Abstract: Methods, systems, and devices for protecting against abnormal computer behavior are described. The method may include monitoring a computer process related to an application running on a computing device of one or more computing devices, analyzing a database including a set of digital fingerprints, where a digital fingerprint of the set of digital fingerprints relates to the application, the digital fingerprint including an indication of a set of computer processes related to the application that are classified as normal computer processes for the application, determining that the computer process related to the application is an abnormal computer process based on analyzing, and performing a security action on the computing device to protect the computing device against the abnormal computer process based on the determining.

Abstract: A method to secure data and hardware associated with a computing device is described. A request to initiate a secondary operating system is received. The secondary operating system may be partitioned from a primary operating system. In one embodiment, a reporting program may be executed on the secondary operating system and may also be isolated from the primary operating system. A determination may be made as to whether characteristics of the secondary operating system have been altered. The request to initiate the secondary operating system may be denied if characteristics of the secondary operating system have been altered. However, the secondary operating system may be initiated if characteristics of the secondary operating system have not been altered. In addition, the primary operating system may be initiated if characteristics of the secondary operating system have not been altered.