Honeywell International Inc.

Dell Products Inc.

Freescale Semiconductor,inc.

Tarun Gupta

Atul Bassi

Chetan Siddapura Kallappa

Manjunath Basavaraj Kama

Hung The Dinh

Manikandan Pammal Rathinavelu

Prasanna Patil

Anusha C

Anubhav Misra

Anusha Challa

Israel Rozenblit

Chandrakanth Vittal S

Sabu K Syed

Jatin Kamlesh Thakkar

Pradeepta Ranjan Choudhury

Muhammed Mohiuddin

Eli Abramson

Nilay Mishra

Reshma Nair

Matthew Christopher Frank

Farook Shaik

Vishnu Prabhu Sundarrajan

Sapna Tiwari

Chandrika Rout

Pankaj Arora

Manoj Singh

Sejal Mohata

Khadeer Ahmed Shaikh

Adam Mahram

Rohit Jain

Sagi Barzilay

Gaurav Suwal

Avishay Mezeg

Embodiments of the present disclosure provide for improved methodologies for managing initiation of an automated healing process for operational technology devices in a network. Some embodiments include identifying at least one operational technology (OT) device connected to a network that is vulnerable to at least one cybersecurity risk, where the at least one OT device is wirelessly connected to the network, identifying at least one computer-executable resolution to the at least one cybersecurity risk, executing a simulation that tests performance of the network with resolution of the at least one cybersecurity risk utilizing the at least one computer-executable resolution, generating a solution implementation report based at least in part on the simulation, and determining whether to automatically initiate the at least one computer-executable resolution based at least in part on the solution implementation report.

Apparatuses, computer-implemented methods, and computer program products for managing initiation of an automated healing process for operational technology devices in a network

Embodiments of the present disclosure provide for remote access of a device, for example an operational technology device or an information technology device, in a manner with improved cybersecurity. Some embodiments receive remote action data from a client device in response to an initiated remote access action of the remote action data from the client device to a remotely accessible device, quarantine the remote action data from the client device, generate malicious determination data indicating whether the remote action data is determined as malicious by processing the remote action data, and determine whether to block transfer of the remote action data to the remotely accessible device based at least in part on the malicious determination data.

Apparatuses, computer-implemented methods, and computer program products for improved remote access cybersecurity based on quarantining remote action data and generating malicious determination data

Embodiments of the disclosure provide improvements for managing access of nodes, including wireless nodes, to a network including operational technology device(s) (e.g., a wireless OT network). Some embodiments include detecting a node from at least one message communication over a wireless OT network, authenticating node identification information that uniquely identifies the node, confirming that the node is permissioned to access the wireless OT network by at least validating authentication information associated with the node, confirming that the node is attempting an authorized action by at least validating authorization information associated with the at least one message communication, and assigning an access indicator based at least in part on the authenticating of the node identification information, the validating of the authentication information, and the validating of the authorization information.

Apparatuses, computer-implemented methods, and computer program products for managing access of wireless nodes to a network

Various embodiments of the present disclosure are directed to automatic improved network architecture generation. In this regard, embodiments may process data representing a network architecture to generate an improved network architecture that resolves one or more vulnerabilities associated with the network architecture. In this regard, embodiments such as apparatuses, methods, and computer program products, are provided to identify a network architecture comprising a networked device set, determine cybersecurity threat set associated with the network architecture, identify an improved network configuration data set based on the cybersecurity threat set and the network device architecture, wherein each recommended sub network configuration of the improved network configuration data set decreases a threat likelihood associated with at least one determined cybersecurity threat from the cybersecurity threat set, generate an improved network architecture based on the network architecture and the improved network configuration data set, and output the improved network architecture.

Apparatuses, methods, and computer program products for automatic improved network architecture generation

Various embodiments described herein relate to an asset discovery engine with a deep vulnerabilities scanner with respect to assets in an industrial network. In an embodiment, a request to perform an asset vulnerability assessment of one or more assets within a network is received, the request comprising an asset descriptor describing the one or more assets. In response to the request, aggregated asset property data associated with the one or more assets is obtained based on the asset descriptor. Furthermore, the asset vulnerability assessment is performed based on the aggregated asset property data and asset vulnerability signature data stored in an asset vulnerability signature repository. In response to determining that the asset vulnerability assessment satisfies a defined criterion, one or more actions associated with the network are performed.

Asset discovery engine with deep vulnerabilities scanner

A method of cybersecurity performance analyzing for customer site(s) including assets in a networked system including different asset types, and a virtual security engine (VSE) server. The customer site is coupled to a Security Center (SC) including a SC server, and a cybersecurity hardening compliance engine (CHCE). The VSE server collects identification data and security configuration data from the asset types, and transfers the data to a SC database. Responsive to a user request to generate a cybersecurity hardening compliance report, the CHCE sends a query to the SC database to retrieve at least a portion of the data, uploads a cybersecurity benchmark including cybersecurity configuration rules (CCRs) for least a selected asset type, compares the data of the assets to the CCRs, and generates from results of the comparing a cybersecurity report including a quantitative measure of cybersecurity performance for the assets of the selected asset type.

Cybersecurity compliance engine for networked systems

Embodiments of the present disclosure generally provide for control system configuration error processing. At least some example embodiments identify a configuration error set associated with one or more subcomponents of a control system, and providing enhanced processing tools and/or insight with respect to the identified configuration error(s). Example embodiments are configured for collecting a configuration log set associated with a control system; identifying, based on at least the configuration log set and an standard configuration data object, a configuration error set associated with at least one subcomponent device of the control system; generating a configuration report data object based on the identified configuration error set; and causing rendering of a configuration action playback interface, wherein the configuration action playback interface configured based on at least the configuration error set, and wherein the configuration action playback interface is configured for user interaction.

Apparatuses, methods, and computer program products for industrial automation control system configuration error processing

A method comprises receiving data corresponding to execution of one or more applications, accessing at least one function from a codes as a service source, and training the at least one function based, at least in part, on one or more parameters, wherein the training is performed using a first portion of the data. In the method, a deployment version of the at least one function is generated based, at least in part, on the training, and the deployment version of the at least one function is applied to a second portion of the data to perform at least one service.

Framework for codes as a service management and deployment

Various embodiments of the present disclosure are directed to automatic network architecture configuration maintenance. A network architecture for a particular organization, user, or other entity, may include various networked devices, any of which may be vulnerable to one or more cyberattacks due to outdated software, hardware, and/or firmware configurations. Embodiments include apparatuses, computer program products, and methods for retrieving an updated device configurations data object, identifying a vulnerable networked device set based at least in part on the updated device configurations data object and a detected networked device set, and generating a device cyber risk score data object set that may be output and/or otherwise provided to one or more systems, devices, or the like. Some example embodiments further include identifying update recommendation(s), generating device cyber risk priority data object(s), and/or providing various combinations of such data for rendering to one or more displays associated with a user.

Apparatus, method, and computer program product for automatic network architecture configuration maintenance

There is a need for more effective and efficient network security coordination. This need can be addressed by, for example, techniques for network asset vulnerability detection. In one example, a method includes detecting network assets within a monitored computer network; and for each network asset: determining a vulnerability profile, determining a connectivity profile, determining a vulnerability designation based on the vulnerability profile for the network asset and a network vulnerability documentation repository, determining whether the vulnerability designation for the network asset indicates a positive vulnerability designation, and in response to determining that the vulnerability designation indicates the positive vulnerability designation, decoupling the network asset from the monitored computer network using the connectivity profile for the network asset.

Network asset vulnerability detection

A method includes receiving code for computer programming, determining whether at least a portion of the code comprises at least one vulnerability, and comparing at least the portion of the code comprising the at least one vulnerability to a knowledge base. The knowledge base comprises (i) a plurality of code fragments comprising a plurality of vulnerabilities; and (ii) a plurality of solutions to prevent corresponding ones of the plurality of vulnerabilities. The method further includes identifying, based on the comparing, a code fragment of the plurality of code fragments matching at least the portion of the code comprising the at least one vulnerability, and executing a solution of the plurality of solutions corresponding to the identified code fragment to prevent the at least one vulnerability in at least the portion of the code.

Code vulnerability detection and remediation

Various embodiments of the present disclosure are directed to field device maintenance request management associated with one or more faulty field devices. Non-limiting example systems in which embodiments function include control system in communication with a plurality of field devices and associated sensors, and at least one client device. Embodiments include apparatuses, computer program products, and methods for retrieving monitoring data, identifying faults, retrieving request handling information, generating a corresponding field device maintenance request, and transmitting the maintenance request to one or more client devices, as well as optionally setting one or more operational modes for field devices, and/or processing a response from the client device. Other embodiments receive a field device maintenance request, extract request handling information, various particular interfaces for efficient analysis, and optionally include interface elements for providing and causing storage of a response to the request.

Apparatus, method, and computer program product for field device maintenance request management

A method for generating a standard cell layout pattern for standard cell placement in an integrated circuit uses a congestion map. First, congestion zones are identified in a congestion map generated by an Electronic Design Automation (EDA) application. Next, routing tracks data corresponding to bounding boxes belonging to the congestion zones are used to calculate values of average vertical and horizontal congestion. Subsequently, a value of modified standard cell density is calculated based on the values of average vertical and horizontal congestion, and an unmodified standard cell density. The dimensions of a layout pattern unit are calculated using the value of the modified standard cell density and the width of standard cells. Various layout pattern units then are placed adjacent to one another to form a standard cell layout pattern.

Growing community of inventors

Bengaluru, India

Tarun Gupta