International Business Machines Corporation

The United States of America As Represented by the National Security Agency

Angela Marie Schuett

Zhen Liu

Anton Viktorovich Riabov

Grant W Wagner

Pankaj Rohatgi

Paul Ashley Karger

Pau-Chen Cheng

Shai Halevi

Ronald Perez

Michael Steiner

Trent Ray Jaeger

Kay Schwendimann Anderson

Weifeng Chen

Genady Grabarnik

Ramakrishnan Srikant

Nagui Halim

Mark David Feblowitz

Ralf Rantzau

Alexandre Valentinovich Evfimievski

Genady Ya Grabarnik

Alexandre V Evfunievski

Machon B Gregory

Marc Lelarge

A risk assessment system and method includes an information system configured to disclose information to a third party. A risk determination model is configured to compute identifiability risk for on one or more records in storage. The identifiability risk is compared to a threshold prior to being disclosed wherein the information system is informed of the identifiability risk exceeding the threshold prior to disclosure to the third party.

System and method for privacy protection using identifiability risk assessment

A method for security planning with hard security constraints includes: receiving security-related requirements of a network to be developed using system inputs and processing components; and generating the network according to the security-related requirements, wherein the network satisfies hard security constraints.

System and method for security planning with hard security constraints

System and methods are provided for managing and mitigating privacy risks in a system having a network of processing elements. According to one method, there is receive a request for at least one output product from the system. The request includes a set of privacy parameters. At least one set of workflow generating strategies are created that results in the output product having a privacy risk value below a predefined threshold. At least one of the workflow generating strategies is deployed for automatically producing the at least one output product.

Mitigating and managing privacy risks using planning

An exemplary method is provided for managing and mitigating security risks through planning. A first security-related information of a requested product is received. A second security-related information of resources that are available for producing the requested product is received. A multi-stage process with security risks managed by the first security-related information and the second security-related information is performed to produce the requested product.

Method of managing and mitigating security risks through planning

An access control system and method includes a risk index module which computes a risk index for a dimension contributing to risk. A boundary range defined for a parameter representing each risk index such that the parameter above the range is unacceptable, below the range is acceptable and in the range is acceptable with mitigation measures. A mitigation module determines the mitigation measures which reduce the parameter within the range by mapping the effectiveness of performing the mitigation measures to determine a residual risk after a mitigation measure has been implemented.

Fuzzy multi-level security

A method for protecting information in a distributed stream processing system, including: assigning a principal label to a processing component; assigning a first channel label to a first communication channel that is input to the processing component; comparing the principal label to the first channel label to determine if the processing component can read data attributes of the first channel label; and reading the data attributes of the first channel label when the principal label is equal to or has precedence over the first channel label, wherein the principal label includes a read label and a write label and at least one of a selection label, an addition label or a suppression label.

Access control method and a system for privacy protection

An access control system and method includes a risk index module which computes a risk index for a dimension contributing to risk. A boundary range defined for a parameter representing each risk index such that the parameter above the range is unacceptable, below the range is acceptable and in the range is acceptable with mitigation measures. A mitigation module determines the mitigation measures which reduce the parameter within the range.

System and method for fuzzy multi-level security

A method of synchronizing stations without broadcasting a synchronization signal. Presetting an environmental variable into each station prior to deploying the stations. Presetting an interval of time into each station prior to deployment. Deploying the stations. Waiting the interval of time. Measuring the environmental variable at each station. Returning to the fourth step if the measurement is not within a first user-definable range. Returning to the fifth step if the measurement is not within a second user-definable range. Synchronizing a clock within the station to the time that a synchronization event is measured, and returning to the fourth step.

Method of synchronization without broadcasting synchronization signal

Growing community of inventors

Columbia, MD, United States of America

Angela Marie Schuett