Abstract: Techniques are described for analyzing privilege escalation risks within the accounts, roles, and policies that comprise an organization's cloud provider environment. Privilege escalation refers broadly to scenarios in which a principal (e.g., a person or application) is able to gain access to resources or actions in a cloud provider environment that exceed a level intended for that principal. In the context of cloud provider environments, for example, such privilege escalation risks can result from the misconfiguration of policies and permissions attached to identities (e.g., users, groups of users, or roles) within an organization's environment. A multi-layer reasoning framework is used to build an ontology model of an organization's identities and relations among the identities, including defined access relationships, permission mutation relationships, and credential mutation relationships.

Abstract: Techniques are described for a domain-specific language and associated framework for implementing analyses of security, operational, or functional properties involving computing resources. The specification language enables users to readily define the semantics of a set of cross-resource relations of interest using a human-readable language. For example, the language enables users to express properties over computing resources based on a user-defined set of cross-resource relations. The specification language is human-readable, allowing users to easily add new cross-resource relations or to modify existing relations and properties, thereby enabling users to readily modify existing analyses or to create new ones entirely.

Abstract: A door controller with an integrated data collection and transmission device, which comprises a motor driving module, a bus communication module, a vehicle door opening/closing control module, a parameter control module, and a data collection and transmission device. The data collection and transmission device is configured to receive and process four types of data collected by a motor driving data collection unit, a vehicle door opening/closing control data collection unit, an operation parameter collection unit, and a bus communication data collection unit, and transmit the four types of processed data to a background server.

Abstract: A door controller with an integrated data collection and transmission device, which comprises a motor driving module, a bus communication module, a vehicle door opening/closing control module, a parameter control module, and a data collection and transmission device. The data collection and transmission device is configured to receive and process four types of data collected by a motor driving data collection unit, a vehicle door opening/closing control data collection unit, an operation parameter collection unit, and a bus communication data collection unit, and transmit the four types of processed data to a background server.