Abstract: There is disclosed in one example a sentinel device, including: a hardware platform including at least a processor and configured to provide a trusted execution environment (TEE); and a security engine operable to instruct the hardware platform to: determine that an internet of things (IoT) device in a first realm R1 requires a secure communication channel with a second device in a second realm R2; query a key server for a service appliance key for the secure communication channel; establish a secure communication channel with the endpoint device using the service appliance key and the TEE; and provide a security service function within R1 including brokering communication via the secure communication channel between the IoT device and the second device.

Abstract: Systems and methods for phishing and brand protection of websites via copycat detection are disclosed herein. An example apparatus includes at least one processor, a display, and memory including instructions that, when executed, cause the at least one processor to determine a first hash of a first image in a webpage and a second hash of a second image in the webpage, the second image different from the first image, the first hash different from the second hash, generate a temporary page profile associated with the webpage based on the first hash and the second hash, fuzzy match the temporary page profile to a baseline page profile, and in response to a determination that the temporary page profile does not match the baseline page profile, generate an alert to be displayed via the display to indicate that fraud has been detected for the webpage.

Abstract: Methods, systems, and devices for wireless communication are described. Wireless devices may support parallel communications over multiple wireless links, which may benefit a wireless system in terms of throughput and latency (among other benefits). However, such systems may experience increased system complexity, which may in some cases mitigate some of the benefits provided by the parallel communication links. The described techniques provide for aggregation architectures that address various such complexities. For example, devices communicating in accordance with the described techniques may format data to be transmitted into a set of data units that are allocated to a communication link based on various factors described herein. Correspondingly, a device that receives the data packets may reorder the packets in accordance with the described techniques.

Abstract: This disclosure provides systems, devices, apparatus and methods, including computer programs encoded on storage media, for multi-basic service set (BSS) time alignment. In one implementation, an access point (AP) may determine a first transmission parameter for a first trigger transmission to be sent to a station (STA) belonging to the first BSS. The first transmission parameter may include a transmission order for time-separated trigger transmissions, non-overlapping bandwidths for frequency-separated trigger transmissions, trigger data precoding information for spatially-separated trigger transmissions, or a combination thereof. The AP may transmit the first trigger transmission to the first STA, and in response, receive a first synchronized transmission from the first STA. The first synchronized transmission may be synchronized, for example, aligned in time, with a second synchronized transmission from a second STA of a second set of STAs in a second BSS.

Abstract: Methods, systems, and devices for wireless communication are described. A wireless device may identify a multi-link aggregation capability (e.g., a capability to transmit in parallel over multiple wireless links), and may transmit an indication of such capability to another wireless device. The indication may be included in an information element (e.g., a multi-band element) of a transmission frame. For example, the indication may be included in a multi-band element of a beacon, of association signaling, of probe signaling, of an add block acknowledgement (ADDBA) request, etc. The indication sent over one of the wireless links may include information for some or all the multiple links supported for multi-link aggregation. This information may include media access control (MAC) address, channel information, operating class, security information, etc. for each link.

Abstract: This disclosure provides systems, methods, apparatus, including computer programs encoded on computer storage media for one or more wireless devices to gain access to a wireless channel of a radio frequency spectrum band. In some aspects, a recurring coordinated medium interval is defined in the time domain and associated with the wireless channel. The coordinated medium interval includes a first time period, which may be referred to as a common reservation window, and a second time period, which may be referred to as a scheduled medium access window. During the first time period, access points (APs) attempting to gain access to the wireless channel may transmit reservation signals to reserve one or more scheduled service periods within the second time period of the same coordinated medium interval. The scheduled service periods reserved by an individual AP may be used for UL/DL communications between that AP and its associated stations (STAs).

Abstract: The described techniques relate to improved methods, systems, devices, or apparatuses that support clear channel assessment adjustment for in-band link aggregation. Generally, the described techniques provide for improved handling of adjacent channel interference in multi-link aggregation scenarios. In accordance with the described techniques, a device may establish a set of wireless links for communication with a second device, the set of wireless links supporting parallel transmission during at least a first duration of a multi-link session, the set of wireless links including at least a first wireless link and a second wireless link. The device may identify a parameter value modifying a channel availability threshold to use during a channel access procedure for a first wireless channel of the first wireless link based on a presence of the second wireless link. The device may perform the channel access procedure for the first wireless channel based on the identified parameter value.

Abstract: Features related to providing feedback corresponding to a portion of a data frame while another portion of the data frame is being received are described. In an aspect, a first device may transmit, to a second device, at least one MPDU of a plurality of MPDUs within the data frame via a data channel, and receive feedback corresponding to the at least one MPDU in a feedback channel while at least a first MPDU of the remaining MPDUs within the data frame is being transmitted. In another aspect, a first device, e.g., receiver of data frame, may receive, from a second device, at least one MPDU of a plurality of MPDUs within a data frame, and transmit feedback corresponding to the at least one MPDU while at least a first MPDU of the remaining MPDUs within the data frame is being received.

Abstract: In an example, there is disclosed a computing apparatus, comprising: a trusted execution environment (TEE); and a security engine operable to: identify a key negotiation for an encrypted connection between a first device and a second device; request a service appliance key for the key negotiation; receive the service appliance key; and perform a service appliance function on traffic between the first device and the second device. There is also disclosed a method of providing the security engine, and a computer-readable medium having stored thereon executable instructions for providing the security engine.

Abstract: Certain aspects of the present disclosure provide methods and apparatus relating to distribution networks that utilize point-to-point communication between devices. The method comprises generating a frame with information indicating in which time division duplex (TDD) time slots, in a service period (SP) within a data transfer interval (DTI) of the frame, another apparatus is allowed to communicate.

Abstract: This disclosure describes systems, methods, and computer-readable media related to phishing and brand protection via copycat detection. In some embodiments, a temporary page profile associated with a webpage may be generated. The temporary page profile may include an image component, a geometry component, a style component, and a link component. One or more baseline page profiles may be retrieved. The temporary page profile and the one or more baseline page profiles may be compared. It may be determined that the temporary page profile does not match the one or more baseline page profiles. An alert may be generated to display to a user indicating that fraud has been detected for the webpage.

Abstract: Certain aspects of the present disclosure are directed to apparatus and techniques for performing coordinated beamforming (CoBF) transmissions. The apparatus generally includes a processing system configured to generate at least one first frame including an invitation to share resources with one or more first wireless nodes, wherein the apparatus is part of a first basic service set and the one or more first wireless nodes are part of one or more second basic service sets, a first interface configured to output the at least one first frame for transmission to the one or more first wireless nodes, and a second interface configured to obtain, from the one or more first wireless nodes, an identification of one or more second wireless nodes if the invitation is accepted, wherein the second interface is configured to obtain one or more transmissions from at least one of the one or more second wireless nodes.

Abstract: A method in one example embodiment includes generating a signature for an object in a compute node in a network, searching a memory element for the signature, and responsive to determining the memory element does not contain the signature, scanning the object. The method also includes updating the memory element with a scan result, and synchronizing the memory element of the compute node with one or more memory elements of one or more other compute nodes in the network. In specific embodiments, the scan result includes the signature of the object and a threat level of the object. In further embodiments, the synchronizing includes sending the scan result to one or more other compute nodes in the network. In more specific embodiments, the scan result is sent with one or more other scan results after a predetermined interval of time from a previous synchronization.

Abstract: This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer-readable media, for advertising operating channels that are being operated in an unlicensed frequency band. One or more access points (APs) may transmit discovery information on a dedicated discovery channel for the unlicensed frequency band. The discovery information may indicate at least one operating channel that is being used by an AP for providing wireless access. The discovery information also may include other information useful for a station (STA) to discover APs, operating channels, and operating parameters. The STA may monitor the dedicated discovery channel to obtain the discovery information without conducting an active scanning or passive scanning procedure.

Abstract: Providing secure software defined storage includes identifying data directed to be stored in a software defined storage location, intercepting the data, performing a security operation on the intercepted data, and transmitting the data to the software defined storage.

Abstract: Techniques related to trusted remote configuration and operation using multiple devices are disclosed. The techniques include a machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a target device to receive, from a connecting device, a capabilities request, measure, in response to the capabilities request, the trusted capabilities of the target device, generate a list of trusted capabilities, transmit, to the connecting device, the list of trusted capabilities, receive, from the connecting device, an access request for a trusted capability, the access request describing a workload for the trusted capability, perform the workload to obtain a result, and transmit, to the connecting device, the obtained result.

Abstract: A method, system and apparatus is disclosed for auto-tuning a circuit associated with an upstream transducer (UPT) and a circuit associated with a downstream transducer (DNT) for reciprocal operation in an ultrasonic flowmeter. The method includes exchanging signals between the upstream transducer and the downstream transducer; comparing at least one of respective maximum amplitudes of an upstream signal and a downstream signal and respective center frequencies of a Fast Fourier Transform (FFT) of the upstream signal and the downstream signal; and responsive to determining that at least one of the respective maximum amplitudes and the respective center frequencies do not match, correcting the mismatch.

Abstract: Various aspects of the disclosure relate to distributed multiple-input multiple-output (MIMO) communication such as coordinated beamforming or Joint MIMO. In some aspects, distributed MIMO is used to support communication in a cluster of wireless nodes (e.g., access points). A distributed MIMO scheduling scheme as taught herein is used to schedule the wireless nodes (e.g., access points and/or stations) operating within the cluster. For example, stations may be scheduled across basis services sets of the access points for a downlink transmission and/or an uplink transmission.

Abstract: Various aspects of the disclosure relate to distributed multiple-input multiple-output (MIMO) communication such as coordinated beamforming or Joint MIMO. In some aspects, distributed MIMO is used to support communication in a cluster of wireless nodes (e.g., access points). A distributed MIMO scheduling scheme as taught herein is used to schedule the wireless nodes (e.g., access points and/or stations) operating within the cluster. For example, selected stations may be triggered to communicate with respective access points.

Abstract: Various aspects of the disclosure relate to distributed multiple-input multiple-output (MIMO) communication such as coordinated beamforming or Joint MIMO. In some aspects, distributed MIMO is used to support communication in a cluster of wireless nodes (e.g., access points). A distributed MIMO scheduling scheme as taught herein is used to determine each wireless node (e.g., station) in the cluster that needs to be nulled by another wireless node (e.g., an access point). For example, one of the wireless nodes may obtain signal measurement information from the other wireless nodes and thereby generate a list of wireless nodes (e.g., access points) that need to null one or more wireless nodes (e.g., stations).