Abstract: The present invention provides a method and system of detecting malicious behavior in a series of data transmission de-duplication requests of a de-duplicated computer system. In an exemplary embodiment, the method and system include, (1) if the series includes at least one particular de-duplication request for particular data and a reply to the particular request that the system does not have the particular data, processing at least one subsequent response and (2) determining the existence of the behavior from the at least one subsequent response.

Abstract: Embodiments of the invention relate to manipulating the original content of at least one original read-only computer file in a file-system of a computer system, where the computer system includes an operating system including a framework for in-line monitoring of accesses to the file-system. An exemplary embodiment, includes transforming the original content via a non-length-preserving data transformation algorithm, thereby resulting in transformed content, storing the transformed content in a transformed computer file, splitting the transformed computer tile into a first file and a second file, and associating the first file with the second file in the file-system. The non-length-preserving data transformation algorithm includes a length-increasing data transformation algorithm.

Abstract: Embodiments of the invention relate to reading at least one locked, encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system, with an added kernel driver, while the operating system is running and reading at least one locked, unencrypted computer file in a computer system with an operating system with an added kernel driver while the operating system is running. An exemplary embodiment includes getting the handle of the locked, encrypted computer file, causing encryption key information associated with the locked, encrypted computer file to be processed, and reading data from the locked, encrypted computer file by using the added kernel driver.

Abstract: A system, method, and computer program product for preventing a malicious user from analyzing and modifying software content. The one-way functions used in prior art systems using dynamically evolving audit logs or self-modifying applications are replaced with a one-way function based on group theory. With this modification, untampered key evolution will occur inside a defined mathematical group such that all valid key values form a subgroup. However, if the program is altered, the key will evolve incorrectly and will no longer be a member of the subgroup. Once the key value is outside of the subgroup, it is not possible to return it to the subgroup. The present invention provides a limited total number of valid keys. The key evolution points are not restricted to locations along the deterministic path, so the key can be used in various novel ways to regulate the program's behavior, including in non-deterministic execution paths.

Abstract: The present invention provides processor-implemented method and system of creating an assured execution environment for at least one computer program executable on a computer system. In an exemplary embodiment, the method and system include (1) converting the executable into a computer program targeted for the computer system, where the converting includes scrambling the executable by applying an encryption scheme to the executable and (2) executing the program on the computer system only if the program complies with a policy.

Abstract: The present invention provides a method, system, and service of analyzing electronic documents in an intranet, where the intranet includes a plurality of web sites. In an exemplary embodiment, the method, system, and service include (1) crawling HTML content and text content in a set of the sites, (2) deep-scanning non-HTML content and non-text content in the set of sites, (3) reverse-scanning the set of sites, (4) performing a semantic analysis of the crawled content and the deep-scanned content, (5) correlating the results of the semantic analysis with the results of the reverse-scanning, and (6) comparing user navigation patterns and content from the members of the set of sites. In a further embodiment, the method, system, and service further include combining the results of the performing, the results of the correlating, and the results of the comparing.

Abstract: The present invention provides a method and apparatus for helping a user form a structured diagram from an unstructured information source. Starting with one or more key information elements such as some special words, the requests of a customer contained in the information source can be obtained by performing interactive and iterative searching in the unstructured information source such as text, audio, video and etc., the artifacts representing them are drawn in the diagram, and linkages are established between the artifacts and the corresponding contents in the information source. The present invention also proposes that the distribution of established linkages can be used to check whether all the requests in the information source have been extracted in the diagram. Further, various levels of warnings can be shown according to the density of linkage distribution. Therefore the user can draw a structured diagram more conveniently and quickly, and can perform checking and reusing more easily.

Abstract: A system and a method for automatically generating new concepts based on existing ontologies are provided. The system creates new concepts in existing ontologies based on new concept descriptions expressed in a natural language format, and comprises: a normalizer for receiving and parsing the new concept descriptions so as to transform them into normalized one and output them, wherein said normalized concept description includes one or more description part(s) having kernel concepts, said description parts can only contain the terms which can be identified in said existing ontologies, and each of said kernel concept contains a headword and zero or more property(s); and a new concept factory for, based on the normalized description of the new concept, identifying the kernel concepts in each normalized concept description part, and extracting the identified kernel concepts, related properties, and the relations among the kernel concepts for a user to create new concepts according to existing ontologies.

Abstract: When determining whether or not access by a user should be permitted by using policies, an access control determination device of the present invention expresses the access by the user to the data source with a predetermined path, retrieves an appropriate policy out of stored policies on the basis of the predetermined path, calculates an access permission value on the basis of the predetermined path, calculates an access effect value on the basis of the predetermined path and the policy which the policy retrieving unit has retrieved, and determines whether or not the access by the user to the data source should be permitted on the basis of the access permission value and the access effect value.

Abstract: The present invention discloses a method for dynamically generating an abstract from a search result abstract retrieved from a search engine. Preferably embodied as a software program, the present invention allows a user to “zoom” in and out of the abstract thereby retrieving greater or lesser details of the abstract to further determine whether the resource is useful or not. Groups of words within the search result abstract are searched for indexable words or key words useful to the user. The indexable words are then displayed to the user. Advantageously, the process of the present invention is performed entirely on the user side without having to reset the abstract level at the server side with a new query.

Abstract: The present invention provides a method and system of interconnecting L processors of a parallel computer to facilitate torus partitioning, (a) where each of the processors includes a processing unit and a switch, (b) where the switch includes a first external port, a second external port, a third external port, a fourth external port, a first internal port, and a second internal port, (c) where the L processors comprise R non-overlapping partitions, (d) where each of the partitions comprises the processing unit of at least one of the processors, and (e) where L is an integer ?2 and R is an integer ?1. In an exemplary embodiment, the method and system include connecting the L switches of the L processors among the external ports of the L switches in an extended torus architecture and setting the connected L switches thereby interconnecting each of the partitions as a torus.

Abstract: An invention for monitoring user choices and selections on a search result web page and providing alternative query expressions to further narrow and enhance the user's search. Monitoring and recording user choices and selections is achieved by a query manager. Query strings are then standardized. The search is performed on an Internet search engine, and each search result item in the result output set is then associated with a list of alternative standardized queries by an alternate query matching manager. Each search result item in the result output set that is associated with the alternate queries is then flagged. The resulting flagged list of alternative queries is displayed to the user by a page presentation manager using a graphical user interface for subsequent user selection. Upon selection of the graphical user interface for alternate query expressions, an alternate query selection manager retrieves and displays each alternate query to the user.

Abstract: The present invention provides a cross-bar circuit that implements a switch of a broadband processor. In an exemplary embodiment, the present invention provides a cross-bar circuit that, in response to partially-decoded instruction information and in response to datapath information, (1) allows any bit from a 2n-bit (e.g. 256-bit) input source word to be switched into any bit position of a 2m-bit (e.g. 128-bit) output destination word and (2) provides the ability to set-to-zero any bit in said 2m-bit output destination word. The cross-bar circuit includes: (1) a switch circuit which includes 2m 2n:1 multiplexor circuits, where each of the 2n:1 multiplexor circuits (a) has a unique n-bit (e.g.