Abstract: A system and method determines whether software includes malicious code. A validation machine is instrumented with tools and monitors that capture the static and dynamic behavior of software. Software under examination is executed on the validation machine, and the tools and monitors are used to log data representative of the behavior of the software to detect vulnerable or malicious code. If possible, one or more operations are automatically performed on the software to enhance the security of the software by neutralizing the vulnerable or malicious code. Activities that cannot be neutralized automatically are flagged for human inspection. The software executed on the validation machine may be source code or non-source code, with different operations being disclosed and described in each case.

Abstract: Medical records, clinical observations, and medical imagery are organized and aggregated into a common database, enabling the data to be viewed and/or updated by medical practitioners world-wide. The information may also be viewed and monitored by patients or their relatives for accuracy, also regardless of their location. The invention further allows the records to be updated by manually controlled or automated instrumentation which measures medical parameters whether located in a doctors office, in a hospital setting, in the patient's home, or worn by the patient. Common access and point-to-point data transmission is via the global grid, or over public access common data networks supporting TCP/IP, most often referred to as the Internet. The same approach can be using insider an organization over an internal network or Intranet.

Abstract: A machine vision system for automatically identifying and inspecting objects is disclosed, including composable vision-based recognition modules and a decision algorithm to perform the final determination on object type and quality. This vision system has been used to develop a Projectile Identification System and an Automated Tactical Ammunition Classification System. The technology can be used to create numerous other inspection and automated identification systems.

Abstract: A general-purpose, low-cost system provides comprehensive physiological data collection, with extensive data object oriented programmability and configurability for a variety of medical as well as other analog data collection applications. A general-purpose data routing and encapsulation architecture supports input tagging and standardized routing through modern packet switch networks, including the Internet; from one of multiple points of origin or patients, to one or multiple points of data analysis for physician review. The preferred architecture further supports multiple-site data buffering for redundancy and reliability, and real-time data collection, routing, and viewing (or slower than real-time processes when communications infrastructure is slower than the data collection rate). Routing and viewing stations allow for the insertion of automated analysis routines to aid in data encoding, analysis, viewing, and diagnosis.

Abstract: A system for performing object identification combines pose determination, EO/IR sensor data, and novel computer graphics rendering techniques. A first module extracts the orientation and distance of a target in a truth chip given that the target type is known. A second module identifies the vehicle within a truth chip given the known distance and elevation angle from camera to target. Image matching is based on synthetic image and truth chip image comparison, where the synthetic image is rotated and moved through a 3-Dimensional space. It is assumed that the object is positioned on relatively flat ground and that the camera roll angle stays near zero. This leaves three dimensions of motion (distance, heading, and pitch angle) to define the space in which the synthetic target is moved. A graphical user interface (GUI) front end allows the user to manually adjust the orientation of the target within the synthetic images.

Abstract: Apparatus and methods prevent malicious data in Universal Serial Bus (USB) configurations by providing a hardware firewall. A hardware device interconnected between a host and the USB monitors communication packets and blocks packets having unwanted or malicious intent. The device may act as a hub, enabling multiple devices to connect to a single host. The device may only allow mass storage packets from a device recognized as a mass storage device. The device may block enumeration of unwanted devices by not forwarding packets between the device and the host. The device may be operative to assign a bogus address to a malicious device so as not to transfer communications from the device further up the chain to the host. The device may provide shallow or deep packet inspection to determine when a trusted device is sending possible malicious data, or provide packet validation to block packets that are malformed.

Abstract: A very large number of applications communicate logically through a many-to-many multicast cloud on the common carrier Internet. Three types of systems operate together to implement the method. The first is a network enabled client application, such as a distributed simulation or game, which joins an application cloud or federation and communicates its internal state changes into the cloud via a communication applications programming interface. The second is a lobby manager or broker which accepts entry into a communication cloud or federation and provides information to the federation and the client application for establishing communications between them. And third, is an application-specific routing system which provides the normal function of routing packets between Internet hosts (client applications running on these hosts), but also allows the routing functions to affected by modules in the router which are associated with the distributed application or simulation being implemented.

Abstract: A general-purpose, low-cost system provides comprehensive physiological data collection, with extensive data object oriented programmability and configurability for a variety of medical as well as other analog data collection applications. In a preferred embodiment, programmable input signal acquisition and processing circuits are used so that virtually any analog and/or medical signal can be digitized from a common point of contact to a plurality of sensors. A general-purpose data routing and encapsulation architecture supports input tagging and standardized routing through modern packet switch networks, including the Internet; from one of multiple points of origin or patients, to one or multiple points of data analysis for physician review. The preferred architecture further supports multiple-site data buffering for redundancy and reliability, and real-time data collection, routing, and viewing (or slower than real-time processes when communications infrastructure is slower than the data collection rate).

Abstract: A method is described which allows a very large (greater than 100,000) number of applications to communicate logically through a many-to-many multicast cloud on the common carrier Internet efficiently by exploiting characteristics of the applications' data streams which allow substantial message culling as well as more standard routing optimization (conventional multicast and optimization standard to normal Internet routing systems). The method describes the function and type of three types of systems which operate together to implement the method. The first is a network enabled client application, such as a distributed simulation or game, which joins an application cloud or federation and communicates its internal state changes into the cloud via a communication applications programming interface.

Abstract: A system for recognizing various human and creature motion gaits and behaviors is presented. These behaviors are defined as combinations of “gestures” identified on various parts of a body in motion. For example, the leg gestures generated when a person runs are different than when a person walks. The system described here can identify such differences and categorize these behaviors. Gestures, as previously defined, are motions generated by humans, animals, or machines. Multiple gestures on a body (or bodies) are recognized simultaneously and used in determining behaviors. If multiple bodies are tracked by the system, then overall formations and behaviors (such as military goals) can be determined.

Abstract: A system for performing object identification combines pose determination, EO/IR sensor data, and novel computer graphics rendering techniques. A first module extracts the orientation and distance of a target in a truth chip given that the target type is known. A second module identifies the vehicle within a truth chip given the known distance and elevation angle from camera to target. Image matching is based on synthetic image and truth chip image comparison, where the synthetic image is rotated and moved through a 3-Dimensional space. It is assumed that the object is positioned on relatively flat ground and that the camera roll angle stays near zero. This leaves three dimensions of motion (distance, heading, and pitch angle) to define the space in which the synthetic target is moved. A graphical user interface (GUI) front end allows the user to manually adjust the orientation of the target within the synthetic images.

Abstract: Apparatus and methods prevent malicious data in Universal Serial Bus (USB) configurations by providing a hardware firewall. A hardware device interconnected between a host and the USB monitors communication packets and blocks packets having unwanted or malicious intent. The device may act as a hub, enabling multiple devices to connect to a single host. The device may only allow mass storage packets from a device recognized as a mass storage device. The device may block enumeration of unwanted devices by not forwarding packets between the device and the host. The device may be operative to assign a bogus address to a malicious device so as not to transfer communications from the device further up the chain to the host. The device may provide shallow or deep packet inspection to determine when a trusted device is sending possible malicious data, or provide packet validation to block packets that are malformed.

Abstract: Medical records, clinical observations, and medical imagery are organized and aggregated into a common database, enabling the data to be viewed and/or updated by medical practitioners world-wide. The information may also be viewed and monitored by patients or their relatives for accuracy, also regardless of their location. The invention further allows the records to be updated by manually controlled or automated instrumentation which measures medical parameters whether located in a doctors office, in a hospital setting, in the patient's home, or worn by the patient. Common access and point-to-point data transmission is via the global grid, or over public access common data networks supporting TCP/IP, most often referred to as the Internet. The same approach can be using insider an organization over an internal network or Intranet.

Abstract: A general-purpose, low-cost system provides comprehensive physiological data collection, with extensive data object oriented programmability and configurability for a variety of medical as well as other analog data collection applications. In a preferred embodiment, programmable input signal acquisition and processing circuits are used so that virtually any analog and/or medical signal can be digitized from a common point of contact to a plurality of sensors. A general-purpose data routing and encapsulation architecture supports input tagging and standardized routing through modem packet switch networks, including the Internet; from one of multiple points of origin or patients, to one or multiple points of data analysis for physician review. The preferred architecture further supports multiple-site data buffering for redundancy and reliability, and real-time data collection, routing, and viewing (or slower than real-time processes when communications infrastructure is slower than the data collection rate).

Abstract: A system for performing object identification combines pose determination, EO/IR sensor data, and novel computer graphics rendering techniques. A first module extracts the orientation and distance of a target in a truth chip given that the target type is known. A second is a module identifies the vehicle within a truth chip given the known distance and elevation angle from camera to target. Image matching is based on synthetic image and truth chip image comparison, where the synthetic image is rotated and moved through a 3-Dimensional space. To limit the search space, it is assumed that the object is positioned on relatively flat ground and that the camera roll angle stays near zero. This leaves three dimensions of motion (distance, heading, and pitch angle) to define the space in which the synthetic target is moved. A graphical user interface (GUI) front end allows the user to manually adjust the orientation of the target within the synthetic images.

Abstract: An intelligent system for automatically monitoring, diagnosing, and repairing complex hardware and software systems is presented. A number of functional modules enable the system to collect relevant data from both hardware and software components, analyze the incoming data to detect faults, further monitor sensor data and historical knowledge to predict potential faults, determine an appropriate response to fix the faults, and finally automatically repair the faults when appropriate. The system leverages both software and hardware modules to interact with the complex system being monitored. Additionally, the lessons learned on one system can be applied to better understand events occurring on the same or similar systems.

Abstract: A general-purpose, low-cost system provides comprehensive physiological data collection, with extensive data object oriented programmability and configurability for a variety of medical as well as other analog data collection applications. In a preferred embodiment, programmable input signal acquisition and processing circuits are used so that virtually any analog and/or medical signal can be digitized from a common point of contact to a plurality of sensors. A general-purpose data routing and encapsulation architecture supports input tagging and standardized routing through modern packet switch networks, including the Internet; from one of multiple points of origin or patients, to one or multiple points of data analysis for physician review. The preferred architecture further supports multiple-site data buffering for redundancy and reliability, and real-time data collection, routing, and viewing (or slower than real-time processes when communications infrastructure is slower than the data collection rate).

Abstract: Medical records, clinical observations, and medical imagery are organized and aggregated into a common database, enabling the data to be viewed and/or updated by medical practitioners world-wide. The information may also be viewed and monitored by patients or their relatives for accuracy, also regardless of their location. The invention further allows the records to be updated by manually controlled or automated instrumentation which measures medical parameters whether located in a doctors office, in a hospital setting, in the patient's home, or worn by the patient. Common access and point-to-point data transmission is via the global grid, or over public access common data networks supporting TCP/IP, most often referred to as the Internet. The same approach can be using insider an organization over an internal network or Intranet.

Abstract: A tactor system transforms cable motion to tactor motion. A housing defining a plane is adapted for placement proximate to the skin of a user. A cable is operative to deform a tactor element in the housing, causing a portion of the element to move outwardly from the plane of the housing, thereby imparting a tactile sensation to the user's skin. For example, tension on the cable may cause a strip of flexible plastic or other suitable material to bend at a living hinge that moves outwardly from the plane of the housing. The cable may be driven by an actuator including. Two or more tactor elements may be disposed next to each other or in the same housing, with different elements being activated at different times to enhance the apparent frequency of the stimulus. For example, a reciprocating mechanism may be used to operate a pair of tactor elements out of phase with respect to one another.

Abstract: Force feedback in large, immersive environments is provided by device which a gyro- stabilization to generate a fixed point of leverage for the requisite forces and/or torques. In one embodiment, one or more orthogonally oriented rotating gyroscopes are used to provide a stable platform to which a force-reflecting device can be mounted, thereby coupling reaction forces to a user without the need for connection to a fixed frame. In one physical realization, a rigid handle or joystick is directly connected to the three-axis stabilized platform and using an inventive control scheme to modulate motor torques so that only the desired forces are felt. In an alternative embodiment, a reaction sphere is used to produce the requisite inertial stabilization. Since the sphere is capable of providing controlled torques about three arbitrary, linearly independent axes, it can be used in place of three reaction wheels to provide three-axis stabilization for a variety of space-based and terrestrial applications.