Abstract: An encryptor including circuitry configured to establish a communications link to a decryptor for transmitting an encrypted data payload; obtain a first encryption key via a first channel and a second encryption key via a second channel different from the first channel; encrypt a data payload based on a third encryption key generated based on the obtained first and second encryption key; and transmit the encrypted data payload to the decryptor.

Abstract: The attack vectors for some denial-of-service cyber attacks on the Internet's Domain Name System (DNS) are bad, bogus, or unregistered domain name DNS requests to resolve domain names that are not registered in the DNS. Some other cyber attacks steal sensitive data by encoding the data in bogus domain names, or domain names otherwise not registered in the DNS, that are transferred across networks in bogus DNS requests. A DNS gatekeeper may filter in-transit packets containing DNS requests and may efficiently determine if a request's domain name is registered in the DNS. When the domain name is not registered in the DNS, the DNS gatekeeper may take one of a plurality of protective actions. The DNS gatekeeper drops requests determined not to be legitimate, which may prevent an attack.

Abstract: This disclosure provides systems, methods, and devices for automatic product classification using deep learning and generative artificial intelligence (AI) models for a harmonized system (HS) product classification. A method includes generating embeddings based on an input dataset. The method includes applying a deep learning model to the embeddings to produce a prediction set including classifications corresponding to the embeddings. The method includes converting the classifications to a first set of similarity metrics. The method includes determining a second set of similarity metrics based on the embeddings using a semantic similarity model. The method includes generating a third set of similarity metrics based on an output of the semantic similarity model. The method includes outputting a ranked set of predictions corresponding to the input dataset based on the first set of similarity metrics, the second set of similarity metrics, and the third set of similarity metrics.

Abstract: Packets may be received by a packet security gateway. Responsive to a determination that an overload condition has occurred in one or more networks associated with the packet security gateway, a first group of packet filtering rules may be applied to at least some of the packets. Applying the first group of packet filtering rules may include allowing at least a first portion of the packets to continue toward their respective destinations. Responsive to a determination that the overload condition has been mitigated, a second group of packet filtering rules may be applied to at least some of the packets. Applying the second group of packet filtering rules may include allowing at least a second portion of the packets to continue toward their respective destinations.

Abstract: A voltage conversion system includes user interface circuitry disposed on the voltage conversion system. The user interface circuitry is configured to input at least one electrical parameter based on user input. At least one parameter of the at least one electrical parameter comprises a plurality of adjustable values and corresponds to a conductor resistance of electrical conductors coupled to the voltage conversion system. Each adjustable value of the at least one parameter corresponds to a range of two or more values. The voltage conversion system includes conversion circuitry configured to generate an adjusted direct current (DC) voltage from an input DC voltage based on the at least one electrical parameter.

Abstract: Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.

Abstract: A semiconductor device includes a semiconductor layer including a trench, wherein the trench is adjacent a mesa, a first metal silicide layer on a top portion of the mesa, and a second metal silicide layer on a bottom portion of the trench. The first metal silicide layer has a thickness that is no more than about 1 to 1.5 times greater than a thickness of the second metal silicide layer. Related methods of forming a semiconductor device are disclosed.

Abstract: A voltage conversion system includes user interface circuitry disposed on the voltage conversion system. The user interface circuitry is configured to input at least one electrical parameter based on user input. At least one parameter of the at least one electrical parameter comprises a plurality of adjustable values and corresponds to a conductor resistance of electrical conductors coupled to the voltage conversion system. Each adjustable value of the at least one parameter corresponds to a range of two or more values. The voltage conversion system includes conversion circuitry configured to generate an adjusted direct current (DC) voltage from an input DC voltage based on the at least one electrical parameter.

Abstract: The attack vectors for some denial-of-service cyber attacks on the Internet's Domain Name System (DNS) are bad, bogus, or unregistered domain name DNS requests to resolve domain names that are not registered in the DNS. Some other cyber attacks steal sensitive data by encoding the data in bogus domain names, or domain names otherwise not registered in the DNS, that are transferred across networks in bogus DNS requests. A DNS gatekeeper may filter in-transit packets containing DNS requests and may efficiently determine if a request's domain name is registered in the DNS. When the domain name is not registered in the DNS, the DNS gatekeeper may take one of a plurality of protective actions. The DNS gatekeeper drops requests determined not to be legitimate, which may prevent an attack.

Abstract: An encryptor including circuitry configured to establish a communications link to a decryptor for transmitting an encrypted data payload; obtain a first encryption key via a first channel and a second encryption key via a second channel different from the first channel; encrypt a data payload based on a third encryption key generated based on the obtained first and second encryption key; and transmit the encrypted data payload to the decryptor.

Abstract: In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.

Abstract: JFETs are provided that comprise a wide bandgap semiconductor layer structure comprising an active region and a termination region. The termination region comprises a plurality of termination structures. A first major surface of the semiconductor layer structure in the active region comprises a plurality of spaced-apart mesas and the first major surface of the semiconductor layer structure in the termination region is a planar surface.

Abstract: Packets may be received by a packet security gateway. Responsive to a determination that an overload condition has occurred in one or more networks associated with the packet security gateway, a first group of packet filtering rules may be applied to at least some of the packets. Applying the first group of packet filtering rules may include allowing at least a first portion of the packets to continue toward their respective destinations. Responsive to a determination that the overload condition has been mitigated, a second group of packet filtering rules may be applied to at least some of the packets. Applying the second group of packet filtering rules may include allowing at least a second portion of the packets to continue toward their respective destinations.

Abstract: An encryptor including circuitry configured to establish a communications link to a decryptor for transmitting an encrypted data payload; obtain a first encryption key via a first channel and a second encryption key via a second channel different from the first channel; encrypt a data payload based on a third encryption key generated based on the obtained first and second encryption key; and transmit the encrypted data payload to the decryptor.

Abstract: A semiconductor device includes an active region comprising a plurality of alternating trenches and mesas in an epitaxial layer, the plurality of alternating trenches and mesas extending in a first direction, and an edge termination region adjacent the active region and including a first edge termination region and a second edge termination region. The edge termination region includes first and second guard ring trenches adjacent the active region that are separated by a termination mesa that extends in the first direction in the first edge termination region and extends in a second direction, perpendicular to the first direction, in the second edge termination region. The termination mesa has a first width in the first edge termination region and the termination mesa has a second width in the second edge termination region that is different from the first width.

Abstract: An encryptor including circuitry configured to establish a communications link to a decryptor for transmitting an encrypted data payload; obtain a first encryption key via a first channel and a second encryption key via a second channel different from the first channel; encrypt a data payload based on a third encryption key generated based on the obtained first and second encryption key; and transmit the encrypted data payload to the decryptor.

Abstract: This disclosure provides systems, methods, and devices for automatic product classification using deep learning and generative artificial intelligence (AI) models for a harmonized system (HS) product classification. A method includes generating embeddings based on an input dataset. The method includes applying a deep learning model to the embeddings to produce a prediction set including classifications corresponding to the embeddings. The method includes converting the classifications to a first set of similarity metrics. The method includes determining a second set of similarity metrics based on the embeddings using a semantic similarity model. The method includes generating a third set of similarity metrics based on an output of the semantic similarity model. The method includes outputting a ranked set of predictions corresponding to the input dataset based on the first set of similarity metrics, the second set of similarity metrics, and the third set of similarity metrics.

Abstract: A packet gateway may protect TCP/IP networks by enforcing security policies on in-transit packets that are crossing network boundaries. The policies may include packet filtering rules derived from cyber threat intelligence (CTI). The rapid growth in the volume of CTI and in the size of associated CTI-derived policies, coupled with ever-increasing network link speeds and network traffic volume, may cause the costs of sufficient computational resources to be prohibitive. To efficiently process packets, a packet gateway may be provided with at least one probabilistic data structure, such as a Bloom filter, for testing packets to determine if packet data may match a packet filtering rule. Packet filtering rules may be grouped into subsets of rules, and a data structure may be provided for determining a matching subset of rules associated with a particular packet.

Abstract: Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.

Abstract: Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.