USA As Represented by Secretary of the Navy

The Government of the United States As Represented by the Director, National Security Agency

Sunny James Fugate

Nghia Tran

Hoa V Phan

Ryan Christopher Gabrys

Luis M Martinez

Jason A Landsborough

Stephen T Harding

Lorraine Duffy

Michael Bruch

Daniel Carl Grady

Chun-Che Peng

Charles L Carpenter

Kimberly J Ferguson-Walter

Bradley Michael Flamm

Marion Ceruti

Jeffrey Ellen

Mike Tall

A system and related methods that generate encryption keys using two inputs. The first input is random data measured or supplied at the time the encryption keys are created. The second input is predetermined data held by the server and device. Given knowledge of the predetermined data and the random data, the UxS will be able to regenerate its previous encryption keys and also to re-establish communication by the server and device.

System for providing secure communications and related methods

An adaptive deception system is provided for defending a production network against cyber-attacks utilizing deception devices on the production network. The adaptive deception system includes a deception management system. The deception management system includes monitors for making observations regarding the deception devices including observations of an attacker's interaction with the deception device. The adaptive deception system further incudes a control system having sensors that receive the observations of the deception management system. The control system is configured to provide an adaption specification in response to the observations made. Actuators of the control system are activated in order to provide the adaption specification to the deception management system where monitors of the deception management system implement the specified adaption. Implementation of the adaption adapts the properties of the deception devices to interfere with the cyber-attacker.

Adaptive deception system

A method for hiding information in executable code comprising: identifying a set of pairs of interchangeable instructions, wherein each pair has an instruction order of execution that is reversible without changing a functionality of the executable code; organizing the pairs into a plurality of matrices based on a set of random seeds; for each matrix, inverting a submatrix consisting of a subset of columns from each matrix to identify a subset of pairs; identifying a matrix that has full column rank on a subset of columns that is a function of the pairs' location; storing an index of the identified matrix's associated seed in a secure data storage location; and encoding data into the executable code by reversing the order of execution of the subset of pairs and treating each pair having reversed instructions as a '1' and each pair of non-reversed instructions as a '0' or vice versa.

Method for swapping adjacent instructions midstream in software executables in order to hide information therein

A method for validating software transforms. A target program binary is mutated, producing a plurality of variants. It is determined whether each variant passes a test suite. Upon determining the variant does not pass the test suite, the variant is discarded. Upon determining the variant passes the test suite, the variant is compared to the target program binary. A candidate transform is extracted which meets scope criteria. The candidate transform is applied to each of a plurality of test programs. It is determined whether the candidate transform is safe. Upon determining that the candidate transform is not safe, the candidate transform is discarded. Upon determining that the candidate transform is safe, the candidate transform is collected.

Method for semantic preserving transform mutation discovery and vetting

Semantically equivalent variants of a computer program are generated by applying randomly selected transforms to the computer program. Unit tests are performed on the variants of the computer program to detect a defect in the computer program.

Device, system, and method for detecting a defect in a computer program by generating and testing semantically equivalent computer program variants

An egress man-in-the-middle (MITM) system comprising: a trusted computing asset disposed in a first local subnet and connected to a computer network; and an egress MITM effector disposed in the first local subnet and configured to passively monitor incoming network traffic to the trusted computing asset, and further configured to obfuscate true information regarding the trusted computing asset to other computing assets on the computer network by transmitting, as if from the trusted computing asset, a spoofed response in answer to selected incoming network traffic, wherein the spoofed response comprises false or misleading information regarding the trusted computing asset thereby protecting the trusted computing asset from attack.

Method and system for improving network and software security using shared trust and an egress man-in-the-middle (MITM) algorithm for performing clandestine traffic modification

A method comprising the steps of: displaying primary data having a first sensitivity level on a first display screen that is operatively coupled to a first computer; capturing an image of the first display screen with an image capture device that is operatively coupled to a second computer that is communicatively isolated from the first computer such that no data is shared between the first and second computers; executing with the second computer a display recognition and characterization algorithm to recognize the primary data based only on the captured image of the first display screen; and augmenting the primary data by displaying secondary data on a second display, wherein the secondary data is related to, and has a higher sensitivity level than, the primary data.

Augmented reality cross-domain solution for physically disconnected security domains

A computing system having attached display devices comprising a primary display area controlled by a corresponding attached display device; a running software application coupled to the primary display area, the software application being actively manipulated by a user and the corresponding primary display area being actively perceived by the user; a plurality of software measurement mechanisms, each coupled to hidden internal states of the running software application; data mapping functions each coupled to a plurality of software measurement mechanisms; one or more secondary display areas each controlled by a corresponding attached display device, where each secondary display area does not occlude or obscure the primary display area; one or more display algorithms, each which couples secondary display areas to one or more data mapping functions, in which the secondary display area shows representations of the hidden internal states via the software measurement mechanisms, data mapping functions, and display algorithms.

Ambient activity monitors for hidden computing system and process metadata

A data transfer device comprising: a body; a tip coupled to the body, wherein the tip has a dielectric constant value suitable for interacting with a capacitive touch screen of a separate device; a control unit mounted to the body; and an electronic switch mounted to the body and operatively coupled to the control unit, wherein the switch is disposed to connect the tip to a ground source when the switch is in a closed configuration and to break the connection between the tip and the ground source when the switch is in an open configuration.

Active capacitive control stylus

A system includes a controller, a Hall-effect sensor and transceiver connected to the controller; and a flux-producing element having a plurality of magnetic flux lines emanating therefrom. The system may be secured to or contained within a wearable glove. The flux-producing element may be coupled to an object separate from the wearable glove. The Hall-effect sensor transmits a Hall-effect sensor signal to the controller when the Hall-effect sensor is perpendicular to at least some of the plurality of magnetic flux lines. The Hall-effect sensor signal may include data received from the flux-producing element. The controller transmits a controller signal to the transceiver after receiving the Hall-effect sensor signal. The controller signal may include input from a motion sensor and/or an orientation sensor connected to the controller. The transceiver may transmit the signal to a remote processor. The signal may be used for gesture recognition, information coding, and/or information processing.

Hall-effect sensor system for gesture recognition, information coding, and processing

A system includes a controller and an RFID sensor, an RFID sensor reader having a detection region, and a transceiver connected to the controller. The system may be secured to or contained within a wearable glove. The RFID sensor is configured to transmit an RFID sensor signal to the RFID sensor reader when the RFID sensor is within the detection region. The RFID sensor reader is configured to transmit an RFID sensor reader signal to the controller after receiving the RFID sensor signal. The controller is configured to transmit a signal to the transceiver after receiving the RFID sensor reader signal. The signal may include input from a motion sensor and/or an orientation sensor connected to the controller. The transceiver may transmit the signal to a remote processor via an antenna. The signal may be used for gesture recognition, information coding, and/or information processing.

Growing community of inventors

San Diego, CA, United States of America

Sunny James Fugate