Abstract: An adaptive deception system is provided for defending a production network against cyber-attacks utilizing deception devices on the production network. The adaptive deception system includes a deception management system. The deception management system includes monitors for making observations regarding the deception devices including observations of an attacker's interaction with the deception device. The adaptive deception system further incudes a control system having sensors that receive the observations of the deception management system. The control system is configured to provide an adaption specification in response to the observations made. Actuators of the control system are activated in order to provide the adaption specification to the deception management system where monitors of the deception management system implement the specified adaption. Implementation of the adaption adapts the properties of the deception devices to interfere with the cyber-attacker.

Abstract: A method for validating software transforms. A target program binary is mutated, producing a plurality of variants. It is determined whether each variant passes a test suite. Upon determining the variant does not pass the test suite, the variant is discarded. Upon determining the variant passes the test suite, the variant is compared to the target program binary. A candidate transform is extracted which meets scope criteria. The candidate transform is applied to each of a plurality of test programs. It is determined whether the candidate transform is safe. Upon determining that the candidate transform is not safe, the candidate transform is discarded. Upon determining that the candidate transform is safe, the candidate transform is collected.

Abstract: Semantically equivalent variants of a computer program are generated by applying randomly selected transforms to the computer program. Unit tests are performed on the variants of the computer program to detect a defect in the computer program.

Abstract: Semantically equivalent variants of a computer program are generated by applying randomly selected transforms to the computer program. Unit tests are performed on the variants of the computer program to detect a defect in the computer program.

Abstract: A method for validating software transforms. A target program binary is mutated, producing a plurality of variants. It is determined whether each variant passes a test suite. Upon determining the variant does not pass the test suite, the variant is discarded. Upon determining the variant passes the test suite, the variant is compared to the target program binary. A candidate transform is extracted which meets scope criteria. The candidate transform is applied to each of a plurality of test programs. It is determined whether the candidate transform is safe. Upon determining that the candidate transform is not safe, the candidate transform is discarded. Upon determining that the candidate transform is safe, the candidate transform is collected.

Abstract: A system and method involve measuring one or more hidden states internal to a computing system related only to a user's active task with the computing system, using one or more deterministic mapping functions to directly map, without interpretation of the hidden states as being benign or malicious, the measurements to a representational output, presenting the representational output in real-time and peripheral to the user's active task with the computing system without label information pertaining to the hidden states, determining the user's behavioral responses and/or physiological responses to the presented representational output, altering one or more display characteristics of the presented representational output based upon one or more behavioral responses and physiological responses, and/or inputting the user's response into a machine learning algorithm configured to detect an anomaly within the computing system using the user's behavioral and physiological responses and/or computing system measurements

Abstract: A computing system having attached display devices comprising a primary display area controlled by a corresponding attached display device; a running software application coupled to the primary display area, the software application being actively manipulated by a user and the corresponding primary display area being actively perceived by the user; a plurality of software measurement mechanisms, each coupled to hidden internal states of the running software application; data mapping functions each coupled to a plurality of software measurement mechanisms; one or more secondary display areas each controlled by a corresponding attached display device, where each secondary display area does not occlude or obscure the primary display area; one or more display algorithms, each which couples secondary display areas to one or more data mapping functions, in which the secondary display area shows representations of the hidden internal states via the software measurement mechanisms, data mapping functions, and display

Abstract: A data transfer device comprising: a body; a tip coupled to the body, wherein the tip has a dielectric constant value suitable for interacting with a capacitive touch screen of a separate device; a control unit mounted to the body; and an electronic switch mounted to the body and operatively coupled to the control unit, wherein the switch is disposed to connect the tip to a ground source when the switch is in a closed configuration and to break the connection between the tip and the ground source when the switch is in an open configuration.