Abstract: A method, system and computer program product for obfuscating pseudocode (e.g., p-code, IL-code, byte-code, etc.), including creating a class-container; declaring an anonymizer method in the class-container; identifying method call instructions in the pseudocode; replacing, in the pseudocode, method calls with calls of the anonymizer method; and in the anonymizer method, adding the method call instructions. All or some of the added method calls have the same name. Parameter types of the added calls can be replaced with an abstract type. Return types of the added calls can be replaced with an abstract type. The class-container is a global class, and includes calls to public method, or the class-container is a private nested class, and includes calls to private methods, or two separate class-containers can be used.

Abstract: A system, method and computer program product for consolidation of incremental backups, wherein each incremental backup includes data and a backup map with links that point to data of current and/or previous backups, including selecting a plurality of incremental backups to be consolidated; combining the links in the backup maps of the selected backups into a single set of links; consolidating the selected backups to a new backup that contains the latest data from the selected backups, the latest data determined based on the links in the single set; updating the links in the single set to point to the data in the new backup; and storing the updated links in the new backup as part of a backup map of the new backup. The selected backups comprise one initial full backup and at least one incremental backup. In the combining step, the addresses from the backup maps of first backup of the selected sequence of backups up to the last created backup is checked.

Abstract: The present invention relates generally to a system and a method for dynamically adjusting data compression parameters. The process of dynamic transfer of data parameters from the sender to the receiver has four steps: determining optimal compression parameters, compressing data that are on a sender side using the selected algorithm, transferring compressed data from the sender to the receiver and decompressing received data on the receiver's side. On the sender side, the transmitting computer stores multiple compression algorithms, and one of these algorithms is used to compress the data. A monitoring agent monitors the available processor resources, data type, and network conditions. The monitoring agent also determines when to dynamically adjust the level of compression and/or compression algorithm and sends a signal when it decides dynamically adjust the level of compression. A selector dynamically changes the compression algorithm.

Abstract: A system for distributed file storage includes a plurality of servers providing, to a plurality of clients, file access services for accessing files stored on the plurality of servers. A list of neighbor servers is maintained by each server. The neighbor servers are a subset of the plurality of servers. At least one server of the plurality of servers is switched into a neighbor group of servers based on network distance. Each file is stored in the form of a plurality of N pieces on N servers, the pieces being generated from the file. The list is used to obtain information for reconstructing files stored on the neighbor servers, such that any K out of the N pieces can be used to reconstruct any file.

Abstract: In a computer system having a central processing unit (CPU) and a graphics processing unit (GPU), a system, method and computer program product for recovering a password used to encrypt a plaintext, including (a) generating N passwords on the CPU; (b) providing the N passwords to the GPU; (c) for each of the N passwords, calculating a transformed value from the password on the GPU, wherein the calculating is performed in parallel for all the N passwords provided to the GPU; (d) providing the N transformed values to the CPU; (e) at the CPU, testing the N transformed values for correctness; and (f) if none of the N transformed values are correct, repeating steps (a)-(e) for the next set of N passwords; (g) informing the user of a correct password.

Abstract: A heater has microchannels for uniform heating, and includes an upper plate having an inlet of material to be heated, a fuel inlet and an oxidant inlet. A lower plate has a heated material outlet and an exhaust gas outlet. A plurality of combustion thin plates and a plurality of heat transfer thin plates are alternately layered between the upper and lower plates. Each of the combustion thin plates and the heat transfer thin plates has an inlet hole of material to be heated, a heated material outlet hole, an oxidant hole, an exhaust gas hole, a fuel hole, and microchannels formed at respective corresponding positions. The upper plate is aligned with the combustion thin plate contacting the lower surface thereof, and the lower plate is aligned with the heat transfer thin plate contacting the upper surface thereof.

Abstract: A system, method and computer program product for virtualizing a processor and its memory, including a host operating system (OS); and virtualization software that maintains a virtualization environment for running a Virtual Machine (VM) without system level privileges and having a guest operating system running within the Virtual Machine. A plurality of processes are running within the host OS, each process having its own virtual memory, wherein the virtualization software is one of the processes. An image file is stored in persistent storage and maintained by the host operating system. The image file represents virtualized physical memory of the VM. A plurality of memory pages are aggregated into blocks, the blocks being stored in the image file and addressable in block form. The virtualization software manages the blocks so that blocks can be mapped to the virtualization software process virtual memory and released when the blocks are no longer necessary.

Abstract: A system, method and computer program product for system for detecting a rootkit on a computer having an operating system, including a native application in ring 0 which, when the operating system is in a trusted state upon a reboot of the computer, after loading of the boot drivers but before loading of non-boot drivers, generates a first snapshot for selected files of the operating system and for a registry; the first snapshot being stored on a persistent storage medium of the computer; a second snapshot for the selected files and for the registry generated by the ordinary application after the loading of the non-boot drivers, generating; means for comparing the second snapshot with the first snapshot; and upon detecting, in the comparing step, one of a masked file and a masked registry branch, means for informing a user of possible rootkit presence on the computer.

Abstract: A method of visualization of three-dimensional virtual objects in virtual space including (a) establishing a base coordinate system for a defined area of real space by placing, within the real space, a base group of ultrasonic transceivers that defines axes of a base coordinate system; (b) setting positions of the virtual objects in the virtual space relative to the base coordinate system a; (c) determining an observation point of a user relative to the virtual objects by locating a head ultrasonic transceiver mounted on a head of a user; (d) determining positions of multiple display units viewed by the user; (e) determining a position of the head ultrasonic transceiver relative to the base coordinate system; (f) determining positions of the transceivers mounted on the display units relative to the base coordinate system; (g) displaying the virtual objects on the multiple display units.

Abstract: A method of controlling operation of an installed component includes the steps of generating auxiliary information relating to the installed component in user space; launching a control program in operating system space for controlling operation of the installed component; and controlling, from the operating system space, the operation of the installed component using the auxiliary information. The installed component can be an operating system component running in a Virtual Private Server, or a component of third party software. The auxiliary information can be, e.g., time stamps, CRC, access control information, function names, function address offsets and function parameter passing information derived from the debug file. The controlling step can monitor behavior of the installed component. The auxiliary information can be generated based on a debug file, which can be a pdb file.

Abstract: A system, method and computer program product for a system, method and computer program product for controlling synchronization between a stationary computer and a mobile device, including detecting connection of the mobile device to the computer; intercepting a request for synchronization of data between the mobile device and the computer; parsing a data stream that transfers data between the computer and the mobile device; during the parsing, identifying objects within the data stream; determining if a particular identified object is of a type that is approved for synchronization; and permitting a selective transfer between the computer and the mobile device of those objects that are approved.

Abstract: A system, method and computer program product for a system, method and computer program product for controlling synchronization between a stationary computer and a mobile device, including detecting connection of the mobile device to the computer; intercepting a request for synchronization of data between the mobile device and the computer; parsing a data stream that transfers data between the computer and the mobile device; during the parsing, identifying objects within the data stream; determining if a particular identified object is of a type that is approved for synchronization; and permitting a selective transfer between the computer and the mobile device of those objects that are approved.

Abstract: A method of securely deleting data from a storage medium includes generating a bitmap that corresponds to unused locations on the storage medium; initiating a wiping process that wipes the unused locations, where the wiping process runs asynchronously with a application; wiping the unused locations; and updating the bitmap to reflect that the unused locations have been wiped. The wiping replaces data at the unused locations with random sequences, with pseudo-random sequences, with data generated by a secure deletion algorithm, with application data from the application, or with all zeros. The wiping includes repeated writing of predetermined sequences to the unused locations. The wiping replaces data at unused locations that represent portions of any of blocks, clusters and sectors, and can wipe any metadata associated with files previously stored at any of the unused locations.

Abstract: A system for managing computer game activities, includes a software module for interfacing to a user and receiving commands from a user; a plurality of games, each game including a wrapper that controls DRM aspects of a user's access to the games; a plurality of skins stored in a local cache on a computer, the skins controlling visual aspects of presentations of the games, each skin being associated with a distributor who provided a particular game to the user. The software module periodically contacts a first server to update skins, games and user settings. The user settings are stored on the first server and permit the user to play the games from another computer. At least one of the games was downloaded from a second server, and the skin corresponding to that game is associated with the second server. The software module provides a mechanism for paying for games. The wrapper restricts the user to playing only a trial version of the game, unless the user pays for the full version of the game.

Abstract: A system, method and computer program product for managing Virtual Private Servers, including launching a plurality of active Virtual Private Servers (VPSs) in user space of a computing system; generating a plurality of inactive VPSs, wherein data related to the inactive VPS comprises a set of files and links stored in a dedicated container; upon request from a user for a VPS, activating one of the inactive VPSs using the dedicated container using data related to the inactive VPS that comprises a set of files and links stored in a dedicated container; and configuring the activated VPS based on user parameters. The configuring step can include configuring any of URL names, IP addresses, passwords, resource allocations, DNS names, hostnames, VPS administrative functions, and VPS user password. The generating step optionally runs as a background process, or at a time of low system load.

Abstract: A method, system and computer program product for data backup such that: for each block of a storage device to be backed up to an image, generating a hash function value corresponding to contents of that block; generating a map of links between blocks in the image and corresponding blocks the storage device; using the hash function values to identify blocks of the storage device with identical contents, such that links for the blocks in the storage device with identical contents point to a single block in the image; and modifying the link in the map when a block in the storage is moved (for example, due to defragmentation) but its contents is not altered, so that the link points to the same backed up block.

Abstract: The present invention provides a highly scalable system for fault tolerant distributed data file storage over a set of functionally equal network servers linked through a local network with network servers and client computers. Data files are represented as a set of transactional records, each record is disassembled into redundant, functionally identical data pieces with original file reassembly dependent only upon the number of data file pieces and not on the presence or absence of any particular data file piece. Local algorithms generate unique data file identifiers upon file creation and disassembly. Changes to the data file storage system are ranked by creation time and stored as separate records with unique transaction identifiers in addition to unique data file identifiers. A transactional data file record is stored by disassembling the transactional file into pieces placed at the network servers. Low-level transactional files are collected to reassemble the data file contents.

Abstract: A method and system for managing files in a server environment includes launching a plurality of Virtual Private Servers (VPSs) in a computing system; copying a content of a file of a VPS to a shared space; providing access to the file copy in the shared space when the VPS attempts to access the file; detecting files with the same content in other VPSs; and providing access to the file copy in the shared space from the other VPSs when they attempt to access their files with the identical content.

Abstract: A method and system for a long range Radio Frequency (RF)-based identification, tracking and locating of objects. The method and system use a narrow bandwidth ranging signal(s), including VHF of lower frequency bands, which minimizes propagation loss and loss of accuracy of the RF locating signals. The method and system includes narrow bandwidth ranging signal multi-path mitigations processor, which further improves the track-locate accuracy. The signal is sent from a Master Unit(s) to a Tag. The signal traveling time is recorded and the distance between the Master(s) and the Tag is calculated. The method and system allow achieving a longer distance of the RF narrow bandwidth ranging signal penetration and an increased accuracy by using VHF bands in conjunction with the narrow bandwidth ranging signal multi-path mitigations processor. The techniques of Digital Signal Processing and Software-Defined Radio are used. The actual waveforms transmitted and received by the radios are defined by the software.

Abstract: A computer system includes a Hypervisor having the highest privilege level; a Primary Virtual Machine Monitor (VMM) running with the same or fewer privileges than the Hypervisor; and a Primary Virtual Machine (PVM) without system level privileges and having a Primary operating system (POS) running within it. The POS can be the same operating system that ran on the computer system prior to activation of the Hypervisor. The POS can have hardware drivers used by other components for accessing hardware through the POS. The Hypervisor can have hardware drivers used by other components for accessing hardware through the Hypervisor. Alternatively, the POS can have some hardware drivers used by other components for accessing hardware, and the Hypervisor can have other hardware drivers used by the other components for accessing other hardware through the Hypervisor. The POS can have direct access to at least some real hardware devices.