Abstract: A device and method are provided for protecting against malware attacks affecting a computer system. To do so, system operations are detected and categorized as benign, suspicious, or malicious. Suspicious actions are delayed and placed in a queue instead of being immediately executed. The process initiating the suspicious action is determined and the suspicious action is categorized as benign or malicious based on the initiating process. When the suspicious action is categorized as a benign action, the suspicious action is performed. Conversely, when the suspicious action is categorized as a malicious action, the suspicious process is terminated, and the malicious action is removed from the unperformed actions queue without performing the malicious action.

Abstract: A device and method are provided for protecting against malware attacks affecting a computer system. To do so, system operations are detected and categorized as benign, suspicious, or malicious. Suspicious actions are delayed and placed in a queue instead of being immediately executed. The process initiating the suspicious action is determined and the suspicious action is categorized as benign or malicious based on the initiating process. When the suspicious action is categorized as a benign action, the suspicious action is performed. Conversely, when the suspicious action is categorized as a malicious action, the suspicious process is terminated, and the malicious action is removed from the unperformed actions queue without performing the malicious action.

Abstract: A system, method, and device are provided for detecting and mitigating a storage attack at the block level by generating canary blocks by marking blocks of data (referred to as memory blocks) such that other programs do not modify these canary blocks that are monitored to detect data storage attacks that attempt to modify the canary blocks and/or by monitoring statistical and behavioral features of activities over blocks, whether they can be modified by other programs or not. The system and method also backup the memory blocks by backing up memory blocks as they are modified. When a data storage attack is detected, the attack is stopped, and the files are remediated using the backup of the affected memory blocks.

Abstract: A system, method, and device are provided for detecting and mitigating a storage attack at the block level by generating canary blocks by marking blocks of data (referred to as memory blocks) such that other programs do not modify these canary blocks that are monitored to detect data storage attacks that attempt to modify the canary blocks and/or by monitoring statistical and behavioral features of activities over blocks, whether they can be modified by other programs or not. The system and method also backup the memory blocks by backing up memory blocks as they are modified. When a data storage attack is detected, the attack is stopped, and the files are remediated using the backup of the affected memory blocks.

Abstract: Systems and method for remotely controlling applications executing on devices that do not have touch-based user input capabilities even when such applications were programmed to rely exclusively on touch-based control are described. In accordance with certain embodiments, user input events produced when a user interacts with a user input component of a remote control device are captured and transmitted to a display or processing device that is executing a target application. On the display/processing device, software components that are not part of the original source code of the target application convert the received user input events into commands that are recognizable to the target application and inject those commands into the target application. The software components also cause a visually-perceptible hotspot indicator or other content to be overlaid on graphical content rendered to a display by the target application, thereby facilitating targeted control of the application by the user.

Abstract: A system and method for displaying graphics content associated with a software application process executing on a computing device in a display area managed by another process executing on the computing device are described. The system includes a processing unit and a memory. The memory contains instructions, which, when executed by the processing unit, cause the graphics content associated with the software application process being executed by the processing unit to be displayed within a display area managed by another process being executed by the processing unit by performing a number of steps. The steps include intercepting one or more function calls issued from the software application process. The steps also include capturing an image stored in a first portion of memory in response to intercepting the one or more function calls. The steps further include displaying the captured image in the display area managed by the other process.

Abstract: Systems and method for remotely controlling applications executing on display devices that do not have touch-based user input capabilities even when such applications were programmed to rely exclusively on touch-based control are described. In accordance with certain embodiments, user input events produced when a user interacts with a touch-based user input component of a remote control device are captured and transmitted to a display device that is executing a target application. On the display device, software components that are not part of the original source code of the target application convert the received user input events into commands that are recognizable to the target application and inject those commands into the target application. The software components also cause a visually-perceptible hotspot indicator to be overlaid on graphical content rendered to a display of the display device by the target application, thereby facilitating targeted control of the application by the user.

Abstract: Features are described herein that may be used to implement a system that enables a user to execute, operate and interact with a software application, such as a video game, on a client wherein the software application is executing on a remote server. The features enable the system to be implemented in an optimized fashion. For example, one feature entails intercepting graphics commands generated by the software application that are directed to a graphics application programming interface (API), manipulating the intercepted graphics commands to produce manipulated graphics commands that are reduced in size as compared to the intercepted graphics commands, and transferring the manipulated graphics commands from the server to the client for rendering thereon.