Abstract: A method for producing a set of indicators of unwanted activity in a computer system, comprising: receiving a plurality of input data sets, each describing system activity and comprising an infection label and system activity information collected from a computer system; producing a plurality of training sets each comprising: 1) a plurality of activity values, each indicative of execution of an instruction, extracted from one of the plurality of input data sets, and 2) a respective infection label; producing for each training set one of a plurality of sets of relevant activity values by: training a model to output, in response to the respective training set, an infection classification equal to respective infection label; and analyzing the model to identify a set of relevant activity values, of the plurality of activity values, effecting the infection classification; and analyzing the plurality of sets of relevant activity values to produce the indicators.

Abstract: A system for processing digital images comprising: at least one remote hardware processor; and at least one device, comprising at least one processing circuitry configured for: receiving from at least one image sensor, electrically coupled to the processing circuitry, at least one digital image captured by the at least one image sensor; partitioning at least one object, identified in the at least one digital image, into a plurality of object segments; replacing in the at least one digital image each of the plurality of object segments with a schematic segment, illustrating respective object segment, to produce at least one schematic image; and sending the at least one schematic image to the remote hardware processor; wherein the remote hardware processor is adapted to: receiving the at least one schematic image from the at least one device; analyzing the at least one schematic image to identify at least one behavioral pattern.

Abstract: There is provided a computer implemented method for analyzing a thermal image for enforcing mask wearing compliance, comprising: receiving a thermal image of a subject captured by a sensor, analyzing the thermal image to identify an indication of estimated temperature of a region of a face of the subject, in response to the estimated temperature being below a temperature threshold, detecting lack of mask wearing compliance, and generating instructions for meeting proper mask wearing compliance.

Abstract: There is provided a system for measuring a physiological parameter of a person indicative of physiological pathology, comprising: a plurality of remote non-contact sensors, each of a different type of sensing modality, at least one hardware processor executing a code for: simultaneously receiving over a time interval, from each of the plurality of remote non-contact sensors monitoring a person, a respective dataset, extracting, from each respective dataset, a respective sub-physiological parameter of a plurality of sub-physiological parameters, analyzing a combination of the plurality of sub-physiological parameters, and computing a physiological parameter indicative of physiological pathology according to the analysis, wherein an accuracy of the physiological parameter computed from the combination is higher than an accuracy of the physiological parameter independently computed using any one of the plurality of sub-physiological parameters.

Abstract: Provided herein are methods and systems for verifying a path in a monitored space, comprising transmitting a device identification (ID) of the mobile wireless device while the mobile wireless device moves through a monitored space, receiving one or more location certificates transmitted, in response to reception of the device ID, by one or more wireless transceivers deployed at a predefined location in the monitored space and having a limited transmission range, each location certificate comprising at least the device ID and a transceiver ID of the respective wireless transceiver, storing the one or more location certificates, and transmitting the one or more location certificates to one or more verification units configured to verify a path of the mobile wireless device in the monitored space estimated according to the predefined location of the one or more wireless transceivers identified by the transceiver ID extracted from the one or more location certificates.

Abstract: Provided herein are methods and systems for verifying a path in a monitored space, comprising transmitting a device identification (ID) of the mobile wireless device while the mobile wireless device moves through a monitored space, receiving one or more location certificates transmitted, in response to reception of the device ID, by one or more wireless transceivers deployed at a predefined location in the monitored space and having a limited transmission range, each location certificate comprising at least the device ID and a transceiver ID of the respective wireless transceiver, storing the one or more location certificates, and transmitting the one or more location certificates to one or more verification units configured to verify a path of the mobile wireless device in the monitored space estimated according to the predefined location of the one or more wireless transceivers identified by the transceiver ID extracted from the one or more location certificates.

Abstract: A computer implemented method of planning a drone flight path to increase safety of dynamic objects the drone is estimated to encounter along the flight path based on a mobility model constructed to predict movement of dynamic objects, comprising receiving sensory data captured over time by one or more sensors monitoring movement of a plurality of dynamic objects in a certain geographical area, analyzing the sensory data to identify one or more mobility patterns of one or more dynamic objects detected in the certain geographical area, updating a mobility model with the mobility pattern(s) and generating a planned flight path based on the mobility model for one or more drones planned to fly in the certain geographical area, the flight path is planned to maintain a predefined safety space between the drone(s) and the dynamic object(s).

Abstract: A method of monitoring network traffic in a communication network with a sentinel module to detect malicious activity is described. A gateway sentinel module receives network traffic directed through a gateway installed for a local distribution of the network, the gateway connecting the local distribution of the network to a core of the network. Malicious activity in the local distribution is detected based on a combination of: a local machine-learning model for identifying malicious activity in the local distribution, the local machine-learning model modelling network traffic from the local distribution; and a global machine-learning model. The global machine-learning model models network traffic from a plurality of local distributions of the network based training data from a plurality of local sentinel modules executed on a respective plurality of computing nodes. The computing nodes respectively receive network traffic from the plurality of location distributions.

Abstract: A method for automatic monitoring of industrial control systems, comprising: monitoring an environment by an electromagnetic sensor to measure a plurality of electromagnetic pulses emitted by at least one industrial control device during operation of the at least one industrial control device; calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses; matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and the at least one normal data pattern to automatically detect at least one abnormal data pattern; and sending automatically a security alert in response to the abnormal data pattern.

Abstract: There is provided a method of computing head pose of a subject in a 2D image, comprising: analyzing the image to identify a first nostril, a second nostril, a medial eye substructure of a first and a second eye, and a lateral eye substructure of the first and the second eye, computing a median nostril point between the first and second nostrils, computing a horizontal line that connects the lateral eye substructures of the first and second eyes, computing a vertical axis line that is orthogonal to the horizontal line and passes through a median eye point between the medial eye substructures of the first and second eyes, computing an offset distance between the vertical axis line and the median nostril point, and computing an indication of an estimated yaw angle of the head pose of the subject based on the offset distance.

Abstract: There is provided a computed implemented method of automatically generating an adapted presentation of at least one candidate anomalous object detected from anatomical imaging data of a target individual, comprising: providing anatomical imaging data of the target individual acquired by an anatomical imaging device, analyzing the anatomical imaging data by a detection classifier for detecting at least one candidate anomalous object of the anatomical imaging data and computed associated location thereof, computing, by a presentation parameter classifier, at least one presentation parameter for adapting a presentation of a sub-set of the anatomical imaging data including the at least one candidate anomalous object according to at least the location of the candidate anomalous object, and generating according to the at least one presentation parameter, an adapted presentation of the sub-set of the anatomical imaging data including the at least one candidate anomalous object.

Abstract: A computing device comprises a network element configured for receiving messages sent over a network from a control facility, a reduced instruction set computer processing circuitry comprising a central processing unit (CPU) and a secure hardware-implemented module adapted to verify that a signed PKI message is encoded in the received messages at a plurality of sequential intervals and to either switch the CPU from an operational state to a safe state, or prevent switching of the CPU from the safe state to the operational state, when a receipt of a signed PKI message is not verified in one of the sequential intervals. In the operational state, the CPU accesses a memory address space in the processing circuitry for executing software-based commands. In the safe state the CPU is prevented from executing the software-based commands while access to the memory address space is retained.

Abstract: A method of adapting a display comprises receiving a sequence of a plurality of facial images of a face of at least one user located in front of a display; analyzing the plurality of facial images to detect a hand to face gesture of the user; and updating, according to the hand to face gesture, a dataset documenting a plurality of facial touch event frequencies of a plurality of facial touch events in a plurality of facial locations. Each of the plurality of facial touch events is prompted by one of a plurality of previously captured hand to face gestures of the user. The method further comprises, based on the plurality of facial touch event frequencies, generating a presentation on the display. In response to detection of an impending facial touch, a destruction event may be depicted. A presentation may be also generated showing scoring of multiple persons.

Abstract: A method of authenticating physical activity in a monitored space, comprising: obtaining monitored space activity data from at least one activity detector deployed in the monitored space to capture simultaneously physical activity of a plurality of moving objects in said monitored space; analyzing said monitored space activity data to identify a plurality of spatiotemporal movement patterns in said monitored space; obtaining a plurality of inertial data patterns from each one of a plurality of applications executed in a plurality of mobile devices, each one of said inertial data patterns is recorded using an inertial sensing device installed in one of said plurality of mobile devices, each one of said plurality of mobile devices is associated with one of a plurality of persons; identifying at least one correlation between at least one of said plurality of inertial data patterns and at least one of said plurality of spatiotemporal movement patterns; authenticating said physical activity according to said at le

Abstract: A system for processing digital images comprising: at least one remote hardware processor; and at least one device, comprising at least one processing circuitry configured for: receiving from at least one image sensor, electrically coupled to the processing circuitry, at least one digital image captured by the at least one image sensor; partitioning at least one object, identified in the at least one digital image, into a plurality of object segments; replacing in the at least one digital image each of the plurality of object segments with a schematic segment, illustrating respective object segment, to produce at least one schematic image; and sending the at least one schematic image to the remote hardware processor; wherein the remote hardware processor is adapted to: receiving the at least one schematic image from the at least one device; analyzing the at least one schematic image to identify at least one behavioral pattern.

Abstract: Provided herein are methods and systems for detecting counterfeit of a personal object, comprising, analyzing one or more images depicting a personal object to identify one or more wearing marks in the personal object induced by one or more wearing conditions, generating a wearing pattern comprising the one or more wearing marks, comparing between the wearing pattern and one or more previous wearing patterns created for the personal object based on past images of the personal object, and determining whether the personal object is genuine or counterfeit based on the comparison.

Abstract: Provided herein are methods, systems and computer program products for detecting tampering, comprising a sealing process and a seal verification process. The sealing process comprising analyzing a seal applied to seal an object as a tamper evident element, recording one or more manufacturing defects of the seal identified based on the analysis, each of the one or more manufacturing defects comprising one or more non-reproducible deviations from seal generation instructions used to produce the seal, and generating a signature comprising the one or more manufacturing defects. The seal verification process comprising obtaining the signature, analyzing the seal sealing the object, and determining whether the object is tampered based on a comparison between the analyzed seal and the signature.

Abstract: A method for performing secure computations on records, comprising: receiving a request to apply a computation on a record; assigning a respective partial record of a plurality of partial records of the record to each of a plurality of computational processes; instructing each of the plurality of computational processes to perform a computation scheme comprising: applying a semi honest multiparty computation on the partial record; iteratively repeating a predetermined number of times: using a secure multiparty arithmetic computation to generate random terms; using the secure multiparty arithmetic computation to assign the random terms and an outcome of the application to at least one predetermined equation; verifying an integrity of the semi honest multiparty computation by comparison of the assignments to the at least one predetermined equation to at least one constant; and when the integrity is valid, combining the applications of the semi honest multiparty computations on the partial records.

Abstract: Presented herein are systems and methods for detecting a boundary line crossing based on Round Trip Time (RTT) measured for wireless signals transmitted between and initiator wireless transceiver and a responder wireless transceiver deployed to form a straight boundary line. The initiator wireless transceiver transmits wireless probe signal(s) to the responder wireless transceiver, receives a wireless response signal transmitted by the responder wireless transceiver in response to the wireless probe signal(s), calculates an RTT combining a travel time of the wireless probe signal(s) and the travel time of the wireless response signal(s), compares the RTT to a reference RTT computed for a wireless probe signal and a corresponding wireless response signal transmitted in a clear straight transmission path while the boundary line is clear of obstacles and determines whether an object is blocking the straight transmission path based on a deviation of the RTT from the reference RTT.

Abstract: A method for automatic monitoring of industrial control systems, comprising: monitoring an environment by an electromagnetic sensor to measure a plurality of electromagnetic pulses emitted by at least one industrial control device during operation of the at least one industrial control device; calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses; matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and the at least one normal data pattern to automatically detect at least one abnormal data pattern; and sending automatically a security alert in response to the abnormal data pattern.