Abstract: A computer system protection method monitors and evaluates per process network communications activity to determine whether the process has been compromised. In one embodiment, a network modeling scheme gathers data to build a model and then compares networking activities to the model as they occur. In an alternate embodiment, modeling is not required and the comparison is done of network data collected at one layer of a communication system to network-related data collected at another layer. As a result of a comparison and an indication of compromise, a given remedial action is taken.

Abstract: The present invention describes a class of techniques for discovering evidence that a computer system has been compromised or attacked successfully. In an illustrative embodiment, a detection method involves detecting discrepancies between what a (compromised) operating system reports about enumerations of system objects, and the specific instances of those objects found by other (instrumentation) software running on the same system. In an alternative, the method detects discrepancies in the properties of a system object as reported by the operating system, and the properties as determined by other (instrumentation) software. In an alternative, the method detects discrepancies in invariant properties among a number of system objects. Preferably, the discrepancies are detected in real-time.

Abstract: The present invention provides methods and apparatus to uniquely determine fabrication details associated with objects, such as identification documents, artwork and limited issue works, using open cryptographic techniques. A cryptographic signature is created using a private key. The private key is uniquely associated with fabrication details such as a workstation, operator, fabrication equipment, fabrication materials, etc. A public key corresponds with the private key; and therefore, the public key is associated with the fabrication details. Successfully decoding the cryptographic signature with the public key uniquely identifies the fabrication details.

Abstract: 2-R.sub.2 --R.sub.4 -substituted-3-R.sub.3 --CO-1-?(C-attached-N-heteryl)-(Alk) .sub.n !-1H-indoles useful as analgesic, anti-rheumatic, anti-inflammatory or anti-glaucoma agents.