Abstract: Systems and methods for virtualized malware enabled detection are described. In some embodiments, a method comprises intercepting an object provided from a first digital device, determining one or more resources the object requires, instantiating a virtual environment with the one or more resources, processing the object within the virtual environment, tainting operations of the object within the virtual environment, monitoring the operations of the object, identifying an additional resource of the object while processing that is not provided in the virtual environment, re-instantiating the virtual environment with the additional resource, monitoring the operations of the object while processing within the re-instantiated virtual environment, identifying untrusted actions from the monitored operations, and generating a report identifying the operations and the untrusted actions of the object.

Abstract: Systems and methods for virtualization and emulation assisted malware detection are described.

Abstract: Systems and methods for virtualized malware enabled detection are described. In some embodiments, a method comprises intercepting an object provided from a first digital device, determining one or more resources the object requires, instantiating a virtual environment with the one or more resources, processing the object within the virtual environment, tainting operations of the object within the virtual environment, monitoring the operations of the object, identifying an additional resource of the object while processing that is not provided in the virtual environment, re-instantiating the virtual environment with the additional resource, monitoring the operations of the object while processing within the re-instantiated virtual environment, identifying untrusted actions from the monitored operations, and generating a report identifying the operations and the untrusted actions of the object.

Abstract: Systems and methods for virtualization and emulation malware enabled detection are described.

Abstract: A method by which a pair of communicating network equipment drivers can determine if the equipment they control such as a network adapter or a switch port are directly connected by a single network cable, is applicable to network protocols which include a link active signaling technique as part of the physical layer specification. The method includes determining whether the link is in a first state in which there is only one device coupled to the link without intervening devices which are members of a particular class, or in a second state in which there may be more than one device coupled to the link without intervening devices which are members of the particular class. If the link is in the first state, then a physical layer test involving the physical layer link active signaling mechanism is executed to ensure that the responding device is coupled to the same link without intervening devices that are not members of the particular class.

Abstract: A method is provided for sending data from a data source executing a network protocol such as the TCP/IP protocol stack, which includes a process for generating headers for packets according to the network protocol. The method includes sending such data on a network through a smart network interface. The network protocol defines a datagram in the data source, including generating a header template and supplying a data payload. The datagram is supplied to the network interface. At the network interface, a plurality of packets of data are generated from the datagram. The plurality of packets include respective headers, such as TCP/IP headers, based on the header template, and include respective segments of the data payload. The network interface supports packets having a pre-specified length, and the data payload is greater than the pre-specified length, such as two to forty times larger or more.