Abstract: A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Abstract: A method is disclosed for fully automated segmentation of human vertebral body images in a CT (computerized tomography) study with no user interaction and no phantoms, which has resiliency to anatomical abnormalities, and protocol and scanner variations. The method was developed to enable automated detection of osteoporosis in CT studies performed for other clinical reasons. Testing with 1,044 abdominal CTs from multiple sites, resulted in detection of 96.3% of the vertebral bodies and 1% false positives. Of the detected vertebral bodies, 83.3% were segmented adequately for sagittal plane quantitative evaluation of vertebral fractures indicative of osteoporosis. Improved results were observed when selecting the best sagittal plane of 3 for each vertebra, yielding a segmentation success rate of 85.4%. The method is preferably implemented in software as a building block in a system for automated osteoporosis detection.

Abstract: A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Abstract: Systems, methods, and/or techniques (“tools”) that relate to an automated service for blocking malware hosts are described herein. In different implementations, the tools receive network addresses identifying hosts that are discovered to contain malware. The tools also provide the network addresses to a collection and storage service. Other components provided by the tools receive the network addresses from, for example, a plurality of reporting clients. These components may aggregate the network addresses across the reporting clients, and store instances of the malware and associated malware addresses.

Abstract: A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Abstract: A method Is disclosed for fully automated segmentation of human vertebral body images in a CT (computerized tomography) study with no user interaction and no phantoms, which has resiliency to, anatomical abnormalities, and protocol and scanner variations. The method was developed to enable automated detection of osteoporosis in CT studies performed for other clinical reasons. Testing with 1.044 abdominal CTs from multiple sites, resulted in detection of 96.3% of the vertebral, bodies and 1% false positives. Of the detected vertebral bodies, 83.3% were segmented adequately for sagittal plane quantitative evaluation of vertebral, fractures indicative of osteoporosis. Improved results were observed when selecting the best sagittal plane of 3 for each vertebra, yielding a segmentation success rate of 85.4%. The method is preferably implemented in software as a building block in a system for automated osteoporosis detection.

Abstract: A method and system for detecting and managing potential malware utilizes a preliminary signature to scan content and detect potential malware content based upon characteristics that match the preliminary signature. The detected content is detained for a predetermined period of time. If an updated signature is not received, the detained content may be purged, released or quarantined, based upon predetermined content policy. If an updated signature is received, the detained content is released from detention and rescanned with the updated signature. The content is then treated in accordance with the content policy, and again, can be purged, released, or quarantined.

Abstract: A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

Abstract: A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

Abstract: A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

Abstract: A method and system for detecting and managing potential malware utilizes a preliminary signature to scan content and detect potential malware content based upon characteristics that match the preliminary signature. The detected content is detained for a predetermined period of time. If an updated signature is not received, the detained content may be purged, released or quarantined, based upon predetermined content policy. If an updated signature is received, the detained content is released from detention and rescanned with the updated signature. The content is then treated in accordance with the content policy, and again, can be purged, released, or quarantined.

Abstract: A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

Abstract: Systems, methods, and/or techniques (“tools”) that relate to an automated service for blocking malware hosts are described herein. In different implementations, the tools receive network addresses identifying hosts that are discovered to contain malware. The tools also provide the network addresses to a collection and storage service. Other components provided by the tools receive the network addresses from, for example, a plurality of reporting clients. These components may aggregate the network addresses across the reporting clients, and store instances of the malware and associated malware addresses.

Abstract: A method and system are disclosed for reliably distributing file data from a single server to multiple client computers using a cyclical multicast approach. By “cyclical,” it is meant that data is distributed repeatedly onto the network at a certain period. The server transmits metadata asynchronously onto the network via a first communication channel, and file data via a second communication channel. Both data sets are received by one or more client devices operating a data catch module, which listens for metadata and file data from the network via a first and second communication channel. Once the metadata is received, the first channel is disconnected, and the one or more client devices operating the data catch module listen for file data for which the metadata is associated. Any file data not received during one cycle can be received by the client device in a subsequent cycle.

Abstract: A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Abstract: A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

Abstract: A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

Abstract: A method and system are disclosed for reliably distributing file data from a single server to multiple client computers using a cyclical multicast approach. By “cyclical,” it is meant that data is distributed repeatedly onto the network at a certain period. The server transmits metadata asynchronously onto the network via a first communication channel, and file data via a second communication channel. Both data sets are received by one or more client devices operating a data catch module, which listens for metadata and file data from the network via a first and second communication channel. Once the metadata is received, the first channel is disconnected, and the one or more client devices operating the data catch module listen for file data for which the metadata is associated. Any file data not received during one cycle can be received by the client device in a subsequent cycle.