Abstract: A computer security monitoring system and method are disclosed that feature, in one general aspect, monitoring on an ongoing basis for evidence of the presence of infected systems in one or more networks that are each associated with a monitored organizational entity possessing digital assets, continuously updating risk profiles for the entities based on information about intrusion features from the monitoring, aggregating risk scores for the entities, and electronically reporting the aggregated risk score to an end user. In another general aspect, a method is disclosed that includes acquiring and storing data relating to interactions with malware controllers over a public network, acquiring and storing a map of relationships between networks connected to the public network, extracting risk data from the stored interaction data and the stored relationship map by cross-referencing the acquired interaction data against the map of relationships, and issuing security alerts based the extracted risk data.

Abstract: Disclosed, in one general aspect, is a computer network security monitoring method that includes continuously gathering and storing machine-readable identity information records of different types for different individuals, and continuously deriving and storing general-purpose blended identity risk profiles for the individuals based on the continuously gathered machine-readable identity information records of the different types.

Abstract: Disclosed, in one general aspect, is a computer-based method and apparatus for extracting predictive information from a collection of stored, machine-readable electronic documents. The method includes accessing at least a subset of the electronic documents each including different machine-readable predictive information about one or more future facts occurring after a publication time for that document. The method also includes extracting the predictive information about the one or more future facts from the accessed documents, and deriving one or more predicted query information items based on the predictive information extracted in the step of extracting.

Abstract: A computer security monitoring system and method are disclosed that feature, in one general aspect, monitoring on an ongoing basis for evidence of the presence of infected systems in one or more networks that are each associated with a monitored organizational entity possessing digital assets, continuously updating risk profiles for the entities based on information about intrusion features from the monitoring, aggregating risk scores for the entities, and electronically reporting the aggregated risk score to an end user. In another general aspect, a method is disclosed that includes acquiring and storing data relating to interactions with malware controllers over a public network, acquiring and storing a map of relationships between networks connected to the public network, extracting risk data from the stored interaction data and the stored relationship map by cross-referencing the acquired interaction data against the map of relationships, and issuing security alerts based the extracted risk data.

Abstract: Disclosed, in one general aspect, is a network security system that includes a network traffic analysis tool operative to extract information about traffic with suspected attack support infrastructure addresses. An automated traffic pattern recognition tool is responsive to information extracted by the network traffic analysis tool and to enrichment data, and is operative to detect patterns in the extracted traffic information. An identification tool is responsive to the pattern recognition tool to identify victims associated with the suspected attack support infrastructure addresses based on patterns detected in the extracted traffic information. And the system includes storage that is responsive to the identification tool for storing the recorded suspected attack support infrastructure addresses and identified victims on an ongoing basis.

Abstract: Disclosed, in one general aspect, is a network security system that includes pipeline storage operative to receive a series of malware samples. A sandboxed operating environment is responsive to the pipeline storage and operative to automatically retrieve successive malware samples from the pipeline storage, to run each of the malware samples in the sandboxed operating environment after it is retrieved, and to analyze at least some communication from each of the malware samples as they are run. A verdict output is responsive to the sandboxed operating environment to provide a verdict for malicious internet infrastructure associated with at least some of the malware samples run in the sandboxed operating environment.

Abstract: A computer security monitoring system and method are disclosed that feature, in one general aspect, monitoring on an ongoing basis for evidence of the presence of infected systems in one or more networks that are each associated with a monitored organizational entity possessing digital assets, continuously updating risk profiles for the entities based on information about intrusion features from the monitoring, aggregating risk scores for the entities, and electronically reporting the aggregated risk score to an end user. In another general aspect, a method is disclosed that includes acquiring and storing data relating to interactions with malware controllers over a public network, acquiring and storing a map of relationships between networks connected to the public network, extracting risk data from the stored interaction data and the stored relationship map by cross-referencing the acquired interaction data against the map of relationships, and issuing security alerts based the extracted risk data.

Abstract: A computer security monitoring system and method are disclosed that feature, in one general aspect, monitoring on an ongoing basis for evidence of the presence of infected systems in one or more networks that are each associated with a monitored organizational entity possessing digital assets, continuously updating risk profiles for the entities based on information about intrusion features from the monitoring, aggregating risk scores for the entities, and electronically reporting the aggregated risk score to an end user. In another general aspect, a method is disclosed that includes acquiring and storing data relating to interactions with malware controllers over a public network, acquiring and storing a map of relationships between networks connected to the public network, extracting risk data from the stored interaction data and the stored relationship map by cross-referencing the acquired interaction data against the map of relationships, and issuing security alerts based the extracted risk data.

Abstract: Computer security systems and methods are disclosed. In one general aspect, a computer security monitoring method is disclosed that includes continuously gathering machine-readable facts relating to a number of topics and continuously deriving and storing risk profiles for a plurality of monitored entities based on at least some of the facts. This method also includes providing an ontology that associates a different subset of the monitored entities to each of a plurality of organizational entities possessing digital assets, aggregating the risk scores for the scored entities for each of the organizational entities based on the associations in the ontology to derive an aggregated risk score, and electronically reporting the aggregated risk score to an end user.

Abstract: A housing for use in high-pressure fluid applications, and in particular a structure for the fluid end of a multi-cylinder reciprocating pump used in oilfield, wherein the structure includes features such as ruled surfaces and increased sidewall thickness to improve resistance to stress applied and has an extended the service life.

Abstract: A housing for use in high-pressure fluid applications, and in particular a structure for the fluid end of a multi-cylinder reciprocating pump used in oilfield, wherein the structure includes features such as ruled surfaces and increased sidewall thickness to improve resistance to stress applied and has an extended the service life.

Abstract: A housing for use in high-pressure fluid applications, and in particular a structure for the fluid end of a multi-cylinder reciprocating pump used in oilfield, wherein the structure includes features such as ruled surfaces and increased sidewall thickness to improve resistance to stress applied and has an extended the service life.

Abstract: In one general aspect, a network security system is disclosed that includes a network interface operative to connect the system to a public wide area network and a first malicious activity detection subsystem operatively connected to the network interface and operative to extract from textual sources on the network different threat levels in a first threat category for each of at least some addresses on the wide area network. One or more further malicious activity detection subsystems are operatively connected to the network interface and operative to extract from textual sources on the network different threat levels in each of one or more further threat categories for each of at least some addresses on the wide area network.

Abstract: A housing for use in high-pressure fluid applications, and in particular a structure for the fluid end of a multi-cylinder reciprocating pump used in oilfield, wherein the structure includes features such as ruled surfaces and increased sidewall thickness to improve resistance to stress applied and has an extended the service life.

Abstract: Disclosed, in one general aspect, is a computer-based method and apparatus for extracting predictive information from a collection of stored, machine-readable electronic documents. The method includes accessing at least a subset of the electronic documents each including different machine-readable predictive information about one or more future facts occurring after a publication time for that document. The method also includes extracting the predictive information about the one or more future facts from the accessed documents, and deriving one or more predicted query information items based on the predictive information extracted in the step of extracting.

Abstract: Disclosed, in one general aspect, is a computer-based method and apparatus for extracting predictive information from a collection of stored, machine-readable electronic documents. The method includes accessing at least a subset of the electronic documents each including different machine-readable predictive information about one or more future facts occurring after a publication time for that document. The method also includes extracting the predictive information about the one or more future facts from the accessed documents, acquiring verified information about one or more of the facts, and evaluating a measure of quality of the predictive information extracted from the documents based on the verified information about the facts.