Abstract: A facility for receiving an embedded policy is provided. The facility checks an application program image for the presence of an embedded policy. If an embedded policy is detected, the facility extracts the policy from within the application program image. The facility may then apply the extracted policy to the application program image before the application program image is loaded and/or executed. Moreover, the facility may check the application program image's integrity prior to extracting the embedded policy.

Abstract: A system and method for rapidly processing a specimen. The method includes generating a plurality of charged-particle beams travelling substantially along respective axes of an array of charged-particle beam columns by providing each beam column with two permanent magnets having at least one magnetic dipole disposed in a plane perpendicular to the axis. The trajectory of the beams is independently controlled and the beam is focussed onto the specimen using additional correctional coils. The beams are deflected while maintaining incidence of the beam on the specimen parallel to the axis. Preferably, the charged particle beams include non-crossover charged particle beams. Preferably, the method further includes detecting charged particles scattered from the specimen using a detector at least partially immersed in a magnetic field, by utilizing at least in part the magnetic field.

Abstract: A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Abstract: A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

Abstract: A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

Abstract: A method for inspecting a repeating pattern of a sample for defects. The repeating pattern has a translation vector, which defines a separation of substantially identical sections of the repeating pattern. The repeating pattern has a first section and a second section which are separated substantially by the translation vector. The method includes comparing the first section and the second section to identify a discrepancy indicative of a possible defect. The method also includes analyzing a reference data source in order to identify if the defect exists, and when the defect exists, in which one of the first section and the second section the defect exists. The reference data source is derived from a source exogenous to the sample.

Abstract: A scanning system for use in inspecting or writing on a substrate minimizes vibrations by applying movement-actuating forces directly between a carriage and a countermass which are both free to move along parallel tracks. Forces for decelerating and accelerating the scanning carriage are preferably applied along a minor part of a length of movement of the carriage. The carriage is then isolated from forces applied parallel to the track while moving along a major part of its length of movement. As a result, the carriage travels smoothly with approximately uniform speed during it's operative pass, without suffering from vibrations introduced by direct closed-loop feedback control.

Abstract: A method to compare similar physical areas of an inspection area using a scanning arrangement. The inspection area has a periodic pattern having a repeat vector. The scanning arrangement has a stage, a drive mechanism and at least one circular scanner. The circular scanner has a scanning head and an axis of rotation about which the scanning head performs a circular scanning motion. The drive mechanism is configured to provide relative movement between the stage and the axis of rotation. The method includes the steps of: scanning the inspection area by a combination of circular scanning of the scanning head and by generating relative movement between the stage and the axis of rotation such that pairs of curved scanning paths are related by an integer multiple of the repeat vector; and comparing at least one of said pairs of the curved scanning paths by a pixel to pixel comparison.

Abstract: A method to compare similar physical areas of an inspection area using a scanning arrangement. The inspection area has a periodic pattern having a repeat vector. The scanning arrangement has a stage, a drive mechanism and at least one circular scanner. The circular scanner has a scanning head and an axis of rotation about which the scanning head performs a circular scanning motion. The drive mechanism is configured to provide relative movement between the stage and the axis of rotation. The method includes the steps of: scanning the inspection area by a combination of circular scanning of the scanning head and by generating relative movement between the stage and the axis of rotation such that pairs of curved scanning paths are related by an integer multiple of the repeat vector; and comparing at least one of said pairs of the curved scanning paths by a pixel to pixel comparison.

Abstract: A method to scan a surface having a periodic pattern using a scanner. The periodic pattern has a first direction of periodicity having a periodic length. The scanner is configured to produce an image having a plurality of pixels, each of the pixels having a pixel origin. The method includes the steps of positioning the first direction of periodicity of the periodic pattern at an angle relative to the scanning direction of the scanner and scanning the surface by generating relative movement between the scanner and the surface.

Abstract: The present invention is a method of creating a secure sandbox within which a plurality of downloaded software components can execute in a secure manner. The software components can be of any type, e.g., Java, ActiveX, Netscape plugin, etc. The invention implements a security monitor that is injected to the address space of an arbitrary monitored application such as a Web browser, e.g., Internet Explorer, Netscape Navigator, etc. The monitored application then executes in a secure mode in which every software component downloaded executes in a secure sandbox. The security monitor detects when such a software component is downloaded and is operative to create the sandbox around it before it is permitted to execute. If the software component attempts to commit an action that breaches security, it halts the software component's execution and issues a warning to the user. The security monitor detects attempted security breaches by the software component in accordance with a user configurable security policy.