Abstract: A detector for detecting the removal and/or insertion of a weapon out of and/or into a holster. The detector may transmit a message each time the weapon is removed from the holster. A recording system may receive the message and determine whether or not it will begin recording the data it captures. A detector may detect the change in a magnitude of an inductance and/or an impedance of a circuit to detect insertion and removal of the weapon into and out of the holster. The holster is configured to couple to the detector to position the detector to detect insertion and removal of the weapon. An adhesive tape may couple a detector to a holster.

Abstract: Described herein are a system and techniques for enabling biometric authentication without exposing the authorizing entity to sensitive information. In some embodiments, the system receives a biometric template from a user device which is encrypted using a public key associated with the system. The encrypted biometric template is then provided to a second entity along with a biometric identifier. Upon receiving a request to complete a transaction that includes the biometric identifier and a second biometric template, the second entity may encrypt the second biometric template using the same public key associated with the system and perform a comparison between the two encrypted biometric templates. The resulting match result data file is already encrypted and can be provided to the system to determine an extent to which the two biometric templates match.

Abstract: Embodiments of the invention involve using biometric templates to wirelessly authenticate individuals. In one embodiment, a mobile device may generate a first biometric template and a first public value from a first biometric sample of a user and generate a first cryptographic key by passing the first biometric template to a fuzzy extractor's generate function. An access device may generate a second biometric template from a second biometric sample of the user, generate a second secret cryptographic key by passing the second biometric template and the first public value to the fuzzy extractor's reproduce function, encrypt the second biometric template with the second secret cryptographic key, and broadcast the encrypted template to a plurality of nearby mobile devices including the mobile device. If the mobile device is able to decrypt the encrypted template with the first cryptographic key, the access device can associate the user with the mobile device.

Abstract: A method for deterministic clock replay can include in response to executing a guest clock access instruction, estimating, using a virtual processor of a guest virtual machine, a value of a guest clock of the guest virtual machine based on (a) a current branch counter value that indicates a number of branch instructions executed since a first time and (b) an average time between execution of branch instructions, comparing the estimated value to an actual guest clock value of a guest clock of the guest virtual machine, and in response to determining the estimated value is less than the actual guest clock value by a threshold value, recording the number of branch instructions, the first time, and the average time between execution of branch instructions in a memory.

Abstract: Embodiments of a method and apparatus for monitoring activity on a virtual machine are generally described herein. The activity may be monitored by a first hypervisor and the virtual machine may be controlled by a second hypervisor. In some embodiments, the method includes setting a breakpoint in a kernel function of the virtual machine. The method may further include generating a page fault, responsive to the virtual machine halting execution at the breakpoint, to cause the second hypervisor to page in contents of a memory location accessed by the kernel function. The method may further include inspecting the contents of the memory location to detect activity in the virtual machine.

Abstract: This disclosure addresses systems and methods for the protection of hardware and software in a computing environment. A hypervisor-monitor may be nested between the hardware of a host system and a hypervisor that is capable of supporting one or more guest virtual machines. The hypervisor-monitor may intercept exceptions generated by one or more processors in the host system and inspect software instructions for the hypervisor and the guests. Inspection may include performing a hash of the software instructions and a comparison of the hash with authorized software modules or a set of known malware. In this manner the hypervisor-monitor may monitor prevent the execution of malware by the hypervisor or the guests or provide a record of when code of an unknown origin was executed.

Abstract: Embodiments of a system and method for live computer forensics are generally described herein. The system can include a first hypervisor configured to halt a computer system, the computer system including a central processing unit, a drive, a volatile memory, and a non-volatile memory. The first hypervisor can be configured to collect data representative of the state of the computer system at the time the computer system was halted. The data representative of the state of the computer system can include the contents of the volatile and non-volatile memory at the time the computer system was halted, wherein at least a portion of the collected data is representative of the state of the central processing unit and the contents of the drive, at the time the computer system was halted.

Abstract: This disclosure addresses systems and methods for the protection of hardware and software in a computing environment. A hypervisor-monitor may be nested between the hardware of a host system and a hypervisor that is capable of supporting one or more guest virtual machines. The hypervisor-monitor may intercept exceptions generated by one or more processors in the host system and inspect software instructions for the hypervisor and the guests. Inspection may include performing a hash of the software instructions and a comparison of the hash with authorized software modules or a set of known malware. In this manner the hypervisor-monitor may monitor prevent the execution of malware by the hypervisor or the guests or provide a record of when code of an unknown origin was executed.

Abstract: Embodiments of a method and apparatus for monitoring activity on a virtual machine are generally described herein. The activity may be monitored by a first hypervisor and the virtual machine may be controlled by a second hypervisor. In some embodiments, the method includes setting a breakpoint in a kernel function of the virtual machine. The method may further include generating a page fault, responsive to the virtual machine halting execution at the breakpoint, to cause the second hypervisor to page in contents of a memory location accessed by the kernel function. The method may further include inspecting the contents of the memory location to detect activity in the virtual machine.

Abstract: Signal processing technology for assessing dynamic system similarity for fault detection and other applications is based on time- and frequency-domain time series analysis techniques and compares the entire autocorrelation structure of a test and reference signal series. The test and reference signals are first subjected to similar pre-processing to help guarantee signal stationarity. Pre-processing may include formation of multivariate signal clusters, filtering and sampling. Multivariate periodograms or autocovariance functions are then calculated for each signal series. Test statistics are computed and assessed to determine the equality of the test and reference signals. When the difference between sample autocovariance functions or periodograms of such signals exceeds a preselected threshold value, fault detection signals and/or related diagnostic information are provided as output to a user.

Abstract: Signal processing technology for assessing dynamic system similarity for fault detection and other applications is based on time- and frequency-domain time series analysis techniques and compares the entire autocorrelation structure of a test and reference signal series. The test and reference signals are first subjected to similar pre-processing to help guarantee signal stationarity. Pre-processing may include formation of multivariate signal clusters, filtering and sampling. Multivariate periodograms or autocovariance functions are then calculated for each signal series. Test statistics are computed and assessed to determine the equality of the test and reference signals. When the difference between sample autocovariance functions or periodograms of such signals exceeds a preselected threshold value, fault detection signals and/or related diagnostic information are provided as output to a user.

Abstract: A method of executing a program in a controlled environment includes initiating execution of an operating system with which the program is adapted to execute, inserting redirection logic at the beginning of the program, and executing the program such that the redirection logic is executed. A current instruction pointer is stored, and execution control is redirected to a program loader. The program loader selects a first block of instructions of the program, based at least in part on the stored current instruction pointer. This selected block of instructions is manipulated to provide a first phantom instruction block, which is executed in the controlled environment. This manipulation includes copying at least a portion of the selected first block to form the first phantom instruction block.

Abstract: A method and apparatus for mixing a first stream of gas with a second stream of gas is provided. The method includes introducing a first stream of gas into a first stream manifold and directing the first stream from the first stream manifold into a mixing chamber via a plurality of first stream passages flow coupled to the mixing chamber. A second stream of gas is directed into the mixing chamber via at least one second stream passage flow coupled to a first end of the mixing chamber. A combined stream is formed from the first and second streams, gradually converged, and discharged from the mixing chamber through a mixing chamber exit port.

Abstract: A method and apparatus for mixing a first stream of gas with a second stream of gas is provided. The method includes introducing a first stream of gas into a first stream manifold and directing the first stream from the first stream manifold into a mixing chamber via a plurality of first stream passages flow coupled to the mixing chamber. A second stream of gas is directed into the mixing chamber via at least one second stream passage flow coupled to a first end of the mixing chamber. A combined stream is formed from the first and second streams, gradually converged, and discharged from the mixing chamber through a mixing chamber exit port.

Abstract: A method and apparatus for mixing a first stream of gas with a second stream of gas is provided. The method includes introducing a first stream of gas into a first stream manifold and directing the first stream from the first stream manifold into a mixing chamber via a plurality of first stream passages flow coupled to the mixing chamber. A second stream of gas is directed into the mixing chamber via at least one second stream passage flow coupled to a first end of the mixing chamber. A combined stream is formed from the first and second streams, gradually converged, and discharged from the mixing chamber through a mixing chamber exit port.

Abstract: The present invention relates to a matte surface film comprising: a base layer comprising a polyolefin; and a matte surface layer comprising a blend of high molecular weight high density polyethylene (HMWHD PE) with at least one incompatible polyolefin. The incompatible polyolefin may be ethylene propylene (EP) copolymers, ethylene butylene propylene (EBP) terpolymers or polypropylene (PP) homopolymers, such as metallocene catalyzed isotactic polypropylene (m-iPP) or metallocene catalyzed syndiotatic polypropylene (m-sPP). The matte surface layer may additionally contain a low molecular weight high density polyethylene or a medium molecular weight high density polyethylene. The film possesses an improved matte appearance and may be used for packaging and label applications.

Abstract: A block-resistant film is described which comprises a core layer of a thermoplastic polymer having a first side and a second side; a functional layer which is printable or sealable or treatable for printing or sealing is on the first side of the core layer, and a block-resistant layer is on the second side of the core layer. The block-resistant layer comprises a thermoplastic polymer and an amount of a polydialkylsiloxane, based upon the entire weight of the block-resistant layer, sufficient to inhibit blocking of the block-resistant layer to the functional layer when they are in contact. The surface of the block-resistant layer is flame treated or corona treated.

Abstract: A multi layer film having enhanced barrier properties against transmission of oxygen and water vapor is provided. The multi layer film includes a polypropylene base layer, with a high density polyethylene layer on at least one surface of the polypropylene base layer. The polyethylene layer includes a surface which has been subjected to plasma treatment with a hydroxyl-donating material such as a methanol. The film further includes a metal layer deposited on the plasma treated surface, such as a layer of vacuum deposited aluminum. Multi layer films according to the present invention are particularly useful as packaging films for food products.

Abstract: A method of producing a multilayer polymeric film is accomplished through the vapor deposition of a barrier coating onto an ethylene vinyl alcohol copolymer layer, which is adhered to a polymeric substrate. A multilayer polymeric film exhibiting barrier characteristics is also accomplished through the use of an ethylene vinyl alcohol copolymer layer between a vapor deposited barrier coating and a polymeric substrate.

Abstract: A carbon coated polymeric film is produced by Plasma Enhanced Chemical Vapor Deposition. An amorphous nylon layer having at least one exposed high energy surface is adhered to a polymeric substrate. Carbon is thereafter deposited on the exposed high energy surface by vapor deposition of a decomposable precursor in the presence of plasma.