Abstract: An anomaly monitoring system for a cyber-physical environment having at least one programmable logic controller (PLC) and a monitored component, the monitoring system having a human machine interface, a separate controller with at least a processor and associated memory, and providing a communication network for electronic communication between components of the cyber-physical environment, the anomaly monitoring system providing at least one plugin module to monitor the performance of the component and the PLC, as provided through the communication network through a PLC data collection module, the plugin comparing the data from the PLC data collection module to a model of learned behavior patterns, and thereby classify reviewed data as being normal or anomaly events.

Abstract: A behavioral malware detection involves extracting features from prefetch files, wherein prefetch files; classifying and detecting benign applications from malicious applications using the features of the prefetch files; and quarantining malicious applications based on the detection.

Abstract: A behavioral malware detection involves extracting features from prefetch files, wherein prefetch files; classifying and detecting benign applications from malicious applications using the features of the prefetch files; and quarantining malicious applications based on the detection.