Abstract: Various embodiments are generally directed to techniques for library behavior verification, such as by generating executables for software with indications of permitted behaviors by the library. Some embodiments are particularly directed to monitoring library behavior and performing one or more protective actions based on abnormal or unpermitted library behavior. In many embodiments, libraries and library manifests may be validated based on one or more signatures. In various embodiments, library behavior data comprising a set of permitted behaviors for the library may be determined based on the library manifest. In various such embodiments, a compiler may embed indications of the permitted library behavior in executables.

Abstract: Various embodiments are generally directed to techniques for library behavior verification, such as by generating executables for software with indications of permitted behaviors by the library. Some embodiments are particularly directed to monitoring library behavior and performing one or more protective actions based on abnormal or unpermitted library behavior. In many embodiments, libraries and library manifests may be validated based on one or more signatures. In various embodiments, library behavior data comprising a set of permitted behaviors for the library may be determined based on the library manifest. In various such embodiments, a compiler may embed indications of the permitted library behavior in executables.

Abstract: In a client-server system, a server-node application runs a user session and a remote presentation protocol communicates between the client node and the server node. The server node stores a remote virtual desktop including remote windows of the user session. The client node displays multiple local windows of applications running locally on the client node and further displays one or more windows of the remote virtual desktop. The one or more windows are clipped to produce a clipped region so that the remote windows are displayed therein to appear as the local windows. The local windows are enumerated according to z-order from back to front and an area of each local window which overlaps the clipped region is subtracted from the clipped region so that the local windows show through the area.

Abstract: In a client-server system, a server-node application runs a user session and a remote presentation protocol communicates between the client node and the server node. The server node stores a remote virtual desktop including remote windows of the user session. The client node displays multiple local windows of applications running locally on the client node and further displays one or more windows of the remote virtual desktop. The one or more windows are clipped to produce a clipped region so that the remote windows are displayed therein to appear as the local windows. The local windows are enumerated according to z-order from back to front and an area of each local window which overlaps the clipped region is subtracted from the clipped region so that the local windows show through the area.

Abstract: A method for single sign-on in a client-server system including a server and a client and a remote presentation protocol based on ITU T.120, communicates between the client node and the server. The client obtains a ticket for a user operating the client. The ticket identifies the security context of the user on the client. Upon connecting the client to the server, the ticket is transferred from the client to the server. The server authenticates the ticket with a security authority and when authenticated the server receives from the security authority a security context for the ticket. When the client so requests, applications are launched using that security context. Preferably, the server is a Microsoft Terminal Server and the remote presentation protocol is Microsoft Remote Desktop Protocol (RDP). The ticket transfer preferably uses a channel within the remote presentation protocol, such as an RDP virtual channel.