Abstract: Systems and methods for controlling operations of a computer system. The methods comprises: collecting, by at least one computing device, information about events occurring in the computer system; performing automated ontogenesis operations by the at least one computing device using the collected information to determine a context of a given situation associated with the computer system, define parameters for a plurality of different sets of actions that could occur in the context of the given situation, and simulate the sets of actions to generate predicted consequences resulting from the performance of certain behaviors by nodes of the computer system; and using the parameters of at least one of the predicted consequences to control operations of the computer system.

Abstract: Systems and methods for controlling operations of a Computer System (“CS”). The methods comprise: collecting information about events occurring in CS; performing automated ontogenesis operations using the collected information to determine a context of a given situation associated with CS using stored ontogenetic knowledge, define parameters for different sets of actions that could occur in the context of the given situation, simulate the sets of actions to generate a set of simulation results defining predicted consequences resulting from the performance of certain behaviors by nodes of CS, select a best simulation result from the set of simulation results, and determine whether a system action specified by the best simulation result might cause an undesirable unintended consequence; and using the parameters associated with the best simulation result to optimize control and performance of CS, when a determination is made that the system action will not cause the undesirable unintended consequence.

Abstract: Systems and methods for controlling operations of a Computer System (“CS”). The methods comprise: collecting information about events occurring in CS; performing automated ontogenesis operations using the collected information to determine a context of a given situation associated with CS using stored ontogenetic knowledge, define parameters for different sets of actions that could occur in the context of the given situation, simulate the sets of actions to generate a set of simulation results defining predicted consequences resulting from the performance of certain behaviors by nodes of CS, select a best simulation result from the set of simulation results, and determine whether a system action specified by the best simulation result might cause an undesirable unintended consequence; and using the parameters associated with the best simulation result to optimize control and performance of CS, when a determination is made that the system action will not cause the undesirable unintended consequence.

Abstract: Systems and methods for controlling operations of a Computer System (“CS”). The methods comprise: collecting information about events occurring in CS; performing automated ontogenesis operations using the collected information to determine a context of a given situation associated with CS using stored ontogenetic knowledge, define parameters for different sets of actions that could occur in the context of the given situation, simulate the sets of actions to generate a set of simulation results defining predicted consequences resulting from performance of behaviors by nodes, determine a confidence value for each simulation result that indicates a level of confidence that a successful outcome will result if action(s) associated with the simulation result are performed by CS, and analyze the confidence values to identify a simulation result with the best confidence level; and using the parameters associated with the best simulation result to control and optimize performance of CS.

Abstract: Systems and methods for controlling operations of a Computer System (“CS”). The methods comprise: collecting information about events occurring in CS; performing automated ontogenesis operations using the collected information to determine a context of a given situation associated with CS using stored ontogenetic knowledge, define parameters for different sets of actions that could occur in the context of the given situation, simulate the sets of actions to generate a set of simulation results defining predicted consequences resulting from performance of behaviors by nodes, determine a confidence value for each simulation result that indicates a level of confidence that a successful outcome will result if action(s) associated with the simulation result are performed by CS, and analyze the confidence values to identify a simulation result with the best confidence level; and using the parameters associated with the best simulation result to control and optimize performance of CS.

Abstract: Systems and methods for controlling operations of a computer system. The methods comprises: collecting, by at least one computing device, information about events occurring in the computer system; performing automated ontogenesis operations by the at least one computing device using the collected information to determine a context of a given situation associated with the computer system, define parameters for a plurality of different sets of actions that could occur in the context of the given situation, and simulate the sets of actions to generate predicted consequences resulting from the performance of certain behaviors by nodes of the computer system; and using the parameters of at least one of the predicted consequences to control operations of the computer system.

Abstract: Systems and methods for controlling operations of a computer network (100). The methods involve: generating programming instructions implementing a first mission plan (2100) specifying which identity parameters of packets are to be transformed during specific time periods; executing the programming instructions by at least one node (105) of the computer network to dynamically transform true values, which correctly represent the identity parameters of the packets, into false values which incorrectly represent the identity parameters of the packets; measuring an effectiveness of the computer network's behavior with regard to a recognition and prevention of cyber-attack success resulting from the execution of the programming instructions by the node; and dynamically modifying the first mission plan based on the measured effectiveness.

Abstract: Systems and methods for controlling operations of a computer network. The methods involve: receiving, by a first computing device (1404, 2200), User-Software Interactions (“USIs”) selecting (a) at least one mission objective from a mission library of a data store (1406, 2208) and (b) at least one criteria for a Cyber Behavior Model (“CBM”) stored in a behavior library of the data store; translating USIs to Programming Instructions (“PIs”) implementing a mission plan specifying which IDentity Parameters (“IDPs”) are to be transformed during specific time periods; and executing PIs by a node of the computer network to dynamically transform true values, which correctly represent IDPs, into false values which incorrectly represent IDPs.

Abstract: Systems (100) and methods (1000) for dynamic data storage within a network. The method comprising: receiving at least one first data file (202) comprising first data (302-320); segmenting the first data so as to form a plurality of first data segments (208); processing each of the first data segments to transform at least one first attribute of a plurality of attributes thereof so as to form a second data segment (210); storing the second data segments respectively in a plurality of different data stores (116-120); and dynamically changing physical locations where the second data segments are stored in response to an occurrence of a first trigger event. In some scenarios, the method steps may be iteratively repeated in response to one or more second trigger events (which may be the same as or different than the first trigger event).

Abstract: Systems (100) and methods (1900) for configuring a computer network (“CN”). The methods comprise: receiving Access Control Information (“ACI”) input to a first network node (101-103, 105-107) by a user assigned to a mission; verifying that the user has a right to have access to the CN (100) based on the ACI; granting the user access to CN in response to the verifying; and obtaining Mission Related Information (“MRI”) by the first network node. The MRI is associated with the user and at least identifies a first mission plan (120) specifying a manner in which an assigned value for at least one first identity parameter is to be dynamically modified by at least one node (105-107, 113, 114) of CN. Thereafter, the first network node or a second network node (105-107, 113, 114) of CN is configured to operate in accordance with the first mission plan.

Abstract: Systems and methods for controlling operations of a computer network (100). The methods involve: generating programming instructions implementing a first mission plan (2100) specifying which identity parameters of packets are to be transformed during specific time periods; executing the programming instructions by at least one node (105) of the computer network to dynamically transform true values, which correctly represent the identity parameters of the packets, into false values which incorrectly represent the identity parameters of the packets; measuring an effectiveness of the computer network's behavior with regard to a recognition and prevention of cyber-attack success resulting from the execution of the programming instructions by the node; and dynamically modifying the first mission plan based on the measured effectiveness.

Abstract: Systems and methods for controlling operations of a computer network. The methods involve: receiving, by a first computing device (1404, 2200), User-Software Interactions (“USIs”) selecting (a) at least one mission objective from a mission library of a data store (1406, 2208) and (b) at least one criteria for a Cyber Behavior Model (“CBM”) stored in a behavior library of the data store; translating USIs to Programming Instructions (“PIs”) implementing a mission plan specifying which IDentity Parameters (“IDPs”) are to be transformed during specific time periods; and executing PIs by a node of the computer network to dynamically transform true values, which correctly represent IDPs, into false values which incorrectly represent IDPs.

Abstract: Systems (100) and methods (1400) for enterprise mission management of a Computer Network (“CN”). The methods involve configuring CN to operate in accordance with a first Mission Plan (“MP”) specifying a manner in which an assigned value for a first IDentity Parameter (“IDP”) is to be dynamically modified by a first node of CN; detecting a trigger event which indicates that a new MP needs to be implemented within CN; obtaining a second MP that specifies a manner in which an assigned value for a second IDP is to be dynamically modified by a second node of CN; determining if any conflicts exist between operations of the second node defined by the second MP and operations of the first node defined by the first MP; and configuring operations of CN to further operate in accordance with the second MP if it is determined that no conflict exists.

Abstract: Systems (100) and methods (1900) for configuring a computer network (“CN”). The methods comprise: receiving Access Control Information (“ACI”) input to a first network node (101-103, 105-107) by a user assigned to a mission; verifying that the user has a right to have access to the CN (100) based on the ACI; granting the user access to CN in response to the verifying; and obtaining Mission Related Information (“MRI”) by the first network node. The MRI is associated with the user and at least identifies a first mission plan (120) specifying a manner in which an assigned value for at least one first identity parameter is to be dynamically modified by at least one node (105-107, 113, 114) of CN. Thereafter, the first network node or a second network node (105-107, 113, 114) of CN is configured to operate in accordance with the first mission plan.

Abstract: Method for communicating in a computer network from a first node (101, 102, 103) in the network to a second node (136, 138), not in the network. A virtual identity is selected for the first node. The virtual identity is comprised of one or more session identity parameters used for representing the first node during a static communication session with the second node. The session identity parameters used during the static communication session are excluded from a coordinated variation of identity parameters for nodes within the network. In response to determining an occurrence of at least one communication security threat with respect to the static communication session, the method further involves adaptively modifying the virtual identity assigned to the first node by changing at least one of the session identity parameters.

Abstract: Method for communicating in a computer network from a first node (101, 102, 103) in the network to a second node (136, 138), not in the network. A virtual identity is manually selected for the first node. The virtual identity is comprised of one or more session identity parameters used for representing the first node during a static communication session with the second node. The session identity parameters used during the static communication session are excluded from a coordinated variation of identity parameters for nodes within the network. In response to determining an occurrence of at least one communication security threat with respect to the static communication session, the method further involves adaptively modifying the virtual identity assigned to the first node by changing at least one of the session identity parameters.

Abstract: Systems (100) and methods (1000) for dynamic data storage within a network. The method comprising: receiving at least one first data file (202) comprising first data (302-320); segmenting the first data so as to form a plurality of first data segments (208); processing each of the first data segments to transform at least one first attribute of a plurality of attributes thereof so as to form a second data segment (210); storing the second data segments respectively in a plurality of different data stores (116-120); and dynamically changing physical locations where the second data segments are stored in response to an occurrence of a first trigger event. In some scenarios, the method steps may be iteratively repeated in response to one or more second trigger events (which may be the same as or different than the first trigger event).

Abstract: Systems (1900) and methods (2300, 2400) for use in a network node (1901-1903). The methods involve: receiving a Data Communication (“DC”) from Data Link Layer Software (“DLLS”); identifying an IDentity Parameter (“IDP”) contained in DC which comprises a False Value (“FV”) specifying false information about the node or DC; obtaining a True Value (“TV”) specifying true information about the node or DC; replacing the FV with the TV to generate a modified DC; and forwarding the modified DC to Network Layer Software (“NLS”). The methods also involve: receiving a Data Unit (“DU”) from NLS comprising a Transport Layer Header (“TLH”) and a Network Layer Header (“NLH”) including TVs specifying true information about the node or FDU; obtaining a FV which specifies false information about the node or FDU; replacing a TV of DU with the FV so as to form a Modified Data Unit (“MDU”); and forwarding MDU to DLLS.

Abstract: A switch and methods for its use are disclosed. The switch includes input and output circuitry for receiving and forwarding data packets to computing devices connected to the network. The switch also includes a memory configured to store a number of tables relating the ports to the physical addresses of computing devices connected to the switch. The switch is capable of correctly forwarding data packets which specify false identity parameters. The switch is also capable of dynamic forwarding used to forward data packets across many paths to the destination. The switch is also capable of forwarding data packets to one of a number of output ports based on a comparison of at least one of the identity parameters that specifies false information to a table stored in memory.

Abstract: Systems (100) and methods (2100) for identifying, deterring and/or delaying malicious attacks being waged on a Computer Network (“CN”). The methods involve implementing a Mission Plan (“MP”) at a first Network Node (“NN”). MP (1900, 1902) specifies that: a first IDentity Parameter (“IDP”) for a second NN has numerous possible values associated therewith; and at least two possible values are to be used in communications to and from the second NN in different timeslots of a time frame (2020-2026). At the first NN, a value for the first IDP, which is contained in a received packet, is compared with the possible values specified in MP to determine if the value is a “correct” value for a current timeslot. If it is determined that the value is not “correct” for the current timeslot, then the first NN performs actions to identify, deter or delay a possible malicious attack on CN.