Abstract: Execution of an application in an application-level sandbox is disclosed. A request to launch an application is received by an operating system executing on a device. A determination is made that a stored copy of the application should be executed within an application-level sandbox. The stored copy of the application is executed in the application-level sandbox.

Abstract: A method and system for detecting glucose in a biological sample is disclosed. This includes illuminating a biological sample with a light source, collecting transmitted, transflected or reflected light from the sample with a detector, generating spectral data of one or more components in the sample other than glucose in a spectral data analysis device, and analyzing the spectral data of the one or more components, sufficient to provide a glucose measurement from the spectral data of the one or more components other than glucose with the spectral data analysis device.

Abstract: Evaluating samples is disclosed. A sample is received. A system component dependency graph is built for the sample. The system component dependency graph includes a plurality of nodes and at least one edge. A first node included in the plurality of nodes is one of: (1) a system component, (2) an indirect call component, or (3) a system event. The edge is an indirect call instruction. A verdict for the sample is determined based at least in part on the system component dependency graph.

Abstract: Network traffic collectively associated with a set of communications made between a client device and a respective first and second resource during a usage of a program executed on the client device is monitored. At least of the monitored traffic associated with the second resource is encrypted. The encrypted traffic is categorized. A respective first and second policy to apply to the respective first and second communications is determined. The second policy is based at least in part on the categorization of the encrypted traffic.

Abstract: Execution of an application in an application-level sandbox is disclosed. A request to launch an application is received by an operating system executing on a device. A determination is made that a stored copy of the application should be executed within an application-level sandbox. The stored copy of the application is executed in the application-level sandbox.

Abstract: Network traffic associated with a communication between a client device and a resource is monitored. At least of the monitored traffic is encrypted. The encrypted traffic is categorized. One example way to categorize the encrypted traffic includes using Domain Name System (DNS) query information. A policy is applied to the communication based at least in part on the categorization of the encrypted traffic.

Abstract: Systems and methods are disclosed for non-invasively measuring blood glucose levels in a biological sample based on spectral data. This includes utilizing at least one light source configured to strike a target area of a sample, utilizing at least one light filter positioned to receive light transmitted through the target area from the at least one light source, utilizing at least one light detector positioned to receive light from the at least one light source and filtered by the at least one light filter, and to generate an output signal, having a time dependent current, which is indicative of the power of light detected, receiving the output signal from the at least one light detector with a processor and based on the received output signal, calculating the attenuance attributable to blood in a sample with a signal-to-noise ratio of at least 20-to-1; and determining a blood glucose level.

Abstract: Evaluating samples is disclosed. A sample is received. A system component dependency graph is built for the sample. In particular: (1) a dependency relation between at least one system event and at least one system component is analyzed; (2) dependency relations between a plurality of system components are analyzed; and (3) a dependency relation between at least one system component and at least one indirect call component is analyzed. A verdict for the sample is determined based at least in part on the system component dependency graph.

Abstract: A method and system for detecting glucose in a biological sample is disclosed. This includes illuminating a biological sample with a light source, collecting transmitted, transflected or reflected light from the sample with a detector, generating spectral data of one or more components in the sample other than glucose in a spectral data analysis device, and analyzing the spectral data of the one or more components, sufficient to provide a glucose measurement from the spectral data of the one or more components other than glucose with the spectral data analysis device.

Abstract: The automatic generation of malware family signatures is disclosed. A set of metadata associated with a plurality of samples is received. The samples are clustered. For members of a first cluster, a set of similarities shared among at least a portion of the members of the first cluster is determined. The similarities are evaluated for suitability as a malware family signature. Suitability is evaluated based on how well the similarities uniquely identify the members of the first cluster. In the event the similarities are determined to be suitable as a malware family signature, a signature is generated.

Abstract: An indication of an application to be installed on a local device is received. A request is transmitted to a remote server for information associated with the application. In some cases, in response to the receipt of a report from the remote server, a set of rules restricting behaviors of the application is implemented at the local device. In some cases, in response to the receipt of a report from the remote server, the installation of the application on the local device is prevented.

Abstract: A virtualized storage for use in performing dynamic analysis on a sample is configured, at least in part by copying the sample to the virtualized storage. A virtual machine emulator is launched using a snapshot of a virtualized platform. The virtualized platform is previously configured to use the virtualized storage, and the snapshot is configured to use a placeholder file to occupy space for later use when installing the sample. A location of the copied sample in an image corresponding to the virtualized storage is determined. The copied sample is installed and dynamic analysis is performed on the sample.

Abstract: Systems and methods are disclosed for non-invasively measuring blood glucose levels in a biological sample based on spectral data. This includes utilizing at least one light source configured to strike a target area of a sample, utilizing at least one light filter positioned to receive light transmitted through the target area from the at least one light source, utilizing at least one light detector positioned to receive light from the at least one light source and filtered by the at least one light filter, and to generate an output signal, having a time dependent current, which is indicative of the power of light detected, receiving the output signal from the at least one light detector with a processor and based on the received output signal, calculating the attenuance attributable to blood in a sample with a signal-to-noise ratio of at least 20-to-1; and determining a blood glucose level.

Abstract: Systems and methods are disclosed for non-invasively measuring blood glucose levels in a biological sample based on spectral data. This includes at least one light source configured to strike a target area of a sample, at least one light detector positioned to receive light from the at least one light source and to generate an output signal, having a time dependent current, which is indicative of the power of light detected, a processor configured to receive the output signal from the at least one light detector based on the received output signal, calculate the attenuance attributable to blood in a sample present in the target area with a ratio factor, eliminate effect of uncertainty caused by temperature dependent detector response of the at least one light detector, and then determine a blood glucose level associated with a sample present in the target area based on the calculated attenuance with the processor.

Abstract: Systems and methods are disclosed for non-invasively measuring blood glucose levels in a biological sample based on spectral data. This includes at least one light source configured to strike a target area of a sample, at least one light detector, which includes a preamplifier having a feedback resistor, positioned to receive light from the at least one light source and to generate an output signal, having a time dependent current, which is indicative of the power of light detected, and a processor configured to receive the output signal from the at least one light detector and based on the received output signal, calculate the attenuance attributable to blood in a sample present in the target area and eliminate effect of uncertainty caused by temperature dependent detector response of the at least one light detector, and based on the calculated attenuance, determine a blood glucose level associated with a sample.

Abstract: The automatic generation of malware family signatures is disclosed. A set of metadata associated with a plurality of samples is received. The samples are clustered. For members of a first cluster, a set of similarities shared among at least a portion of the members of the first cluster is determined. The similarities are evaluated for suitability as a malware family signature. Suitability is evaluated based on how well the similarities uniquely identify the members of the first cluster. In the event the similarities are determined to be suitable as a malware family signature, a signature is generated.

Abstract: A multi-mechanism wet dust removal apparatus that circulates water and removes ambient dust, and a dust removal method. The multi-mechanism wet dust removal apparatus includes a dust collecting device, a dust settling and air-water separation device, a water circulating device, and a dust discharging device. The dust removal is achieved by dust collecting, dust settling, air-water separation and dust discharging. Water can be recycled and the dust removal method integrates multiple dust removal mechanisms.

Abstract: A sample is analyzed to determine a set of events that should be selected for performing by a dynamic analyzer executing the sample in an instrumented, emulated environment. In some cases, analyzing the sample includes extracting the sample's user interface layout into a tree hierarchy of user interface elements. The set of selected events is performed. In some cases, at least one emulator detection resistance action is performed. A maliciousness verdict is determined for the sample based at least in part on one or more responses taken by the sample in response to the set of selected events being performed by the dynamic analyzer.

Abstract: A virtualized storage for use in performing dynamic analysis of a sample is configured, at least in part by copying the sample to the virtualized storage. A virtual machine emulator is launched using a snapshot of a virtualized platform. A location of the copied sample in an image corresponding to the virtualized storage is determined, at least in part by identifying an offset. The copied sample is installed and dynamic analysis is performed on the sample.

Abstract: Systems and methods are disclosed for non-invasively measuring blood glucose levels in a biological sample based on spectral data. This includes at least one light source configured to strike a target area of a sample, at least one light detector positioned to receive light from the at least one light source and to generate an output signal, having a time dependent current, which is indicative of the power of light detected, a processor configured to receive the output signal from the at least one light detector based on the received output signal, calculate the attenuance attributable to blood in a sample present in the target area with a ratio factor, eliminate effect of uncertainty caused by temperature dependent detector response of the at least one light detector, and then determine a blood glucose level associated with a sample present in the target area based on the calculated attenuance with the processor.