Abstract: A system for stateful detection of cyberattacks includes an endpoint computer and a backend computer system. The endpoint computer monitors for cyberattacks and sends out queries for detected security events. The backend computer system stores observation data that are included in the queries. The backend computer system combines current observation data from a current query, relevant observation data from previous queries, and relevant cybersecurity data. The combined data are evaluated for cyberattacks.

Abstract: The present invention discloses a method for monitoring an exercise session of a user. The exercise session comprises a first portion and a second portion following the first portion. Provide an exercise record of a previous exercise of the user, wherein the exercise record comprises a first exercise correspondence associated with a first fitness condition of the user. Execute a first exercise scheme to monitor the first portion of the exercise session based on the first exercise correspondence. Execute a second exercise scheme to monitor the second portion of the exercise session based on a comparison of a second fitness condition of the user derived from an exercise data in the first portion of the exercise session and the first fitness condition of the user in the exercise record of the previous exercise.

Abstract: The present invention provides a continuous identity authentication method. This method transforms the behavior records of different time intervals of the system user into a text format, and uses a resampling technique to generate a large number of articles of different lengths in order to have behavior records of the system user in different lengths of time, then using a document classification technique to build a matrix. In the end, building behavioral models of different time periods of the system's user using Minimum Enclosing Ball technology. The behavioral models can then learn the behavior of the legitimate system user and continuously check whether the system is currently operated by the legitimate system user or not.