Digital Commons Network^™

Ip Spoofing Mitigation Procedure In The Communication Between Two Computers, Punarjeewa Abeysekera

Defensive Publications Series

This paper disclosures a method to mitigate ip spoofing in the communication between two computers. Two computing devices: a client type computer and a server type computer communicate with each other. The client type computer does not have a static ip address and can communicate from an arbitrary geographical location. And the server type computer has a static ip address and is stationary. The client type computer has the static ip address of the server type computer built into its memory. The server type computer does not know the ip address of the client type computer in advance. It will …

Android Security, Nancy Mehra

Defensive Publications Series

Android is the most popular mobile operating system among the most used touch devices. Today, 80 percentage of touch devices are using Android Operating System . The universality of Android devices has a direct impact on the app store Google Play, which was first introduced under the name of Android Market. Android is an open source operating system. Thus convincingly available and recognized by various operating system and code familiar to java , its applications can be easily developed and implemented on the Smartphones. Thousands of mobile apps are released through the Google Play Store every day ,so to …

Techniques To Detect Nearby Workers And Allow Interactions Through Asset Tracking Systems For Sensor Failure Scenarios, Shridurgha Janakiraman

Defensive Publications Series

In industrial Internet of Things (IoT) environments, assets are often remotely tracked and/or monitored to prevent early wear and tear, misplacements, etc. Typically, sensors are attached to assets to facilitate remote monitoring. However, sometimes these sensors can stop communicating or responding to remotely triggered commands and a human may be needed to interface with such assets. Provided herein are techniques in which sensor failures may trigger an asset tracking system to recognize and identify workers in a close proximity in order to use any information from the workers to substitute in the place of missing information and/or to initiate real …

Securing Connectivity Fault Management (Cfm) Control Packets Using Stamped Passport Attestation, Karthik Babu Harichandra Babu, Eric Voit, Sujal Sheth

Defensive Publications Series

Attestation is a trusted computing technology that can be applied to Ethernet layer operation, administration, and management (OAM) protocols, such as ethernet-cfm. A Canary Stamp is a collection of security evidence that demonstrates a sender's integrity and trustworthiness. Techniques presented herein provide for extending all types of Connectivity Fault Management (CFM) frames to carry a Canary Stamp Type-Length-Value object. Once a CFM frame is obtained by a receiver MEP, the receiver is to verify a sender's integrity and trustworthiness using the Canary Stamp TLV. CFM can add this trustworthiness status on each of its services in order to maintain connectivity …

An Improved Process For The Preparation Of Cysteamine Bitartrate, Srinivasan Thirumalai Rajan

Defensive Publications Series

The present invention relates to an improved process for the preparation of 2-aminoethanethiol bitartrate which is represented by the following structural formula-1a.

Formula-1a

The present invention also provides an improved process for the preparation of crystalline form of the compound of formula-1a herein after designated as crystalline form-M.

Process For The Preparation Of 5-[2-[4-(1,2-Benzisothiazol-3-Yl)-1-Piperazinyl]-Ethyl]-6-Chloro-1,3­Dihydro-2h-Indol-2-One, Methanesulfonate, Trihydrate, Srinivasan Thirumalai Rajan

Defensive Publications Series

The present invention relates to the processes for the preparation 5-[2-[4-(1,2-benzisothiazol-3-yl)-1-piperazinyl]ethyl]-6-chloro-1,3­dihydro-2H-indol-2-one, methanesulfonate, trihydrate which is represented by the following structural formula-1a.

Formula-1a.

Secure Execution Of Jsonp Scripts Within A Sandbox, Sebastian Lekies

Defensive Publications Series

The same-origin policy isolates web applications from each other based on application origin, but can prevent legitimate data exchange between two web applications with different origins. JavaScript Object Notation with Padding (JSONP) is a workaround for the same-origin policy in which data is inserted into a script file included within another application. However, this approach is vulnerable to malicious or compromised external sources. This disclosure proposes a solution that performs execution of third-party JSONP scripts within a sandbox in order to isolate them and avoid causing harm in case the code contained in the script is malicious. The sandbox is …

Invoking Visual Search With Device Camera Using Intuitive Physical Gestures, Brett Aladdin Barros, Ali Stanfield, Bo Brinkman, Nada Elassal, Paulo Coelho

Defensive Publications Series

Invoking a visual search typically requires a user to open an application that supports the functionality before pointing the camera at the space or objects for which visual search is desired. Such an approach for invoking a visual search is time-consuming and cumbersome and limits the types of actions that can be supported by these capabilities. This disclosure describes techniques that enable users to invoke visual searches from their device cameras via intuitive physical gestures. Users can then take further actions on objects within view.

Fraud Mitigation On Digital Payment Platforms, Santhosh Kumar Edukulla

Defensive Publications Series

Digital payment platforms enable users to pay merchants and to carry out a variety of online and offline financial transactions. However, there is a risk of fraudulent transactions, whereby payment credentials are misused to post fraudulent charges. This disclosure describes techniques that obtain a fraud rating for a merchant and provide it to users of a digital payment platform prior to the user conducting a transaction with the merchant via a payment application. The merchant fraud rating can be derived based on merchant and fraud rating data obtained by the payment platform from payment networks. The payment platform can also …

Drive-Through Covered Charging Station For Battery-Powered Vehicles, Karl Eric Schrader

Defensive Publications Series

The batteries of battery-powered vehicles can be charged with chargers that use mechanical contact plates which are prone to contamination and corrosion from the elements. Current hands-free charging mechanisms, while preferable, are not well suited for uncontrolled and unsupervised use in certain operating environments. This disclosure describes an outdoor contactless charging mechanism for vehicles powered by rechargeable batteries that addresses these issues. The mechanism employs a covered space with inductive charging primary antennas that are aligned with the vehicle secondary antennas with precision via a protected track with a center curb.

Methods To Improve Efficiency Of Highly-Reliable / Ultra-Reliable Applications Using Coordinated Multi-Point Techniques, Mukesh Taneja, Vimal Srivastava, Indermeet Gandhi

Defensive Publications Series

Existing Coordinated Multi-Point (CoMP) mechanisms do not take into account reliability aspects of ongoing URC (or URLLC) services effectively. Presented herein are techniques that involve enhancing or optimizing CoMP mechanisms for applications that involve Ultra-Reliable Communication (URC) or Ultra-Reliable Low-Latency Communication (URLLC) services. These optimizations can also help to support a higher Highly Reliable Communication (HRC), URC, URLLC, and other Quality of Service (QoS) -aware applications in a network. Further, optimizations are proposed to provide URC or URLLC services over a single Protocol Data Unit (PDU) session in order to save Radio Access Network (RAN) and/or core network resources by …

Humidity Condenser For Potable And Non Potable Water Generation, And Water-Metal-Ground Heatsink, Luca Aiello

Defensive Publications Series

This working hypothesis involves the use of a humidity condenser with heat sink that works from a depth of 5 meters and beyond (up to 10 meters depending on the sizing requirements), using water, thermal conductive metals and good conductive gravels or soil. The dissipator cools the water so that, with a circulation pump, it cools the exchanger placed in the humidity condenser. The exchanger/condenser, in copper or aluminum, with tube and tube bundle, on the one hand produces condensed water (distilled) and cold air, and on the other hand introduces into the cooling circuit the water slightly heated during …

Self-Adaptive Anomaly Detection With Deep Reinforcement Learning And Topology, Qihong Shao, Carlos M. Pignataro

Defensive Publications Series

In the networking field, network topology is one of the most important perspectives as it can bring additional insights to the modeling process. Existing anomaly detection approaches do not take topology information into consideration. To address such limitations techniques are presented herein that support deep Convolutional Neural Network (CNN) modeling with Reinforcement Learning (RL) employing, for example, an Advantage Actor Critic (A2C) algorithm. Additionally, aspects of the techniques presented herein support an innovative new way to model a "customer profile" that leverages topology information.

Hybrid Additive Manufacturing, Jiri Konvicny, Lars Rossing

Defensive Publications Series

This idea is to combine two basic additive manufacturing technologies, FFF and SLA. The aim of the described process is not to use SLA’s biggest advantage being high print resolution, but to use it as a mere helper to ensure more isotropic properties of FFF printed parts.

Deterministic Stack Scanning To Prevent Dangling Or Use-After-Free Pointers, Kentaro Hara

Defensive Publications Series

Dangling pointers and/or use-after-free pointers are gateways to exploits for software such as browsers, operating systems, etc. To forestall attacks that rely on dangling or use-after-free (UaF) pointers, ordinary pointers in source code can be replaced by secure pointers. However, secure pointers are generally applicable to the heap, not to the stack. In the stack, there may remain dangling or UaF pointers. This disclosure describes techniques to deterministically scan the stack such that objects referenced from on-stack pointers remain unfreed, thereby preventing their conversion to use-after-free pointers.

Locating And Securing Use-After-Free Pointers, Kentaro Hara

Defensive Publications Series

Dangling pointers and/or use-after-free pointers are gateways to exploits for software such as browsers, operating systems, etc. To forestall attacks that rely on dangling or user-after-free pointers, ordinary pointers in source code can be replaced by secure pointers. However, rolling out code with such replacement requires the developer to incur testing and engineering costs. Further, due to the likely memory and runtime overheads of secure pointers, it is useful to identify ordinary pointers in source code that merit replacement. This disclosure describes techniques to determine which ordinary pointers in source code are suitable for replacement by secure pointers.

Computing A Distance Between A Source Code Directory And Another Source Code Directory, Armijn Hemel

Defensive Publications Series

Sometimes it is important to see how much a vendor's source code tree is deviating from an upstream open source project such as the Linux kernel, as big deviations potentially mean increased maintenance costs, as changes/fixes might need to be backported from the official version. In this document a method to compute a score to quantify possible maintenance costs is proposed.

Tags: Git, software engineering, defect discovery, tlsh, software maintenance, software maintenance cost

In-Vehicle Localization Of A Computing Device, D Shin, Wei Li, Jian Guo

Defensive Publications Series

An in-vehicle system may use speakers and microphones to determine the location of a computing device within a vehicle (e.g., an automobile, a motorcycle, a bus, a recreational vehicle (RV), a semi-trailer truck, a tractor or other type of farm equipment, train, a plane, a boat, a helicopter, a personal transport vehicle, etc.). For example, a vehicle head unit and the computing device may determine the location of the computing device within the vehicle by performing multilateration (e.g., triangulation) based on round trip times (RTT) of ultrasonic pings emitted by various speakers in the vehicle. Based on the location of …

Searching For An Element In An Unsorted List, Punarjeewa Abeysekera

Defensive Publications Series

This paper describes a method to perform a search on an unsorted list of elements. A database with a collection of segmented rows is used to store the elements in the list. By performing an analysis of the patterns in the segmented rows, it can be determined whether a particular element of interest is present in the list or not.

Image Region-Snapping Based On Touch-And-Hold And Drag Gestures, Brett Aladdin Barros, Paulo Coelho

Defensive Publications Series

Current techniques for image-based search perform a search the entire image and do not offer an easy to use mechanism for seamless selection of portions of an image. This disclosure describes techniques to automatically suggest refined (subset) regions within a given image that can be used to trigger a search. In response to a gesture, e.g., touch-and-hold, a sub-region within the image that includes an object is identified and is shown within a bounding box. In response to a discontinuation of the gesture, e.g., lifting of the user’s finger, a semantic search is performed for content that is similar to …

Automating Scroll Performance Management Via Interlaced Operation Execution, Sylvia Nguessan

Defensive Publications Series

The scrolling action triggers multiple refreshes of the device display at a rate that depends on the hardware or software characteristics of the device. A scroll tick corresponds to the maximum amount of time available for the main execution thread to carry out the required set of operations without degrading the scrolling user experience (UX). As a result, applications cannot easily and smoothly accommodate multiple operations executing within the main thread during scrolling if the time required to perform the operations exceeds the STB. This disclosure describes scheduling techniques to determine the set of operations to execute within the main …

Virtual Keyboard With Integrated Suggestion Features, Jenny Chin, Chenxi Ni, Kohsuke Yatoh, Adrien Olczak, Adrian Pittman, Yuqing Zhu, Akshay Kannan, Sam Jaffee

Defensive Publications Series

A computing device may present a virtual keyboard with integrated suggestion features that improve the speed and efficiency of correcting typographical errors (e.g., spelling and/or grammar errors) or text otherwise warranting correction. The virtual keyboard may be configured to present one or more suggestions for correcting typographical errors (also referred to herein as “typos”) identified by the computing device. The computing device may display a virtual keyboard graphical user interface (GUI) that includes one or more suggestions for correcting each typo in a suggestion strip GUI. The suggestion strip GUI may be a contiguous region in line with and/or directly …

User Authentication To Provide A Secure Cloud Clipboard, Brett Aladdin Barros, Alexander James Faaborg

Defensive Publications Series

Cloud clipboards that allow seamless copy-pasting of content across devices associated with the same user account are available. However, at present, such clipboards provide content on all devices that are logged in to the user account, which can cause inadvertent leakage of information of the clipboard to another person that may be using a user device at the time the information is placed on the cloud clipboard. Alternatively, the user may be offered an option to select a particular device to which the content is provided, which can fail if the user doesn’t recognize the target device by name. This …

Determining Original Sources Of Online Content, Irina Blok, Robert Benea

Defensive Publications Series

Information found on the Internet, on websites, social media platforms, video sharing services, etc. is often fragmented and appears out of context. There is no good way to know where particular content came from or to provide credit to original creators. This disclosure describes techniques that enable a user to easily dig deeper into sources of online content to determine its provenance. Per the techniques, a given image (bitmap or vector), audio, video, or other media is digitally fingerprinted. The fingerprinting technique is selected such that the generated fingerprint is robust to formatting changes, skewing, noise, etc. The fingerprints are …

Destination Search With User-Specified Constraints, Lingyi Zhang, Cliff Chin Ngai Sze

Defensive Publications Series

When issuing destination-related queries users sometimes include on or more constraints within the query. Even though a search engine can be used to search for data regarding each constraint individually, users need to integrate the individual results manually based on separate searches for different types of data. This disclosure describes techniques to retrieve and present search results for destination-related queries based on user-specified constraints present within a user query. The results are obtained by performing separate searches based on various constraints specified in the user query and combining and filtering the results to include only those results that match all …

Refinement Of Embedded Payment Links Via User Reports, Hailun Zhu, Guiheng Zhou, Chun Fan, Fausto Araujo

Defensive Publications Series

Payment applications make use of QR codes, NFC tags, etc. to encode information related to particular merchant physical assets and locations. Large scale deployment of such codes is difficult and prone to human error since the payment application provider needs to access merchant information to generate codes specific to each asset and the merchant needs to deploy the codes to specific matching locations. This disclosure describes the use of codes with unique but generic embedded links that can be deployed at any physical asset. When a payment is attempted by scanning such a code, the user is requested to provide …

Automatic Sanitization Of Use-After-Free Pointers, Kentaro Hara

Defensive Publications Series

When the memory for an object is deallocated, pointers to that object become invalid. Such pointers, known as dangling pointers, can be exploited by attackers to cause undesirable or malicious program behavior. A pointer that points to memory that has been reused (reallocated) is known as a use-after-free pointer; these, too, are gateways to exploits. This disclosure describes techniques to track pointers in runtime and periodically test pointers to determine if they are pointing to deallocated or reallocated memory regions. Upon the discovery of pointers pointing to deallocated or reallocated memory, security breaches are forestalled by causing a program crash …

Detecting Dangling Pointers Using Embedded Metadata, Kentaro Hara, Benoît Lizé

Defensive Publications Series

When the memory for an object is deallocated, pointers to that object become invalid. Such pointers, known as dangling pointers, can be exploited by attackers to cause undesirable or malicious program behavior. A pointer that points to memory that has been reused (reallocated) is known as a use-after-free pointer; these, too, are gateways to exploits. This disclosure describes techniques to detect the presence of dangling and use-after-free pointers in runtime and, upon detection, forestall security breaches due to such pointers by causing a program crash accompanied by a bug report. Per the techniques, both pointer and pointed-to object are augmented …

Proximity-Based Triggering Of Screen Restrictions To Avoid Eye Strain, Eric Liu

Defensive Publications Series

Viewing device screens in close proximity can cause eye strain. Some devices use front-facing cameras to detect and recognize faces in order to personalize the user experience (UX) to the user close to the device. However, such personalized operation does not include functionality that depends on the user’s proximity to the device screen. Proximity sensing within devices is used to turn the screen off in situations when the device is held against the user’s head. Such capacitive proximity sensing operates at distances from the screen that are relatively short. This disclosure describes techniques to change the operation of a device …

Robotic Forensic Analysis Tool For Multiple Parameter Sensing, Anonymous

Defensive Publications Series

This disclosure describes a robotic forensic tool that includes sensing probes for performing automated forensic analysis. The robotic tool can support multiple sensing probes that are mounted such that they can hover over the device under test (DUT) and perform measurements. Tools are mounted on the robotic cantilever which enables navigation across a device under test to provide measurements of different physical properties of the device with minimal human intervention. Measurements can provide statistical analysis to drive regions of confidence and to provide inferences regarding the devices under forensic investigation. This setup includes a probe holder that enables its attachment …