Abstract: A method of providing access to data via a public communications network includes the receiving a first data session request having a storage group mark, the storage group mark defining a server storage group, a load balancer route the request to a first server that processes request and any related session information, storing any altered first session data in a data storage. The load balancer receives a second request, wherein the second request also has the same storage group mark. The load balance selects a second server to respond to the second request. As before, the second server processes the second request and the altered first session data loaded from the data storage. After processing, the second server stores any altered second session data in the stored data on the first server as well as the second server and returns the altered second session data.

Abstract: A method of providing access to data via a public communications network includes the receiving a first data session request having a storage group mark, the storage group mark defining a server storage group, a load balancer route the request to a first server that processes request and any related session information, storing any altered first session data in a data storage. The load balancer receives a second request, wherein the second request also has the same storage group mark. The load balance selects a second server to respond to the second request. As before, the second server processes the second request and the altered first session data loaded from the data storage. After processing, the second server stores any altered second session data in the stored data on the first server as well as the second server and returns the altered second session data.

Abstract: A method of detecting malware at a computing device. The method includes examining a software program comprising a sequence of program instructions, determining whether each instruction in the sequence meets any of a group of suspicion criteria, assigning a instruction-level score to each instruction that meets any of the suspicion criteria, summing the instruction-level scores for each instruction to yield a program-level score, determining whether the program-level score exceeds a threshold, and, if the program-level score exceeds a threshold, developing a report indicating a malware detection result.

Abstract: A method of automatically identifying malware may include receiving, by an expert system knowledge base, an assembly language sequence from a binary file, identifying an instruction sequence from the received assembly language sequence, and classifying, by the expert system knowledge base, the instruction sequence as threatening, non-threatening or non-classifiable by applying one or more rules of the expert system knowledge base to the instruction sequence. If the instruction sequence is classified as threatening, information may be transmitted to a code analysis component and a user may be notified that the binary file includes malware. The information may include one or more of the following: the instruction sequence, a label comprising an indication that the instruction sequence is threatening, and a request that one or more other assembly language sequences from the binary file be searched for at least a portion of the instruction sequence.