Abstract: Architecture that selects a classification engine based on the expertise of the engine to process a given entity (e.g., a file). Selection of an engine is based on a probability that the engine will detect an unknown entity classification using properties of the entity. One or more of the highest ranked engines are activated in order to achieve the desired performance. A statistical, performance-light module is employed to skip or select several performance-demanding processes. Methods and algorithms are utilized for learning based on matching the best classification engine(s) to detect the entity class based on the entity properties. A user selection option is provided for specifying a maximum number of ranked, classification engines to consider for each state of the machine. A user can also select the minimum probability of detection for a specific entity (e.g., unknown file). The best classifications are re-evaluated over time as the classification engines are updated.

Abstract: A method and system for detecting and managing potential malware utilizes a preliminary signature to scan content and detect potential malware content based upon characteristics that match the preliminary signature. The detected content is detained for a predetermined period of time. If an updated signature is not received, the detained content may be purged, released or quarantined, based upon predetermined content policy. If an updated signature is received, the detained content is released from detention and rescanned with the updated signature. The content is then treated in accordance with the content policy, and again, can be purged, released, or quarantined.

Abstract: Architecture that selects a classification engine based on the expertise of the engine to process a given entity (e.g., a file). Selection of an engine is based on a probability that the engine will detect an unknown entity classification using properties of the entity. One or more of the highest ranked engines are activated in order to achieve the desired performance. A statistical, performance-light module is employed to skip or select several performance-demanding processes. Methods and algorithms are utilized for learning based on matching the best classification engine(s) to detect the entity class based on the entity properties. A user selection option is provided for specifying a maximum number of ranked, classification engines to consider for each state of the machine. A user can also select the minimum probability of detection for a specific entity (e.g., unknown file). The best classifications are re-evaluated over time as the classification engines are updated.

Abstract: A method and system for detecting and managing potential malware utilizes a preliminary signature to scan content and detect potential malware content based upon characteristics that match the preliminary signature. The detected content is detained for a predetermined period of time. If an updated signature is not received, the detained content may be purged, released or quarantined, based upon predetermined content policy. If an updated signature is received, the detained content is released from detention and rescanned with the updated signature. The content is then treated in accordance with the content policy, and again, can be purged, released, or quarantined.

Abstract: Pipeline inspection apparatus is provided including a camera unit and associated illumination means, preferably a strobe flash unit, for recording on photographic film the rectangular images corresponding to generally rectangular internal surface portions of a pipe for detection of defects, a viewing axis of the camera being normal to the axis of the pipe. Weight means are provided for operating in a manner such as to establish a viewing axis in predetermined angular relation to a vertical plane through the axis of a horizontal pipe. In one embodiment, the device is supported by resilient cups for movement through the pipe and the entire device is rotatable under the influence of the weight means. In another embodiment, at least the optical portion of the camera unit is rotatably supported and connected to the weight means. Magnetic flaw detection means are provided for triggering the camera unit.

Abstract: Pipeline inspection apparatus is provided including a camera unit and associated illumination means, preferably a strobe flash unit, for recording on photographic film the images of internal surface portions of a pipe for detection of defects. The camera unit is moved longitudinally within a pipeline by a drive unit which preferably includes electric motors energized from a self-contained battery unit. Important features relate to means for automatically reversing the drive of the apparatus after it has travelled a predetermined distance and to mechanical features for facilitating movement of the device through bends and the like.