Abstract: Automated fixture layout is approached in two distinct stages. First, the spatial locations of clamping points on the work piece are determined to ensure immobility of the fixtured part under any infinitesimal perturbation. Second, spatial locations are matched against a user-specified library of reconfigurable clamps to synthesize a valid fixture layout or configuration that includes clamps that are accessible and collision free. The spatial locations matching during the second stage can be the same spatial locations chosen in the first stage to ensure immobility, or a different set of spatial locations.

Abstract: Methods for CAD editing and corresponding systems and computer-readable mediums. A method includes receiving a CAD model including a plurality of entities and receiving a user input including a selection of at least one entity and a movement of the selected entity. The method includes applying any basic condition behaviors that correspond to the user input and applying any optional condition behaviors that correspond to the user input. The method includes building a variational system to be solved based on the user input, any applied basic condition behaviors, and any optional condition behaviors. The method includes performing a variational solve on the variational system to produce an edited CAD model and storing the edited CAD model.

Abstract: In an approach for processing a circuit design by a programmed processor, a placed circuit design that has been placed on programmable resources of a programmable integrated circuit (IC) is input. A critical path is determined from a first sequential element to a second sequential element assigned to the placed circuit design. A first clock buffer that provides a clock signal to the first and second sequential elements is determined, and an unused clock buffer is selected based on proximity to the first sequential element. The circuit design is modified to include the unused clock buffer as a second clock buffer coupled to receive a clock signal in parallel with the first clock buffer and to provide a clock signal to the first sequential element.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for providing a graphical user interface configured to present a view of a computer model of a network, wherein the model of the network includes a plurality of elements that represent physical objects in the network and wherein each of the elements is associated with one or more rule points; receiving user input selecting a rule point for an element presented in the view; accepting user input specifying programming logic to be associated with a first one of the predefined conditions of the selected rule point, the programming logic having been entered into a graphical user interface configured to present an interactive template of the predefined condition; enabling the predefined condition based on the accepting; and validating the model by simulating operation of network.

Abstract: Described herein is a method for simulating a three-dimensional spatial intensity distribution of radiation formed within a resist layer on a substrate resulting from an incident radiation, the method comprising: calculating an incoherent sum of forward propagating radiation in the resist layer and backward propagating radiation in the resist layer; calculating an interference of the forward propagating radiation in the resist layer and the backward propagating radiation in the resist layer; and calculating the three-dimensional spatial intensity distribution of radiation from the incoherent sum and the interference.

Abstract: A method for estimating the quantity of light received by a point M of a heterogeneous participating media, the light being emitted by a light environment. Thereafter, the method comprises estimating, for each point of a first set of points, first values representative of the light attenuation between the considered point and a first surface bounding the media along a plurality of particular directions of light emission, estimating first coefficients of projection by projection of the first values of reduction of light intensity in an orthonormal basis of spherical functions, estimating second values representative of the light attenuation between the point and a second surface along directions, the second surface comprising some of the points of the neighborhood of the point, and estimating the quantity of light received by the point using first coefficients of projection and second values of reduction of light intensity.

Abstract: A unified simulation system is provided. The unified simulation system includes an input database storing input data comprising an input parameter and environment information, a unified simulator executing a unified process-device-circuit simulation of characteristics of a semiconductor apparatus based on the input data and at least one predetermined model and outputting a simulation result as output data, and an output database storing the output data. The unified simulator includes a process simulator simulating at least one process based on the input data and outputting process characteristic data, a device simulator simulating at least one device based on the process characteristic data and outputting device characteristic data, and a circuit simulator simulating a circuit comprising the at least one device. Accordingly, multiple devices can be simultaneously optimized for the optimization of circuit characteristics and an accurate specification at process and device levels can be provided.

Abstract: A system, method and apparatus for dynamic power management including creating a model for each task of multiple tasks performed by a circuit, the model including a corresponding power requirement value for each task, selecting each task for execution, executing the selected task when the corresponding power requirement value does not exceed an average power consumption cap of an execution window, determining an actual power consumption of the selected task during execution of the selected task and storing the actual power consumption corresponding to the selected task as the corresponding power requirement value for the selected task. A memory system can include a memory die, a data bus coupled to the memory die, a power supply coupled to the memory die, a power monitor coupled to the memory die and the power supply and a controller coupled to the data bus and the memory die.

Abstract: A simulation device having an ESD (Electro Static Discharge) protection element has a first parameter file creating unit, a second parameter file creating unit, a parameter file storage storing the parameter files created by the first and second parameter file creating units, a parameter file selector changing a parameter file to be selected from the parameter files stored in the parameter file storage, depending on whether or not operation of the ESD protection element should be verified, a netlist creating unit creating a netlist of the semiconductor circuit utilizing the parameter file selected by the parameter file selector, and a simulation executing unit verifying the operation of the semiconductor circuit based on the netlist.

Abstract: A model for simulating the electrical behavior of a thyristor includes a model of an NPN bipolar transistor whose emitter forms the cathode of the thyristor and the base forms a low-side control terminal of the thyristor, and a model of a PNP bipolar transistor whose emitter forms the anode of the thyristor and the base forms a high-side control terminal of the thyristor, the collector of the PNP transistor being connected to the low-side control terminal and the collector of the NPN transistor being connected to the high-side control terminal. The transistor models are present a small signal behavior over the entire range of anode currents of the thyristor, whereby the transistor models exhibit a gain drop when the anode current exits the small signal range.

Abstract: A computer implemented method for calculating a charge density q1 of a first gate of a double gate transistor comprising a thin body with a first and a second gate interface, the method including determining, using a physical processor, an initial estimate q1,init of the charge density of the first gate; performing, using the physical processor, at least two basic corrections of the initial estimate based on a Taylor development of a function fzero(q1) able to be nullified by a correct value of the charge density q1 of the first gate.

Abstract: A method and a system embodying the method for automatic application-specific instruction-set processor design and verification, comprising generating programming and simulation tools in accordance with application-specific instruction-set processor specifications automatically by an Electronic Design Automation tool; generating a reference model and a hardware description of the application-specific instruction-set processor in accordance with the application-specific instruction-set processor specifications automatically by the Electronic Design Automation tool; and verifying the hardware description against the reference model is disclosed.

Abstract: A method and a system embodying the method for automatic generation of a verification environment, comprising providing a first model of an application-specific instruction-set processor; providing a second model of the application-specific instruction-set processor; and generating automatically the verification environment from the first model and the second model is disclosed.

Abstract: In an example implementation, a method of implementing a circuit design for an integrated circuit (IC), includes: on at least one programmed processor, performing operations including: processing a description of the circuit design having logic elements into a graph having nodes representing the logic elements and edges representing potential pairs of the logic elements; determining a packing of pairs of the nodes to divide the graph into selected nodes and unselected nodes and selected edges and unselected edges by performing iterations of: identifying an augmenting path in the graph between a pair of unselected nodes; and modifying the selected nodes and unselected nodes and the selected edges and unselected edges based on the augmenting path; and grouping the logic elements in the description into pairs of logic elements based on the packing of pairs of the nodes.

Abstract: An analysis unit analyzes a source code representing design data of a semiconductor device, and generates information (CDFG information) indicating the data and control flow of the semiconductor device. A high-level synthesis data generation unit acquires intermediate data (an object file), which is obtained by compiling the source code, generates intermediate data (an object file) by incorporating the CDFG information generated by the analysis unit into the acquired intermediate data, and outputs the generated intermediate data as high-level synthesis data.

Abstract: An apparatus for and a method of making a hierarchical integrated circuit design of an integrated circuit design, a computer program product and a non-transitory tangible computer readable storage medium are provided. The apparatus comprises an input for receiving an hierarchical integrated circuit design, a selector for selecting a candidate output pin, a cloner for adapting the hierarchical integrated circuit design, a re-connector for adapting the hierarchical integrated circuit design, and an output for outputting the adapted hierarchical circuit design. Optionally, the apparatus comprises a timing improver. The apparatus selects a candidate output pin of an IP block that is a node on at least two timing paths that have contradictory timing violations. The candidate output pin is cloned and at least one of the timings paths is connected to the cloned output pin for one of the instances of the IP block.

Abstract: Systems, methods, and other embodiments associated with an integrated circuit that includes a plurality of parallel pillar structures is described. In one embodiment, a system includes a design logic configured to analyze a design of an integrated circuit to identify open tracks on each layer by determining a location of structures in each layer of the design. The open tracks are spaces on each layer of the design that are free from structures that obstruct routing the plurality of pillar metals. The system also includes routing logic configured to successively route the plurality of pillar metals in each of the layers of the design based, at least in part, on the parameters and the location of the structures. The routing logic routes pillars of the plurality of pillar metals that are in adjacent layers to be perpendicular and pillar metals that are within a same layer of the design to be parallel.

Abstract: An embodiment includes a computer program product for providing a yield prediction. The computer program product has a non-transitory computer readable medium with a computer program embodied thereon. The computer program comprises computer program code for obtaining a representation of a circuit. The circuit comprises a common path and a critical path, and the critical path represents multiple parallel paths. The computer program further comprises computer program code for obtaining a first table representing the common path and a second table representing the multiple parallel paths and computer program code for performing a variable based simulation based on the representation of the circuit, the first table, and the second table. The computer program also comprises computer program code for determining a result indication of each of the multiple parallel paths based on the variable based simulation compared with a predetermined specification.

Abstract: Some embodiments of the present disclosure provide an integrated circuit (IC) design method. The method includes (1) receiving a first layout comprising stripe patterns with a first separation and a first width; (2) receiving a second layout comprising stripe patterns with a second width narrower than the first separation, each stripe on the second layout is configured to situate between two adjacent stripes on the first layout when overlaying the first layout and the second layout; (3) performing a separation check by identifying a spacing between a stripe on the second layout and one of the two adjacent stripes on the first layout; and (4) adjusting the spacing between the stripe on the second layout and one of the two adjacent stripes on the first layout when the separation check determining the spacing is greater than a predetermined value.

Abstract: The invention provides a thermal uniformity compensating method and apparatus. The steps of the method includes: respectively measuring a plurality of first resistances of a plurality of hot spot patterns of a chip over an hot spot effect, wherein a plurality of pattern densities of the hot spot patterns are different; respectively measuring a plurality of second resistances of each of the hot spot patterns of the chip by a plurality of test keys over the hot spot effect, wherein a plurality of distances between the test keys and the corresponding hot spot pattern are different; establishing a look-up information according to the first and second resistances; analyzing a layout data of the chip for obtaining a pattern density information; and generating a calibrated layout data according to the pattern density information and the look-up information.

Abstract: A method and an apparatus from such method for designing an integrated circuit (IC) that mitigates the effects of process, voltage, and temperature dependent characteristics on the fabrication of advanced IC's but provides high die yields, lower power usage, and faster circuits. Conventional design process takes into account power supply voltage Vdd as a variable that must be considered in a skewed corner analysis. The disclosure teaches that the IC design process can be substantially simplified by essentially factoring out voltage based variations in corner lot analysis for IC designs that include dynamic voltage scaling circuitry, because each fabricated IC die of an IC design having dynamic voltage scaling can individually adjust the applied supply voltage Vdd within a range to offset local process-induced variations in the performance of that specific IC die.

Abstract: Embodiments include a system for determining cardiovascular information for a patient. The system may include at least one computer system configured to receive patient-specific data regarding a geometry of the patient's heart, and create a three-dimensional model representing at least a portion of the patient's heart based on the patient-specific data. The at least one computer system may be further configured to create a physics-based model relating to a blood flow characteristic of the patient's heart and determine a fractional flow reserve within the patient's heart based on the three-dimensional model and the physics-based model.

Abstract: A system, method and apparatus for executing a sequence analysis pipeline on genetic sequence data includes a structured ASIC formed of a set of hardwired digital logic circuits that are interconnected by physical electrical interconnects. One of the physical electrical interconnects forms an input to the structured ASIC connected with an electronic data source for receiving reads of genomic data. The hardwired digital logic circuits are arranged as a set of processing engines, each processing engine being formed of a subset of the hardwired digital logic circuits to perform one or more steps in the sequence analysis pipeline on the reads of genomic data. Each subset of the hardwired digital logic circuits is formed in a wired configuration to perform the one or more steps in the sequence analysis pipeline.

Abstract: A device exchange transports messages between autonomous devices in a medical environment. The autonomous devices perform various tasks in the medical environment, such as surgical device control, drug infusion, video recordation, and user interfaces, for example. Each autonomous device has a device specification, published and stored by the device exchange and available to other autonomous devices. The device specification indicates, for each autonomous device, an identifier, a set of outputs and a set of inputs, or commands. Devices interoperate by messages including the device identifier and an output or command without translation or transformation mechanisms such as scripts, protocol translations, drivers or interface modules because each message is based on the published device specification available to all the devices connected to the exchange.

Abstract: A method for displaying physiological data on a medical display device includes receiving one or more first units of physiological data from a first monitoring device. At least one of the first units of physiological data is received on a continuous basis. Each first unit of physiological data corresponds to a medical parameter being monitored by the first monitoring device. One or more second units of physiological data are received from a second monitoring device. At least one of the second units of physiological data is received on a non-continuous basis. Each second unit of physiological data corresponds to a medical parameter being monitored by the second monitoring device. The first and second units of physiological data are displayed on a single display screen of the medical display device.

Abstract: A method of managing adherence to a regimen in a subscription based computer implemented healthcare information environment. The method includes receiving at a mobile device information from a receiver that a dose was ingested by a living subject. The mobile device comprises a processor, a memory and a display coupled to the processor. The method provides wirelessly communicating the information over a wireless network to a backend computer processing system and receiving from the computer at the backend processing system a personal information stream characterizing behavior of the living subject based on the received information over a predetermined period. An apparatus includes an adherence package including a foldable sheet, at least one of blister pack coupled to the foldable sheet, at least one ingestible device associated with a dose, and a perforation provided on the foldable sheet to enable removal of the at the least one blister pack.

Abstract: Using an in silico testing environment, host-pathogen interactions can be modeled and simulated by, in any effective order, identifying a plurality of biological events associated with a pathogen's invasion of a host; identifying for each biological event, at least one agent associated with the event; describing the state for each agent and/or identifying at least one action for each agent; identifying at least one interaction between agents; simulating a temporal course of the host-pathogen interaction using the plurality of biological events; and displaying the results of the simulation phase. The simulation phase may be accomplished using an agent-based simulation system that includes a feedback loop. The feedback loop is configured for continuously using output of at least one simulation as input for at least another simulation until an end is met.

Abstract: This document discusses, among other things, brain stimulation models, systems, devices, and methods, such as for deep brain stimulation (DBS) or other electrical stimulation. In an example, a target volume of activation (VOA) can be received, a test VOA can be simulated, and at least one of a target electrode location or parameter can be provide using a relationship between the target VOA and the test VOA.

Abstract: The present disclosure describes systems and methods for predicting a likely side effect profile for even new, untested medications. A predicted side effect profile may be generated based on intersections of side effect profiles of other medications that affect the same or related molecular entities, such as the nearby target proteins, involve the same pathways, or are otherwise similarly related. To generate a predicted side effect profile for a new drug targeting a novel or previously un-targeted protein target, an analyzer may query an adverse event database for records pertaining to patients who have taken drugs or combinations of drugs that target or affect molecular entities in the vicinity of the novel target within a global molecular entity graph, and, in some embodiments, may retrieve a plurality of adverse event records and generate an intersection of side effects associated with related targets to predict likely side effects for the novel target.

Abstract: The present disclosure relates to an apparatus for estimating level of bodily injury of occupants at an accident of a vehicle. The apparatus has an occupancy detecting block which determines occupied seat. The apparatus has a deformation estimating block which estimates a deformation amount which is reduction of space around the seat. The apparatus has a bodily injury estimating block which estimates bodily injury level based on the occupied seat and estimated deformation amount.

Abstract: An apparatus is provided that includes a processor and a memory storing executable instructions that in response to execution by the processor cause the apparatus to direct presentation of a user interface having a list that presents information regarding elements of a plurality of patient exams. The apparatus is also caused to receive an indication of acknowledgment of receipt of a higher-priority one of the exams or information regarding the respective exam. This includes the apparatus being caused to receive an indication of long selection of first information indicating the respective exam's designation as being higher priority, direct presentation of a dialog that includes a user interface element for the acknowledgment, receive an indication of selection of the user interface element, and receive an indication of selection of the first information, without first receiving an indication of user interaction with any other area of the user interface.

Abstract: Systems and methods for detecting a likely misuse of a medicament by a user. The system includes a computer communicatively coupled with a dispensing device. The computer receives a usage pattern of a medicament by the user as indicated by the dispensing device and a result of a test correlating with an actual consumption of the medicament by the user. Based on the usage pattern, the computer computes an estimated result of a test corresponding to the at least one predetermined test. Based on a comparison between the estimated result and the test result, a determination is made as to whether the user has likely misused the medicament.

Abstract: Devices, systems, and methods are provided for remote visualization of the storage compartments in a medication dispenser device, to monitor a patient's compliance with a medication dosage schedule and for verifying the proper loading of medication into the patient's medication dispenser device. The device may include a plurality of storage compartments, each having an interior space for storing at least one medication or medication reminder marker; an image capturing device (e.g., a camera) positionable to capture an image of the interior space of each storage compartment; and a communications module for electronically transmitting the captured image to a central monitoring station.

Abstract: Apparatus, techniques and systems for preventing illegal use of software and other digital files based on operations of a data storage device controller in a computer or computer system. For example, a method for preventing illegal use of software includes: configuring a computer to use a data storage device controller to control use of each digital file stored on one or more data storage devices; before a use of each digital file, operating the data storage device controller to access a storage device on which the digital file is stored to check whether the digital file meets a condition for use; and operating the data storage device controller to block use of the digital file when the condition is not met and to allow execution of the digital file when the condition is met. The digital file can be an application software or other digital documents.

Abstract: A method, system, and/or computer program product enables the secure debugging of a software application. A server receives a secure software application from a client. The secure application is designed to execute within the server, and access to data used by the secure software application is protected by a security object, which allows a processor within the server to access the data used by the secure software application without permitting data to exit unprotected from the processor. The server also receives a secure sidecar debugging application from the client. The secure sidecar debugging application is designed to debug the secure application, but cannot be used by the server. If there is an error in execution of the secure software application within the server, the server transmits the secure software application to the client, where it is debugged using the secure sidecar debugging application.

Abstract: A system and method for tracking and preventing an execution of an application on a user device are provided. The method comprises receiving a request to determine if an application is a restricted application for a user of the user device; receiving at least one context parameter respective of the application; receiving at least one variable related the user of the user device; determining whether the application is a restricted application based on the analysis of the at least one context parameter and the at least one variable parameter; and disabling an access of the user to contents of the application if the application is determined to be restricted.

Abstract: An electronic device includes a touch panel, a time information obtaining section, and an authentication section. The time information obtaining section obtains time information for user authentication. The authentication section executes user authentication based on the time information obtained by the time information obtaining section. The time information obtaining section changes the time information according to a user's touch duration on the touch panel and changes an amount of change in time that the time information indicates according to a user's manner of touching the touch panel.

Abstract: An approach is provided to use social media content to verify the identity of a user using aliases established by the user in a social media environment. In the approach, a user authentication request pertaining to a user is received. Aliases corresponding to the user's social media contacts are retrieved from a social media data store. User questions and expected answers are prepared based on the user's social media contacts and the corresponding aliases. The user is prompted to provide one or more user answers responsive to the user questions. In response to receiving answers that match the expected answers, the user authentication request is confirmed. Conversely, in response to receiving user answers that fail to match the expected answers, the user authentication request is invalidated.

Abstract: User authentication is performed using a system that includes a service provider system, a device provisioning system, a user computer, and a portable mobile device. The user computer requests the service provider system for access to a remote online service. The user computer receives sign-in information from the device provisioning system. The sign-in information is transferred from the user computer to the portable mobile device, which provides the sign-in information and a unique device identifier of the portable mobile device to the device provisioning system. The device provisioning system identifies a user associated with the portable mobile device, and informs the service provider system the identity of the user. The service provider system allows the user computer to access the remote online service based on the identity of the user provided by the device provisioning system.

Abstract: Protecting the security of an entity by using passcodes is disclosed. A user's passcode device generates a passcode. In an embodiment, the passcode is generated in response to receipt of user information. The passcode is received by another system, which authenticates the passcode by at least generating a passcode from a passcode generator, and comparing the generated passcode with the received passcode. The passcode is temporary. At a later use a different passcode is generated from a different passcode generator. In these embodiments, there are asymmetric secrets stored on the passcode device and by the administrator. This adds more security so that if the backend servers are breached, the adversary cannot generate valid passcodes. In some embodiments, the passcode depends on the rounded time.

Abstract: A data encryption and decryption process, particularly for use in smart cards, in which the data is encrypted using an encryption key derived from a fingerprint template. The fingerprint template is stored, in unencrypted form, in a memory which, apart from the fingerprint template, is filled or substantially filled with random data values thereby to conceal the fingerprint template. The template may be broken up into components stored in disparate locations in the memory to further increase security. Decryption is performed by, firstly, carrying out scanning a fingerprint to obtain a new template, comparing the new template with the previously stored template and, if there is a match, regenerating the encryption key from the previously stored template. The regenerated encryption key is then used to decrypt the data.

Abstract: A computer system includes a first communication unit which communicates with an authentication module storing preset first authentication information, a second communication unit which is connected with a server through a network, the server storing preset second authentication information, a main board unit which implements a preset first operation of a computer, and a controller which receives the first authentication information from the authentication module through the first communication unit, receives the second authentication information corresponding to the first authentication information from the server through the second communication unit, and controls the main board unit to block implementation of the first operation when at least one of the first authentication information and the second authentication information is not received.

Abstract: A hybrid device includes a personal digital key (PDK) and a receiver-decoder circuit (RDC). The PDK and RDC of the hybrid device are coupled for communication with each other. In one embodiment, the hybrid device also provides a physical interconnect for connecting to other devices to send and receive control signals and data, and receive power. The hybrid device operates in one of several modes including, PDK only, RDC only, or PDK and RDC. This allows a variety of system configurations for mixed operation including: PDK/RDC, RDC/RDC or PDK/PDK. The present invention also includes a number of system configurations for use of the hybrid device including: use of the hybrid device in a cell phone; simultaneous use of the PDK and the RDC functionality of hybrid device; use of multiple links of hybrid device to generate an authorization signal, use of multiple PDK links to the hybrid device to generate an authorization signal; and use of the hybrid device for authorization inheritance.

Abstract: A light-operated electronic equipment and a mobile electronic device for controlling an electronic equipment with light are provided. The light-operated electronic equipment with a light sensing receiving unit and a control unit is controlled by the mobile electronic device with a light source, a light control code module and a light display process module. Besides, further provides a process method of performing system registration by a light control way. By the process method, an information process device receives the input of the light signal through a transmission equipment, such that the light sensing receiving unit of the transmission equipment converts the brightness change of the light signal into the electric control code for the control unit of the transmission equipment to receive the electric control code and transmit the electric control code to the information process device through a transmission interface.

Abstract: A method that includes receiving, from a first entity having an input permission, a first data structure into a HSM, wherein the first data structure maps a first many-to-one mapping between a first and a second PIN numeral system. The method also includes determining whether the content of the first data structure is valid, storing the first data structure in the HSM if the first data structure is valid and marking the stored first data structure as inactive. The method further includes activating the first data structure if a second data structure is input into the HSM by a second entity having an activation permission, wherein the first entity is different from the second entity, the first data structure is identical to the second data structure. The method additionally includes converting from the first to the second PIN numeral system responsive to the activated first data structure.

Abstract: The present invention provides a method, data processing system and program product in which scanning for a virus is improved by prioritizing the scan of executable files, such as applications, libraries, services etc., which are more likely to cause a problem to a computer system, ahead of other files. A priority order is determined free from user input by obtaining information from the operating system which can be used to determine such an order. For example the information comprises details of startup applications and/or launch frequency of installed applications. This enables the virus scanner to prioritize the scan of higher risk files which, if they contained a virus, would otherwise adversely affect a computer system if a prior art virus scan was performed based on an arbitrary search order.

Abstract: Application programs for mobile communication devices are stored in a data store. The applications may be collected from any number of different sources such as through an application programming interface (API), from web crawling, from users, or combinations of these. The applications are analyzed and the analysis results reported. The applications may be “continuously” analyzed so that any changes in assessments can be reported. If an application for which an analysis is sought is not in the data store, information about a different, but related application may be provided.

Abstract: Systems and methods for protecting a virtualization environment against malware. The methods involve intercepting an event in a kernel mode of the virtualization environment, suspending execution of the event, and transmitting the event to a user mode security module that determines whether the event should be blocked, allowed, or redirected. Events may be intercepted from any level of the virtualization environment, including an interrupt request table, device driver, OS object manager, OS service dispatch table, Portable Execution (P/E) import/export table, or binary code, among others. In one embodiment, an event may trigger a chain of related events, such that interception of an event without first intercepting an expected antecedent event is one indication of malware. The method also involves securing a virtual storage device against unauthorized access and providing for secure communication between guest OS and virtualization environment security modules.

Abstract: A method for preventing malware attacks includes the steps of detecting an attempt on an electronic device to access a task scheduler, determining an entity associated with the attempt to access the task scheduler, determining a malware status of the entity, and, based on the malware status of the entity, allowing or denying the attempted access to the task scheduler. The task scheduler is configured to launch one or more applications at a specified time or interval.

Abstract: Methods and arrangements to launch trusted, distinct, co-existing environments are disclosed. Embodiments may launch trusted, distinct, co-existing environments in pre-OS space with high assurance. A hardware-enforced isolation scheme may isolate the partitions to facilitate storage and execution of code and data. In many embodiments, the system may launch a partition manager to establish embedded and main partitions. Embedded partitions may not be visible to the main OS and may host critical operations. A main partition may host a general-purpose OS and user applications, and may manage resources that are not assigned to the embedded partitions. Trustworthiness in the launch of the embedded partition is established by comparing integrity metrics for the runtime environment against integrity measurements of a trusted runtime environment for the embedded partition, e.g., by sealing a cryptographic key with the integrity metrics in a trusted platform module. Other embodiments are described and claimed.