Abstract: The present disclosure relates to a system and method for rootkit detection based on a system dump sequence analysis. The system includes a security system in communication with one or more applications of a computing system. The security system includes a system event monitor to monitor events occurring at the applications, a system dump capture driver to capture differential system dumps corresponding to each event, and a rootkit detection engine to determine if a system state is infected. The rootkit detection engine is based on a machine learning model, where the machine learning model is trained on collection of clean system dumps and infectious system dumps. Based on analysis carried out by the machine learning model, the rootkit detection engine can classify the system state as suspicious, infectious, or clean state.

Abstract: A lens elements array comprises at least two lens elements aligned along an alignment axis. Each lens element includes a spherical lens and a feed element. The feed elements are tilted such that the RF signals generated by the feed elements have major axes form an angle (preferably between 5° and 30°) other than a perpendicular angle with respect to the alignment axis. The combined RF signals produced collectively by these feed elements have amplitude that has minimal dips across the array. The feed elements that are farther away from the center of the array have higher levels of tilts than the feed elements that are closer to the center of the array.

Abstract: Inductively coupled plasma (ICP) analyzers use an ICP torch to generate a plasma in which a sample is atomized an ionized. Analysis of the atomic ions can be performed by atomic analysis, such as mass spectrometry (MS) or atomic emission spectrometry (AES). Particle based ICP analysis includes analysis of particles such as cells, beads, or laser ablation plumes, by atomizing and ionizing particles in an ICP torch followed by atomic analysis. In mass cytometry, mass tags of particles are analyzed by mass spectrometry, such as by ICP-MS. Systems and methods of the subject application include one or more of: a demountable ICP torch holder assembly, an external ignition device; an ICP load coil comprising an annular fin, particle suspension sample introduction fluidics, and ICP analyzers thereof.

Abstract: A method for creating a collection with optimized family-specific signatures for protecting from malware includes collecting statistics of potential signatures for chosen sample attribute vectors, the statistics of potential signatures being collected for clean files and malware files, estimating a probability to find a potential signature in the clean files, grouping malware files with the same signature in clusters (families), choosing the most optimal signature for the malware family files based on a predefined target function, and exporting a collection with optimized family-specific signatures configured to be implemented by scan engines.

Abstract: Disclosed herein are systems and method for inspecting archived slices for malware. In one exemplary aspect, the method comprises identifying a first slice in a plurality of slices in a backup archive, wherein the first slice is an image of user data at a first time. The method comprises scanning the first slice of the plurality of slices in the backup archive and detecting at least one infected file in the first slice. The method comprises identifying a block of the first slice that corresponds to the at least one infected file. The method comprises mounting, to a disk, a second slice of the plurality of slices. The method comprises tracking the block and determining that the at least one infected file exists on the second slice and removing the infected file from the second slice by generating a respective cured slice of the second slice.

Abstract: Disclosed herein are systems and method for protecting files indirectly related to user activity. In one exemplary aspect, a method may comprise identifying, on a computing device, a file that is directly accessed by a user of the computing device. The method may comprise determining an application that provides access to the file. The method may comprise identifying a plurality of program files that the application utilizes during execution. For each respective program file of the plurality of program files, the method may comprise determining whether the respective program file is required by the application to provide access to the file and in response to determining that the respective program file is required, determining a type of threat that can target the respective program file. The method may further comprise performing a data protection action on the respective program file based on the type of threat.

Abstract: Disclosed are systems and methods restoring a computing system. The described method includes emulating a virtual disk using a backup of the computing device and generating an ancillary virtual machine (VM). The method includes determining and writing, to a delta disk linked to the virtual disk, configuration modifications to the ancillary VM that enable booting of the ancillary VM using the virtual disk on a different device with dissimilar hardware as the computing device. Responsive to receiving a request to perform recovery of the computing device, the method comprises restoring the backup by creating on the different device a recovery virtual machine (VM) having a base virtual disk emulated from the backup, and modifying the recovery VM by attaching the delta disk having the configuration modifications.

Abstract: A method of forming a device on a silicon substrate having first, second and third areas includes recessing an upper substrate surface in the first and third areas, forming an upwardly extending silicon fin in the second area, forming first source, drain and channel regions in the first area, forming second source, drain and channel regions in the fin, forming third source, drain and channel regions in the third area, forming a floating gate over a first portion of the first channel region using a first polysilicon deposition, forming an erase gate over the first source region and a device gate over the third channel region using a second polysilicon deposition, and forming a word line gate over a second portion of the first channel region, a control gate over the floating gate, and a logic gate over the second channel region using a metal deposition.

Abstract: A method includes recessing an upper surface of a substrate in first and second areas relative to a third area, forming a first conductive layer in the first area, forming a second conductive layer in the three areas, selectively removing the first and second conductive layers in the first area, while maintaining the second conductive layer in the second and third areas, leaving pairs of stack structures in the first area respectively having a control gate of the second conductive layer and a floating gate of the first conductive layer, forming a third conductive layer in the three areas, recessing the upper surface of the third conductive layer below tops of the stack structures and removing the third conductive layer from the second and third areas, removing the second conductive layer from the second and third areas, and forming blocks of metal material in the second and third areas.

Abstract: Systems and methods for binary translation of executable code.

Abstract: Disclosed are systems and methods for providing layouts for a remote desktop session. According to one aspect, a method comprises receiving, at a remote application server, a request from a client device to initiate a remote desktop session, extracting configuration information regarding the client device from the request, retrieving, from a database, a layout that defines one or more remote applications and configurations for the one or more remote applications executing on the remote desktop session, initiating the remote desktop session with the client device, launching the one or more remote applications defined in the layout and configuring the one or more remote applications according to the configurations.

Abstract: A system and method that provides customized graphical user interfaces on mobile devices based on user inputs. An exemplary method includes detecting a computing device remotely connected to a remote server over a network and having an active session of a software application running on the remote server. Moreover, the method further includes identifying and selecting one or more hotkey buttons based on the detected software application, transmitting the one or more hotkey buttons to the computing device to be displayed in a customized interface while the software application is active, detecting an activation of the one or more hotkey buttons displayed on the computing device, and executing, by the remote server, an operation for the active software application in response to the activation of the one or more hotkey button by the user.

Abstract: A system for detection of files not matching a known malware file in a computing environment that includes a processor coupled to a memory storing instructions to permit the processor to function as an analyzer. The analyzer is configured to receive, as input, an unknown file and the known malware file, compare the unknown file to the known malware file by comparing N (where N is greater of equal to 1) blocks B1, ..., BN of lengths L1, ..., LN located at offsets O1, ..., ON such that the number of blocks, lengths and offsets are calculated according to pre-defined algorithm, and output a value indicating that the unknown file is different from the known malware file if exists at least one j that a Bj block of the unknown file is different from a Bj block of the known malware file.

Abstract: Provided are systems and methods for thermally-regenerative batteries that avoid solid metal dissolution and deposition reactions. A thermoelectrochemical system includes a reactor comprising first and second electrode compartments with a separator interposed between the first and second electrode compartments. The reactor further includes first and second electrodes disposed in the first and second electrode compartments, respectively. The first and second electrode compartments include first and second aqueous electrolyte solutions, respectively. The first electrode compartment, the second electrode compartment, or both include a thermally regenerative ligand and optionally a non-thermally regenerative ligand. The first and second aqueous electrolyte solutions exclude solid metal dissolution and deposition reactants. Also provided are methods of using the thermoelectrochemical systems provided herein.

Abstract: The subject matter of this specification describes a method that includes determining when to send a user selection of a first key on a keyboard to an operating system, where the operating system supports shortcut key combinations. The device identifies the user selection of the first key, as input for an application. The device determines that the first key is part of a shortcut key combination. The processing device determines whether a cursor is visible in a user interface provided by the application. Upon determining that the cursor is visible in the user interface, the device waits for another user selection of one or more remaining keys of the shortcut key combinations before sending the first key to the operating system. Upon determining that the cursor is not visible in the user interface, the device sends the first key to the operating system without waiting for another user selection.

Abstract: This application proposes multi-beam antenna systems using spherical lens are proposed, with high isolation between antenna ports and compatible to 2×2, 4×4, 8×8 MIMO transceivers. Several compact multi-band multi-beam solutions (with wideband operation, 40% +, in each band) are achieved by creating dual-band radiators movable on the track around spherical lens and by placing of lower band radiators between spherical lenses. By using of secondary lens for high band radiators, coupling between low band and high band radiators is reduced. Beam tilt range and side lobe suppression are improved by special selection of phase shift and rotational angle of radiators. Resultantly, a wide beam tilt range (0-40 degree) is realized in proposed multi-beam antenna systems. Each beam can be individually tilted. Based on proposed single- and multi-lens antenna solutions, cell coverage improvements and stadium tribune coverage optimization are also achieved, together with interference reduction.

Abstract: Disclosed herein are systems and method for multiplexing data of an underlying index. In an exemplary aspect, an index handler may: search for a data file in a plurality of data buckets associated with an index, wherein at least one respective data bucket of a plurality of data buckets is attached to a respective slot of a plurality of slots; identify, based on the searching, a first data bucket of the plurality of data buckets that comprises the data file; in response to determining that the first data bucket is not attached to any of the plurality of slots, attach the first data bucket to a first slot of the plurality of slots; and enable access to the data file via the first data bucket attached to the first slot.

Abstract: A dynamic photodiode detector or detector array having a light absorbing region of doped semiconductor material for absorbing photons. Electrons or holes generated by photon absorption are detected with a construction of oppositely heavily doped anode and cathode regions and a heavily doped ground region of the same doping type as the anode region. Photon detection involves switching the device from reverse bias to forward bias to create a depletion region enclosing the anode region. When a photon is then absorbed the electron or hole thereby generated drifts under the electric field induced by the biasing to the depletion region where it causes the anode-to-ground current to increase. Furthermore, the detector is configured such that anode-to-cathode current starts to flow once a threshold number of electrons or holes reaches the depletion region, where the threshold may be one to provide single photon detection.

Abstract: A method of forming a device on a semiconductor substrate having first, second, third and dummy areas, includes recessing the substrate upper surface in the first, second and dummy areas, forming a first conductive layer over the substrate, removing the first conductive layer from the third area and a second portion of the dummy area, forming a first insulation layer over the substrate, forming first trenches through the first insulation layer and into the substrate in the third area and the second portion of the dummy area, forming second trenches through the first insulation layer, the first conductive layer and into the substrate in the first and second areas and a first portion of the dummy area, and filling the first and second trenches with insulation material. Then, memory cells are formed in the first area, HV devices in the second area and logic devices in the third area.

Abstract: Systems, methods, and media for managing and modifying web content are provided. An exemplary method may include the steps of providing a web content management application via a web site, the web content management application adapted to maintain a global marketing framework; generating a web marketing campaign from at least a portion of the global marketing framework, wherein the data included in the web content is generated by the web content management application according to a predetermined format of rendering engines; gathering marketing data from at least one of the web server associated with the web marketing campaign and consumer devices accessing the web marketing campaign, the marketing data including information indicative of interests of consumers; storing the marketing data in a database; analyzing the marketing data; and periodically or continually modifying the content of a web marketing campaign to substantially correspond to the interests of the consumers.