Abstract: A system, method, and device are provided for detecting and mitigating a storage attack at the block level by generating canary blocks by marking blocks of data (referred to as memory blocks) such that other programs do not modify these canary blocks that are monitored to detect data storage attacks that attempt to modify the canary blocks and/or by monitoring statistical and behavioral features of activities over blocks, whether they can be modified by other programs or not. The system and method also backup the memory blocks by backing up memory blocks as they are modified. When a data storage attack is detected, the attack is stopped, and the files are remediated using the backup of the affected memory blocks.

Abstract: A system, method, and device are provided for detecting and mitigating a storage attack at the block level by generating canary blocks by marking blocks of data (referred to as memory blocks) such that other programs do not modify these canary blocks that are monitored to detect data storage attacks that attempt to modify the canary blocks and/or by monitoring statistical and behavioral features of activities over blocks, whether they can be modified by other programs or not. The system and method also backup the memory blocks by backing up memory blocks as they are modified. When a data storage attack is detected, the attack is stopped, and the files are remediated using the backup of the affected memory blocks.

Abstract: Disclosed herein are methods and systems for determining liveness of a user, comprising analyzing visual content of a screen of a client device used by a user to access an online service, adjusting one or more visual objects displayed on the screen of the client device according to dynamically changing patterns, capturing a sequence of images depicting one or more reflecting surfaces associated with the user viewing the screen while the visual objects are displayed, analyzing the images to identify a reflection of the displayed visual objects in the reflecting surfaces and verifying liveness of the user based on one or more of a plurality of reflection attributes of the identified reflection.

Abstract: Disclosed herein are methods and systems for determining whether a user engaged in an interactive video session is a genuine user or a potential impersonator by analyzing a plurality of consecutive images depicting the user while engaged in the video session to identify one or more dynamic facial patterns in the face of the user while his lips are moving. Each such dynamic facial pattern may express a movement of one or more of a plurality of wrinkles and/or other dynamic facial features (e.g., nostrils, distance between nostrils, ear, skin portion, muscle, etc.) in the face of the user. The user may be then determined to be genuine or not based on a comparison between the identified dynamic facial pattern(s) and one or more reference dynamic facial patterns.

Abstract: Disclosed herein are methods and systems for determining liveness of a user, comprising analyzing visual content of a screen of a client device used by a user to access an online service, adjusting one or more visual objects displayed on the screen of the client device according to dynamically changing patterns, capturing a sequence of images depicting one or more reflecting surfaces associated with the user viewing the screen while the visual objects are displayed, analyzing the images to identify a reflection of the displayed visual objects in the reflecting surfaces and verifying liveness of the user based on one or more of a plurality of reflection attributes of the identified reflection.

Abstract: There is provided a computer implemented method of measuring a temperature of a subject, comprising: receiving a sequence of a plurality of thermal images of a subject captured by a thermal sensor, analyzing the sequence of the plurality of thermal images to identify at least one target thermal image depicting an upper region of a tongue of the subject, analyzing the at least one target thermal image to identify an estimated temperature of the upper region of the tongue, and providing the estimated temperature of the upper region of the tongue.

Abstract: Described embodiments include a system that includes a monitoring agent, configured to automatically monitor usage of a computing device by a user, and a processor. The processor is configured to compute, based on the monitoring, a score indicative of a cyber-security awareness of the user, and to generate an output indicative of the score.

Abstract: Disclosed herein are methods and systems for determining liveness of a user, comprising analyzing visual content of a screen of a client device used by a user to access an online service, adjusting one or more visual objects displayed on the screen of the client device according to dynamically changing patterns, capturing a sequence of images depicting one or more reflecting surfaces associated with the user viewing the screen while the visual objects are displayed, analyzing the images to identify a reflection of the displayed visual objects in the reflecting surfaces and verifying liveness of the user based on one or more of a plurality of reflection attributes of the identified reflection.

Abstract: Disclosed herein are methods and systems for determining liveness of a user, comprising analyzing visual content of a screen of a client device used by a user to access an online service, adjusting one or more visual objects displayed on the screen of the client device according to dynamically changing patterns, capturing a sequence of images depicting one or more reflecting surfaces associated with the user viewing the screen while the visual objects are displayed, analyzing the images to identify a reflection of the displayed visual objects in the reflecting surfaces and verifying liveness of the user based on one or more of a plurality of reflection attributes of the identified reflection.

Abstract: Disclosed herein are methods and systems for determining whether a user engaged in an interactive video session is a genuine user or a potential impersonator by analyzing a plurality of consecutive images depicting the user while engaged in the video session to identify one or more dynamic facial patterns in the face of the user while his lips are moving. Each such dynamic facial pattern may express a movement of one or more of a plurality of wrinkles and/or other dynamic facial features (e.g., nostrils, distance between nostrils, ear, skin portion, muscle, etc.) in the face of the user. The user may be then determined to be genuine or not based on a comparison between the identified dynamic facial pattern(s) and one or more reference dynamic facial patterns.

Abstract: A monitoring system that receives messages that are exchanged with the application server. Relationships between users are posited in response to the times at which the messages are received. A relationship between two users may be posited in response to receiving, at approximately the same time, two messages from the application server that are destined, respectively, for the two users. The near-simultaneous receipt of the two messages indicates that the two messages were sent from the server at approximately the same time, which, in turn, indicates that the two messages may correlate with one another. Further indication of a correlation between the messages, which may increase the level of confidence with which the relationship between the two users is posited, may be found by examining the respective sizes of the messages, which indicate the message types.

Abstract: There is provided a computer implemented method of measuring a temperature of a subject, comprising: receiving a sequence of a plurality of thermal images of a subject captured by a thermal sensor, analyzing the sequence of the plurality of thermal images to identify at least one target thermal image depicting an upper region of a tongue of the subject, analyzing the at least one target thermal image to identify an estimated temperature of the upper region of the tongue, and providing the estimated temperature of the upper region of the tongue.

Abstract: A monitoring system that receives messages that are exchanged with the application server. Relationships between users are posited in response to the times at which the messages are received. A relationship between two users may be posited in response to receiving, at approximately the same time, two messages from the application server that are destined, respectively, for the two users. The near-simultaneous receipt of the two messages indicates that the two messages were sent from the server at approximately the same time, which, in turn, indicates that the two messages may correlate with one another. Further indication of a correlation between the messages, which may increase the level of confidence with which the relationship between the two users is posited, may be found by examining the respective sizes of the messages, which indicate the message types.

Abstract: Presented herein are systems and methods for detecting a boundary line crossing based on Round Trip Time (RTT) measured for wireless signals transmitted between and initiator wireless transceiver and a responder wireless transceiver deployed to form a straight boundary line. The initiator wireless transceiver transmits wireless probe signal(s) to the responder wireless transceiver, receives a wireless response signal transmitted by the responder wireless transceiver in response to the wireless probe signal(s), calculates an RTT combining a travel time of the wireless probe signal(s) and the travel time of the wireless response signal(s), compares the RTT to a reference RTT computed for a wireless probe signal and a corresponding wireless response signal transmitted in a clear straight transmission path while the boundary line is clear of obstacles and determines whether an object is blocking the straight transmission path based on a deviation of the RTT from the reference RTT.

Abstract: A monitoring system that receives messages that are exchanged with the application server. Relationships between users are posited in response to the times at which the messages are received. A relationship between two users may be posited in response to receiving, at approximately the same time, two messages from the application server that are destined, respectively, for the two users. The near-simultaneous receipt of the two messages indicates that the two messages were sent from the server at approximately the same time, which, in turn, indicates that the two messages may correlate with one another. Further indication of a correlation between the messages, which may increase the level of confidence with which the relationship between the two users is posited, may be found by examining the respective sizes of the messages, which indicate the message types.

Abstract: A monitoring system that receives messages that are exchanged with the application server. Relationships between users are posited in response to the times at which the messages are received. A relationship between two users may be posited in response to receiving, at approximately the same time, two messages from the application server that are destined, respectively, for the two users. The near-simultaneous receipt of the two messages indicates that the two messages were sent from the server at approximately the same time, which, in turn, indicates that the two messages may correlate with one another. Further indication of a correlation between the messages, which may increase the level of confidence with which the relationship between the two users is posited, may be found by examining the respective sizes of the messages, which indicate the message types.

Abstract: Presented herein are systems and methods for detecting a boundary line crossing based on Round Trip Time (RTT) measured for wireless signals transmitted between and initiator wireless transceiver and a responder wireless transceiver deployed to form a straight boundary line. The initiator wireless transceiver transmits wireless probe signal(s) to the responder wireless transceiver, receives a wireless response signal transmitted by the responder wireless transceiver in response to the wireless probe signal(s), calculates an RTT combining a travel time of the wireless probe signal(s) and the travel time of the wireless response signal(s), compares the RTT to a reference RTT computed for a wireless probe signal and a corresponding wireless response signal transmitted in a clear straight transmission path while the boundary line is clear of obstacles and determines whether an object is blocking the straight transmission path based on a deviation of the RTT from the reference RTT.

Abstract: A monitoring system that receives messages that are exchanged with the application server. Relationships between users are posited in response to the times at which the messages are received. A relationship between two users may be posited in response to receiving, at approximately the same time, two messages from the application server that are destined, respectively, for the two users. The near-simultaneous receipt of the two messages indicates that the two messages were sent from the server at approximately the same time, which, in turn, indicates that the two messages may correlate with one another. Further indication of a correlation between the messages, which may increase the level of confidence with which the relationship between the two users is posited, may be found by examining the respective sizes of the messages, which indicate the message types.

Abstract: Described embodiments include a system that includes a monitoring agent, configured to automatically monitor usage of a computing device by a user, and a processor. The processor is configured to compute, based on the monitoring, a score indicative of a cyber-security awareness of the user, and to generate an output indicative of the score.

Abstract: Described embodiments include a system that includes a monitoring agent, configured to automatically monitor usage of a computing device by a user, and a processor. The processor is configured to compute, based on the monitoring, a score indicative of a cyber-security awareness of the user, and to generate an output indicative of the score.