Abstract: Hypervisors and guest operating systems/virtual machines communicate in virtual environments to enable applications and other services. Security measures are a concern in implementing a secure environment. One feature may include at least one of identifying a session initiation request from a guest operation system at a hypervisor component of a server and receiving periodic messages from the guest operating system, and establishing and maintaining a session and connection between the hypervisor and the guest operating system responsive to receiving the periodic messages from the guest operating system.

Abstract: There is provided, in accordance with some embodiments, a method comprising using one or more hardware processors for receiving a behavioral biometric model that characterizes a human user according to pointing device data of the human user, where the pointing device data comprises screen coordinate and time stamp pairs. The method comprises an action of monitoring an input data stream from a pointing device in real time, wherein the input data stream covers two or more spatial regions of a display screen, and an action of segregating the input data stream into one or more subset streams that is restricted to one of the plurality of spatial regions. The method comprises an action of computing a similarity score based on one or more comparisons of the behavioral biometric model and the one or more subset streams, and an action of sending the similarity score to a user authorization system.

Abstract: Hypervisors and guest operating systems/virtual machines communicate in virtual environments to enable applications and other services. Security measures are a concern in implementing a secure environment. One feature may include at least one of identifying a session initiation request from a guest operation system at a hypervisor component of a server and receiving periodic messages from the guest operating system, and establishing and maintaining a session and connection between the hypervisor and the guest operating system responsive to receiving the periodic messages from the guest operating system.

Abstract: Hypervisors and guest operating systems/virtual machines communicate in virtual environments to enable applications and other services. Security measures are a concern in implementing a secure environment. One feature may include at least one of identifying a session initiation request from a guest operation system at a hypervisor component of a server and receiving periodic messages from the guest operating system, and establishing and maintaining a session and connection between the hypervisor and the guest operating system responsive to receiving the periodic messages from the guest operating system.

Abstract: There is provided, in accordance with some embodiments, a method comprising using one or more hardware processors for receiving a behavioral biometric model that characterizes a human user according to pointing device data of the human user, where the pointing device data comprises screen coordinate and time stamp pairs. The method comprises an action of monitoring an input data stream from a pointing device in real time, wherein the input data stream covers two or more spatial regions of a display screen, and an action of segregating the input data stream into one or more subset streams that is restricted to one of the plurality of spatial regions. The method comprises an action of computing a similarity score based on one or more comparisons of the behavioral biometric model and the one or more subset streams, and an action of sending the similarity score to a user authorization system.

Abstract: Hypervisors and guest operating systems/virtual machines communicate in virtual environments to enable applications and other services. Security measures are a concern in implementing a secure environment. One feature may include at least one of identifying a session initiation request from a guest operation system at a hypervisor component of a server and receiving periodic messages from the guest operating system, and establishing and maintaining a session and connection between the hypervisor and the guest operating system responsive to receiving the periodic messages from the guest operating system.

Abstract: Detecting remote operation of a computer by another computer by receiving pointing device movement event information associated with multiple pointing device movement events in a sequence of pointing device movement events detected at a first computer, determining a frequency of the pointing device movement events from the pointing device movement event information, and determining that the frequency is consistent with a frequency of pointing device movement events that are sent to the first computer, thereby detecting that the first computer is operated by a computer other than the first computer.

Abstract: A computer security method including periodically recording a screenshot of what is displayed on a display of a computer, thereby recording a plurality of screenshots, selecting, in accordance with predefined selection criteria, any of the screenshots that were recorded near detection of a security-related condition, and providing any of the selected screenshots in association with the detection of the security-related condition.

Abstract: Detecting proxy-based communications by determining a plurality of time delays, determining a representative time delay from the plurality of time delays, and identifying the sender as a proxy by determining that the representative time delay is consistent with a predefined time delay that is associated with proxy-based communications.

Abstract: Detecting remote operation of a computer by another computer by receiving pointing device movement event information associated with multiple pointing device movement events in a sequence of pointing device movement events detected at a first computer, determining a frequency of the pointing device movement events from the pointing device movement event information, and determining that the frequency is consistent with a frequency of pointing device movement events that are sent to the first computer, thereby detecting that the first computer is operated by a computer other than the first computer.

Abstract: A computer program method enables a user to find the most relevant documents by searching of distributed databases, i.e., the World Wide Web. The program employs the user's profile, based on the user's foci of interest, the user's query and a semantic analysis of the query and documents. In one embodiment, the retrieved documents are ranked according to relevancy based on the user's profile and query.