Abstract: In the prior art of computer security by default programs are allowed to do whatever they like to other programs or to their data files or to critical files of the operating system, which is as absurd as letting a guest in a hotel bother other guests as he pleases, steal their property or copy it or destroy it, or have free access to the hotel's management resources. The present concept is based on automatic segregation between programs. This is preferably done by creating automatically an unlimited number of Virtual Environments (VEs) with virtual sharing of resources, so that the programs in each VE think that they are alone on the computer, and (unless explicitly allowed by the user) any changes that they think they made in virtually shared resources are in reality only made in their own VE, while the user preferably has an integrated view of the computer.

Abstract: Disclosed is a method and system for software remediation. A data storage device may store one or more sets of related software application image blocks, wherein a set of image blocks is associated with a software application and is generated by parsing components of the software application, such that said image blocks include at least a partial image of a file associated with the application, and at least one of: (1) registry keys and values associated with the application, and (2) operating system objects associated with the application. A communication module may exchange characterization data relating to image blocks with a client computer. A customized check module may be provided for providing the client computer with a set of one or more customized checks, and designate an image block as anomalous based on the result of a check. A remediation module may be provided for repairing the anomalous image block.

Abstract: Disclose is a method and system for software remediation. According to some embodiments of the present invention, a data storage device may store one or more sets of related software application image blocks, wherein a set of image blocks is associated with a software application and is generated by parsing components of the software application. A communication module may exchange characterization data relating to image blocks with a client computer and corrupted block may be sent to the client.

Abstract: Disclosed is a method system and application for replacing device drivers on an operating system associated with a computing platform. According to some embodiments of the present invention, an operating system may be configured to use a set of device drivers corresponding to the hardware installed on the computing platform. In the event of a change of hardware, the installed device drivers need to be adapted to the new devices.

Abstract: Disclose is a system and method for one or more software applications from a source computing platform to a destination computing platform, by identifying installed software components. According to some embodiments of the present invention, a software application may be migrated by generating a list of its components, and downloading components according to the generated list.

Abstract: Disclose is a method and system for software installation based on an installation profile indicator. A software installation system server may store or be functionally associated with sets of related software application image blocks in a software image repository. The repository may include a single image file (“unified image” or “global image”), which unified image may include a set of software components organized and stored as a set of image blocks.

Abstract: In the prior art of computer security by default programs are allowed to do whatever they like to other programs or to their data files or to critical files of the operating system, which is as absurd as letting a guest in a hotel bother other guests as he pleases, steal their property or copy it or destroy it, or have free access to the hotel's management resources. The present concept is based on automatic segregation between programs. This is preferably done by creating automatically an unlimited number of Virtual Environments (VEs) with virtual sharing of resources, so that the programs in each VE think that they are alone on the computer, and (unless explicitly allowed by the user) any changes that they think they made in virtually shared resources are in reality only made in their own VE, while the user preferably has an integrated view of the computer.

Abstract: Malicious software attacks (such as for example stealing data, changing data or destroying data) on personal computers and/or servers and/or other computerized gadgets (especially through the Internet) are becoming more and more common and more and more dangerous, causing damages of tens of billions of dollars each year. The state-of the-art solutions are inherently limited because they solve only a limited number of problems on the surface, instead of going deeply into the roots of the problem. The most common solutions are Anti-viruses and firewalls. Anti-viruses are limited because they can only detect known viruses or worms that have already been identified (usually after they have already attacked many computers). Network firewalls are typically based on packet filtering, which is limited in principle, since the rules of which packets to accept or not may contain for example subjective decisions based on trusting certain sites or certain applications.

Abstract: Malicious software attacks (such as for example stealing data, changing data or destroying data) on personal computers and/or servers and/or other computerized gadgets (especially through the Internet) are becoming more and more common and more and more dangerous, causing damages of tens of billions of dollars each year. The state-of the-art solutions are inherently limited because they solve only a limited number of problems on the surface, instead of going deeply into the roots of the problem. The most common solutions are Anti-viruses and firewalls. Anti-viruses are limited because they can only detect known viruses or worms that have already been identified (usually after they have already attacked many computers). Network firewalls are typically based on packet filtering, which is limited in principle, since the rules of which packets to accept or not may contain for example subjective decisions based on trusting certain sites or certain applications.