Abstract: The disclosed computer-implemented method for safely executing unreliable malware may include (i) intercepting a call to an application programming interface (API) in a computing operating system, the API being utilized by malware for disseminating malicious code, (ii) determining an incompatibility between the API call and the computing operating system that prevents successful execution of the API call, (iii) creating a proxy container for receiving the API call, (iv) modifying, utilizing the proxy container, the API call to be compatible with the computing operating system, (v) sending the modified API call from the proxy container to the computing operating system for retrieving the API utilized by the malware, and (vi) performing a security action during a threat analysis of the malware by executing the API to disseminate the malicious code in a sandboxed environment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled an the user devices if the location constraints are satisfied.

Abstract: Injection attack identification and mitigation includes tracking characteristics of user input by a user to a computer system via input device(s), building and maintaining a user profile based on the tracking and that provides a baseline of expected characteristics of user input, the baseline defined by the tracked characteristics, monitoring input to the computer system in real time as the input is provided to the computer system, identifying, based on the monitoring and on a comparison of characteristics of the monitored input to the baseline of expected characteristics, a potential malicious code injection as part of the monitored input to the computer system, and performing mitigation processing based on identifying the potential malicious code injection.

Abstract: Examples of techniques for cache line cleanup for prevention of side channel attack are described herein. An aspect includes determining, by a rollback control unit, a start of a speculative execution in a computer processor. Another aspect includes setting a field in a speculative buffer of the computer processor based on a load or a store to a cache line of a cache being performed by the speculative execution. Another aspect includes determining a failure of the speculative execution. Another aspect includes, based on the failure of the speculative execution, traversing the speculative buffer to determine the set field and performing a cleanup of the cache line based on the set field in the speculative buffer.

Abstract: An endpoint computer system can harvest data relating to a plurality of events occurring within an operating environment of the endpoint computer system and can add the harvested data to a local data store maintained on the endpoint computer system. In some examples, the local data store can be an audit log and/or can include one or more tamper resistant features. Systems, methods, and computer program products are described.

Abstract: An endpoint computer system can harvest data relating to a plurality of events occurring within an operating environment of the endpoint computer system and can add the harvested data to a local data store maintained on the endpoint computer system. A query response can be generated, for example by identifying and retrieving responsive data from the local data store. The responsive data are related to an artifact on the endpoint computer system and/or to an event of the plurality of events. In some examples, the local data store can be an audit log and/or can include one or more tamper resistant features. Systems, methods, and computer program products are described.

Abstract: There is disclosed in one example a computing apparatus, including: a hardware platform; and a storage medium having stored thereon executable instructions to provide an inference engine configured to: receive a new suspicious fragment object from a protected device; add the new suspicious fragment object to a rolling map configured to provide a temporal snapshot of suspicious fragment objects over a time span; determine a connection between the new suspicious fragment object and an existing suspicious fragment object within the rolling map; apply the connection to a connection map; and operate a map classifier to determine that the connection map represents a probable computer security threat.

Abstract: Disclosed are an apparatus and method of verifying an application installation procedure. One example method of operation may include receiving an application at a computer device and initiating the installation of the application on the computer device. The method may also provide executing the application during the installation procedure and creating a hash value corresponding to the executed application data. The method may further provide storing the hash value in memory and comparing the hash value to a pre-stored hash value to determine whether to continue the installation of the application.

Abstract: A method of generating a behavioral model of a computer system. A processor partitions a system log of process events into a plurality of strands sharing common characteristics. The processor selects attributes from the strands and generates first distinct n-grams that include attributes from successive events within a strand. The processor generates a first plurality of n-gram groups, each including a plurality of the first distinct n-grams in which a first one of the plurality of first distinct n-grams coexists in a strand also containing a second one of the plurality of first distinct n-grams. The processor generates a first plurality of n-gram group arrangements, each containing a plurality of n-gram groups, and each of the n-gram groups included, in combination, in at least one strand, and the behavioral model containing the first distinct n-grams, the first plurality of n-gram groups, and the first plurality of n-gram group arrangements.

Abstract: A method of cleaning up a virus program, in an electronic terminal including at least one processor, is provided. An operable interface is displayed on a terminal locked page in response to a first operation instruction on the terminal locked page, the terminal locked page being a page of the virus program and displayed on a screen of the electronic terminal. A second operation instruction on the operable interface is obtained, and identifier information of the virus program is obtained in response to the second operation instruction. The virus program is controlled to run by displaying an auxiliary page on the screen of the electronic terminal in a bring-to-front manner. The virus program is cleaned up based on the identifier information.

Abstract: An information processing apparatus performs control to make a transition to a power-saving state, confirms whether a program stored in the information processing apparatus is authentic, in association with the transition to the power-saving state, and stores the program confirmed to be authentic in a volatile memory during the power-saving state.

Abstract: An apparatus to facilitate security within a computing system is disclosed. The apparatus includes a storage drive, a controller, comprising a trusted port having one or more key slots to program one or more cryptographic keys and an encryption engine to receive the cryptographic keys via the one or more key slots, encrypt data written to the storage drive using the cryptographic keys and decrypt data read from the storage drive using the cryptographic keys.

Abstract: According to one embodiment, a system receives an intermediate result generated by a compiler based on source code, where the intermediate result includes one or more vulnerability indicators indicating one or more lines of the source code being potentially vulnerable. The system performs a grey box fuzzing on a first executable code generated from the intermediate result to generate a first set of seed inputs. The system calculates a vulnerability score for each of the seed inputs of the first set based on the vulnerability indicators for the lines of the source code reachable but has not been explored by the grey box fuzzing. The system selects one of the seed inputs in the first set having a highest vulnerability score. The system performs a concolic execution using the selected seed input as priority, the concolic execution being performed on a second executable code generated from the intermediate result.

Abstract: A computer-implemented method for detecting vulnerabilities in microarchitectures. A non-limiting example of the computer-implemented method includes creating a simulation for execution on a model of a microarchitecture, the simulation including a set of instructions and a placeholder for holding a piece of secret data. The computer-implemented method executes the simulation a first time on the model of the microarchitecture with a first piece of secret data stored in the placeholder and stores a first output of the first executed simulation. The computer-implemented method executes the simulation a second time on the model of the microarchitecture with a second piece of secret data stored in the placeholder and stores a second output of the second executed simulation. The computer-implemented method compares the first output with the second output and provides an indication of a microarchitecture vulnerability when there is a difference between the first output and the second output.

Abstract: Data storage nodes that participate in a requested data statistical analysis as participant data storage nodes are determined and divided into a plurality of node sets. Data stored in each participant data storage node associated with a particular node set is encrypted, where the encrypted data is divided into a number of fragments at least equal to a number of participant data storage nodes associated with the particular node set. Each participant data storage node sends a portion of the encrypted data to each of the other participant data storage nodes within the particular node set. Each participant data storage node processes received encrypted data and data remaining on the particular participant data storage node to obtain a processing result. Each participant data storage node sends the processing result to a proxy node, wherein the proxy node performs data statistical analysis based on the processing result.

Abstract: A method for executing a falsification check of data transmitted from a data recording device including a processor and an A/D converter. The method includes Step Sa0 of preparing a public-secret key pair; Step Sa1 of inputting an analog signal obtained by a sensor into the A/D converter, while the A/D converter generates whole digital data consisting of signal data and noise data; Step Sa2 of computing a hash value for the signal data using a hash function; Step Sa3 of encrypting the hash value with either of the secret key or the public key; Step Sa4 of writing the encrypted hash value into a noise area where the noise data is recorded, Step Sb2 of authenticating the received data; and Step Sb4 of determining whether the data transmitted from the data recording device is falsified.

Abstract: Methods and apparatus for invoking a security feature of a computing device display in response to detecting an onlooker based on depth data are disclosed. An example apparatus includes an onlooker detector and a security manager. The onlooker detector is to detect an onlooker based on depth sensor data collected by a depth sensor associated with a computing device. The security manager is to automatically invoke a security feature of a display of the computing device in response to detection of the onlooker by the onlooker detector.

Abstract: An information processing apparatus for use by a plurality of users is provided. The information processing apparatus includes a memory; and a processor coupled to the memory and configured to authenticate logins of the plurality of users, register, on a list of participants, the plurality of users whose logins have been authenticated, perform recognition of each of the plurality of users registered on the list of participants, and restrict access to a resource owned by a given user while keeping the given user registered on the list of participants, in response to determining that the given user satisfies a predetermined condition based on a result of the recognition.

Abstract: The disclosed computer-implemented method for identifying privacy leakage information may include (1) identifying, at the computing device, at least one informative word in a digital text and (2) performing a security action that identifies privacy leakage information, where the security action includes (A) determining, for at least one identified informative word, a type of privacy leakage and a respective confidence score indicating a probability the identified informative word causes the type of privacy leakage, (B) determining, using the respective confidence score, a combined confidence score for each respective element within a level of detail to display, and (C) displaying, on a display device, the combined confidence score for each respective element within the level of detail to display. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: An apparatus in an illustrative embodiment comprises at least one processing device comprising a processor coupled to a memory. The at least one processing device is configured to receive a request comprising one or more identifiers of a particular user device detected by at least one access point in communication with the user device, to retrieve a profile of the particular user device based at least in part on the one or more identifiers of the request, to determine from the retrieved profile contact information of the user device, to generate based at least in part on the retrieved profile at least one message requesting at least one privacy-related permission from a user associated with the user device, and to send the message to the user device over a communication channel determined from the contact information. Other illustrative embodiments include methods and computer program products.

Abstract: Systems and methods are provided for anonymizing navigation data and generating an autonomous vehicle road navigation model with the anonymized data. A navigation system may receive data relating to a road section from a vehicle. The system may determine one or more motion representations associated with the vehicle and one or more road characteristics associated with the road section. The system may assemble navigation information relative to a first portion and relative to a second portion of the road section. The first and second portions may be spatially separated by a third portion. The system may transmit the navigation information relating to the first and second portions and forego transmitting information relating to the third portion. A server may receive the transmitted navigation information and assemble an autonomous vehicle road navigation model. The server may transmit the navigation model to one or more vehicles for use in autonomous navigation.

Abstract: Technologies are disclosed for a computing system that allows users to control the disclosure of their identities during communication sessions. Users can control the disclosure of their identities with respect to certain types of shared content. In one mode of operation, a user can share content anonymously. In another mode of operation, identity may be revealed when certain conditions are met or revealed to only certain other users. For example, the identity of a user who shared a comment anonymously may be revealed if multiple other users agree with that comment. In another mode of operation, the user's identity is revealed to all other users such as in a live video stream. The computing system can control display of users' identities based on user instructions or based on triggering conditions. A user interface (UI) can show content items that identify a user together with content items that are shared anonymously.

Abstract: Provided is a method according to one embodiment of the present invention comprising the steps of: (a) a server generating, by means of a hash function, a message digest (MD) of a particular file when a request for authenticating same is obtained; (b) when an MD encoded with a private key of a particular user is obtained, and if (A) information for the MD, which was encoded with the private key of the particular user, decoded with a public key of the particular user matches (B) the MD generated in step (a), then the server registering, in a database, a hash value of the MD encoded with the private key of the particular user and a private key of the server; and (c) the server obtaining a transaction ID.

Abstract: A memory system in an integrated circuit and a method of operation. The system includes multiple magnetic tunnel junction (MTJ) structures, each MTJ structure storing a logic value according to a resistive state. A selection switch device associated with a respective MTJ structure is activated to select one of the multiple MTJ structures at a time. An output circuit is configured to sense the resistive state of a selected MTJ structure, the output circuit having a selectable input reference resistance value according to a selected first reference resistance or a second reference resistance value, and outputting a first logic value of the selected MTJ structure responsive to a resistive state of the MTJ structure and a selected first resistance reference value, or alternately outputting a second logic value of the selected MTJ structure responsive to the resistive state of the MTJ structure and a selected second resistance reference value.

Abstract: An optical electromagnetic radiation (EM) emitter and receiver are located upon a printed circuit board (PCB) layer and are optically connected to an optical security pathway that is between a pair of signal traces. A predetermined reference flux is determined, the reference flux being the expected EM transmitted by the optical security pathway and received by the receiver. When the PCB is subject to an unauthorized access thereof (e.g., drilled, sawed, cut, etc.), the optical EM transferred by optical security pathway is altered. An optical monitoring device that monitors the flux of the optical EM received by the receiver detects a change in flux, in relation to the reference flux, and passes a tamper signal to one or more computer system devices to respond to the unauthorized access. For example, one or more cryptographic adapter card or computer system functions or secured crypto components may be disabled.

Abstract: Embodiments are directed to post quantum public key signature operation for reconfigurable circuit devices. An embodiment of an apparatus includes one or more processors; and a reconfigurable circuit device, the reconfigurable circuit device including a dedicated cryptographic hash hardware engine, and a reconfigurable fabric including logic elements (LEs), wherein the one or more processors are to configure the reconfigurable circuit device for public key signature operation, including mapping a state machine for public key generation and verification to the reconfigurable fabric, including mapping one or more cryptographic hash engines to the reconfigurable fabric, and combining the dedicated cryptographic hash hardware engine with the one or more mapped cryptographic hash engines for cryptographic signature generation and verification.

Abstract: A device can be identified using a manufacturing characteristic in the device. Power consumption data associated with a device is received. A power model can be fitted to the power consumption data and at least one parameter is determined based on fitting. A fingerprint of the device can be created based on at least one parameter.

Abstract: A first and a second computing environments are generated on a computer system based on a state of a logical storage unit of the computer system. The computing environments are associated with pieces of storage space located outside the logical storage unit. A write operation addressing the logical storage unit in one computing environment is directed to a piece of storage space associated with that computing environment.

Abstract: The present invention relates to a security module and to a corresponding method for operating the security module for realizing a secure memory management. The subject matter according to the invention takes into account existing hardware components, for example a smart card, and can thus be integrated into existing smart cards with particularly little technical effort. The secure memory management prevents attacks against memory segments of the data memory.

Abstract: Techniques are disclosed relating to securing an accessory interface on a computing device. In various embodiments, a computing device detects a connection of an accessory device to an accessory interface port and, in response to the detected connection, evaluates a policy defining one or more criteria for restricting unauthorized access to the accessory interface port. Based on the evaluating, the computing device determines whether to disable the accessory interface port to prevent communication with the connected accessory device. In some embodiments, the computing device includes an interconnect coupled between the processor and the accessory interface port, and the interconnect includes a hub circuit configured to facilitate communication between a plurality of devices via the interconnect. In some embodiments, the computing device, in response to determining to disable the accessory interface port, instructs the hub circuit to prevent traffic from being conveyed from the accessory interface port.

Abstract: A method and system for optimizing structural parameters of an electromagnetic device is described that includes performing operations. The operations include performing a time-forward simulation of a field response in a simulated environment describing the electromagnetic device and extracting decomposition components from the field response to compute a loss value. The operations further include backpropagating the loss value backwards in time using the decomposition components to determine an influence of changes in the structural parameters of the electromagnetic device on the loss value. The operations further include generating a revised description of the electromagnetic device by updating the structural parameters to reduce the loss value.

Abstract: A computer-aided design system enables physical articles to be customized via printing or embroidering and enables digital content to be customized and electronically shared. A user interface may be generated that includes an image of a model of an article of manufacture and user customizable design areas. Customization permissions associated with a selected design area are accessed. User provided content to be used in customizing a design area may be analyzed in real time or in batch mode using a trained engine to determine if it complies with one or more rules. If the user provided content satisfies a corresponding rule, manufacturing instructions and a design file may be transmitted to a printing system.

Abstract: One embodiment of the present invention sets forth a technique for evaluating productive congestion within an architectural space design. The technique includes generating a space analysis graph for the architectural space design. The technique further includes determining a traversal value for at least a first node of a plurality of nodes included in the space analysis graph, determining a centroid of the plurality of nodes, determining a path within the space analysis graph from at least the first node to the centroid, and determining a productive congestion metric based on at least the path from the first node to the centroid and the traversal value of the first node.

Abstract: Gear motion of gearboxes can be calculated. A system includes a gear box, a sensor, and at least one data processor. The gear box includes a structure with a plurality of gears. The sensor is operatively coupled to the gear box and is configured to detect an operational parameter associated with a first gear of the gear box. The at least one data processor is configured to: receive, from the sensor, data characterizing the detected operational parameter associated with the gear box; generate a mesh pair matrix for the plurality of gears based on data characterizing the structure of the gear box; determine, from the mesh pair matrix, a calculated value of the operational parameter of the first gear of the plurality of gears; determine, based on the calculated value and the detected value of the operational parameter, an operational metric of the first gear; and provide the operational metric.

Abstract: The systems and methods described herein disclose vehicle positioning and benefit distribution in a vehicle platoon. As described here, vehicles are organized in the platoon based on maximum benefit to the platoon as a whole. The systems and methods then determine the difference in benefit received between each platoon member and equalize between members. The systems and methods can include determining cumulative travel benefits for a group of vehicles. A platoon organization can then be created to achieve the cumulative travel benefits. A platoon can then be created using the platoon organization. The benefit distribution of the platoon can then be determined. Then, the actualized benefits can be apportioned to the one or more platoon members based on the benefit distribution.

Abstract: A system for fault detection and diagnostics of equipment. The system may also be capable of disaggregation and/or virtual submetering of energy consumption by equipment, such as that of heating, ventilation and air conditioning, lighting, and so forth, in a building. Vibration and current sensors, along with one or more algorithms, may be utilized for fault detection and diagnostics of equipment. Models may be developed to aid in deducing energy consumption of individual components of equipment, and the like, for a building.

Abstract: Apparatuses, methods, and systems for generating simulations of physical variables of a physical system are disclosed. A method includes fusing observation data and numeric simulation data. The fusing includes preprocessing the observational data and the numeric simulation data to remove inconsistencies of the observational data and the numeric simulation data, processing the preprocessed observational data and the numeric simulation data to extract interpretable structures and patterns within that data using ground truth and labeled information to create domain interpretable data, normalizing the preprocessed observation data, the numeric simulation data, and the domain interpretable data layers.

Abstract: Systems and methods for application specific integrated circuit design using Chronos Links are disclosed. A Chronos Link is an ASIC on-chip and off-chip interconnect communication protocol that allows interfaces to transmit and receive information. The protocol may utilize messages or signals to indicate the availability and/or readiness of information to be exchanged between a producer and a consumer allowing the communication to be placed on hold and to be resumed seamlessly. A method includes inserting gaskets and channel repeaters connected to interfaces of multiple intellectual property (IP) blocks in order to replace traditional links with Chronos Links; performing simplified floorplanning; performing simplified placement; performing simplified clock tree synthesis (CTS) and routing; and performing simplified timing closure.

Abstract: A computer-implemented method performed by one or more computing nodes for simulating a gate operation of quantum computing is disclosed. In the method, a problem having 2n size is divided into a plurality of sub-problems, each of which has 2m size. A first index table for storing a first identifier is prepared for each sub-problem. In response to a request for a gate operation involving exchanges of quantum amplitudes that are designated by a target qubit at least in part, a determination is made as to whether a first condition regarding at least the target qubit and m is satisfied or not. In response to the first condition being satisfied, corresponding first identifiers in the first index table are swapped in place of the exchanges of the quantum amplitudes.

Abstract: A method for selecting components in a radiation tolerant electronic system, comprising, determining ionizing radiation responses of COTS devices under various radiation conditions, selecting a subset of the COTS devices whose radiation responses satisfy threshold radiation levels, applying mathematical models of the COTS devices for post-irradiation conditions to determine radiation responses to ionizing radiation; implementing a radiation-tolerant architecture using COTS devices from the selected subset, the implemented circuit may be tested for robustness to ionizing radiation effects without repeated destructive tests of the hardware circuit by using the mathematical models for simulating response to the ionizing radiation, and implementing a multi-layer shielding to protect the implemented circuit under various radiation conditions.

Abstract: A method includes determining a cell loading of a cell in an integrated circuit (IC) layout diagram. Based on the determined cell loading, a power parameter associated with the cell is determined. In response to the determined power parameter exceeding a design criterion, at least one of altering a placement of the cell in the IC layout diagram or modifying a power delivery path to the cell is performed. At least one of the determining the cell loading, the determining the power parameter, the altering the placement of the cell, or the modifying the power delivery path is executed by a processor.

Abstract: At least one method, apparatus and system disclosed involves a circuit layout for an integrated circuit device comprising a plurality of wider-than-default metal formations for a functional cell. A design for an integrated circuit device is received. The design comprises at least one functional cell. A first pair of wide metal formations are provided. The first pair of wide metal formations comprise a first metal formation and a second metal placed about a first cell boundary of the functional cell for providing additional space for routing, for high-drive routing, and/or for power routing.

Abstract: A method of designing a 3D Integrated Circuit, the method including: performing partitioning to at least a logic strata, the logic strata including logic, and to a memory strata, the memory strata including memory; then performing a first placement of the memory strata using a 2D placer executed by a computer, where the 2D placer is a Computer Aided Design (CAD) tool for two-dimensional devices, where the 3D Integrated Circuit includes through silicon vias for connection between the logic strata and the memory strata; and performing a second placement of the logic strata based on the first placement, where the memory includes a first memory array, where the logic includes a first logic circuit controlling the first memory array, where the first placement includes placement of the first memory array, and the second placement includes placement of the first logic circuit based on the placement of the first memory array.

Abstract: Within a layout of a first surface in a flip chip configuration, a bump restriction area is mapped according to a set of bump placement restrictions, wherein a first bump placement restriction specifies an allowed distance range between a bump and a qubit chip element in a layout of the first surface in the flip chip configuration. An electrically conductive material is deposited outside the bump restriction area, to form the bump, wherein the bump comprises an electrically conductive structure that electrically couples a signal from the first surface and is positioned according to the set of bump placement restrictions.

Abstract: An improved approach is described to implement a new type of widget that obtains its context information from another widget. For example, when a contextual widget is dropped into a drop zone, that contextual widget would obtain its context data from its parent drop zone widget. Also described is an improved for visually implementing a web page layout, where the web page layout includes a nested drop zone.

Abstract: Systems, methods, and computer-readable media provide content items to clients. In one implementation, a system stores data identifying a plurality of cache servers, the cache servers storing the content items for download by a plurality of clients. The system receives a request from a first one of the clients to download one of the content items. The system selects one or more of the cache servers for providing the requested content item to the first client. The system transmits identifiers of the selected one or more cache servers to the first client, and transmits instructions to the first client. The instructions are operable, when executed by the first client, to determine whether the selected one or more cache servers have a local copy of the requested content item. When the first client determines that a first one of the selected one or more cache servers has a local copy of the requested content item, the first client downloads the requested content item from the first selected cache server.

Abstract: The present disclosure describes an electronic document review method comprising the steps of displaying at least a first document section of said document in a first display window, displaying at least a second document section of said document in a second display window, and arranging said second window so that said second window is arranged within the border of the first window. Such a method allows for efficient review of electronic documents thereby enabling a user to reduce the amount of time the user spends for reviewing an electronic document. The disclosure also provides an electronic document review system.

Abstract: In some embodiments, an option to lock one or more associated cells is provided with respect to each different group of cells in a single sheet of a spreadsheet application. One or more locked cells of a group of cells do not scroll out of view at least while a portion of the group of cells is viewable in a given display view.

Abstract: Dynamic templates include regions that provide behavior based upon a purpose or desired outcome. Templates and regions can modify the logical representations associated with objects to create semantic context for the objects. Templates and regions can also generate visual representations of objects based upon their logical representations. The visual representation utilized by a template or region can be selected manually or based upon the capabilities of a computing device. Objects contained within regions can be sorted, filtered, arranged, and projected based on their associated logical representations.

Abstract: A system and method of identifying a changed element within a target web page is disclosed. A pre-region longest matching segment of the pre-region that matches a pre-region segment of a pre-region of a source web page is identified within a pre-region of the target page. A post-region longest matching segment of the post-region that matches a post-region segment of the post-region of a source web page is identified within a post-region of the target page. The changed element in the target web page is identified that is between the pre-region longest matching segment and the post-region longest matching segment in response to the pre-region longest matching segment being determined to be within a pre-defined distance of the post-region longest matching segment.