Abstract: Methods and systems for heuristic behavioral policing of executable objects dynamically adapt based on context to reduce false positive and false negative outcomes. The level of heuristic behavioral suspicion required to subject an inbound executable object to a policing action is determined by an adaptive suspicion threshold. The suspicion threshold is dynamically adjusted based on outcomes of processing recent executable objects. The invention recognizes that malware often arrives in waves, such as during a concerted attack on a network or an endpoint, so that dispositions of recent executable objects provide useful context for suspicion threshold adjustment.

Abstract: A method and system for facilitating customer reactions to service received in proximity mobile payment transactions, such as near field communication payment transactions. In the method and system, when a customer smartphone is brought into proximity with a merchant point of sale terminal to conduct a proximity mobile payment transaction, an identifier of the merchant, an identifier of a service worker representing the merchant, or both, are downloaded from the terminal to the smartphone and stored in a transaction record. When the customer wishes to react to the service received in the transaction, the customer interacts with the system to select the transaction record and formulate a customer reaction addressing the merchant, service worker, or both, by invoking customer reaction widgets. The customer reaction is delivered to recipients designated by the customer. The customer reaction may be a rating, recommendation, correspondence, reservation request, deferred tip or preset tip.