International Business Machines Corporation

Suzanne Carol Deffeyes

Charles Steven Lingafelt

Richard J Newhook

Amir Khan

Marc Philippe Stoecklin

Youngja Park

Jiyong Jang

Josyula R Rao

William Alexander Bird

Dhilung Hang Kirat

Gary K Thornton

Brian M O'Connell

Neil A Katz

Barry L Minor

Nader M Nassar

Grant Douglas Miller

Gordon Clyde Fossum

Daniel Alan Brokenshire

Boas Betzler

Michael C Pitman

Sean Leo Dague

Garreth J Jeremiah

Francis J Hildenbrand, Jr

Mark Chen-Quee

Embodiments for managing computing network security by one or more processors are described. A signal that is representative of authorized anomalous behavior is received. The signal includes at least one of an identity and a type of activity associated with the authorized anomalous behavior. A security incident is detected. If the detected security incident corresponds to the authorized anomalous behavior, the generating of an alert in response to the detecting of the security incident is suppressed.

Methods and systems for managing security in computing networks

An automated method for processing security events in association with a cybersecurity knowledge graph. The method begins upon receipt of information from a security system representing an offense. An initial offense context graph is built based in part on context data about the offense. The graph also activity nodes connected to a root node; at least one activity node includes an observable. The root node and its one or more activity nodes represent a context for the offense. The knowledge graph, and potentially other data sources, are then explored to further refine the initial graph to generate a refined graph that is then provided to an analyst for further review and analysis. Knowledge graph exploration involves locating the observables and their connections in the knowledge graph, determining that they are associated with known malicious entities, and then building subgraphs that are then merged into the initial graph.

Cognitive offense analysis using contextual data and knowledge graphs

Embodiments include method, systems and computer program products for selective retention of data in a computational system. Aspects include receiving a monitored data element. Aspects also include assigning an initial storage ranking to the monitored data element to create a ranked data element. Aspects also include determining a threshold storage ranking. Aspects also include comparing the initial storage ranking to the threshold storage ranking. Aspects also include, based on the comparison indicating that the initial storage ranking is greater than the threshold storage ranking, storing the ranked data element in a long-term storage. Aspects also include based upon the comparison indicating that the initial storage ranking is less than the threshold storage ranking, discarding the ranked data element.

Selective retention of forensic information

An approach for authenticating a device is provided. The approach includes a computer implemented method for receiving a first stage biometric variable verification data for accessing the device. The approach further includes a computer-implemented method for computing a second stage binary authentication data for accessing the device. The approach further includes analyzing the received first stage biometric variable verification data and the second stage binary authentication data. The approach further includes receiving the second binary authentication data for accessing the device. The approach further includes generating a confidence score level using the analyzed first stage biometric variable verification data and second stage binary authentication data, wherein, if the first stage biometric variable verification data is verified as having a sufficient confidence level score, then a required password entry, for the second stage binary authentication data requires less than all the normal number of characters for accessing the device.

Authenticating a device based on availability of other authentication methods

A system and methods are provided. A method includes determining a set of Grayscale bands providing an increase in a Quick Response Code data capacity that is an integer multiple of the Quick Response Code data capacity provided by a Black and White Quick Response Code that uses only Black and White to represent data. The method further includes generating, using a processor, a Grayscale Quick Response Code using the determined set of Grayscale bands to represent the data.

Optimizing quick response code capacity using gray luminance

A computer implemented method for augmenting a display image includes receiving image data, the image data including data representing one or more objects, and at least a first marker and a second marker. The method includes receiving a first confidence level for the first marker and a second confidence level for the second marker. The method includes determining a selected marker from the first marker and the second marker. The selected marker is determined according to a highest confidence level of the first confidence level and the second confidence level. The method includes determining a transformation and a positional offset for the selected marker. The method includes generating overlaid display data for the one or more objects in the image data, the one or more objects determined in accordance with the transformation and the positional offset.

Positional context determination with multi marker confidence ranking

An augmented reality (AR) system receives image data from a camera of mobile device. The image data includes images of objects in the field of view of and at least two markers. A repository contains position information for objects and markers that may potentially appear in an image. The AR system receives a confidence level for the markers in the image, and selects the marker with the highest confidence level. The transformation and position of the marker in the image data is used to determine the identity of objects in the field of view. Further, the AR system generates overlaid image data that can be incorporated into the image data and sent back to be displayed on the mobile device. The overlaid image data is positioned according to the position data for the object it is associated with, and the transformation and position data for the selected marker.

An embodiment of the invention provides a method for displaying information on a portable device, wherein the portable device includes an interface, a camera, and a screen. The interface identifies an object to be installed; and, the camera captures at least one image, wherein the image includes locations for installing objects. The screen displays an augmented image of locations for installing objects, wherein the augmented image identifies at least one optimal location for installing the object.

Enhanced asset management and planning system

A system and method includes using a side simulation device for: receiving a scene description of a virtual world scene from a virtual world simulator, including a description of a special object that requires modification, and descriptions of other objects in an immediate vicinity of the special object; receiving a description of a desired modification to the special object; performing the modification of the special object to provide an enhanced special object such that the enhanced special object can be fully integrated with the other objects in the scene; transmitting the enhanced special object to a data store; and transmitting a proxy object signal to the simulator means to be placed in the virtual world scene to alert any viewers of the virtual world scene to refresh their view by adding the enhanced special object to their simulation by accessing the enhanced special object from the data store.

Augmenting virtual worlds simulation with enhanced assets

A mechanism is provided for providing compartmentalized security in product reviews. A central authoritative state module within a compartmentalized security mechanism identifies a clearance level associated with a user that has been authenticated. Responsive to the clearance level of the user being sufficient to access the information, the central authoritative state module determines whether the information requires a simulation to be executed. Responsive to the information failing to require execution of a simulation, a coordination module in the compartmentalized security mechanism retrieves the information. A display and input interaction module on a client system then displays the information in accordance with the clearance level of the user thereby forming displayed information. Displaying the information in accordance with the clearance level of the user comprises displaying in detail only portions of the information of the product that the user has access to.

Providing compartmentalized security in product reviews

A computer implemented method, a tangible computer storage medium, and a data processing system generate a non-real-time image snapshot in a virtual world. A backend rendering system receives a scene description from a virtual world server. The backend rendering system then retrieves a high fidelity graphics from a visual database. The visual database contains both the high fidelity graphics and a lightweight graphics. The lightweight graphics are utilized to render the virtual world at a virtual world client application. The backend rendering system then renders the non-real-time image snapshot, and processes the non-real-time image snapshot into the desired format. The non-real-time image snapshot can then be delivered to a client.

Non-real-time enhanced image snapshot in a virtual world system

A method of and system for testing a graphic primitive for trivial acceptance or rejection. An initial bounding volume, such as a rectangular parallelepiped, is defined by the graphic primitive's maximum and minimum x, y, and z coordinates in an initial coordinate system. A first bounding volume is then defined by the graphic primitive's maximum and minimum x&prime;, y&prime;, and z&prime; coordinates in a first coordinate system, where the first coordinate system is transformed with respect to the initial coordinate system. Preferably this transformation comprises a 45&deg; rotation about a common axis such as the z-axis. The initial bounding volume and the first bounding volume are then intersected to form a modified bounding volume. The vertices of the modified bounding volume are then available for use in determining whether the graphic primitive may be trivially rejected or accepted within a specified viewing volume. In one embodiment, the method further includes defining and using a second modified bounding volume by intersecting the initial bounding volume with a second bounding volume defined by the graphic primitive's maximum and minimum x&Prime;, y&Prime;, and z&Prime; values in a second coordinate system. The second coordinate system is determined by applying a second transformation, such as a 45&deg; rotation about a common y-axis, with respect to the initial coordinate system. Still further, the invention may include defining and using a third modified bounding volume by intersecting the initial bounding volume with a third bounding volume defined by the graphic primitive's maximum and minimum x&prime;&Prime;, y&prime;&Prime;, and z&prime;&Prime; values in a third coordinate system determined by applying a third transformation, such as a 45&deg; rotation about a common x-axis with respect to the initial coordinates system.

Growing community of inventors

Austin, TX, United States of America

Suzanne Carol Deffeyes