Bicdroid Inc.

Blackberry Corporation

Research in Motion Corporation

Slipstream Data Inc.

En-Hui Yang

Longji Wang

Dake He

Xiang Yu

Jin Meng

Gaelle Christine Martin-Cocher

Gergely Ferenc Korodi

Ajit Singh

Jing Wang

Guixing Wu

Brian Lamb

Chen Sun

Hongtao Zhang

Tomas Szuchewycz

Rodney M Ruddock

David P Sze

Salmaan Ahmed

A system, method and computer program product for protecting a deep neural network image classifier against receiving perturbed images. A plurality of watermark bits are embedded into an original digital image intended for the deep neural network image classifier. The watermarked image is transmitted through a potentially adversarial environment. A potentially perturbed image intended for the deep neural network image classifier is received from the potentially adversarial environment. The potentially perturbed image is determined to be an adversely modified or benign image by determining whether the potentially perturbed image includes a plurality of embedded bits matching the plurality of watermark bits embedded into the original digital image. The potentially perturbed image is prevented from being provided to the deep neural network image classifier in response to determining that the potentially perturbed image is the adversely modified image.

System and method for protecting deep image classifiers

Method, device and computer program product for providing quarantined workspaces. A virtualization application operates on a host to simulate a virtual guest. A management application operates within the virtual guest. The management application controls transmission between guest applications and locations external to the virtual guest. The management application stores encryption keys inaccessible to the host. The management application intercepts attempted transmissions from guest applications to locations outside the virtual guest. Secure data files are identified in the attempted transmissions and encrypted before leaving the virtual guest using the encryption keys. The management application also prevents any unencrypted data from being provided to non-kernel host processes that have not been previously identified as permitted host processes while allowing unencrypted data transmission from the non-kernel host processes to any of the guest application processes.

Method and system for creating quarantined workspaces through controlled interaction between a host and virtual guests

Systems and method are provided for data self-protection. The systems and methods may involve installing a sentry on a computer system, the sentry including a file system filter installed on a kernel of that computer system; providing a central sentry platform in communication with the sentry, operating the central sentry platform to send a data self-protection policy to the sentry, the data self-protection policy being encrypted so that it can only be modified by the central sentry platform; operating the file system filter to control access to encrypted data stored on the computer system, by, for each process making a file access request to the encrypted data, the file system filter receiving and handling that file access request according to the data self-protection policy; and, operating the central sentry platform to monitor the sentry and to receive information from the sentry regarding access to the encrypted data.

Methods and systems for data self-protection

Method, device and computer program product for managing a plurality of encryption keys using a keystore seed that defines a seed bit set. A key management process defines a key mapping between the seed bit set and the plurality of encryption keys. The key management process enables each encryption key to be generated from the seed bit set using a corresponding keying material value and the key mapping. The key mapping specifies that an encryption key is generated by partitioning the seed bit set into a plurality of seed bit partitions, determining a keying value from the keying material value, determining a key sequence using the plurality of seed bit partitions and the keying value, and determining the encryption key from the key sequence. Management of a large number of encryption keys can be simplified through indirect management via the keystore seed and the key management process.

Methods and devices for optimal information-theoretically secure encryption key management

The described embodiments relate to data protection methods, systems, and computer program products. A process-based encrypted data access policing system is proposed based on methods of encrypted data file management, process authentication and authorization, Trojan detection for authorized processes, encryption key generation and caching, and encrypted-file cache management. The process-based encrypted data access policing system may be implemented as a kernel level file system filter and a user-mode filter companion application, which polices the reading/writing of encrypted data in either a server system or an endpoint computer and protects data from data breaches and known or unknown attacks including ransomware and/or phishing attacks.

Methods, systems and computer program products for data protection by policing processes accessing encrypted data

Growing community of inventors

Petersburg, Canada

En-Hui Yang