Hrl Laboratories, LLC

Alexei Kopylov

Aleksey Nogin

George Kuan

Jiejun Xu

Tsai-Ching Lu

Kang-Yu Ni

Shane M Roach

Described is a system for detecting adversarial activities based on detection of activity patterns in a multiplex network. The system detects one or more subnetworks that are matches to a template network of template nodes. The subnetworks are detected by filtering multiplex network nodes according to a filtering criteria that utilizes monotone function properties in the multiplex network. Nodes that do not meet the filtering criteria are eliminated, resulting in a list of candidate nodes in the multiplex network. The one or more subnetworks are formed from the list of candidate nodes. An activity pattern corresponding to a pattern of adversarial activity is identified in the one or more subnetworks. Based on the identified activity pattern, an alert of adversarial activity is generated and transmitted.

Filtering strategies for subgraph matching on noisy multiplex networks

Described is a system for producing indicators and warnings of adversarial activities. The system receives multiple networks of transactional data from different sources. Each node of a network of transactional data represents an entity, and each edge represents a relation between entities. A worldview graph is generated by merging the multiple networks of transactional data. Suspicious subgraph regions related to an adversarial activity are identified in the worldview graph through activity detection. The suspicious subgraph regions are used to generate and transmit an alert of the adversarial activity.

Computational framework for modeling adversarial activities

Described is a system for synthesis of cryptographic software from specification. During operation, the system generates a first level formalization code of a cryptographic protocol based on a user input protocol specification and a library of transformation rules. A second level formalization code is then generated by implementing communication protocols to the first level formalization code. A third level formalization code subsequently generated by implementing cryptographic primitives to the second level formalization code. Finally, the third level formalization code is encoded on a computer readable medium as an executable code.

System and method for synthesis of correct-by-construction cryptographic software from specification

Described is a system for translating security objectives to properties of software code. The system receives a software code and a description of user security objectives written in a high-level language. Using a set of inference rules, the user security objective is translated into a formal security objective. The formal security objective is adapted into a low-level property to fit a target program having software code. Finally, it is determined whether the user objective has been satisfied by analyzing the software code with respect to the low-level property.

System and method for translating security objectives of computer software to properties of software code

Described is a language-based system for detecting function calls. The system detects missing authorization and authentication functionality in computer software source code via typechecking. New classes of software vulnerability in the computer software source code are detected.

Language-based missing function call detection

The present invention relates to a system for detecting source code security flaws through analysis of code history. First, the system obtains a previously inferred information flow policy, the previously inferred informational flow policy being based on a previous source code revision. The system then determines changes in source code between a previous source code revision and a current source code revision. Finally, a current inferred information flow policy is generated by modifying the previously inferred information flow policy to reflect the changes in source code. If the changes in the source code do not comply with the previously inferred information flow policy, then the changes are reported to a developer.

System for detecting source code security flaws through analysis of code history

The present invention relates to a system for information flow security inference through program slicing. In operation, the system receives an information flow security policy for source code security, refines the information flow security policy, and analyzes the source code to provide refinements as constraints, such that if there is a source code violation of the constraints, the source code is identified for inspection and removal.

System for information flow security inference through program slicing

Described is a system, method, and computer program product for preventing security flaws in untrusted computer source code by implementing information flow security in an existing programming language through use of an information flow security library. Confidentiality and integrity are encoded separately into the security information flow library. A security policy written in the host programming language is typechecked with a host programming language typechecker algorithm. Additionally, an untrusted module written in a restricted subset of the host programming language is typechecked with the host programming language typechecker algorithm. The untrusted modules cannot access confidential data in the host programming language. Typechecking of the untrusted modules enforces the security policy with the security information flow library.

Growing community of inventors

Pasadena, CA, United States of America

Alexei Kopylov