Abstract: In some examples, a service receives releases including machine-readable instructions from different vendors, the releases for respective controller units of a vehicle. The service communicates the releases wirelessly to the vehicle to update machine-readable instructions executing on the respective controller units of the vehicle.

Abstract: Systems and methods for enforcing mandatory access control in a message-based operating system are provided. Calls to operating system logic may be passed as messages over communication channels in a message-based operating system. A first process configured to receive a message via a communication channel in a message-based operation system may be identified. In addition, the communication channel may be identified. Further, an access rule may be identified. The access rule may be a rule to govern access to the communication channel. The access to the communication channel by the second process may be controlled based on the access rule. The access may be controlled in a kernel of a message-based operating system. The second process may be configured to execute invocation logic. The invocation logic may be executable to send the message via the communication channel.

Abstract: Systems and methods for enforcing label-based mandatory access control are provided. A first label may be assigned to a resource. An event associated with a resource may be detected. The resource may be relabeled, in response to detection of the event, from a first label to a second label in accordance with a transition rule. The transition rule may be included in a security policy. The transition rule may indicate that the resource is to be relabeled to the second label if the event is detected. Access to the resource may be controlled according to an access rule in the security policy. The access rule may be applicable to the resource based on the access rule identifying the second label assigned to the resource.

Abstract: In some examples, a service receives releases including machine-readable instructions from different vendors, the releases for respective controller units of a vehicle. The service communicates the releases wirelessly to the vehicle to update machine-readable instructions executing on the respective controller units of the vehicle.

Abstract: In some examples, a service receives releases including machine-readable instructions from different vendors, the releases for respective controller units of a vehicle. The service communicates the releases wirelessly to the vehicle to update machine-readable instructions executing on the respective controller units of the vehicle.

Abstract: Systems and methods for enforcing label-based mandatory access control are provided. A first label may be assigned to a resource. An event associated with a resource may be detected. The resource may be relabeled, in response to detection of the event, from a first label to a second label in accordance with a transition rule. The transition rule may be included in a security policy. The transition rule may indicate that the resource is to be relabeled to the second label if the event is detected. Access to the resource may be controlled according to an access rule in the security policy. The access rule may be applicable to the resource based on the access rule identifying the second label assigned to the resource.

Abstract: Systems and methods for enforcing mandatory access control in a message-based operating system are provided. Calls to operating system logic may be passed as messages over communication channels in a message-based operating system. A first process configured to receive a message via a communication channel in a message-based operation system may be identified. In addition, the communication channel may be identified. Further, an access rule may be identified. The access rule may be a rule to govern access to the communication channel. The access to the communication channel by the second process may be controlled based on the access rule. The access may be controlled in a kernel of a message-based operating system. The second process may be configured to execute invocation logic. The invocation logic may be executable to send the message via the communication channel.

Abstract: In some examples, a service receives releases including machine-readable instructions from different vendors, the releases for respective controller units of a vehicle. The service communicates the releases wirelessly to the vehicle to update machine-readable instructions executing on the respective controller units of the vehicle.

Abstract: A system and method are provided for automatic camera health monitoring, such as for a camera in a video surveillance system. The system preferably provides substantially continuous monitoring and detection of camera malfunction, due to either external or internal conditions. Camera malfunction is detected when a computed camera health measurement exceeds a malfunction threshold. The camera health measurement is computed based on a comparison of a current camera health record to a plurality of stored camera health records obtained in a learning mode, which characterize known states of normal camera operation. Aside from monitoring camera health, methods of the present invention can also be used to detect an object being added to or removed from a scene, or to detect a change in lighting in a scene, possibly caused by a defective light fixture.