The Mitre Corporation

Joshua D Guttman

Brian T Sniffen

Suresh K Damodaran

Ariel Segall

Amy L Herzog

Justin Sheehy

Richard B Lamourine

Richard A Moffitt

Jonathan K Millen

John D Ramsdell

Grant W Wagner

Peter A Loscocco

Jennifer Kane

George S Coker, Ii

Mark T Wellner

Predefined patterns are detected in streaming data being transmitted in a distributed computing system that contains a plurality of computing devices wherein the plurality of computing devices are collectively configured to execute a distributed software program. A detection engine can be implemented on a computing device and can be configured to receive streaming data that is being transmitted between computing devices of the system. The detection engine can be further configured to analyze the streaming data to determine if the data matches one or more patterns that is specified by a watch point which can be converted into a happened before language expression. The streaming data can be converted into an intermediate log file that is compared against patterns expressed by a regular expression and if a match is found, an alert can be generated.

Systems and methods for analyzing distributed system data streams using declarative specification, detection, and evaluation of happened-before relationships

Predefined patterns are detected in streaming data being transmitted in a distributed computing system that contains a plurality of computing devices wherein the plurality of computing devices are collectively configured to execute a distributed software program. In one or more examples, a detection engine can be implemented on a computing device and can be configured to receive streaming data that is being transmitted between computing devices of the system. The detection engine can be further configured to analyze the streaming data to determine if the data matches one or more patterns that is specified by a watch point which can be converted into a happened before language expression. In one or more examples, the streaming data can be converted into an intermediate log file that is compared against patterns expressed by a regular expression and if a match is found, an alert can be generated.

A graphical user interface configured to facilitate replay debugging in distributed software programs is provided. The graphical user interface can allow the user to provide watchpoints and can allow the user to visualize variables that are contained within the log files. The watchpoints can represent one or more conditions. The user defined watchpoints can be converted into regex expressions and applied to the log files to determine if they meet the condition specified in the watchpoint, and if the log files meet the condition, a visual indication can be provided on a visual progress bar.

Systems and methods for declarative specification, detection, and evaluation of happened-before relationships

An architecture and system are provided for flexible, composable attestation systems. Systems built according to this attestation architecture can be composed to accomplish complex attestation scenarios. The system is designed around composable components to permit flexible recombination. A system, method, and computer program product are provided for proving attestations to an appraiser regarding a target system. In an embodiment, an attestation request is sent from an appraiser to a target system, wherein the attestation request includes queries regarding properties of the target system needed by the appraiser to make trust decisions regarding the target system. The attestation request is forwarded from the target system to an attester which collects the requested data. The attester sends an attestation response to the appraiser, wherein the response includes at least information regarding properties of the target system requested by the appraiser in order to make a trust decision regarding the target system.

Attestation architecture and system

A system, method, and computer program product are provided for requesting a proof of a security policy in a client system. Additionally, a system, method, and computer program product are provided for proving a security policy to an interrogator system.

Appraising systems with zero knowledge proofs

A system, method, and computer program product are provided for selecting a service to provide a service operation.

Growing community of inventors

Newton, MA, United States of America

Joshua D Guttman