Abstract: A trained model may be deployed to an Internet-of-Things (IOT) operational environment in order to ingest features and detect events extracted from network traffic. The model may be received and converted into a meta-language representation which is interpretable by a data plane engine. The converted model can then be deployed to the data plane and may extract features from network communications over the data plane. The extracted features may be fed to the deployed model in order to generate event classifications or device state classifications.

Abstract: Instrumentation codes are inserted into predetermined portions of a bytecode. Every transaction referenced in the bytecode is virtually combined and arranged hierarchically to describe a virtual transaction stack describing the computer-based resources accessed during the transaction. Based at least on the origin of the transaction, the characteristics of the transaction and the computer-based resources accessed during the transaction, the sensitivity of the transaction, and the security context of each of the computer-based resources accessed during the transaction are determined. A policy store is searched for at least one access control policy referencing the transaction, or the computer-based resources requested accessed by the transaction. If such an access control policy is found, it is selectively modified to refer exclusively to the transaction and the corresponding sensitive computer-based resources.

Abstract: Instrumentation codes are inserted into predetermined portions of a bytecode. Every transaction referenced in the bytecode is virtually combined and arranged hierarchically to describe a virtual transaction stack describing the computer-based resources accessed during the transaction. Based at least on the origin of the transaction, the characteristics of the transaction and the computer-based resources accessed during the transaction, the sensitivity of the transaction, and the security context of each of the computer-based resources accessed during the transaction are determined. A policy store is searched for at least one access control policy referencing the transaction, or the computer-based resources requested accessed by the transaction. If such an access control policy is found, it is selectively modified to refer exclusively to the transaction and the corresponding sensitive computer-based resources.

Abstract: A trained model may be deployed to an Internet-of-Things (IOT) operational environment in order to ingest features and detect events extracted from network traffic. The model may be received and converted into a meta-language representation which is interpretable by a data plane engine. The converted model can then be deployed to the data plane and may extract features from network communications over the data plane. The extracted features may be fed to the deployed model in order to generate event classifications or device state classifications.

Abstract: A method and a system for managing applications running on one or more smart devices are provided. The method includes displaying a plurality of application icons on a wearable device, wherein each icon from the plurality of application icons represents an active application on the smart device connected to the wearable device, receiving a touch gesture on one or more application icons from the plurality of icons, and triggering the smart device to perform an event comprising an interaction between the active applications represented by the one or more application icons in response to the touch gesture.

Abstract: The present invention provides a system, method and computer program product for managing customers in a hierarchical manner. The customer hierarchy comprises a root service provider (RSP), tiered service providers (TSPs) and end customers. The present invention enables the governing of the customers by a large service provider by providing an ability to make smaller service providers as customers and managing their resources. The smaller service provider, in turn, can have its own customers. The smaller service provider governs these customers without interference from the service providers above it in the hierarchy. The customers are governed by policies. A policy is a set of rules laid down by the service provider to control the customers. The present invention also enables the service provider to implement different policies on different customers and change the policy for a customer without affecting other customers.