Abstract: Systems, methods, apparatuses, and computer program products are disclosed for determining network topology information using domain name system (DNS) queries. Network connection and dependency information of elements in a compute cluster are determined from DNS requests. A network topology is generated based on the determined network connection and dependency information. A network policy is generated for the computing cluster based on the network topology.

Abstract: The present disclosure relates to a method of using a feedback loop from sensors to manipulate sea waves by applying concepts from optics interference and lensing. The method includes capturing, by one or more sensors, environmental data of an aquatic environment, wherein the environmental data relates to one or more of a wind speed, a wind direction, a wave pattern, a wave spectra, and a wave direction. The method includes analyzing, by one or more processors of a controller, the environmental data to identify a sensed environmental condition. Further, the method includes determining an optimal configuration of a wave interference device in the sensed environmental condition, wherein the controller is communicatively coupled to the wave interference device; and configuring the wave interference device to occupy the optimal configuration.

Abstract: Concepts and technologies directed to agentless personal firewall security in virtualized datacenters are disclosed herein. Embodiments can include a computer system that can host a hypervisor via a memory and a processor. Upon execution, the processor can cause the computer system to perform operations. The operations can include receiving an inbound communication request to a virtual machine associated with the hypervisor. The operations also can include identifying a virtual port associated with the virtual machine based on the inbound communication request. The operations can include determining that the inbound communication request lacks an identity of a virtual application process that executes on the virtual machine. The operation also can include building a virtual machine memory map. The operation also can include forcing exposure of the virtual application process based on the virtual machine memory map.

Abstract: Computerized methods and systems locate a first device connected to a first network. One or more logs, each generated at a corresponding second device connected to the first network, are received via a second network linked to the first network. Each log has network data having network information associated with the corresponding second device, and location data having location information indicative of a location of the corresponding second device. The network data is analyzed to identify network information in at least one log that matches received network information associated with the first device. Location information in the location data of the at least one log is used to determine a location associated with the first device. In some implementations, the network data in the at least one log and timestamps associated with the network data in the at least one log are used in order to classify the determined location.

Abstract: Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Abstract: Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Abstract: Concepts and technologies directed to agentless personal firewall security in virtualized datacenters are disclosed herein. Embodiments can include a computer system that can host a hypervisor via a memory and a processor. Upon execution, the processor can cause the computer system to perform operations. The operations can include receiving an inbound communication request to a virtual machine associated with the hypervisor. The operations also can include identifying a virtual port associated with the virtual machine based on the inbound communication request. The operations can include determining that the inbound communication request lacks an identity of a virtual application process that executes on the virtual machine. The operation also can include building a virtual machine memory map. The operation also can include forcing exposure of the virtual application process based on the virtual machine memory map.

Abstract: Concepts and technologies directed to agentless personal firewall security in virtualized datacenters are disclosed herein. Embodiments can include a computer system that can host a hypervisor via a memory and a processor. Upon execution, the processor can cause the computer system to perform operations. The operations can include receiving an inbound communication request to a virtual machine associated with the hypervisor. The operations also can include identifying a virtual port associated with the virtual machine based on the inbound communication request. The operations can include determining that the inbound communication request lacks an identity of a virtual application process that executes on the virtual machine. The operation also can include building a virtual machine memory map. The operation also can include forcing exposure of the virtual application process based on the virtual machine memory map.

Abstract: Systems and methods are provided for modifying transmissions made by security cameras so as to allow access to the surveyed locations without the knowledge of the operator of the cameras.

Abstract: Systems and methods are provided for efficiently identifying software bugs in computer programs and the inputs to trigger the bugs using fuzz-testing.

Abstract: Concepts and technologies directed to agentless personal firewall security in virtualized datacenters are disclosed herein. Embodiments can include a computer system that can host a hypervisor via a memory and a processor. Upon execution, the processor can cause the computer system to perform operations. The operations can include receiving an inbound communication request to a virtual machine associated with the hypervisor. The operations also can include identifying a virtual port associated with the virtual machine based on the inbound communication request. The operations can include determining that the inbound communication request lacks an identity of a virtual application process that executes on the virtual machine. The operation also can include building a virtual machine memory map. The operation also can include forcing exposure of the virtual application process based on the virtual machine memory map.

Abstract: Systems and methods are provided for the discovery and classification of Internet of Things (IoT) devices on networks.

Abstract: Systems and methods are provided for the reconstruction of a video and audio recording of stored or transmitted media streams, using a proprietary file format or protocol.

Abstract: Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Abstract: Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Abstract: A method includes receiving, at a network control system, a message that includes content and a header. The header identifies a propagation mode for sending the content via a network. The method includes, based on at least the propagation mode, obtaining location data regarding a plurality of devices connected to the network. The method also includes, based on at least the location data, identifying an intended recipient from the plurality of devices. The method includes transmitting the content to the intended recipient.

Abstract: Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Abstract: A method includes receiving, at a network control system, a message that includes content and a header. The header identifies a propagation mode for sending the content via a network. The method includes, based on at least the propagation mode, obtaining location data regarding a plurality of devices connected to the network. The method also includes, based on at least the location data, identifying an intended recipient from the plurality of devices. The method includes transmitting the content to the intended recipient.