Ut-battelle, Inc.

Other

Stacy J Prowell

Raphael C Pooser

Nathanael Paul

Philip G Evans

Travis S Humble

Brent K Park

Jeffrey A Nichols

Jarilyn M Hernandez Jimenez

Richard A Raines

Christopher T Rathgeb

Joseph P Trien

A system and method includes an operational network that communicates with an external network by opening a first transmission protocol socket. A data diode coupled to the operational network and a gateway enables the one-way transfer of all information received from the external network and transmitted by the operational network to the gateway such that no information travels from the gateway to the operational network or the external network. The gateway opens a second transmission protocol socket by mapping a sequence number to an acknowledgement number and increasing that mapped acknowledgement number by a value of one. A transmitter then transmits the acknowledgment to a remote network or a gateway.

One step removed shadow network

A system and method (referred to as the system) detects malware, viruses, and/or malicious activity by generating a direct current source power consumption profile by causing a monitored device to execute a fully automated recurrent software operation. The system receives by an automated detection system, the direct current source power consumption profile generated by an intelligent power sensor and generates by a detection engine, a power security profile that identifies suspicious code by profiling direct current consumed by monitored type devices. The system executes a detection engine remote from the monitored device that identifies an infected device.

System and method for monitoring power consumption to detect malware

Functional randomness in security tokens (FRIST) may achieve improved security in two-factor authentication hardware tokens by improving on the algorithms used to securely generate random data. A system and method in one embodiment according to the present invention may allow for security of a token based on storage cost and computational security. This approach may enable communication where security is no longer based solely on onetime pads (OTPs) generated from a single cryptographic function (e.g., SHA-256).

System and method for key generation in security tokens

A system detects malware in a computing architecture with an unknown pedigree. The system includes a first computing device having a known pedigree and operating free of malware. The first computing device executes a series of instrumented functions that, when executed, provide a statistical baseline that is representative of the time it takes the software application to run on a computing device having a known pedigree. A second computing device executes a second series of instrumented functions that, when executed, provides an actual time that is representative of the time the known software application runs on the second computing device. The system detects malware when there is a difference in execution times between the first and the second computing devices.

Statistical fingerprinting for malware detection and classification

Hierarchical analysis of Markov chain usage models is provided. In some embodiments elements of an expanded matrix are calculated as a function of parent elements and child elements, rather than by direct inversion techniques. The expanded matrix is a first moment matrix of a flattened model. In hierarchical models, the flattened model represents a child model instantiated within a parent model. The child elements are elements of a child matrix, which is a first moment matrix of the child model. The parent elements are elements of a parent matrix, which is a first moment matrix of the parent model.

Growing community of inventors

Oak Ridge, TN, United States of America

Stacy J Prowell