removes the at least one hidden field, and transmits the final web page to the server.

Abstract: A merchant registers a geolocation for a virtual point of sale. A consumer points a consumer device at the geolocation, and an icon representing the virtual point of sale is displayed on the consumer device in augmented reality. The consumer selects the icon to initiate a transaction with a digital wallet on the consumer device.

Abstract: Described embodiments provide systems and methods performing header protection. A device can receive from a client, a request relating to a first resource, for a second resource. The device can determine, using an identifier for the session, whether an address of the first resource has been previously accessed by the client during the session. The device can verify, using an address of the second resource, whether the address of the second resource is mapped to the address of the first resource for the session between the client and the device. The device can determine whether to provide access to the second resource responsive to the address of the first resource being previously accessed by the client during the session and the address of the second resource being mapped to the address of the first resource for the session.

Abstract: A system and method determine a classification by simulating a human user. The system and method translate an input segment such as speech into an output segment such as text and represents the frequency of words and phrases in the textual segment as an input vector. The system and method process the input vector and generate a plurality of intents and a plurality of sub-entities. The processing of multiple intents and sub-entities generates a second multiple of intents and sub-entities that represent a species classification. The system and method select an instance of an evolutionary model as a result of the recognition of one or more predefined semantically relevant words and phrases detected in the input vector.

Abstract: Systems and methods for autonomous program management include a device which receives a request from a client responsive to execution of a script on the client. The request may include a location corresponding to the script and an identifier. The device may determine that activity of the client is activity of an autonomous program based on a comparison of the location to a reference being generated by the device for the client and determined using the identifier from the request. The device may block a subsequent request from the client to a server responsive to the determination.

Abstract: An information handling system includes a processor, a system baseboard management controller (BMC), and a field-programmable gate array (FPGA) add-in card. The FPGA add-in card includes an FPGA and a card BMC. The FPGA is programmed with a plurality of accelerated function units (AFUs) to perform processing tasks for the processor. The card BMC receives a first indication from the system BMC, the first indication to halt a first processing task associated with a first AFU, halts the first processing task in response to the first indication, receives a second AFU from the system BMC, and reprograms the FPGA with the second AFU.

Abstract: A management controller sends a first firmware measurement request to verify integrity of a device. The first firmware measurement request is sent at initial power on of the device, and is sent subsequent to negotiating a secure session between the management controller and the device. The management controller verifies a first firmware measurement in a first firmware measurement response to the first firmware measurement request prior to storing the first firmware measurement, and sends a heartbeat request to the device to monitor for a device state change. The management controller may receive a heartbeat acknowledgement from the device in response to the heartbeat request, wherein the heartbeat acknowledgement includes an indication of the device state change. In response to the receipt of the heartbeat acknowledgment that includes the device state change, the management controller sends a second firmware measurement request to the device.