What is claimed as being new and desired to be protected by Letters Patent of the United States is as follows:
1. A head band apparatus for protecting a wearer’s eyes from perspiration from the wearer’s forehead, comprising:
a band which includes an outer side, and
a non-absorbent perspiration collector lip connected to said outer side of said band and extending outward from said band outer side for defining a collection space between said perspiration collector lip and said band, wherein said perspiration collector lip includes a first open drain end laterally distanced from the wearer’s eyes.
2. A head band apparatus for protecting a wearer’s eyes from perspiration from the wearer’s forehead, comprising:
a band which has a front band portion, a rear band portion, and side band portions between said front band portion and said rear band portion, wherein said front band portion includes a front band outer side, and wherein said side band portions include side band outer sides,
a perspiration collector lip connected to said front band portion and extending outward from said front band outer side for defining a collection space between said perspiration collector lip and said front band portion, wherein said perspiration collector lip includes a first open drain end laterally distanced from the wearer’s eyes.
3. The apparatus of claim 2, further including a second open drain end laterally distanced from the wearer’s eyes.
4. The apparatus of claim 2 wherein said perspiration collector lip is further connected to said side band portions and further extends outward from said side band outer sides and further extends said collection space between said perspiration collector lip and said side band portions, such that said first open drain end is adjacent to one of said side band portions and said second open drain end is adjacent to another of said side band portions.
5. The apparatus of claim 2 wherein said front band portion is substantially flat.
6. The apparatus of claim 2 wherein said band includes:
a first band end which includes a first band connector, and
a second band end which includes a second band connector.
7. The apparatus of claim 6 wherein:
said first band connector includes a first hook or loop material, and
said second band connector includes a second loop or hook material.
8. The apparatus of claim 2 wherein said band includes:
a first band end which includes a pair of strap lock rings,
a second band end which includes a quantity of third hook or loop material on an outside surface of said second band end, and
a quantity of fourth loop or hook material on said outside surface of said second band end distal from said third hook or loop material.
9. The apparatus of claim 2 wherein:
said front band portion includes a downward sloping top edge.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for assessing runtime risk for an application program that executes on a device, comprising:
storing, in a rules database, a plurality of rules, wherein each rule identifies an action sequence;
storing, in a policy database, a plurality of assessment policies, wherein each assessment policy includes at least one rule of the plurality of rules;
identifying, using at least one assessment policy, a runtime risk for an application program that executes on a device, wherein the identified runtime risk indicates a risk or threat of the identified action sequence of the application; and
identifying, by a runtime monitor including a processing device, a behavior score for the application program that executes on the device based on the identified runtime risk, wherein
the action sequence is a sequence of at least two performed actions, and
each performed action is at least one of: a user action, an application action, and a system action.
2. The method of claim 1, wherein the user action is any form of explicit input from a user of a computing system.
3. The method of claim 1, wherein the application action is any activity performed by the application initiated programmatically by a task in execution of a computing system.
4. The method of claim 1, wherein the system action is any operation performed by a computing system on behalf of, or as a consequence of, a user action or application action that changes the state of the computing system.
5. The method of claim 1, wherein a first action of the at least two performed actions is performed at a first time, and the second action of the at least two performed actions is performed at a second time.
6. The method of claim 5, wherein
the first action is a user action,
the second action is a system action, and
the second time occurs after the first time.
7. The method of claim 5, wherein
the first action is a user action,
the second action is an application action, and
the second time occurs after the first time.
8. The method of claim 5, wherein
the first action is an application action,
the second action is a system action, and
the second time occurs after the first time.
9. The method of claim 1, wherein
the action sequence includes three performed actions,
a first action of the three performed actions is a user action,
a second action of the three performed actions is an application action,
a third action of the three performed actions is a system action,
the second action is performed temporally after the first action, and
the third action is performed temporally after the second action.
10. The method of claim 1, wherein the runtime risk is identified based on matching rules and probabilistic weights and scores of performed actions on the device.
11. The method of claim 1, wherein the runtime risk is identified based on time proximity of the at least two performed actions of the action sequence and natural affinity inferred between the at least two performed actions.
12. The method of claim 1, further comprising:
assessing, by the processing device, that the at least two performed actions of the action sequence describe a forensic chain of events based on a plurality of factors,
wherein the plurality of factors includes at least one of: ordered sequences, unordered sequences, proximity analysis, outliers, probabilistic weights and scores, and probable action inferences based on an application’s competency.
13. A system for assessing runtime risk for an application program that executes on a device, comprising:
a rules database storing a plurality of rules, wherein each rule identifies an action sequence;
a policy database storing a plurality of assessment policies, wherein each assessment policy includes at least one rule of the plurality of rules; and
a runtime monitor including a processing device
identifying, using at least one assessment policy, a runtime risk for an application program that executes on a device, wherein the identified runtime risk indicates a risk or threat of the identified action sequence of the application, and
identifying a behavior score for the application program that executes on the device based on the identified runtime risk, wherein
the action sequence is a sequence of at least two performed actions, and
each performed action is at least one of: a user action, an application action, and a system action.
14. The system of claim 13, wherein the user action is any form of explicit input from a user of a computing system.
15. The system of claim 13, wherein the application action is any activity performed by the application initiated programmatically by a task in execution of a computing system.
16. The system of claim 13, wherein the system action is any operation performed by a computing system on behalf of, or as a consequence of, a user action or application action that changes the state of the computing system.
17. The system of claim 13, wherein a first action of the at least two performed actions is performed at a first time, and the second action of the at least two performed actions is performed at a second time.
18. The system of claim 17, wherein
the first action is a user action,
the second action is a system action, and
the second time occurs after the first time.
19. The system of claim 17, wherein
the first action is a user action,
the second action is an application action, and
the second time occurs after the first time.
20. The system of claim 17, wherein
the first action is an application action,
the second action is a system action, and
the second time occurs after the first time.
21. The system of claim 13, wherein
the action sequence includes three performed actions,
a first action of the three performed actions is a user action,
a second action of the three performed actions is an application action,
a third action of the three performed actions is a system action,
the second action is performed temporally after the first action, and
the third action is performed temporally after the second action.
22. The system of claim 13, wherein the runtime risk is identified based on matching rules and probabilistic weights and scores of performed actions on the device.
23. The system of claim 13, wherein the runtime risk is identified based on time proximity of the at least two performed actions of the action sequence and natural affinity inferred between the at least two performed actions.
24. The system of claim 13, wherein
the processing device assesses that the at least two performed actions of the action sequence describe a forensic chain of events based on a plurality of factors, and
the plurality of factors includes at least one of: ordered sequences, unordered sequences, proximity analysis, outliers, probabilistic weights and scores, and probable action inferences based on an application’s competency.