Abstract: One variation of the method includes: accessing a set of objects generated by a set of sources connected to a computer network, the set of objects including an object defining: a source field; and a source attribute value corresponding to the source field; defining a transformation between the source field and a standard field based on a transform model; identifying an identity characterized by the source attribute value; storing the source attribute value in an identity container representing the identity, the source attribute value corresponding to the standard field; identifying a policy valid for the identity based on the identity container; calculating a posture score for the identity based on correspondence between the policy and the source attribute value; and, in response to the posture score exceeding a threshold posture score, flagging the identity for review by security personnel associated with the computer network.

Abstract: One variation of a method includes: accessing a first policy associated with a computer network; extracting a first entitlement from the first policy, the first entitlement granting permission to a first identity in the set of identities to access a first resource according to a first access level; accessing a first set of event data representing a first access attempt associated with the first resource by the first identity during a first time period, the first access attempt characterized by a second access level; detecting a deviation between the second access level and the first access level defined in the first entitlement; generating a second policy representing a second entitlement granting permission to the first identity to access the first resource according to the second access level in response to the deviation; and serving the second policy to an operator via an interface.

Abstract: One variation of a method for predicting and characterizing cyber attacks includes: receiving, from a sensor implementing deep packet inspection to detect anomalous behaviors on the network, a first signal specifying a first anomalous behavior of a first asset on the network at a first time; representing the first signal in a first vector representing frequencies of anomalous behaviors—in a set of behavior types—of the first asset within a first time window; calculating a first malicious score representing proximity of the first vector to malicious vectors defining sets of behaviors representative of security threats; calculating a first benign score representing proximity of the first vector to a benign vector representing an innocuous set of behaviors; and in response to the first malicious score exceeding the first benign score and a malicious threshold score, issuing a first alert to investigate the network for a security threat.

Abstract: This disclosure provides an apparatus and method for a consolidated enterprise view of cybersecurity data from multiple sites, including but not limited to in industrial control systems and other systems. A method includes receiving, by a replicator system, cybersecurity data from a site risk manager (RM) database. The method includes transferring the cybersecurity data, by the replicator system, through a secure firewall to an enterprise RM database. The enterprise RM database consolidates data received from a plurality of replicator systems.

Abstract: One variation of a method for predicting and characterizing cyber attacks includes: receiving, from a sensor implementing deep packet inspection to detect anomalous behaviors on the network, a first signal specifying a first anomalous behavior of a first asset on the network at a first time; representing the first signal in a first vector representing frequencies of anomalous behaviors—in a set of behavior types—of the first asset within a first time window; calculating a first malicious score representing proximity of the first vector to malicious vectors defining sets of behaviors representative of security threats; calculating a first benign score representing proximity of the first vector to a benign vector representing an innocuous set of behaviors; and in response to the first malicious score exceeding the first benign score and a malicious threshold score, issuing a first alert to investigate the network for a security threat.

Abstract: One variation of a method for predicting and characterizing cyber attacks includes: receiving, from a sensor implementing deep packet inspection to detect anomalous behaviors on the network, a first signal specifying a first anomalous behavior of a first asset on the network at a first time; representing the first signal in a first vector representing frequencies of anomalous behaviors—in a set of behavior types—of the first asset within a first time window; calculating a first malicious score representing proximity of the first vector to malicious vectors defining sets of behaviors representative of security threats; calculating a first benign score representing proximity of the first vector to a benign vector representing an innocuous set of behaviors; and in response to the first malicious score exceeding the first benign score and a malicious threshold score, issuing a first alert to investigate the network for a security threat.

Abstract: This disclosure provides an apparatus and method for a consolidated enterprise view of cybersecurity data from multiple sites, including but not limited to in industrial control systems and other systems. A method includes receiving, by a replicator system, cybersecurity data from a site risk manager (RM) database. The method includes transferring the cybersecurity data, by the replicator system, through a secure firewall to an enterprise RM database. The enterprise RM database consolidates data received from a plurality of replicator systems.

Abstract: A digital imaging device having a CCD sensor array with one or more fields captures both short and long exposures of a particular field during the capture of a single image frame. The short-exposure image data and the long-exposure image data from the particular field may be correlated to estimate motion within the image frame.

Abstract: A break away vehicle grille assembly having a first piece with a locking flange and a second piece located generally adjacent the first piece. The second piece also has a locking flange that is configured to align with and releasably connect with the locking flange of the first piece. The two locking flanges can be held together with a retainer. Upon an impact to the vehicle, the vehicle grille is configured in such a manner that the first and second pieces will break away from each other and move with respect to one another in order to absorb impacts.

Abstract: A digital camera takes interleaved photographs of two different kinds. In one example embodiment, the first kind of photograph is taken using a first set of pixels of the camera's electronic array light sensor and has a short exposure time. The second kind of photograph is taken using a second set of pixels and has a long exposure time. More than one of the short-exposure-time photographs is taken while each long-exposure-time photograph is exposed. The two kinds of photographs are used for different purposes. For example, one kind may be used for performing automatic focusing while the other kind is used for displaying in a live view display. In this way, live view may continue while automatic focusing is performed. In another embodiment, one kind of photograph is used for providing a live view display, and the other is used in selecting exposure settings for a final photograph.

Abstract: A break away vehicle grille assembly having a first piece with a locking flange and a second piece located generally adjacent the first piece. The second piece also has a locking flange that is configured to align with and releasably connect with the locking flange of the first piece. The two locking flanges can be held together with a retainer. Upon an impact to the vehicle, the vehicle grille is configured in such a manner that the first and second pieces will break away from each other and move with respect to one another in order to absorb impacts.

Abstract: The shutter of a digital imaging device may be calibrated by comparing a characteristic of two separate exposures obtained from a single field of the device's imaging sensor during a single exposure cycle. Calibrating the shutter in this manner facilitates the accuracy of even very short exposure times.

Abstract: A digital imaging device having a CCD sensor array with at least one field captures both short and long exposures of a particular field during the capture of a single image frame, the short-exposure image data from the particular field being used to extend the dynamic range of clipped pixel data.

Abstract: A digital imaging device having a CCD sensor array with one or more fields captures both short and long exposures of a particular field during the capture of a single image frame. The short-exposure image data and the long-exposure image data from the particular field may be correlated to estimate motion within the image frame.

Abstract: In one embodiment there is shown a method for capturing data, the method comprising sensing a first signal, capturing an auto exposure (AE) image in response to a sensed first signal, the auto exposure image captured with settings based upon preestablished criterion, and upon the AE image being captured, determining if a second signal has been sensed, and if the second signal has been sensed, capturing a speculative full exposure image, and if the captured speculative full exposure is determined to be acceptable, reading the remainder of the captured speculative image.

Abstract: Autofocus methods and digital cameras employing a holographic element or hologram. The holographic element generates one or more displaced images that are processed to generate a bipolar contrast signal that provides for improved autofocus performance of the digital camera.

Abstract: A remote two-module electronic fluid monitoring system. A tank module sits atop a field tank and monitors internal fluid level. Fluid level detection is achieved by tracking the position of an embedded permanent magnet associated with a given internal fluid level within an existing float gauge mechanism. An integrated circuit capable of precisely detecting the orientation of magnetic fields senses the angular position of an existing magnet and outputs an angular field reading to an interfaced microcontroller which then translates angular reading to fluid level. The tank module contains a radio frequency transmitter which then sends fluid level information to a display module. The display module receives the signal from the tank module and reports to the user the present fluid level remaining in the tank via a liquid crystal display.