Abstract: Policy enforcement previously available for web proxy access methods is extended and applied to layer 3 packets flowing through VPN channels. With these extensions, a common security policy is possible that is enforceable between VPN proxied access and VPN tunneled access. Equivalent security policy to tunnel based VPN access without comprising the inherent performance, scalability and application compatibility advantages tunne based VPNs have over their proxy based VPN counterparts.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for restricting media content rendering. In one aspect, a method includes loading different media content elements, rendering the different media content elements in a graphical user interface, and restricting rendering of at least one of the different media content elements based on presence of media content of a predefined type.

Abstract: A method and computer program product are provided for audiating the occurrence of debugger events within a software debugger. The method begins by assigning a sound characteristic to a debugger event occurring within a software program under debug. Next, the audiation of the sound characteristic associated with the event is optimized to maximize performance of the debugger. Finally, the optimized sound characteristic associated with the event is played upon the occurrence of the event.

Abstract: Embodiments of the invention provide a method, apparatus, and program product to verify a program that includes a plurality of sections with a computing system that is configured to process a plurality of threads of execution. The method comprises verifying and executing a first section of the program utilizing a first thread of execution in response to activation of the program and determining a second section of the program to execute subsequent to the first section. The method further comprises verifying the second section utilizing a second thread of execution in parallel with the execution of the first section. Another embodiment of the invention provides a method of compiling program that includes program code by grouping the program code into sections based upon the execution time of the program code and based upon which program code is most commonly executed.

Abstract: Provided are methods and computer software applications for generating a stock portfolio, and/or enhanced stock index, through using a plurality of growth factors and a plurality of value factors to rank stocks, and for constructing investment vehicles based on the stock portfolio. The method, software application, or computer apparatus of the present technology employs a novel stock selection strategy to select stocks from a pre-selected universe of securities such as a commercially available stock market index in order to create a stock portfolio, and/or enhanced stock index, and a fund based thereon that can generate positive alpha as compared to a fund based on the pre-selected universe of securities.

Abstract: Embodiments of the invention provide techniques for presenting a virtual world to sight-impaired users. In one embodiment, the user may indicate an area of focus within the virtual world. The user may then be provided with audio descriptions of objects or avatars included within the area of focus. The descriptions may be provided at varying levels of detail, enabling the user to “zoom in” on particular items of interest. Further, the user may select an audio description to navigate an avatar to the location of the corresponding object.

Abstract: A computer-implemented, server-side method for identifying unique malware variants may include (1) identifying the creation of a child object by a parent object on a client device, (2) determining that instances of both the parent object and the child object occur relatively infrequently within a user community, (3) classifying, based at least in part on the low prevalence of the parent and child objects within the user community, the child object as a potential security risk, and then (4) providing the child object's classification to at least one computing device in order to enable the computing device to evaluate the trustworthiness of the child object. Corresponding systems, encoded computer-readable media, and client-side methods are also disclosed.

Abstract: A malware source analysis component determines which sources of malware are sufficiently suspicious such that all binary files located thereon should be analyzed. In order to makes such determinations, the malware source analysis component receives information concerning malware infections from a plurality of sources. The malware source analysis component analyzes the received information, and determines suspiciousness levels associated with specific sources. Responsive to identifying a given threshold suspiciousness level associated with a source, the malware source analysis component adjudicates that source to be suspicious. Where a source is adjudicated to be suspicious, the malware source analysis component submits submission instructions to that source, directing it to identify binary files thereon and submit them to be analyzed. The malware source analysis component receives binary files from suspicious sources according to the submission instructions, and analyzes the received binary files.

Abstract: Provided are methods and computer software applications for generating a stock portfolio, and/or enhanced stock index, through using a plurality of growth factors and a plurality of value factors to rank stocks, and for constructing investment vehicles based on the stock portfolio. The method, software application, or computer apparatus of the present technology employs a novel stock selection strategy to select stocks from a pre-selected universe of securities such as a commercially available stock market index in order to create a stock portfolio, and/or enhanced stock index, and a fund based thereon that can generate positive alpha as compared to a fund based on the pre-selected universe of securities.

Abstract: A malware analysis component receives information concerning malware infections on a large plurality of client computers, as detected by an anti-malware product or submitted directly by users. The malware analysis component analyzes this wide array of information, and identifies suspicious malware detection and submission activity associated with specific sources. Where identified suspicious patterns of malware detection and submission activity associated with a specific source meet a given threshold over time, the malware analysis component determines that the source is an originator of malware.

Abstract: A submission filtering component filters malware related content received for analysis. The submission filtering component determines an analysis priority rating for each source from which malware related content is received. An analysis priority ratings is based on various factors indicative of how likely the source is to transmit malware related content that is important to analyze. The malware filtering component transforms the received stream of malware related content into a subset to be analyzed, based on the analysis priority ratings associated with sources from which malware related content is received. A malware analysis component analyzes the subset of malware related content.

Abstract: A computer-implemented method for evaluating the health of computing systems based on when operating-system changes occur is disclosed. In one example, this method may include: 1) identifying an operating-system change made to a computing system, 2) determining when the operating-system change occurred, and then 3) assessing the health of the computing system based at least in part on when the operating-system change occurred. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Unknown malicious code is heuristically detected on a host computer system. A virus signature for the malicious code is created locally on the host computer system. A blacklist on the host computer system is updated with the virus signature for the heuristically detected malicious code. Accordingly, the blacklist is updated with the virus signature of the heuristically detected malicious code without distribution of the virus signature to the general public. Further, the host computer system is scanned for other instances of the heuristically detected malicious code using the created virus signature. Accordingly, file based detection and remediation of the malicious code is achieved without requiring execution of the malicious code for detection and the associated risks.

Abstract: A computer-implemented method for detecting a malicious process using file-name heuristics may comprise: 1) identifying a process, 2) identifying a process name for the process, 3) identifying a list of process names for non-malicious processes, and 4) determining, by comparing the process name for the process with the list of process names for non-malicious processes, whether to allow the process to execute. A method for maintaining a database containing information about non-malicious processes is also disclosed. Corresponding systems and computer-readable media are also disclosed.

Abstract: An assistive reading device for visually impaired users comprises a sheet-like member containing a photo-active material. The sheet-like member responds to light patterns representing data from a patterned light source to form tactile shapes on its surface. The visually impaired user obtains information by touching the tactile shapes. Preferably, the photo-active material is a layer of cross linked azobenzene liquid-crystalline polymers. The assistive reading device preferably is an output device for a computer.

Abstract: Methods and systems are disclosed for registering and moving a sheet article along a path that can use an actuator to mimic a biased device such as a spring-loaded device. The actuator can include a solenoid and an arm. The movement of the arm with the solenoid can be done by pulse-width modulation by providing a high pulse-width modulation duty cycle to the solenoid to provide a resistive force on the arm and providing a low pulse-width modulation duty cycle to the solenoid to provide a less resistive force on the arm. Inserting stations use in sheet article inserting system that employ the actuator are also provided.

Abstract: Embodiments of the invention provide a method, apparatus, and program product to verify a program that includes a plurality of sections with a computing system that is configured to process a plurality of threads of execution. The method comprises verifying and executing a first section of the program utilizing a first thread of execution in response to activation of the program and determining a second section of the program to execute subsequent to the first section. The method further comprises verifying the second section utilizing a second thread of execution in parallel with the execution of the first section. Another embodiment of the invention provides a method of compiling program that includes program code by grouping the program code into sections based upon the execution time of the program code and based upon which program code is most commonly executed.