Abstract: A system stores instructions including, in response to receiving user input, identifying a first event type and a first security identifier and obtaining a first set of event dates from the event database and, for each event date of the first set of event dates, obtaining a corresponding event value on the corresponding event date of the first security identifier. The instructions include, for a first day related to each event date of the first set of event dates: obtaining a corresponding value on the first day of the first security identifier, determining a corresponding difference value between the corresponding event value and the corresponding value, and storing the corresponding difference value in a set of difference values. The instructions include calculating an average difference on the first day using the set of difference values and displaying the average difference and an event indicator corresponding to the first event type.

Abstract: A system stores instructions including, in response to receiving user input, identifying a first event type and a first security identifier and obtaining a first set of event dates from the event database and, for each event date of the first set of event dates, obtaining a corresponding event value on the corresponding event date of the first security identifier. The instructions include, for a first day related to each event date of the first set of event dates: obtaining a corresponding value on the first day of the first security identifier, determining a corresponding difference value between the corresponding event value and the corresponding value, and storing the corresponding difference value in a set of difference values. The instructions include calculating an average difference on the first day using the set of difference values and displaying the average difference and an event indicator corresponding to the first event type.

Abstract: A network intrusion system for a protected network includes a ruleset module configured to receive metadata for rules. The metadata describes, for each of the rules, a set of associated network vulnerabilities. The ruleset module is configured to access vulnerability information describing a set of cumulative vulnerabilities that each is present in at least one network device within the protected network. The network intrusion system includes a rule management module configured to, for each rule of the plurality of rules: identify the set of associated network vulnerabilities described by the metadata for the rule, determine whether there is a match between any of the set of associated network vulnerabilities and the set of cumulative vulnerabilities, and, in response to determining that there is no match, transmit a first command signal to a network security module. The first command signal instructs the network security module to disable the rule.

Abstract: An authentication system includes an authentication module and a user history database storing order information that includes, for each of multiple logins of the first user to a web property, at least one of: an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received at the authentication module during the login, and an indication of an order of navigator object properties that were previously returned to the authentication module during the login. The authentication module is configured to: receive, from a web browser of a first entity attempting to log in to the web property, credentials of the first user; determine order information of the first entity's web browser; perform a comparison operation based on the order information of the first user and that of the first entity, and determine whether to allow the first entity to log in based on the comparison operation.

Abstract: A computer system includes memory storing computer-executable instructions and a processor configured to execute the computer-executable instructions. The computer-executable instructions include building a questions table including multiple first questions and multiple potential requirements to which the first questions correspond, respectively. The computer-executable instructions include adding, to the questions table, one or more second questions, each of which correspond to at least two requirements from among the potential requirements. The computer-executable instructions include adding, to the questions table, for each second question among the one or more second questions, the at least two requirements to which the second question corresponds. The computer-executable instructions include determining a question, from among the first questions and the second questions, that corresponds to a highest number of potential requirements, and displaying the determined question to a user.

Abstract: A computer system includes memory storing computer-executable instructions and a processor configured to execute the computer-executable instructions. The computer-executable instructions include building a questions table including multiple first questions and multiple potential requirements to which the first questions correspond, respectively. The computer-executable instructions include adding, to the questions table, one or more second questions, each of which correspond to at least two requirements from among the potential requirements. The computer-executable instructions include adding, to the questions table, for each second question among the one or more second questions, the at least two requirements to which the second question corresponds. The computer-executable instructions include determining a question, from among the first questions and the second questions, that corresponds to a highest number of potential requirements, and displaying the determined question to a user.

Abstract: A network intrusion system for a protected network includes a ruleset module configured to receive metadata for rules. The metadata describes, for each of the rules, a set of associated network vulnerabilities. The ruleset module is configured to access vulnerability information describing a set of cumulative vulnerabilities that each is present in at least one network device within the protected network. The network intrusion system includes a rule management module configured to, for each rule of the plurality of rules: identify the set of associated network vulnerabilities described by the metadata for the rule, determine whether there is a match between any of the set of associated network vulnerabilities and the set of cumulative vulnerabilities, and, in response to determining that there is no match, transmit a first command signal to a network security module. The first command signal instructs the network security module to disable the rule.

Abstract: An authentication system includes an authentication module and a user history database storing order information that includes, for each of multiple logins of the first user to a web property, at least one of: an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received at the authentication module during the login, and an indication of an order of navigator object properties that were previously returned to the authentication module during the login. The authentication module is configured to: receive, from a web browser of a first entity attempting to log in to the web property, credentials of the first user; determine order information of the first entity's web browser; perform a comparison operation based on the order information of the first user and that of the first entity, and determine whether to allow the first entity to log in based on the comparison operation.

Abstract: A network intrusion system for a protected network includes a ruleset module configured to receive metadata for rules. The metadata describes, for each of the rules, a set of associated network vulnerabilities. The ruleset module is configured to access vulnerability information describing a set of cumulative vulnerabilities that each is present in at least one network device within the protected network. The network intrusion system includes a rule management module configured to, for each rule of the plurality of rules: identify the set of associated network vulnerabilities described by the metadata for the rule, determine whether there is a match between any of the set of associated network vulnerabilities and the set of cumulative vulnerabilities, and, in response to determining that there is no match, transmit a first command signal to a network security module. The first command signal instructs the network security module to disable the rule.

Abstract: A system stores instructions including, in response to receiving user input, identifying a first event type and a first security identifier and obtaining a first set of event dates from the event database and, for each event date of the first set of event dates, obtaining a corresponding event value on the corresponding event date of the first security identifier. The instructions include, for a first day related to each event date of the first set of event dates: obtaining a corresponding value on the first day of the first security identifier, determining a corresponding difference value between the corresponding event value and the corresponding value, and storing the corresponding difference value in a set of difference values. The instructions include calculating an average difference on the first day using the set of difference values and displaying the average difference and an event indicator corresponding to the first event type.

Abstract: An authentication system includes an authentication module and a user history database storing order information that includes, for each of multiple logins of the first user to a web property, at least one of: an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received at the authentication module during the login, and an indication of an order of navigator object properties that were previously returned to the authentication module during the login. The authentication module is configured to: receive, from a web browser of a first entity attempting to log in to the web property, credentials of the first user; determine order information of the first entity's web browser; perform a comparison operation based on the order information of the first user and that of the first entity, and determine whether to allow the first entity to log in based on the comparison operation.

Abstract: A computer system includes memory storing computer-executable instructions and a processor configured to execute the computer-executable instructions. The computer-executable instructions include building a questions table including multiple first questions and multiple potential requirements to which the first questions correspond, respectively. The computer-executable instructions include adding, to the questions table, one or more second questions, each of which correspond to at least two requirements from among the potential requirements. The computer-executable instructions include adding, to the questions table, for each second question among the one or more second questions, the at least two requirements to which the second question corresponds. The computer-executable instructions include determining a question, from among the first questions and the second questions, that corresponds to a highest number of potential requirements, and displaying the determined question to a user.

Abstract: A method, system and program product comprises establishing a communication with a computing system using a first device for communicating with the computing system over a first communication channel. The computing system is in communication with a second device configured for communicating with the computing system over a second communication channel separate from the first communication channel. The first device is paired with the computer system in which the first device and the computer system are mutually authenticated. A code presented by the second device is captured using the first device. The code is communicated to the computing system over the first communication channel in which the computer system uses the code in authorizing the second device to perform a function. The computer system communicates an authorization to the second device using the second communication channel.

Abstract: A method, system and program product comprises establishing a communication with a computing system using a first device for communicating with the computing system over a first communication channel. The computing system is in communication with a second device configured for communicating with the computing system over a second communication channel separate from the first communication channel. The first device is paired with the computer system in which the first device and the computer system are mutually authenticated. A code presented by the second device is captured using the first device. The code is communicated to the computing system over the first communication channel in which the computer system uses the code in authorizing the second device to perform a function. The computer system communicates an authorization to the second device using the second communication channel.

Abstract: An apparatus for measuring the relative positions of frontside and backside alignment marks located on opposite sides of a substrate is disclosed. The apparatus includes upper and lower optical systems that allow for simultaneous imaging of frontside and backside alignment marks. The frontside and backside alignment mark images are processed to determine the relative position of the marks, as a measurement of the alignment and/or overlay performance of the tool that formed the marks on the substrate.

Abstract: An apparatus for measuring the relative positions of frontside and backside alignment marks located on opposite sides of a substrate is disclosed. The apparatus includes upper and lower optical systems that allow for simultaneous imaging of frontside and backside alignment marks. The frontside and backside alignment mark images are processed to determine the relative position of the marks, as a measurement of the alignment and/or overlay performance of the tool that formed the marks on the substrate.

Abstract: An apparatus for measuring the relative positions of frontside and backside alignment marks located on opposite sides of a substrate is disclosed. The apparatus includes upper and lower optical systems that allow for simultaneous imaging of frontside and backside alignment marks. The frontside and backside alignment mark images are processed to determine the relative position of the marks, as a measurement of the alignment and/or overlay performance of the tool that formed the marks on the substrate.

Abstract: An apparatus for measuring the relative positions of frontside and backside alignment marks located on opposite sides of a substrate is disclosed. The apparatus includes upper and lower optical systems that allow for simultaneous imaging of frontside and backside alignment marks. The frontside and backside alignment mark images are processed to determine the relative position of the marks, as a measurement of the alignment and/or overlay performance of the tool that formed the marks on the substrate.