NEC Laboratories America Inc.

Cupertino, CA, United States

NEC Laboratories America Inc.

Cupertino, CA, United States
SEARCH FILTERS
Time filter
Source Type

Patent
NEC Laboratories America Inc. | Date: 2016-11-15

Systems and methods are disclosed for handling log data from one or more applications, sensors or instruments by receiving heterogeneous logs from arbitrary/unknown systems or applications; generating regular expression patterns from the heterogeneous log sources using machine learning and extracting a log pattern therefrom; generating models and profiles from training logs based on different conditions and updating a global model database storing all models generated over time; tokenizing raw log messages from one or more applications, sensors or instruments running a production system; transforming incoming tokenized streams are into data-objects for anomaly detection and forwarding of log messages to various anomaly detectors; and generating an anomaly alert from the one or more applications, sensors or instruments running a production system.


Patent
NEC Laboratories America Inc. | Date: 2017-02-01

A computer implemented method for network monitoring includes providing network packet event characterization and analysis for network monitoring that includes supporting summarization and characterization of network packet traces collected across multiple processing elements of different types in a virtual network, including a trace slicing to organize individual packet events into path-based trace slices, a trace characterization to extract at least 2 types of feature matrix describing those trace slices, and a trace analysis to cluster, rank and query packet traces based on metrics of the feature matrix.


Patent
NEC Laboratories America Inc. | Date: 2017-03-22

Methods and systems for process constraint include collecting system call information for a process. It is detected whether the process is idle based on the system call information and then whether the process is repeating using autocorrelation to determine whether the process issues system calls in a periodic fashion. The process is constrained if it is idle or repeating the limit an attack surface presented by the process.


Patent
NEC Laboratories America Inc. | Date: 2017-02-08

The present invention enables capturing API level calls using a combination of dynamic instrumentation and library overriding. The invention allows event level tracing of API function calls and returns, and is able to generate an execution trace. The instrumentation is lightweight and relies on dynamic library/shared library linking mechanisms in most operating systems. Hence we need no source code modification or binary injection. The tool can be used to capture parameter values, and return values, which can be used to correlate traces across API function calls to generate transaction flow logic.


Patent
NEC Laboratories America Inc. | Date: 2017-02-06

Methods and systems for detecting anomalous network activity include determining whether a network event exists within an existing topology graph and port graph. A connection probability for the network event is determined if the network does not exist within the existing topology graph and port graph. The network event is identified as abnormal if the connection probability is below a threshold.


Patent
NEC Laboratories America Inc. | Date: 2017-01-11

Systems and methods are disclosed to respond to a query for one or more images by using a processor, applying an indexing strategy which processes images as grouplets rather than individual single images; generating a two layer indexing structure with a group layer, each associated with one or more images in an image layer; cross-indexing the images into two or more groups; and retrieving near duplicate images with the cross-indexed images and the grouplets.


Patent
NEC Laboratories America Inc. | Date: 2017-01-11

Methods and systems for moving object localization include estimating a ground plane in a video frame based on a detected object within the video frame and monocular structure-from-motion (SFM) information; computing object pose for objects in the frame based on the SFM information using dense feature tracking; and determining a three-dimensional location for the detected object based on the estimated ground plane and the computed object pose.


Patent
NEC Laboratories America Inc. | Date: 2017-04-26

Systems and methods for full-duplex communication in a communications network, including generating a combined channel matrix including two or more channel matrices and determining a null space and a basis for the combined channel matrix. Common, individual, and disjoint vector spaces are determined, and common vector space is determined for each of one or more receiving nodes and each or one or more transmitting nodes, disjoint vector spaces for each of the one or more nodes are determined based on the common vector space for each of the one or more nodes, and individual vector spaces are determined based on the common and the disjoint vector spaces. Signals are mapped at each of the nodes to determine corresponding vector spaces; and interference alignment is performed in common vector spaces and zero forcing in disjoint vector spaces using a hardware processor.


A method and system for constructing behavior queries in temporal graphs using discriminative sub-trace mining. The method (100) includes generating system data logs to provide temporal graphs (102), wherein the temporal graphs include a first temporal graph corresponding to a target behavior and a second temporal graph corresponding to a set of background behaviors (102), generating temporal graph patterns for each of the first and second temporal graphs to determine whether a pattern exists between a first temporal graph pattern and a second temporal graph pattern, wherein the pattern between the temporal graph patterns is a non-repetitive graph pattern (104), pruning the pattern between the first and second temporal graph patterns to provide a discriminative temporal graph (106), and generating behavior queries based on the discriminative temporal graph (110).


Systems and methods are disclosed for training a learning machine by augmenting data from fine-grained image recognition with labeled data annotated by one or more hyper-classes, performing multi-task deep learning; allowing fine-grained classification and hyper-class classification to share and learn the same feature layers; and applying regularization in the multi-task deep learning to exploit one or more relationships between the fine-grained classes and the hyper-classes.

Loading NEC Laboratories America Inc. collaborators
Loading NEC Laboratories America Inc. collaborators