Abstract: Methods, storage systems and computer program products implement embodiments of the present invention that include initially defining a set of protective actions. Upon detecting, by a security server on a network, an incident including one or more alerts indicating malicious activity by one or more computing devices on the network, extracting a set of features indicating measurable characteristics of the incident are extracted from the alerts. Based on the alerts, respective counts for the features for the detected incident are computed and based on the features and their respective counts, a score indicating a magnitude of malicious activity for the detected incident is computed. A given feature having a highest impact on the score is identified, and a given protective action is selected based on the score, the identified feature and its respective count. Finally, the selected protective action is initiated with respect to at least some of the devices.

Abstract: A method, including receiving, from multiple sources, respective sets of incidents, and respective suspiciousness labels for the incidents. A set of rules are applied so as to assign training labels to respective incidents in a subset of the incidents in the received sets. For each given incident in the subset, the respective training label is compared to the respective suspiciousness label so as to compute a respective quality score for each given source. Any sources having respective label quality scores meeting a predefined criterion are identified, and a model for computing predicted labels is fit to the incidents received from the identified sources and the respective suspiciousness labels of the incidents. The model is applied to an additional incident received from one of the sources to compute a predicted label for the additional incident, and a notification of the additional incident is prioritized in response to the predicted label.

Abstract: A method, including receiving, from multiple sources, respective sets of incidents, and respective suspiciousness labels for the incidents. A set of rules are applied so as to assign training labels to respective incidents in a subset of the incidents in the received sets. For each given incident in the subset, the respective training label is compared to the respective suspiciousness label so as to compute a respective quality score for each given source. Any sources having respective label quality scores meeting a predefined criterion are identified, and a model for computing predicted labels is fit to the incidents received from the identified sources and the respective suspiciousness labels of the incidents. The model is applied to an additional incident received from one of the sources to compute a predicted label for the additional incident, and a notification of the additional incident is prioritized in response to the predicted label.

Abstract: A gas analyzing module includes a first connector, which includes a connection detection mechanism (CDM), and is connectable to a gas sampling line via a second connector. The gas analyzing module also includes a pump, a pressure sensor and a controller. The controller controls operation of the pump and receives a signal from the CDM. When the pump is on/active, the controller measures the CDM output signal, and if the CDM output signal indicates misconnection between the first connector and the second connector, the controller switches the pump off only if a pressure measured in the gas sampling line corroborates the CDM's misconnection indication, or, if the measured pressure refutes the CDM's misconnection indication, the controller maintains the pump's on state. The gas analyzing module may be a capnography module configured for capnography. Also provided is a gas analyzing system that includes the gas analyzing module and a gas analyzer.

Abstract: A system including at least one hardware processor; and a non-transitory computer-readable storage medium having stored thereon program instructions, the program instructions executable by the at least one hardware processor to: receive, using a first transceiver, a radio-frequency (RF) transmission from an RF device; extract, from said RF transmission, at least one of: (i) noise samples from one or more segments of said RF transmission, and (ii) signal samples from one or more segments of said RF transmission; and determine the presence of a second transceiver in the path of said RF transmission, based, at least in part, on processing said extracted noise samples and signal samples.

Abstract: A system comprising: at least one hardware processor; and a non-transitory computer-readable storage medium having stored thereon program instructions, the program instructions executable by the at least one hardware processor to: receive, using a first transceiver, a radio-frequency (RF) transmission from an RF device; extract, from said RF transmission, at least one of: (i) noise samples from one or more segments of said RF transmission, and (ii) signal samples from one or more segments of said RF transmission; and determine the presence of a second transceiver in the path of said RF transmission, based, at least in part, on processing said extracted noise samples and signal samples.

Abstract: A method including operating at least one hardware processor for: receiving, using a first transceiver, a radio-frequency (RF) transmission from an RF device; extracting one or more signal samples from said RF transmission, wherein the signal samples are associated with at least one of: (i) a rise transient associated with a data packet of said RF transmission, (ii) a fall transient associated with the data packet, and (iii) a region of the RF transmission occurring between the rise transient and the fall transient; and determining the presence of a second transceiver in the path of the RF transmission, based, at least in part, on processing the signal samples.

Abstract: A method comprising operating at least one hardware processor for: receiving, using a first transceiver, a radio-frequency (RF) transmission from an RF device; extracting one or more signal samples from said RF transmission, wherein said signal samples are associated with at least one of: (i) a rise transient associated with a data packet of said RF transmission, (ii) a fall transient associated with said data packet, and (iii) a region of said RF transmission occurring between said rise transient and said fall transient; and determining the presence of a second transceiver in the path of said RF transmission, based, at least in part, on processing said signal samples.

Abstract: A gas analyzing module includes a first connector, which includes a connection detection mechanism (CDM), and is connectable to a gas sampling line via a second connector. The gas analyzing module also includes a pump, a pressure sensor and a controller. The controller controls operation of the pump and receives a signal from the CDM. When the pump is on/active, the controller measures the CDM output signal, and if the CDM output signal indicates misconnection between the first connector and the second connector, the controller switches the pump off only if a pressure measured in the gas sampling line corroborates the CDM's misconnection indication, or, if the measured pressure refutes the CDM's misconnection indication, the controller maintains the pump's on state. The gas analyzing module may be a capnography module configured for capnography. Also provided is a gas analyzing system that includes the gas analyzing module and a gas analyzer.

Abstract: A silencer device may be positioned in-line with an exhaust tube of a pneumatic pump to reduce a noise generated at the exhaust tube. The silencer devices includes a noise absorbing media and a body section housing the noise absorbing media and radially sealing peripheral walls thereof. The silencer device also includes a fluid inlet section having an inlet tube that directs fluid flow from the exhaust tube into the noise absorbing media and an inlet airflow restrictor fluidly connected to the fluid inlet section to restrict fluid flow therethrough. The silencer device further includes a fluid outlet section having an outlet tube that directs fluid flow from the noise absorbing media and an outlet airflow restrictor fluidly connected to the fluid outlet section to restrict fluid flow therethrough.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.

Abstract: There is provided a tube connector for connecting between a fluid sampling tube and a fluid analyzer, the tube connector includes an end face adapted to identify the tube connector, said end face comprising a reflecting surface having one or more reflective regions adapted to reflect light at a predetermined range of wavelengths.