Abstract: A method, non-transitory computer readable medium and system comprising receiving, at a computer system, data capturing a run time behavior of a binary object, extracting, with the computer system, the data from the run time behavior of the binary object, mapping, with the computer system, the extracted data into one or more interactive visual representations of the run time behavior of the binary object comprising a scalar representation of process calls, dependencies among processes and executable files, or time dependencies between the processes and the executable files, and classifying, with the computer system, the binary object as malicious or benign.

Abstract: An apparatus and method include: receiving a data set having two or more variables; receiving a selection of at least one of the two or more variables, an abstraction level and a visual feature; automatically generating and displaying a set of visual representations of the data set on the display; receiving a change in the selected variables, selected abstraction level, the selected visual feature, or a selection from various views; determining a visual representation recommendation based on the selected variable(s), selected abstraction level and the selected visual feature, the change in the selected variables, selected abstraction level, the selected visual feature, or the selected views; and automatically updating and displaying the set of visual representations of the data set on the display based the visual representation recommendation, and the change in the selected variables, selected abstraction level, the selected visual feature, or the selected views.

Abstract: An apparatus and method include: receiving a data set having two or more variables; receiving a selection of at least one of the two or more variables, an abstraction level and a visual feature; automatically generating and displaying a set of visual representations of the data set on the display; receiving a change in the selected variables, selected abstraction level, the selected visual feature, or a selection from various views; determining a visual representation recommendation based on the selected variable(s), selected abstraction level and the selected visual feature, the change in the selected variables, selected abstraction level, the selected visual feature, or the selected views; and automatically updating and displaying the set of visual representations of the data set on the display based the visual representation recommendation, and the change in the selected variables, selected abstraction level, the selected visual feature, or the selected views.