Abstract: The present invention discloses a construction method for heuristic metabolic co-expression network and the system thereof. Based on the max-dependent criteria, the present invention treats the characterized multivariate mutual information of a plurality of metabolites as mutual function value, and applies an optimization searching for the best feature subset, with a heuristics computational intelligence multimodal optimization algorithm. And by running the optimization process in a plurality of times, combining and studying the results in each time running, a co-expression network structure is built. Finally, a threshold for segmentations is calculated through probability models, and an exact and stable metabolic co-expression network is obtained.

Abstract: Provided is a screening method of a composition for preventing or treating various protein conformational diseases including Alzheimer's disease, and the screening method of a composition for diagnosing protein conformational diseases. The screening method according to the present invention can rapidly mass-screen the composition for treating or diagnosing the protein conformational diseases in silico with highly reliability based on the binding of the peptide of the present invention and the test material.

Abstract: The present disclosure includes predicting a three-dimensional structure of one residue mutant of a membrane protein where respective amino acid residues have been substituted by all amino acids, calculating a solvation entropy change in formation of a tertiary structure from a primary structure or formation of the tertiary structure from secondary-structure units within a transmembrane segment, and extracting a candidate of an amino acid mutant to be thermostabilized based on a difference between a solvation entropy change in the membrane protein and a solvation entropy change in the amino acid mutant.

Abstract: Disclosed herein are methods and systems for detecting and/or quantifying cellular targets such as nucleic acids in cells, tissues, organs or organisms. Through sequential barcoding, it is possible to perform high-throughput profiling of a large number of targets, such as transcripts and/or DNA loci. In some embodiments, error correction is implemented through use of barcodes that can tolerate mistakes and missing data during sequential hybridization of probes to selected targets.

Abstract: Disclosed herein is a system and methods for determining the alleles, neoantigens, and vaccine composition as determined on the basis of an individual's tumor mutations. Also disclosed are systems and methods for obtaining high quality sequencing data from a tumor. Further, described herein are systems and methods for identifying somatic changes in polymorphic genome data. Finally, described herein are unique cancer vaccines.

Abstract: To identify organism types from a target gene sequence, a server receives (S1) a target reference from a user via a telecommunications network. From a plurality of type-specific profiles, defining informative sequence regions for differentiating individual organisms, selected (S2) automatically is a profile having a highest correlation with the target gene sequence. The target gene sequence is compared (S4) automatically to reference sequences related to the selected profile. The comparison results related to the informative sequence regions are weighted (S5) and, from the reference sequences, determined (S9) is the organism type associated with the type-specific reference sequence, having a best match with the target gene sequence. The best match is determined based on the weighted comparison results. The profile search and weighted alignment provides identification of organism types from a target gene sequence while discriminating between trivial and significant inter-sequence differences.

Abstract: The present invention generally relates to systems and methods for producing nucleic acids. In some aspects, relatively large quantities of oligonucleotides can be produced, and in some cases, the oligonucleotides may have a variety of different sequences and/or lengths. For instance, a relatively small quantity of oligonucleotides may be amplified to produce a large amount of nucleotides. In one set of embodiments, oligonucleotides may be amplified using PCR, then transcribed to produce RNA. The RNA may then be reverse transcribed to produce DNA, and optionally, the RNA may be selectively degraded or removed, relative to the DNA. In one set of embodiments, the oligonucleotides may be chemically modified. These modifications may include, but are not limited, to the adding of fluorescent dyes or other signaling entities.

Abstract: According to some embodiments of the invention, improved systems and devices for use with medical imaging are provided. According to some embodiments of the invention, a medical imaging record (e.g., an EMR) may be received that includes medical imaging (e.g., an X-ray, ultrasound, CT scan, MRI, etc.) generated using a medical imaging device. The medical imaging record may be filtered to remove unnecessary information, such as information not germane to analyzing the medical imaging. The filtered medical imaging record may be transmitted to a radiologist, who may add a radiology report interpreting the medical imaging. The complete data record, including the medical imaging record and the radiology report, may be stored in conjunction with a record identification number.

Abstract: A medical image data processing method for determining a set of medical image data to be displayed, the data processing method being constituted to be executed by a computer and comprising the following steps: acquiring medical image data comprising three-dimensional medical image information describing an anatomical structure, and displaying the medical image information; acquiring navigation display feature data comprising navigation display feature information describing at least one graphical navigation feature; displaying the navigation display information simultaneously with the medical image information; acquiring viewing direction data comprising viewing direction information describing a spatial relationship of a viewing direction of a user relative to the position of the at least one graphical navigation feature; determining, based on the viewing direction data, image information subset data comprising image data subset information describing a subset of the medical image information to be selected

Abstract: Systems and methods are provided to supplement an electronic record with additional information related to the electronic record. The additional information is provided to the user of the electronic record as a banner, ribbon or pop-up window that overlays or “floats” over the electronic record. The user can interact with the ribbon to obtain the additional information or ignore the ribbon and the ribbon can be hidden automatically. The ribbon can be launched in response to the user accessing a specific screen or page of the electronic record. The ribbon can provide the user with the additional information that is related to the current screen or page of the electronic record. The additional information can include information obtained from other sources that is not part of the electronic record and calculations and metrics that are not part of the electronic record.

Abstract: A computer-implemented system and method for post-coordination of clinically relevant searches with respect to an electronic medical ontology includes mapping the searches to elements of the ontology, determining whether the mapped elements support post-coordination and, if not, relying on a hierarchy established by a second electronic medical ontology to which the first electronic medical ontology is mapped to determine whether one or more broader elements support post-coordination. Upon identifying one or more such broader elements, the system then may present the user with attribute selections associated with each element in order to obtain the desired post-coordination terms. The resulting combination of a broader element with its relevant attributes maps to a concept in the electronic medical ontology that is fully pre-coordinated with respect to a third electronic medical ontology.

Abstract: The present disclosure relates to a method and device for monitoring health condition of a subject. A health monitoring device receives physiological data from one or more sensors placed on the subject. The physiological data is analyzed to generate one or more patterns. The patterns are associated with time stamp information and location information. The health monitoring device detects critical condition of the patient if the pattern matches with one of one or more predefined patterns. Thereafter, the health monitoring device provides dynamically a notification about the critical health condition of the subject to at least one of the subject and one or more care providers of the subject in the vicinity of the location of the subject.

Abstract: Described here are systems and methods for generating probabilistic maps that depict the probability distribution of data across a geographical region. More particularly, the systems and methods described here are capable of generating probabilistic maps of associated data at finer geographical resolution than is available for the associated data and are also capable of estimating and outputting related errors at that same geographical resolution.

Abstract: A system and method is described for printing a label with an RFID tag. The system includes an RFID reader that queries a first RFID tag coupled to a first medicinal container that includes a medication. In response, the system receives a first unique identifier and uses the first unique identifier to determine a status of the medication, associate the first medicinal container with a medical provider and print a second label that includes a second RFID tag for a second medicinal container.

Abstract: A scheduling system and method for data cleansing may be used to optimize clinical scheduling. The present disclosure describes receiving clinical record data, in an agnostic manner, from a system including a source scheduling database containing the clinical record data; mapping the clinical record data to a desired format; conforming the clinical record data to standardized scheduling elements of the scheduling system; cleansing, in a manner configurable by a user, the clinical record data to purge portions of the clinical record data; providing the clinical record data to an optimization engine for optimization of the clinical record data; optimizing the clinical record data by applying configurable logic to the clinical record data; and uploading one or more newly defined optimized scheduling templates via an outbound connection back to the scheduling system.

Abstract: Systems and methods for credit-based usage of surgical instruments include one or more surgical instruments having associated therewith a usage amount, a pre-determined maximum usage amount, and an available usage credit amount that is less than the pre-determined maximum usage amount. The systems implement and the methods include comparing the usage amount to the pre-determined maximum usage amount and inhibiting further use of the at least one reusable component when the usage amount is equal to the pre-determined maximum usage amount, and identifying the available usage credit amount and inhibiting further use of the at least one reusable component when there is no available usage credit remaining.

Abstract: Current systems for insurance data management do not avail for the creation of customizable future care insurance plans. Described herein are computer-implemented interactive systems and methods allowing for the creation, management, storage, retrieval, and communication of data representative of at least one customizable future care insurance plan. The systems and methods permit the creation of customizable future care insurance plans based on an agreed to future medical care plan through the cooperation of various cooperating third party providers (i.e., self-selected and/or selected based on defined criteria) specifically containing at a minimum at least one excess coverage above a primary health plan providing band coverage to ensure the that the agreed to future medical care plan is deployed throughout the life-term of the intended covered party.

Abstract: A scenario modeling engine that generates an enhanced insurance feature recommendation for a group of insured entities or employees is disclosed. The scenario modeling engine may aggregate demographic data regarding the insured entities, receive a user response indicating at least one insurance goal for the group regarding an insurance feature, generate an insurance feature score or profile according to the insurance goal and the received demographic data; generate a first insurance feature recommendation based on the profile; receive industry benchmark data for the insurance feature and report the first insurance feature recommendation compared with the industry benchmark; receive user input indicating revision for the insurance feature; and report a set of insurance features or an insurance plan based on the revision for the insurance feature. A bid or solicitation for a bid for an insurance policy may be automatically sent accordingly.

Abstract: A system for confidentially retrieving data from a person, such as by authorized personnel. One embodiment provides a data carrier item such as jewelry, having encrypted data imparted upon the item in manner that is only intelligible after being unencrypted. Such data can be encrypted and/or invisibly disposed such that the data is not identifiable by the public, but can be quickly and accurately retrieved by authorized personnel.

Abstract: A clinical grade consumer physical assessment system generates clinical grade physical assessment information for a patient based on a plurality of consumer grade measurements taken from different body portions of the patient using a consumer device. The system operates to correlate the plurality of consumer grade measurements, which have low resolution and accuracy, to a clinical grade result that is adequate for clinical purposes.

Abstract: The present invention discloses a metabolic mass spectrometry screening method for diseases based on deep learning and the system thereof. The present invention is based on the prior metabolic mass spectrometry database, and by extracting and integrating specific types of metabolic mass spectrometry samples (such as a disease), which are applied to train a deep learning network, and make it be able to determinate a plurality of types or states simultaneously. Then applying the specific network into screening a real input metabolic mass spectrometry.

Abstract: Systems, methods, and computer readable-media are provided for patient engagement and care coordination. A first graphical user interface is displayed on a display. The first graphical user interface is associated with a first functionality and is of a first size. An input for the selection of a second functionality associated with a second graphical user interface is received. The second graphical user interface is different from the first graphical user interface. In response to receiving the input, the first graphical user interface is resized to a second size. The second graphical user interface is displayed on the display with the resized first graphical user interface. The second graphical user interface is of the second size.

Abstract: An implantable/wearable medical device is configured for use with a plurality of sensors. The device includes a host microcontroller, a safety coprocessor and an actuator. The host microcontroller is configured to receive physiological data from the sensors and generate actuator commands for the actuator. The host microcontroller is configured to generate program state data for transmission to the safety coprocessor. The safety coprocessor is configured to receive the physiological data from the sensors and I/O access data and the program state information from the host microcontroller and determine whether there is a safety rule violation. The safety coprocessor is also configured to issue the actuator command to the actuator if no safety rule violation is detected. The safety coprocessor is also configured to initiate safety procedures if a safety rule violation is detected.

Abstract: Described are techniques for providing broker services between consumers and service providers. A system receives requests from consumers to consult with a service provider and provides a control that when rendered on at least one graphical user interface that the service provider accesses causes the system to determine a next consumer to engage with the service provider, with the next consumer determining based on executing a priority algorithm for selecting a next consumer from the queue for the service provider when that service provider becomes currently available to engage in a real-time consultation with consumers.

Abstract: Methods, systems, and devices for wireless patient monitoring and medical sensing are described. The methods, systems, and devices may include functionality for receiving a medical dataset associated with a patient, the medical dataset including a plurality of physiological measurements taken from the patient and a plurality of parameters associated with the plurality of physiological measurements. The methods, systems, and devices may also identify one or more groups of parameters from the plurality of parameters within the medical dataset, determine at least a medical device type from which at least a portion of the plurality of physiological measurements were measured, the determining based at least in part on the one or more identified groups of parameters; and display at least a subset of the plurality of physiological measurements from the medical dataset.

Abstract: Mechanisms are provided for caching patient information in a variable list and using the variable list to evaluate patient rules. The mechanisms generate a patient registry comprising a plurality of patient registry records, each patient registry record being associated with a corresponding patient and comprising personal and medical information about the corresponding patient. The mechanisms compile at least one variable list for an input variable of one or more clinical rules. The variable list comprises a plurality of instances of personal and medical information from the plurality of sources that are associated with the variable. The mechanisms also process at least one clinical rule in the one or more clinical rules that references the variable as a criteria for evaluating the at least one clinical rule, based on the variable list associated with the variable to determine if the criteria is satisfied by one or more instances.

Abstract: The present invention relates to a computerized system for and methods of securely providing precision healthcare services related to the AI-optimized prescribing and monitoring of behavioral health homework at a distance. The system is continually learning in a recursive manner such that the output of one set of patient experiences are added to the AI system to further refine future patient recommendations with regard to prescribed homework assignments. The present invention is unlimited with regard to the type of patient entity or healthcare professional entity.

Abstract: Embodiments of a method and system for facilitating improvement of a user condition through tailored communication with a user can include receiving a log of use dataset associated with a digital communication behavior at a mobile device, the log of use dataset further associated with a time period; receiving a mobility supplementary dataset corresponding to a mobility-related sensor of the mobile device, the mobility supplementary dataset associated with the time period; determining a tailored communication plan for the user based on at least one of the log of use dataset and the mobility supplementary dataset; transmitting, based on the tailored communication plan, a communication to the user at the mobile device; and promoting a therapeutic intervention to the user in association with transmitting the communication.

Abstract: Aspects of the invention relate to methods for tracking patient health by longitudinally tracking genetic variants in patients, such that it is possible to provide a tumor, or mutation, classification signature. Longitudinal tracking improves the ability to detect minimal residual disease (MRD; the small number of cells that remain in the patient after treatment and/or during remission) and/or treatment response at an early stage, both of which can help guide treatment decisions and guard against missing different intra-/inter-tumor responses in a patient.

Abstract: Titration of basal insulin with two modes based on fasting blood glucose. Although it seems that the titration of basal insulin and insulin glargine is simple for the patient (user) there is a risk for over-titration observed due to an occasional or short-term high blood glucose measurement value. Hence, the object of the present invention is to provide a data management unit, a medical device and a respective method which makes it safer for the user to avoid over-titration.

Abstract: Described is a method and system for the secure management and verification of prescriptions allowing patients, doctors and dispensers to access prescriptions as directed by patients. An example method may include generating a code vector including a series of authentication codes, storing at least one of the authentication codes on a peripheral device, maintaining an indication of a next expected authentication code from the code vector, allowing prescription creation by a user when the peripheral device is detected and determined to be an authorized device, and that the authentication code provided from the peripheral device matches the next expected authentication code, storing a prescription associated with a patient having a patient PIN, wherein the prescription is provided by the user, generating a plurality of refill verification codes associated with the prescription, and authorizing dispensing responsive to receipt of one of the plurality of refill verification codes and the patient PIN.

Abstract: Processes implemented within a computer system for preventing atypical clinical events resulting from administering unsuitable clinical agent(s) are provided. Initially, the processes involve receiving a list of possible clinical agent(s) that may be administered to a patient during a medical procedure. The processes further involve acquiring heredity data associated with the clinical agent(s) by comparing the clinical agent(s) against a data set or the patient's medical records. If the heredity data indicates that the patient scheduled to receive the clinical agent(s) would experience atypical clinical events as a potential outcome, a warning that the clinical agent(s) should not be administered by a clinician is presented or reference information about the atypical clinical event is output. Accordingly, a preemptive determination of the atypical clinical events potentially occurring upon administering the clinical agent(s) to the patient is made.

Abstract: Capacitive identification systems and methods are described. The system may include a capacitive detector configured to identify objects having capacitive identifiers. A capacitive identifier may be a patterned dielectric ink that, when placed in an electromagnetic field generated by the capacitive detector, detectably alters the capacitance of neighboring sensors in the detector. The capacitive detector may be disposed within an opaque housing structure of a device and configured to detect the capacitive identifier through the opaque housing structure. The capacitive detector may include a capacitive sensing array and processing circuitry formed on a common printed circuit. The capacitive detector may be formed in an infusion pump system. The capacitive identifier may be disposed on a pump cassette for the infusion pump system.

Abstract: A system and method using a combined modality optical probe is provided. The system comprises: light source(s) providing excitation light; a first optical analysis device configured to receive light in a first range and analyze it using a first optical modality; a second optical analysis device configured to receive light in a second range and analyze it using a second optical modality slower than the first modality; an optical probe configured to: convey the excitation light to a tissue sample; receive the light in the first and second ranges from the sample; and, one or more optical conduits configured to: convey the excitation light from the light source(s) to the optical probe; convey the light in the first range from the optical probe to the first optical analysis device; and convey the light in the second range from the optical probe to the second optical analysis device.

Abstract: Methods, apparatuses and systems for detecting smoking behavior of a user are described. Methods may include receiving accelerometry data from at least one accelerometer coupled with the user and detecting a pattern of movement from the accelerometry data indicative of smoking behavior. Described methods may also include detecting a plurality of sub-patterns of movement such as repeatedly swinging at least one hand toward and away from the user's face in a sequence indicative of smoking behavior. An apparatus for detecting smoking behavior of a user may include a processor, memory in electronic communication with the processor, and instructions stored in the memory and operable, when executed by the processor, to cause the apparatus to receive accelerometry data from at least one accelerometer and detect a pattern of movement from the accelerometry data indicative of smoking behavior.

Abstract: A method and system is provided to improve the implementation of clinical trials by improving patient interaction and follow-up, data collection, and information processing in order to lower costs and cycle time of clinical trials. The invention and methods embodied produce a non-biased, more positive experience (easier, efficient) and reduce fragmentation of the follow-up process for clinical trial follow-up for patients and health care providers or trial team who are tasked with follow-up activities and thereby improve the overall follow-up rate and completeness of data collected. Embodiments of the inventive method leverage the concept called “The Hawthorne Effect”. The Hawthorne Effect is a psychological phenomenon that produces an improvement in human behavior or performance as a result of increased attention or observation.

Abstract: A method and system for securely and traceably enabling playing back of content on a playback device of a plurality of playback devices, in which each of the plurality of playback devices comprises a cryptographic function module (CFM). In one embodiment, the method comprises accepting a first input in the playback device from a content licensing agency; generating, in the device, a first output from the first input according to a proprietary cryptographic function using the CFM, the first output necessary to enable playback of the content by the playback device, the proprietary cryptographic function being one of a family of proprietary cryptographic functions executable by the CFM of each of the plurality of playback devices; and enabling the playback of the content by the device at least in part according to the first output.

Abstract: A portable terminal provided on a front surface of a body thereof with a display unit and a method of setting and releasing use restriction for the portable terminal are provided. The portable terminal includes a rear password input unit provided on a rear surface of the body, which is opposite to the display unit, to receive a password for setting or releasing of use restriction, a storage unit that stores the input password for the setting of the use restriction, and a control unit that determines the releasing of the use restriction by comparing the password for the releasing of the use restriction, which is input into the rear password input unit, with the stored password for the setting of the use restriction. The input of the password for the setting or the releasing of the use restriction is prevented from being exposed to other persons, so that the security of the portable terminal is remarkably improved.

Abstract: Disclosed in the application are a method and device for identity authentication. The method comprises: when the terminal is in the specified stress state, action attribute information of the terminal is collected; the action attribute information is processed by matching with preset sample information; if the action attribute information is matched with the sample information, the authentication is successful, and if the action attribute information is not matched with the sample information, the authentication is failed. By the above method, the terminal can automatically collect the corresponding action attribute information in the process that users perform certain specified operation, and then match and compare with the preset standard information to authenticate the identity of the current user using the terminal.

Abstract: Disclosed are a fingerprint identification system and a fingerprint identification method and a display device capable of simplifying operations of starting an application by a user. The fingerprint identification system includes: a fingerprint identification region arranged on a touch screen to acquire an input fingerprint; a fingerprint verification module connected with the fingerprint identification region to verify whether the input fingerprint is a fingerprint of a user and to unlock the touch screen if it is determined that the input fingerprint is the fingerprint of the user; an application start control module connected with the fingerprint identification region and the fingerprint verification module respectively to obtain a finger press direction from the input fingerprint and start an application corresponding to the finger press direction when the input fingerprint is the fingerprint of the user.

Abstract: A wearable device includes one or more biometric sensors, each of the one or more biometric sensors gathering biological data from a wearer of the wearable device, the wearable device further having a computer processor for receiving the biological data from the one or more biometric sensors and generating biometric information based on the biological data and according one or more biometrical algorithms, the biometric information including validation information to validate the wearer as a source of the biological data gathered by each of the one or more sensors, the biometric information further including sleep information to provide a sleep profile of the wearer.

Abstract: In systems and methods of generating an authenticated document biosignature, a processor of a verification device may calculate a base verification score associated with a user based on at least one identification input, the identification input comprising one or more identification features, a feature validity rating of each identification feature, a source where the one or more identification feature are received, and a source validity rating, wherein at least one of the identification features includes a biometric identification feature. The processor of the verification device may generate a glyph based on the base verification score and the identification input. The glyph may be associated with a document, and may be used to verify the identity of the user associated with the glyph.

Abstract: In systems and methods of managing a document with an authenticated document biosignature, a processor of a verification device may receive an image based on a user selection. The processor may calculate a base verification score associated with a user based on at least one identification input, the identification input including one or more identification features, wherein at least one of the identification features includes a biometric identification feature. The processor of the verification device may generate a glyph based on the selected image, the base verification score and the at least one identification input. The glyph may be associated with a document, and may be used to verify the identity of the user associated with the glyph.

Abstract: Provided are techniques for controlling access to computing resources comprising generating a first fingerprint corresponding to a first executable file; storing the fingerprint in a non-transitory computer-readable storage medium; receiving a request to execute a second executable file on a computing system generating a second fingerprint corresponding to the second executable file; determining whether or not the first fingerprint matches the second fingerprint; and, in response to determining that the first and second fingerprints match, executing the executable file on the computing system; and, in response to determining that the first and second fingerprints do not match, preventing the executable file from executing on the computing system.

Abstract: The present invention relates to a system for simultaneous forensic acquisition and analysis of data from a target data repository. The system comprises a source agent in communication with the target data repository. The source agent is incapable of writing to the target data repository and is configured to read a portion of the target data repository. The system further comprises an investigator computer having a processor configured to send at least one prioritised read command to the source agent to schedule a read of the target data repository based on a predetermined priority. A data sink is configured to store at least a partial forensic image of the target data repository based on the data read by said source agent.

Abstract: In one aspect, a method includes: receiving information defining a plurality of different actions that may be performed by users; receiving information indicating a relative frequency at which each of the different actions was performed by each of a plurality of users over each of one or more periods of time; determining a plurality of different characteristic behaviors based at least in part on the information indicating the relative frequency at which each of the different actions was performed by each of the plurality of users over each of one or more periods of time, wherein each one of the different characteristic behaviors defines a relative frequency of performance of each of the different actions; receiving information indicating a relative frequency at which each of the different actions was performed by a user over a period of time; and determining a representation of the relative frequency at which each of the different actions was performed by the user over the period of time as a weighted combina

Abstract: A method detects, locates, and masks a hardware Trojan (HT) in an arithmetic circuit to improve circuit security. The method provides a first netlist and a second netlist of the arithmetic circuit, uses reverse engineering to extract 2-input XOR sub circuits, XOR trees, 1-bit adders, 1-bit adder graphs and arithmetic macros from the first netlist and the second netlist to obtain a first plurality of arithmetic macros and a second plurality of arithmetic macros, detects the HT by comparing the first plurality of arithmetic macros with the second plurality of arithmetic macros with functional ECO engine, locates the HT in the second netlist, and improves security of the arithmetic circuit by masking the HT with addition of a patch in the second netlist to obtain a patched netlist.

Abstract: There is described a method of protecting an item of software so as to obfuscate a condition which causes a variation in control flow through a portion of the item of software dependent on whether the condition is satisfied, wherein satisfaction of the condition is based on evaluation of one or more condition variables. The method comprises: (i) modifying the item of software such that the control flow through said portion is not dependent on whether the condition is satisfied; and (ii) inserting a plurality of identity transformations into expressions in said portion of the modified item of software, wherein the identity transformations are defined and inserted such that, in the absence of tampering, they maintain the results of the expressions if the condition is satisfied and such that they alter the results of the expressions if the condition is not satisfied, wherein each identity transformation is directly or indirectly dependent on at least one of the one or more condition variables.

Abstract: A mechanism called time-deterministic replay (TOR) that can reproduce the execution of a program, including its precise timing. Without TOR, reproducing the timing of an execution is difficult because there are many sources of timing variability. TOR uses a combination of techniques to either mitigate or eliminate most of these sources of variability. Using a prototype implementation of TOR in a Java Virtual Machine, we show it is possible to reproduce the timing to within 1.85% of the original execution. A study of one of the applications of TOR is described: the detection of a covert timing channel. Timing channels can be used to exfiltrate information from a compromised machine by subtly varying timing of the machine's outputs, TOR can detect this variation. Unlike prior solutions, which generally look for a specific type of timing channel, our approach can detect a wide variety of channels with high accuracy.

Abstract: Even if a virus invades a program in operation according to the present invention, regardless of the timing and means of invasion and the number of attempts thereof, the present program autonomously and unassistedly detects the virus as contamination of a memory area used by the program and disinfects the contamination for quick recovery in order to continue the normal operation. The present program detects the virus as contamination caused by false information against the intent of the present program. Upon occurrence of contamination, the present program detects the contamination as a predicate inconsistency. However, this scheme is not for detecting an invading virus but is needed as a structural requirement in order for the program to exist as a legitimate program. The present program disinfects the detected contamination using a scheme in accordance with the present invention.