British Telecommunications Public Limited Company

British Telecommunications Corporation

Karl Smith

Fadi El-Moussa

Ian Herwono

Zhan Cui

Ben Azvine

Martin Brown

A computer implemented security method operable with a communications network in a vehicle, the network communicatively connecting devices including sensors and actuators in the vehicle such that information provided by sensors and states of actuators are determinable by data communicated via the network, the method including defining a Markov decision process model for the vehicle, the model specifying states of the vehicle and actions constituting transitions between states, wherein a state of the vehicle is indicated by information provided by one or more sensors and a state of one or more actuators, and an action corresponds to a change in the information provided by one or more sensors and/or a change to a state of one or more actuators, each action having associated a probability of occurrence; determining, by accessing data communicated via the network, a current state of the vehicle in the model; accessing data communicated via the network; responsive to the accessed data indicating an action to change the vehicle state to a new state, determining, from the model, a probability of the action; responsive to a determination that the determined probability falls below a predetermined threshold probability, generating an indication that the vehicle state transition is anomalous.

Vehicular network security

A computer implemented method to identify a computer security threat based on communication of a network connected device via a computer network including receiving a plurality of blocks of network traffic from the device, each block including a sequence of network traffic data items being identifiable by a position in the sequence of the block; identifying a subset of positions occurring in every block for which a degree of variability of values of data items in each position of the subset meets a predetermined threshold; and generating executable code for performing a plurality of processing operations based on the identified subset of positions, the executable code consuming a determinate quantity of computing resources when executed for the received network traffic.

Cryptocurrencies malware based detection

A multi-stage event detector for monitoring a system to detect the occurrence of multistage events in the monitored system, the multi-stage event detector includes: one or more event detecting detector units () for detecting observable events occurring on the monitored system; one or more parameter generating detector units () for generating parameter values which vary over time dependent on the behavior of the monitored system; a hidden state determiner () for determining a likely sequence of states of interest of the system based on the outputs of the one or more event detecting detector units; and a transition determiner () for determining a likely transition occurrence based on a comparison of a set of values of a parameter or set of parameters generated by one or more of the one or more parameter generating detector units with a plurality of pre-specified functions or sets of values of a corresponding parameter or set of parameters associated with different transition occurrences.

Growing community of inventors

London, United Kingdom

Karl Smith