Abstract: A system, method, and computer-readable medium are disclosed for performing an entity behavior cataloging operation. The entity behavior cataloging operation includes: identifying a plurality of security related activities, the plurality of security related activities being based upon observables from an electronic data source; analyzing the plurality of security related activities, the analyzing identifying a set of entity behaviors associated with the plurality of security related activities; and, performing a security operation via a security system, the security operation accessing entity behavior catalog data stored within an entity behavior catalog based upon the set of entity behaviors associated with the plurality of security related activities, the entity behavior catalog providing an inventory of entity behaviors for use when performing the security operation.

Abstract: In an embodiment, a system is provided in which the private key is managed in hardware and is not visible to software. The system may provide hardware support for public key generation, digital signature generation, encryption/decryption, and large random prime number generation without revealing the private key to software. The private key may thus be more secure than software-based versions. In an embodiment, the private key and the hardware that has access to the private key may be integrated onto the same semiconductor substrate as an integrated circuit (e.g. a system on a chip (SOC)). The private key may not be available outside of the integrated circuit, and thus a nefarious third party faces high hurdles in attempting to obtain the private key.

Abstract: In one embodiment, an apparatus includes a channel filter and a security processor. The security processor is to: receive a plurality of device access control policies from a protected non-volatile storage of a platform; determine whether the plurality of device access control policies are verified; program the channel filter with a plurality of filter entries each associated with one of the plurality of device access control policies based on the determination; and remove a security attribute of the security processor from a policy register of the channel filter, to lock the channel filter for a boot cycle of the platform. Other embodiments are described and claimed.

Abstract: A content management system for collecting files from one or more submitters in a collection folder. A collector, who generates the collection folder, can invite one or more submitters to submit one or more files to the collection folder in response to a public file request. The one or more submitters have limited rights to the collection folder. The limited rights can include uploading rights and prohibiting a submitter from viewing files that other submitters associated with the collection folder submitted. Thus, the collection folder is able to store files from the one or more submitters, but prevent them from viewing other's submissions.

Abstract: In the embodiments described herein, partially encrypted print jobs are described which include unencrypted print job commands and encrypted print data objects. One embodiment comprises a print controller that includes a memory and at least one processor. The memory stores a print job comprising one or more print data objects, and print job commands that define data boundaries in the print job for the print data objects. The at least one processor processes the print job commands to identify the print data objects for the print job based on the data boundaries, encrypts the print data objects using a key while the print job commands remain unencrypted, generates a partially encrypted print job comprising the encrypted print data objects and the unencrypted print job commands, and provides the partially encrypted print job.

Abstract: The techniques utilize an authentication process to authenticate the user to view protected data and an image monitoring process to monitor the field of view of the image detection component. When a user requests access to the protected data, the authentication process is activated. After a user is authenticated, the data may be displayed and an image monitoring process is activated and may use the image detection component to monitor the field of view to determine whether the user is actively viewing the data or that an additional person is in the field of view. When either event is detected, the protected data is concealed at the display of the user device.

Abstract: Secure access to data within a communications platform is provided on a need-to-know basis. Inputs provided at the communication platform are intercepted and cognitively analyzed to determine context of the interaction and related data requirements. In response, data access rules are generated and/or retrieved and applied at an access gateway. As data requests as received from the called party from within the communications platform, the data access rules are applied to the request to determine if a match exists and, if so, data access rules-based access is provided to the data. In response to determining the context of the interaction, a context access token is generated and communicated to a virtual database assembler, which assembles a virtual database that only contains data responsive to the context of the interaction.

Abstract: The present disclosure generally relates to managing content item collections. A collection management system receives a request for collection item metadata associated with a collection item. Collection management system obtains a content item identifier corresponding to the collection item identifier. Collection management system requests content item metadata from a content management system. Collection management system receives from the content management system content item metadata corresponding to the content item identifier. Collection management system filters the content item metadata to remove a portion of the content item metadata comprising privileged information. Collection management system retrieves collection item metadata using the collection item identifier. Collection management system adds the filtered content item metadata to the collection item metadata.

Abstract: A block chain defining authority and access to confidential data may not be encrypted, and the access to the block chain can be regulated by the block chain itself and an access control server operating in an enterprise information technology (IT) environment. To incorporate authority defined in multiple sources, such as the block chain and the access control server, a token can be created containing multiple layers of permissions, i.e. constraints, coming from multiple sources. Each additional permission attenuates the authority granted by the token. When a processor controlling the access to the block chain receives the token, the processor can check the validity of the token and the authority granted by the token to determine whether the requester is authorized to access at least a portion of the block chain.

Abstract: A breach detection engine detects and mitigates the effects of breaches across one or more data sources. An index is generated based on one or more data sources and the index is queried using keywords indicative of potential breaches. A database of potential breaches is populated based on the query of the index. The potential breach database is queried using keywords associated with a system identity (e.g., a third party). A likelihood of a candidate breach is identified based on a set of breach criteria weights. A network node associated with a candidate breach determined to be an actual breach is identified for isolation or for the performance of one or more additional security actions.

Abstract: Provided are a system and a method for controlling transaction data access. A system for controlling transaction data access comprising: a transaction management module configured to determine a plurality of security levels for transaction data; a data encryption module configured to perform multiple level encrypting the transaction data according to the plurality of security levels; and a data storage module configured to store the encrypted data as a block, and provide the block to a peer-to-peer (P2P) network.

Abstract: A first system receives an encrypted data vector representing a text search query from a second system and second encrypted data from a third system that may include a first vector and a second vector representing text of an electronic document. The first system may multiply the vectors by a random vector. The first system may determine a first difference between the encrypted data vector and the first vector, and a second difference between the encrypted data vector and the second vector. The first system may determine a product of the first and second difference. The first system may send the product to the third system and then receive a value representing the decrypted difference. The first system may determine if the value satisfies a condition and send the result of the determination to the second system.

Abstract: In an information management system that manages encrypted personal information on a user stored in a storage device, a personal information appropriateness/inappropriateness determination section determines whether or not the personal information stored in the storage device is appropriate when access permission information is received from a user terminal used by the user, the access permission information instructing that a requesting entity requesting the personal information be permitted to access the personal information. A personal information access management section enables the requesting entity to access the personal information stored in the storage device when it is determined by the personal information appropriateness/inappropriateness determination section that the personal information stored in the storage device is appropriate.

Abstract: Methods, systems, and devices for leveraging data already collected on a user in a secure and private manner, in particular to verify user credentials for third parties. The methods, systems, and devices innovate beyond traditional security and privacy platforms in computer systems by processing the data to create a useable metric for the purposes of the third parties, in which the useable metric preserves the security and privacy of the underlying data.

Abstract: Disclosed are a method and system for providing privacy in a virtual space. The method of providing privacy in a virtual space includes setting a privacy distance for guaranteeing a personal space of a user agent in a virtual space, and filtering information exposable to the user agent in the virtual space based on the privacy distance.

Abstract: Embodiments for providing demographic reach with anonymity by a processor. User data access may be managed via a data access agent by generating a unique user privacy profile having a selected level of anonymity for each relationship between a user and an application service.

Abstract: A compromised data exchange system extracts data from websites using a crawler, detects portions within the extracted data that resemble personally identifying information (PII) data based on PII data patterns using a risk assessment module, and compares a detected portion to data within a database of disassociated compromised PII data to determine a match using the risk assessment module. A risk score may be assigned to a data item within the database in response to determining the match. In some embodiments, URL data may also be detected in the extracted data. The detected URL data represents further web sites that can be automatically crawled by the system to detect further PII data.

Abstract: Techniques for management of sensitive data using static code analysis are described. A method of management of sensitive data using static code analysis includes obtaining a representation at least a portion of code, statically analyzing at least the portion of code to generate one or more candidate vectors based at least on one or more patterns, sending the one or more candidate vectors to a sensitive data model, and receiving an inference response indicating, for each of the one or more candidate vectors, whether at least a portion of the candidate vector includes sensitive data and a corresponding confidence score.

Abstract: A system may use memory tagging for side-channel defense, memory safety, and sandboxing to reduce the likelihood of successful attacks. The system may include memory tagging circuitry to address existing and potential hardware and software architectures security vulnerabilities. The memory tagging circuitry may prevent memory pointers from being overwritten, prevent memory pointer manipulation (e.g., by adding values), and increase the granularity of memory tagging to include byte-level tagging in cache. The memory tagging circuitry may sandbox untrusted code by tagging portions of memory to indicate when the tagged portions of memory include contain a protected pointer. The memory tagging circuitry provides security features while enabling CPUs to continue using and benefiting from speculatively performing operations.

Abstract: Methods, systems, and apparatuses, including computer storage media and hardware security modules, for performing batch cryptography on hardware security modules. A hardware security module can receive a request to perform one or more cryptographic operations. The request can include a batch data structure storing a plurality of data elements. The hardware security module can unbatch the plurality of data elements, perform one or more cryptographic operations on the plurality of data elements to generate a plurality of outputs, generate an output batch data structure storing the plurality of outputs, and transmit the output batch data structure in response to the request. The request and the batch data structure can be formed in accordance with a batch hardware security module application program interface (API) implemented by the hardware security module.

Abstract: A method may include retrieving, by one or more processors of an industrial automation component, one or more parameters from a configuration file stored in a memory of the industrial automation component and one or more additional parameters from a vendor certificate stored in the memory. The vendor certificate is cryptographically signed by an entity. The method may also include determining, by the processors, whether the parameters from the configuration file match the additional parameters from the vendor certificate, and in response to determining that the parameters from the configuration file do not match the additional parameters from the vendor certificate, transmitting, by the processors, an indication that the industrial automation component is an unauthorized component to a display device for display, disabling the industrial automation component, or both.

Abstract: A device configured to implement multiple locks to increase security of assets associated with the device including an embedded system, a multi-lock mechanism configured to provide a plurality of locks to prevent an authorized access to the assets associated with the embedded system, each of the plurality of locks of the multi-lock mechanism having an different unlock parameters, a memory configured to securely store at least one of the lock parameters of the plurality of locks of the multi-lock mechanism, the memory further configured to securely store at least one of the unlock parameters of the multi-lock mechanism, and the embedded system further configured to provide access to the assets after each of the lock parameters of the plurality of locks of the multi-lock mechanism is provided the unlock parameters of the multi-lock mechanism.

Abstract: Methods, apparatuses, and non-transitory machine-readable media associated with sharing data with a particular audience are described. Examples can include receiving first data at a processing resource, determining whether the first data comprises a combination of bits associated with text or an image, or both, and comparing the combination of bits to second data stored on a memory resource. Examples can include identifying one or more words or one or more images represented by the first data, or both, based on the comparison and assigning to the first data first metadata representative of a first security categorization and a first confidence level and second metadata representative of a second security categorization and a second confidence level Examples can include transmitting an output that comprises the first data or third data that comprises a modified combination of bits relative to the combination of bits of the first data.

Abstract: A method of displaying content items, for example message items in a messaging application or service, is disclosed. The method comprises receiving encrypted content items in a chronological sequence; decrypting the content items; causing display of a display sequence, in order of the chronological sequence, of a respective place holder in place of each of the decrypted content items, and, in response to a user input, causing display of the respective content item in place of one or more of the place holders. Each place holder has an appearance of a scrambled version of the respective content item. The display sequence may be contiguous in received items or sent content items may be interleaved with received content items in the display sequence, in which case sent content items may be displayed with place holders in the same way as received items. A corresponding system and corresponding computer readable medium or media are also disclosed.

Abstract: The present invention discloses an optimization method for a screen surface dynamic load of a vibrating screen. The method includes the following steps: step 1. selecting design variables, and establishing an experimental matrix; step 2. performing a response curved surface experiment; step 3. establishing two double-objective optimization models and solving the same to obtain two groups of Pareto solution sets, wherein the solution sets respectively represent screening efficiency optimization paths of the vibrating screen under the conditions of a high screen surface dynamic load and a low screen surface dynamic load; and step 4. calculating an optimization space for a screen surface dynamic load under a high screening efficiency. According to the method of the present invention, the screen surface dynamic load can be directly reduced, and the service life of the screen surface and the whole vibrating screen is prolonged.

Abstract: The present invention relates to a method and a system for processing building energy information. The method includes the following steps: inputting data of a building information model into building energy simulation software; automatically selecting a building category or manually selecting a building category from a group of building categories provided by the building energy simulation software; in response to the selected building category, inputting a plurality of parameters into a lookup table of the building energy simulation software in accordance with a database of the building energy simulation software; and generating an estimation of a building's energy consumption through a calculation by the building energy simulation software based on the parameters.

Abstract: System and method to build and score predictive model for numerical attributes are provided. The system includes a memory and a processing subsystem. The processing subsystem is configured to select one or more numerical variables from the plurality of data sets based on a plurality of parameters, to apply feature engineering and transformation on the one or more numerical variables, to perform time series forecasting on the one or more numerical variables based on the plurality of features extracted, to evaluate and select appropriate prediction technique based a regression technique based on a plurality of elements, to build a prediction model, to score the built prediction model based on the performed time series forecasting and an evaluated regression technique and to predict the built prediction model based on an obtained score. Further, the system uses the plurality of parameters and the prediction method to score and predict the prediction model.

Abstract: The disclosure provides a linearization identification method for a hysteresis model of piezoceramics based on Koopman operators, and belongs to the field of precision positioning. In order to solve the problem of hysteresis of a piezoelectric actuator in practical application, the disclosure further provides the linearization identification method for the hysteresis model of the piezoceramics based on Koopman operators. The method of the disclosure includes: Step I, building a structure of the hysteresis model of the piezoceramics; Step II, determining parameters of the hysteresis model of the piezoceramics; Step III, obtaining a great amount of simulation data by using simulation software; Step IV, performing deep learning training based on Koopman operators; and Step V, determining a linearization model for the hysteresis model of the piezoceramics based on Koopman operators. The disclosure is applicable to piezoelectric actuator control and precision positioning.

Abstract: Systems and methods are disclosed for to generation of dynamic design flows for integrated circuits. For example, a method may include accessing a design flow configuration data structure, wherein the design flow configuration data structure is encoded in a tool control language; based on the design flow configuration data structure, selecting multiple flowmodules from a set of flowmodules, wherein each flowmodule provides an application programming interface, in the tool control language, to a respective electronic design automation tool; based on the design flow configuration data structure, generating a design flow as a directed acyclic graph including the selected flowmodules as vertices; and generating an output integrated circuit design data structure, based on one or more input integrated circuit design data structures, using the design flow to control the respective electronic design automation tools of the selected flowmodules.

Abstract: A computer-implemented method of generating an operation procedure for a simulation of a system, in particular a mechatronic system is disclosed. A source node has at least one source parameter (Ps) and a first simulation system with at least one first simulation node is determined, wherein the first simulation node includes at least one input parameter (Pi) and at least one output parameter (Pa). The first simulation node includes a simulation function for determining the output parameter (Pa) based on the input parameter (Pi) of the first node. When the input parameter (Pi) is available based on the source parameter (Ps), a global operation graph is built describing a link between the source node and the first simulation node for describing an operating procedure of the simulation of the system.

Abstract: A method of creating a fabricable segmented design for a physical device is provided. A computing system receives a design specification. The computing system optimizes an initial segmented design based on the design specification to create an improved segmented design. The computing system perturbs the improved segmented design to create a perturbed segmented design. The computing system optimizes the perturbed segmented design to create a second improved segmented design.

Abstract: An information processing apparatus specifies a first pattern indicating a first layer included in first circuit data. The information processing apparatus generates, based on first wiring included in a second pattern indicating a second layer that is adjacent to the first layer and a slit included in the first pattern, second circuit data by changing the first pattern to a third pattern including second wiring corresponding to the first wiring. The information processing apparatus generates, based on the second circuit data, training data for machine learning.

Abstract: Systems and methods for integrated circuit (IC) analysis using a multi-level data hierarchy implemented on a distributed compute and data infrastructure are described. An IC design may be represented using a set of storage areas, where each storage area may be stored in a contiguous block of storage and may correspond to a portion of the IC design. An analysis application may be executed on the IC design, where a subset of the set of storage areas that is used by the analysis application may be retrieved on-demand.

Abstract: Computer-based simulation of a device under test (DUT) corresponding to a user circuit design includes providing an adapter configured to couple to the DUT during the computer-based simulation (simulation). The adapter is configured to translate incoming high-level programming language (HLPL) transactions into DUT compatible data for conveyance to the DUT and translate DUT compatible data generated by the DUT to outgoing HLPL transactions. A communication server is provided that couples to the adapter during the simulation. The communication server is configured to exchange the incoming and outgoing HLPL transactions with an entity executing external to the simulation. A communication layer client is provided that is configured to execute external to the simulation and exchange the incoming and outgoing HLPL transactions with the communication server.

Abstract: This invention relates to a robust optimal design method for photovoltaic cells. Firstly, the deterministic optimal model is established, which is solved by Monte Carlo method to obtain the maximum output power value of optimization objective and its corresponding design variable value, and then the design variable value obtained from deterministic optimization is deemed as the initial point of the mean value of the robust optimal design variable. Later, the robust optimal model is solved by Monte Carlo method in order to obtain the mean value of design variable, and then appropriate materials and manufacturing techniques are selected for corresponding photovoltaic components according to the design variable obtained, so as to achieve the robust optimal design of photovoltaic cells. In fact, this invention improves the output stability and reliability of photovoltaic cells.

Abstract: A virtual fabrication environment for semiconductor device structures that includes the use of virtual metrology measurement data to optimize a virtual fabrication sequence is described. Further, calibration of the virtual fabrication environment is performed by comparing virtual metrology measurement data from a virtual fabrication run with a subset of measurements performed in a physical fabrication environment. Additionally, virtual experiments conducted in the virtual fabrication environment of the present invention generate multiple device structure models using ranges of process and design parameter variations for an integrated process flow and design space of interest.

Abstract: Various embodiments provide for failure mode analysis of a circuit design, which can be used as part of electronic design automation (EDA). In particular, some embodiments provide for failure mode analysis of a circuit design by determining a set of functional primitives of a circuit design component (e.g., cell at gate level) that contribute to a root cause logic for a specific failure mode.

Abstract: A computer-implemented method may be used for semantic navigation of content. The method may include determining a first content complexity level for a user, and presenting a first content to a user device operated by the user. The first content may be presented at the first content complexity level of the user. Additionally, the method may include receiving a navigation command from the user on a portion of the first content via the user device; and determining a second content at a second content complexity level based on the navigation command. The second content may convey the same information as the first content. Additionally, the method may include replacing the first content with the second content on the user device. The second content may be presented at the second content complexity level, and the second content complexity level may be different than the first content complexity level.

Abstract: One embodiment includes an apparatus, with materials having a text sub file with texts, an illustration sub file with illustrations, and a logic sub file with instructions for presenting at least a part of the materials. One embodiment includes materials with a logic sub file that can analyze an attribute of, and provide a response to, a user. Another embodiment is applicable to apparatus and methods using a limited voice recognition dictionary at least tailored for a piece of materials that includes illustrations. The piece of materials includes instructions. The another embodiment can also use a limited image dictionary. The apparatus can include a headset, and the illustrations can include a piece of audio. The apparatus can be implemented in a vehicle.

Abstract: A host-side system for displaying a web page includes at least one processing circuitry which discovers at least one micro frontend in web page code. Each micro frontends has a respective type, internal or external. Internal micro frontends are inline with the web page code and external micro frontends are hosted in a frame in the web page code. A host application is executed for rendering the web page. Data exchange between the host application and the micro frontends is managed using a micro frontend layer in accordance with the respective types of the micro frontends.

Abstract: Disclosed is a method for suggesting revisions to a document-under-analysis (“DUA”) from a seed database, the seed database including a plurality of original texts each respectively associated with one of a plurality of final texts. The method includes tokenizing the DUA into a plurality of statements-under-analysis (“SUAs”), selecting a first SUA of the plurality of SUAs, generating a first similarity score for each of the plurality of the original texts, the similarity score representing a degree of similarity between the first SUA and each of the original texts, selecting a first candidate original text of the plurality of the original texts, and creating an edited SUA (“ESUA”) by modifying a copy of the first SUA consistent with a first candidate final text associated with the first candidate original text.

Abstract: Systems and methods to briefly deviate from and resume back to amending a section of a note are disclosed. Exemplary implementations may: obtain audio information representing sound captured by an audio section of a client computing platform, such sound including speech from a user associated with the client computing platform; effectuate presentation of a graphical user interface that includes sections of the note; analyze the audio information to determine which individual ones of the spoken inputs are the primary spoken input or the deviant spoken input; determine, based on analysis, which section of the note to which the deviant spoken input is related; alternately amend, based on the determination, sections of the note by deviating from one section to another section and returning back to the one section for continued population; and effectuate, via the user interface, presentation of the alternating amendments to the sections of the note.

Abstract: Systems and methods of the present technology generally provide computer implemented assistance for data summary, including organizing and generating a summary of data selected form source documents. In accordance with the present technology, a user identifies a subset of information from one or more source documents, assigns an identifier to the user-identified information, and may add custom information. The user can repeat the identification and assignment steps using multiple source documents, as many times as desired. The system then analyzes and prioritizes the user-identified information and any custom information, and generates a formatted summary.

Abstract: A method, system and computer program product for improving understanding of comments on collections of data. A social media stream is monitored for comments to a container (e.g., photo album) and elements within the container (e.g., photographs). These comments are stored in a data structure along with an identification of the container or element of the container upon which the comments are directed. In response to a user selecting to view comments to an element within the container or the container itself, the data structure is searched for the comments to the selected element or container. Images of the container are then displayed in a fliptych manner, where the selected element or container is displayed in the center section of the fliptych. A list of comments is displayed in a comments section below the fliptych, where the list of comments includes highlighted comments directed to the selected element or container.

Abstract: A system and method for performing role-based user annotation of product documentation is disclosed. The system identifies first and second roles for first and second users, respectively; causes, based on the first role, a first user interface to display on a first client device to receive a first input associated with the default document from the first user; creates a first layer of annotation on the default document based on the first input; receives a request to access the document from the second user; determines, based on the first and second roles, whether to merge the first layer of annotation to the default document for generating an output document; causes a second user interface to display the output document on a second client device; and causes the first input and the output document to be applied for document performance analysis associated with one or more entities.

Abstract: The present disclosure describes a value referred to as a compound object that stores multiple values in a single cell, wherein those multiple values are organized according to a defined structure. The compound object may store multiple values according to a known defined data structure such as, for example, a record, vector, matrix, table, or array. In other embodiments, the compound object may store multiple values as any nested combination of any one of the known or user-defined data structures. Each of the values stored in the compound object are individually referenceable and can fully participate with spreadsheet functionality including calculations, referencing, and formatting.

Abstract: A method of processing data of a collaborative electronic document having a tabular structure includes identifying a first cell in the tabular structure of the collaborative electronic document, the first cell having a first cell identifier and including a formula having a first function call, the first function call including an argument comprising a plurality of formula elements, wherein the plurality of formula elements comprise a second cell identifier and a first string.

Abstract: A request for a page is received. A processor is used to provide an optimized version of the page at least in part by determining dynamically an optimized content element for the page based at least in part on a user attribute associated with the request and content performance data generated based at least in part on testing of alternative versions of the page with respect to other users having the user attribute. The provided optimized version of the page is selected from the alternative versions of the page based on the content performance data indicating that the selected version of the page is optimized for the other users having the user attribute.

Abstract: Disclosed is a machine learning-based media success prediction through plot summaries According to an embodiment, a method comprises performing preprocessing on text data including a plot summary, calculating a sentiment score from the preprocessed text data using a first model, generating first input data using the calculated sentiment score, generating second input data from the preprocessed data using a second model, and determining a candidate class of content corresponding to the plot summary by applying the first input data and the second input data to a pre-trained third model. The candidate class includes a first class indicating success and a second class indicating failure.

Abstract: In non-limiting examples of the present disclosure, systems, methods and devices for determining a language of a text string are presented. A language detection model may be maintained. The language detection model may comprise identities and weights for initial and final consonants, identities and weights for prefixes and suffixes, and identities and weights for vowel sequences, where each identity is derived from a training corpus. The weights may correspond to a frequency of a text unit in the corpus. A text string may be received and a match score between the text string and the language of the language detection model may be determined. The match score may be based on initial and final consonant scores, prefix and suffix scores, and/or vowel sequence scores for each word in the text string. If the match score meets a threshold value a follow-up action associated with the language may be performed.