Abstract: A database of known graphical user interface layouts is generated using samples of known executable files. An executable file having an unknown function is obtained; it is executed within a safe environment and its graphical user interface is identified. Layout analysis enumerates all of the windows within the interface and extracts the position values of each window and the dimension values of each window to form a set of layout information. If the layout database contains this layout information set then it is determined that the layout information is of the same type of software corresponding to the type of software contained within the database (or of the type of software to which the layout information is matched within the database). A match may occur if all the windows match, if only some percentage of the windows match, or if the windows do not match exactly but the dimensions of the corresponding window in the database are within a certain percentage.

Abstract: A computer is protected from argument switch attacks by intercepting a function call to terminate a process. The function call and a handle used as an argument in the function call are forwarded by an antivirus system service descriptor table to an antivirus. The antivirus is configured to evaluate the function call to determine whether or not the function call is terminating an antivirus process. A consistent handle table includes a listing of handles of processes employed as arguments in function calls that terminate processes and are approved by the antivirus. Instructions that close a handle are detected by the antivirus, which compares the handle to those in the consistent handle table. The antivirus blocks those instructions that close a handle that is included in the consistent handle table.

Abstract: The present invention provides a system, comprising an exposure apparatus and a control mean electrically connected to the exposure apparatus, for calculating exposure energy (Ee). The control mean executes an exposure energy calculation program according to mask data, comprising an actual transparency percentage parameter (Ta) and a mask error, and a critical dimension (CD) specification, comprising at least a basic transparency percentage parameter (Tb), a transparency constant (Tc), a CD energy constant (Cc) and a basic exposure energy, to calculate the exposure energy and output the exposure energy to the exposure apparatus. In the exposure energy calculation program, the basic transparency percentage parameter (Tb) is firstly subtracted from the actual transparency percentage parameter (Ta). The resulting difference is then multiplied together with the transparency constant (Tc) parameter to calculate a transparency percentage difference energy.

Abstract: The present invention provides a system, comprising an exposure apparatus and a control mean electrically connected to the exposure apparatus, for calculating exposure energy (Ee). The control mean executes an exposure energy calculation program according to mask data, comprising an actual transparency percentage parameter (Ta) and a mask error, and a critical dimension (CD) specification, comprising at least a basic transparency percentage parameter (Tb), a transparency constant (Tc), a CD energy constant (Cc) and a basic exposure energy, to calculate the exposure energy and output the exposure energy to the exposure apparatus. In the exposure energy calculation program, the basic transparency percentage parameter (Tb) is firstly subtracted from the actual transparency percentage parameter (Ta). The resulting difference is then multiplied together with the transparency constant (Tc) parameter to calculate a transparency percentage difference energy.