4188results about How to "Reliable detection" patented technology

A system and method for detecting malware by modeling the behavior of malware and comparing a suspect executable with the model. The system and method extracts feature elements from malware-infected applications, groups the feature elements into feature sets, and develops rules describing a malicious probability relationship between the feature elements. Using malware-free and malware-infected applications as training data, the system and method heuristically trains the rules and creates a probability model for identifying malware. To detect malware, the system and method scans the suspect executable for feature sets and applies the results to the probability model to determine the probability that the suspect executable is malware-infected.

A system and method for detecting malware on a limited access mobile platform in a mobile network. The system and method uses one or more feature sets that describe various non-executable portions of malware-infected and malware-free applications, and compares a application on the limited access mobile platform to the features sets. A match of the features in a suspect application to one of the feature sets provides an indication as to whether the suspect application is malware-infected or malware-free.

A reprogrammable packet processing system for processing a stream of data is disclosed herein. A reprogrammable data processor is implemented with a programmable logic device (PLD), such as a field programmable gate array (FPGA), that is programmed to determine whether a stream of data applied thereto includes a string that matches a redefinable data pattern. If a matching string is found, the data processor performs a specified action in response thereto. The data processor is reprogrammable to search packets for the presence of different data patterns and/or perform different actions when a matching string is detected. A reconfiguration device receives input from a user specifying the data pattern and action, processes the input to generate the configuration information necessary to reprogram the PLD, and transmits the configuration information to the packet processor for reprogramming thereof.

A system and method for detecting malware on a mobile platform in a mobile network. The system and method verifies that an executable is malware-free by computing the checksum of the executable and comparing that checksum with a checksum obtained from a malware-free copy of the executable. The checksum is a sum of all 32-bit values in a code section and an import section of said executable, a byte sequence at an entry point in said executable, a size descriptor of an import table, a size descriptor of said import section, a cyclic redundancy check of said executable, or a combination thereof.

A bed exit and patient detection system especially adapted for use in the general medical or surgical floor area of a hospital or other healthcare facility as part of a vital signs monitoring and remote warning system includes a plurality of pressure sensors disposed in the patient's bed in a series of rectangular strips or zones that run laterally across the bed in the area of the patient's mid-back, hips and mid-legs, respectively. Each zone contains a plurality of sensors, arranged symmetrically about the centerline of the bed, with the corresponding sensors on opposite sides of the centerline in each zone being connected in parallel. The sensors are connected to a processor with multiple input channels that continuously monitors the sensor states to determine, from the pattern of sensor states observed, whether the patient is in bed, out of bed or is actively attempting to ext the bed at the sides or foot of the bed. At least three different sets of bed exit logic rules are available for user selection to configure the system for high, medium or low sensitivity, or bed exit privileges, for any particular patient. In some embodiments, the system also is capable of detecting when a patient is attempting to assume certain prohibited in-bed positions, such as sitting positions or slumping positions. An alarm in the form of a pre-recorded voice announcement or an alarm over a pre-existing nurse call system is provided when the sensor states are indicative of an out-of-bed or an exiting bed condition, or other prohibited in-bed positions, for a predetermined minimum period of time.

The temperature mapping balloon of the present invention provides a device for locating inflammation and increased metabolic activity associated with conditions such as vulnerable plaque, by mapping temperature of a body lumen, such as an artery or blood vessel. The temperature mapping balloon comprises a balloon with a thermal mapping coating disposed on the inside or outside of the balloon. The thermal mapping coating can be a thermochromic coating that changes color in response to temperature or a sensor coating comprising a plurality of temperature sensors.

A catheter adapted for ablation, mapping, injection, and directional control by an external magnetic system has a catheter body, an intermediate section, and a tip section having a tip electrode configured with an omnidirectional distal end and a concentric needle port. The tip electrode houses a magnetic device and a position sensor arranged in an integrated configuration, wherein the configuration facilitates a path in the tip section for a component, including an injection needle, to extend through the tip section for extension and retraction with reduced stress and friction. The integrated configuration is an efficient use of space in the tip electrode that allows the tip section to carry both the position sensor for determining location and orientation of the tip section and the necessary volume of magnetic or magnetizable material to accomplish magnetic navigation. The catheter also includes a very soft and flexible intermediate section and an even softer and more flexible distal transitional section carrying additional magnetic members to facilitate remote magnetic navigation.

A hand pattern switch device capable of easily and reliably detecting a hand pattern or a palm motion of an operator. From a picked-up image of a distal arm, an axis passing through the centroid of a hand is determined as a central axis passing through the center of arm. At least either first scanning lines perpendicular to the central axis or second scanning lines extending along the central axis are set between a fingertip and a palm center. While changing the scanning line to be examined from the fingertip side toward the palm center, a determination is made to determine how many number of scanning lines for each of which a finger width equal to or larger than a predetermined width is detected are present, thereby making a detection of whether or not the finger is extended from the palm.

A method for interfacing with a user of an enterprise intrusion detection system, the method comprises receiving at least one packet flow, each packet flow originating from a unique node in the intrusion detection system and comprising descriptive information and a plurality of packet headers. The descriptive information of a first subset of the received packet flows is communicated to a user based at least in part on a filtering ruleset. A second subset of the received packet flows is concealed from the user based at least in part on the filtering ruleset. In response to receiving a command from the user, the plurality of packet headers for at least one packet flow in the first subset is communicated to the user.

The present invention identifies biomarkers that are diagnostic of nerve cell injury, organ injury, and/or neuronal disorders. Detection of different biomarkers of the invention are also diagnostic of the degree of severity of nerve injury, the cell(s) involved in the injury, and the subcellular localization of the injury.

To eliminate the drawbacks of false alarm problems due to mimic flame features of sunlight or moonlight reflecting on wave or mimic flame features of fabrics, animals or stage flames and alarm failures of methanol or ethanol burning flames or flames under a high illumination background condition, a multi-wavelength video image fire detecting system is disclosed consisting of a multi-wavelength video image fire detector, which is comprised of a color and near IR dual-mode camera, a color and B/W dual-mode camera, an image capture module, a processor and controller, an I/O module, a housing and a visible light and near IR view window, an alarm and indicate equipment, a setting and debugging system, a communication equipment, an area alarm and monitor system, and a pan & title and control system.

The present invention relates to a method for closed-loop controlling a processing operation of a workpiece, comprising the steps of: (a) recording a pixel image at an initial time point of an interaction zone by means of a camera, wherein the workpiece is processed using an actuator having an initial actuator value; (b) converting the pixel image into a pixel vector; (c) representing the pixel vector by a sum of predetermined pixel mappings each multiplied by a corresponding feature value; (d) classifying the set of feature values on the basis of learned feature values into at least two classes of a group of classes comprising a first class of a too high actuator value, a second class of a sufficient actuator value and a third class of a too low actuator value at the initial time point; (e) performing a control step for adapting the actuator value by minimizing the error e_t between a quality indicator y_e and a desired value; and (f) repeating the steps (a) to (e) for further time points to perform a closed-loop controlled processing operation.

A repeater station 10 detects whether or not an abnormality exists in each of signal light and monitor light having arrived from a terminal station 1 or a repeater station 20, and controls, according to the result of detection, operations of optical amplifiers 11 and 12 and the monitor light. In the case where both of the signal light and monitor light arriving from the terminal station 1 via the optical transmission line for the downstream direction are abnormal, the optical amplifier 11 for the downstream direction stops its amplifying operation by itself, whereas a monitor control apparatus 13 stops the amplifying operation of the other optical amplifier for the upstream direction and also stops transmitting the monitor light to the terminal station 1 in the upstream direction.