A repeater includes a reception part configured to receive an optical signal transmitted by wavelength division multiplexing from a preceding repeater in a path from a source to a destination; a determination part configured to determine the channel allocation of the signal received by the reception part by determining a bit rate and a modulation technique with respect to each of channels in the received signal; and a detection part configured to detect a prohibited channel not to be included in the optical signal to be transmitted from the repeater, based on the channel allocation and a predetermined criterion.

Biomaterials that support cell attachment and growth are provided. In one aspect, biomaterials are provided comprising a first polymer matrix comprising reactive amino moieties and a second polymer matrix that interpenetrates with the first polymer matrix, where the second polymer matrix comprises a poly(alkylene oxide) comprising two or more alkylene oxide oligomers joined by gamma-thioether carbonyl linkages. In another aspect, biomaterials are provided comprising at least one biopolymer comprising amino groups, thiol groups, and bifunctional modifiers connecting at least some of the amino groups to at least some of the thiol groups; and at least one poly(alkylene oxide) cross-linked to at least two thiol groups of the biopolymer. The biomaterials may further comprise a pharmacologically active agent or cells. Methods of administering such biomaterials to a patient in need thereof are also provided.

Provided are a home network system and a method for an autonomous mobile robot to travel along a shortest travel route. The home network system capable of home automation includes a plurality of beacons for sensing a user located in a cell coverage area and for transmitting resulting sensing information of the user; an autonomous mobile robot for executing travel to reach the user based on provided travel route information; and a home server for calculating a travel route along which the autonomous mobile robot can easily reach the user based on the sensing information of the user transmitted from the beacons, and for providing the travel route to the autonomous mobile robot. Therefore, the autonomous mobile robot may reach the user by the shortest travel route and thus reducing energy loss.

A network system may be provided that includes an electronic product, a recognition target, a recognition device, a setting program and a display unit. The electronic product may operate to manage or process a target. The recognition target may include information relating to the target. The recognition device may recognize information listed on the recognition target. The setting program may convert information recognized by the recognition device into setting information. The display unit may display the setting information converted by the setting program.

A method for virtual channel management is provided. The method includes the following steps. In response to a command, a control unit of a network-based multimedia reproduction system determines whether the command is associated with virtual channel switching. When the command is associated with virtual channel switching, the control unit checks whether a channel value corresponding to the command exists in an application virtual channel table. When the channel value exists in the application virtual channel table, the control unit determines an application corresponding to the channel number from the application virtual channel table, and executes the application. According to a first operation parameter set corresponding to the application, the control unit sets the executed application to retrieve digital contents through a network unit of the network-based multimedia reproduction system.

Systems and methods for optimizing system performance of capacity and spectrum constrained, multiple-access communication systems by selectively discarding packets are provided. The systems and methods provided herein can drive changes in the communication system using control responses. One such control responses includes the optimal discard (also referred to herein as “intelligent discard”) of network packets under capacity constrained conditions. Some embodiments inspect a video stream to determine priorities for various elements of the video stream. The elements may be discarding using the priorities. In various embodiments, the elements include frames, slices, macroblocks, and data partitions.

A method for communication between computing devices includes identifying the parameters of a data transfer between a source computing device and a target computing device and identifying communication paths between a source computing device and target computing device, in which at least one of the communications paths is a physical network. A communication path is selected for the data transfer. When a data transfer over the physical network is selected as a communication path, a nonvolatile memory (NVM) unit is removed from the source computing device and placed in a cartridge and the cartridge is programmed with transfer information. The NVM unit and cartridge are transported through the physical network to the target computing device according to the transfer information and the NVM unit is electrically connected to the target computing device.

An apparatus and a method support a selective suspend mode in a driver for any one of at least two devices constituting a composite network device. When a device of the driver requests suspend mode transition, a Physical Device Object (PDO) constituting a driver of the composite network device is identified by a PDO check part. A suspend mode transition request information of the device is sent to an operating system through the PDO. When the operating system allows the suspend mode transition, a control part sends suspend mode transition indication information to the device through the PDO.

This invention provides a modular ducting section and a networked utilities ducting system and rain and road water management system formed from two or more modular ducting sections laying end-to-end. Each modular ducting section comprises open-topped utility channels for carrying utility service supply lines such as electricity, gas, water, or communications, an open-topped catchment channel for carrying rain water captured from a building structure or garden, and a supply channel for supplying an end user with utility services via a supply line, while also allowing the end user to feed an end-user generated utility supply back into the corresponding utility service supply line via a return line. Each modular ducting section further comprises a road water runoff flange and a main channel cover, which when combined, form a curb-side structure that functions to keep any contaminated road water from the reusable rain water collected in the catchment channel.

Methods and apparatuses for acquiring/providing available channel information using Generic Advertisement Service (GAS) protocol in a wireless local area network (WLAN) are disclosed. AP (Access Point) station has a capability to acquire information for available channels from a database using a specific protocol related to an operation within the White Space (e.g. Access Network Query Protocol (ANQP)). And, non-AP station can retrieve the information for available channels by transmitting a Generic Advertisement Service (GAS) initial request frame to the AP station, wherein the GAS initial request frame comprises an Advertisement Protocol Element whose element ID indicates the specific protocol, and receiving a GAS initial response frame comprising a White Space Map (WSM) the specific protocol. The WSM comprises one or more white space channel units, and each of the white space channel units comprises a channel number field indicating one of the available channels and a power constraint field indicating a maximum allowable power on the indicated channel.

Methods and apparatus for performing radio resource management (RRM) measurements in a heterogeneous network (HetNet) are provided in an effort to prevent failure of RRM measurement procedures in a dominant interference scenario. Several alternatives are provided for determining particular resources (e.g., subframes) to use for performing the RRM measurements, wherein the particular resources are based on cooperative resource partitioning between cells of the HetNet, wherein the cells may be of different types (e.g., macro, pico, or femto cells). These alternatives include, for example: (1) intra-frequency or intra-RAT (radio access technology) alternatives, which may involve transmitting resource partitioning information (RPI) in or deriving non-serving cell RPI based on the serving cell's RPI, as well as (2) inter-frequency or inter-RAT alternatives, where the RRM measurements may be performed during a measurement gap.

A method for user detachment when a handover or change occurs in a heterogeneous network is provided. The method includes: a user equipment (UE) is handed over or switched from a source network to a target network; a network element on a network side determines whether to detach the UE from the source network, and if yes, the network element on the network side detaches the UE from the source network. A system and a device for user detachment when a handover or change occurs in a heterogeneous network, and another method for user detachment when a handover or change occurs in a heterogeneous network are also provided.

The present invention relates to a method for communicating between a primary station and at least one secondary station, comprising configuring each secondary station to search at least one of a plurality of search spaces having a first structure, said first structure consisting of at least a first number of resource sets having a first size, where at least one resource set might be used to transmit a message to the considered secondary station, changing the search space structure to a second structure different from the first structure in response to a signalling message.

The invention concerns a method for optimizing antenna pattern assignment for a first wireless communication device forming a wireless network with at least one second wireless communication device, each of said communication device being equipped with a multi-sector antenna, an antenna pattern being a combination of said antenna sectors, said communication devices being adapted for sending a request and for receiving a response using a current antenna pattern assignment, said method comprising a step of: evaluating by said first communication device a first value;sending by said first communication device to said second communication device a broadcast request comprising said valuereceiving by said first communication device, a response to said broadcast request, said response being sent by said second communication device, said response depending on a second value evaluated by said second device;Switching or not, by said first communication device, to a new antenna sector assignment depending on said response; According to the invention the first value is evaluated by minimizing a first local function according to the received signal strength received by said first communication device having said current antenna pattern assignment and the second value is evaluated by minimizing a second local function according to the received signal strength received by said second communication device for its own current antenna pattern assignment.

Provided is a method for detecting a network or device and a neighbor thereof, in order to detect networks or devices which substantially interfere with each other and to manage resources in consideration of the substantial interfering relationships so that the networks or devices can efficiently coexist. To this end, according to an embodiment of the present invention, a method for detecting a neighbor of a television band device (TVBD) network or device comprises the steps of: transmitting a request to a coexistence manager which serves the TVBD network or device; and receiving neighbor information on the TVBD network or device in response to the request, wherein the neighbor information includes an identifier of a neighbor TVBD network or device which interferes with the TVBD network or device, and the neighbor information is based on operating channels of the TVBD network or device and the neighbor TVBD network or device.

A method of authenticating a device involves establishing a local connection between a local target device and a local source device; at the source device, obtaining credentials of the target device via the local connection; at the source device, sending the credentials to a cloud authentication server via a secure communication channel; at the cloud authentication server, checking the credentials of the target device against a database of known good devices; at the source device, receiving a message from the cloud authentication server via the secure communication channel, said message indicating that the target device is authenticated; and delivering content from the source device to the target device on the condition that the target device is authenticated. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

A method and apparatus for forming and distributing quantum encryption keys. A first quantum signal generated by a number generator in a communicator is transmitted through an aperture in the communicator to a receiving communicator. A second quantum signal is received through the aperture at the communicator from a transmitting communicator. The first quantum signal is isolated from the second quantum signal such that the first quantum signal is transmitted from the communicator in response to the first quantum signal passing through the aperture and such that the second quantum signal is received at a number detector in the communicator in response to the second quantum signal passing through the aperture.

A secret key generation apparatus and method are provided. The secret key generation apparatus includes at least one antenna, amplification/phase controllers, a transceiver, and a random signal controller. The antenna receives a wireless signal from a counterpart terminal that performs wireless communication. The amplification/phase controllers control the amplification gain and phase of the wireless signal that is received via at least one antenna. The transceiver measures the status of a wireless channel using the wireless signal having the controlled amplification gain and phase, determines parameters based on results of the measurement, and generates a secret key based on results of the determination. The random signal controller controls the amplification/phase controllers so that the amplification gain and phase are adjusted whenever the transceiver generates a secret key.

As a user of a social networking system views a page that includes information provided by the system, certain types of social interactions are monitored. If an interaction monitored for is detected, at least one recommendation unit is identified to present to user on the page. The recommendation unit is identified based on a description of the interaction. The recommendation unit suggests that the user perform a social interaction in the social networking system. The recommendation unit is transmitted to a device of the user and is presented to the user on the page without having to reload the entire page.

A Virtual Single Account (VSA) system and method that provides a mobile user with automatic authentication and connection to a remote network via local access networks with a single password, where the local access networks may be independent of the remote network. A mobile user has a single authentication credential for one VSA that is utilized by a VSA client installed on a mobile computing device. The VSA client provides for automatically authenticating and connecting the user's mobile device to a current local access network, and the target remote network such as the user's office network. All authentication credentials are encrypted using a key generated from the user's VSA password that is generated from the user's single password. The VSA client derives the key from the submitted VSA password and decrypts all authentication credentials that are required in order to connect the mobile device to the current local access network and thereafter to the office network.

Techniques for determining time of arrivals (TOAs) of signals in a wireless communication network are described. Each cell may transmit (i) synchronization signals on a set of contiguous subcarriers in the center portion of the system bandwidth and (ii) reference signals on different sets of non-contiguous subcarriers distributed across the system bandwidth. A UE may determine TOA for a cell based on multiple signals transmitted on different sets of subcarriers. The UE may perform correlation for a first signal (e.g., a synchronization signal) from the cell to obtain first correlation results for different time offsets. The UE may perform correlation for a second signal (e.g., a reference signal) from the cell to obtain second correlation results for different time offsets. The UE may combine the first and second correlation results and may determine the TOA for the cell based on the combined correlation results.

Techniques for positioning access points and terminals in WLANs and other wireless networks are described. For access point positioning, measurements are obtained for at least one access point in a WLAN. The measurements may be based on transmission sequences (e.g., beacon frames) transmitted periodically by each access point. The measurements may be made by multiple terminals at different locations or a single mobile terminal at different locations. The location of each access point is determined based on the measurements and known locations of the terminal(s). For terminal positioning, measurements for at least one access point in a WLAN are obtained. The location of the terminal is determined based on the measurements and known location of each access point. The measurements may be round trip time (RTT) measurements, observed time difference (OTD) measurements, time of arrival (TOA) measurements, signal strength measurements, signal quality measurements, etc.

A wireless access device in a wireless network, whether a known or unknown entity, can be located using a geolocation system according to the present invention. A signal strength is determined by a wireless intrusion detection system (WIDS) node in a wireless network for each wireless access device that it detects. Based on the signal strength, an approximate distance from the node is determined, which, in one embodiment corresponds to a radius of a circle around the node. To account for error, an approximation band of the circle is calculated that will allow a user to determine the approximate location of the device within the wireless network.

A communication process between two constitutive elements of the network of electricity distribution in a domestic or industrial premise including circuit breakers, electrical modules, switches, electrical plugs and light connection devices. The process including the following steps: assignment by a protocol such as DHCP, BootP or RARP of a first IP address to a first element of the power distribution network, assignment of a second IP address to a second element, and establishment of a communication between the first and second elements of the power distribution network.

Network on Chips (NoC)s with a bufferless and nonblocking architecture are described. Core processors are communicatively coupled together on a substrate with a set of routing nodes based on nonblocking process. A network component routes data packets through the routing nodes and the core processors via communication links. A bufferless cross bar switch facilitates the communication of the data packets and/or path setup packets through the communication links among source processors and destination processors. The communication links include one or more channels, in which a channel comprises a data sub-channel, an acknowledgement sub-channel and a release sub-channel.

An active termination circuit for a differential receiver includes a first receiver element configured to receive a first component of a differential signal, a second receiver element configured to receive a second component of a differential signal, a common mode measurement element configured to receive the differential signal and generate a transmit common mode signal (Vcm) representing an average value of the differential signal, and a receiver (RX) common mode signal node. The termination circuit also comprises an active element configured to receive the transmit common mode signal (Vcm) and provide an output to the receiver common mode signal node, the output configured to drive the value of the signal at the receiver common mode signal node to the value of the transmit common mode signal (Vcm), and a capacitive element coupled to the receiver common mode signal node in parallel with the active element.

A system on chip (SOC) includes a clock generator to provide one or more on-chip reference clocks to a number of physical medium attachments (PMAs) across a common clock bus. The clock generator receives one or more external, off-chip clock lines, from which it generates the on-chip reference clocks. Each of the PMAs may operate data input/output (I/O) channels under a variety of different communications protocols, which can have common or distinct reference clock frequencies. Accordingly, the on-chip reference clocks are generated to provide the required reference clocks to each of the PMAs.

A resonant clock distribution network architecture is proposed that enables a resonant clock network to track the impact of parameter variations on the insertion delay of a conventional clock distribution network, thus limiting clock skew between the two networks and yielding increased performance. Such a network is generally applicable to semiconductor devices with various clock frequencies, and high-performance and low-power clocking requirements such as microprocessors, ASICs, and SOCs.

A tridimensional modeling apparatus, system and kit is for representing an exploration network. The apparatus, system and kit include a transparent hollow cube with six plane surfaces for representing an enclosed volume, a plurality of perforations on at least two of the six plane surfaces and indicia around each opening for marking polar coordinates and orientation. The apparatus, system and kit further include a plurality of transparent rods for representing exploration channels. The plurality of perforations on the cube are arranged for receiving rods for tridimensional modeling of the exploration network and each rod is inserted into an opening with an angle and a depth, thereby resulting in a visual representation of the exploration network within the represented volume.

A method of transmitting a training signal in a Wireless Local Area Network (WLAN) system includes generating one or more first training signals for a first destination station and one or more second training signals for a second destination station by applying a mapping matrix P to a training signal generation sequence, mapping the first training signals and the second training signals to a plurality of antennas according to an antenna mapping matrix, and performing Inverse Fast Fourier Transform (IFFT) on each of the first training signals and the second training signals mapped to the plurality of antennas and transmitting the training signals through the plurality of antennas.

In a wireless network, plural downlink signals from plural base stations are transmitted to a terminal. The plural downlink signals all carry the same information to the terminal. The terminal provides feedback on the downlink channels. The feedback provides information on the taps of the channels. The amount of information fed back is constrained. Based on the feedback, transmission parameters of the downlink signals are adjusted. The process of transmitting, providing feedback, and adjusting the parameters continue so that the energy of the downlink signal is enhanced at the terminal location and suppressed elsewhere. Beam forming can be used to further suppress the energy signature at locations other than the terminal location.

A mobile wireless device maintains a radio sector database. When receiving no response or a negative response from a radio sector to a transmitted signaling message, the mobile wireless device adds or updates the radio sector database. When receiving a positive response from the radio sector, the mobile wireless device deletes the radio sector from the radio sector database. Before transmitting signaling messages to a radio sector, the mobile device determines a time delay value if the radio sector is in the radio sector database. The mobile wireless device discards the signaling message when an elapsed time since a most recently transmitted signaling message to the radio sector does not exceed the determined time delay value. In an embodiment, each radio sector in the radio sector database includes a failure count value, and the determined time delay value depends on the failure count value.

A coupling device for use in a hybrid fiber coaxial (HFC) network may be configured to disable an upstream path through it when there is only noise incident on the upstream path, and enable the upstream path through it when a desired transmission from a cable modem downstream of the coupling device is incident on the upstream path. The coupling device may be a trunk amplifier, a distribution amplifier, a splitter, or the like. The coupling device may comprise a single upstream interface coupled to a plurality of downstream interfaces. The enabling and/or disabling may be in response to a signal strength indicated by the SSI being below a threshold and/or in response to one or more control messages indicating whether any downstream cable modem is, or will be, transmitting.

A method and device that interrogates the availability of a called party before placing a communication from the calling party to the called party. A callback may be initiated so that both communications are completed simultaneously. The routing of communication may take place through any one of a number of different networks and at another time of the day, even if the caller does not otherwise have access to those networks.

An arrangement for operating a rail vehicle includes a DC voltage intermediate circuit which is connected to an energy supply network, at least one traction inverter which is connected at its DC voltage side to the DC voltage intermediate circuit and at its AC voltage side which is connected one or more traction motors of the rail vehicle. An auxiliary system inverter is connected at its DC voltage side to the DC voltage intermediate circuit and is connected at its AC voltage side to a primary side of an auxiliary system transformer. Auxiliary systems are connected to a secondary side of the auxiliary system transformer via an auxiliary line. Electrical energy generated by an electrical energy supply unit is transferred via the auxiliary line, the auxiliary system transformer and the auxiliary system inverter into the DC voltage intermediate circuit for operation of the at least one traction motor.

Disclosed is a masterless control system for controlling a plurality of fluidly and operably connected water heaters to meet a hot water demand such that overall efficiency is maximized and usage disparity between water heaters is minimized. There is further disclosed a method for detecting a small system demand in said network by adjusting the setting of each flow limiting valve of each water heater. There is still further disclosed a method for enabling seamless addition or removal of a heater in service and heating load distribution to water heaters.

A system for measuring properties of a surface under test with surface waves includes a surface wave network including a dielectric substrate, a reactive grid of a plurality of metallic patches on a first surface of the dielectric substrate, a plurality of electronic nodes on the first surface of the dielectric substrate, and a ground plane on a second surface of the dielectric substrate permeable to RF fields of the surface waves, and a controller configured for causing a respective one of the electronic nodes to transmit at least one surface wave and configured for collecting data for signals received by at least one other of the plurality of electronic nodes.

At a carousel origin server, an indication is obtained that at least one of a plurality of consumer premises equipment connected to a video content network requires a software upgrade. Responsive to obtaining the indication, the carousel origin server loads onto a carousel at least one image required for the software upgrade. The at least one image required for the software upgrade is broadcast from the carousel to the at least one of the plurality of consumer premises equipment, for a predetermined period. Subsequent to the predetermined period, the at least one image required for the software upgrade is removed from the carousel.

A physical layer network interface module (PHY-NIM) adaptation system provides a PHY-NIM device and an attachable media access control (MAC) device. The PHY-NIM device interconnects with the attachable MAC device and the attachable MAC device interconnects to a network appliance to provide at least one of network switch capabilities and MAC device capabilities for use by the network appliance. The PHY-NIM device interconnects directly to the network appliance where the network appliance has at least one of an internal network switch and an internal MAC device in a southbridge input/output (I/O) interface chip of the network appliance.

A system for providing bi-directional RF services over a point-to-multipoint Passive Optical Network (PON). A system that can transport upstream RF signals generated by devices such as a set top box or a cable modem, through a passive Optical Network while simultaneously supporting downstream RF video and bi-directional base-band services on the PON.

A system is provided with a controller and a device configured to receive and output network data from a communication network to the controller. Accordingly, the controller is configured to (i) receive the network data from the device, (ii) conduct heuristic analysis on the network data, (iii) identify at least a portion of the network data as suspicious upon determining by the heuristic analysis of a likelihood that at least the portion of the network data including malware, (iv) simulate transmission of the suspicious network data to at least one virtual machine of a plurality of virtual machines that is selected or configured using at least one software profile, and (v) analyze effects of the suspicious network data on the at least one virtual machine.

A first communication device and method therein for transmitting data information at fixed time instants on a radio channel to a second communication device in a radio communications network. First, the first communication device determines that the radio channel is available for transmitting data information to the second communication device during a time period determined by the first communication device. Then, the first communication device transmits a preamble on the available radio channel after the time period. The first communication device thereafter transmits the data information on the available radio channel to the second communication device at a next fixed time instant following the transmission of the preamble.

Disclosed are a method for transmitting and receiving a frame in a wireless local area network (WLAN) system and an apparatus for the same. A method for generating interference/non-interference station lists includes receiving a first frame from a second station, acquiring a receiver address of the first frame from the first frame, and setting, based on whether to receive a second frame that is a response to the first frame from a third station indicated by the receiver address within a preset time from a time when the first frame has been received, the third station as an interference station or a non-interference station. Therefore, the performance of a communication system may be improved.

A technology is disclosed for an evolved Node B (eNB). The eNB can determine a set of configuration indication fields numbered 1 to N, included in a downlink control information (DCI) format Y carried on the PDCCH, where N=⌊LformatYM⌋, Lformat Y is equal to a payload size of the DCI format Y, and M is a number of bits of each indication field. The eNB can map the DCI format Y onto the PDCCH. The eNB can encode for transmission from to the UE the PDCCH with a cyclic redundancy check (CRC) scrambled by an enhanced interference mitigation and traffic adaptation (eIMTA) Radio-Network Temporary Identifier (RNTI) for the UE.

A first wireless device may determine a bandwidth for transmitting a frame, calculate two or more Spatial Reuse (SR) parameter values for the bandwidth, set, using the SR parameter values, first and second SR fields of the frame based on the bandwidth and a channel center frequency in which the bandwidth is carried, and transmit the frame to a second wireless device on the bandwidth. The first and second SR fields may be set to a first value when the bandwidth is a 40 MHz bandwidth and the channel center frequency is in a 2.4 GHz band. The first and second SR fields may be set to the first value when the bandwidth is an 80+80 MHz bandwidth and the channel center frequency is in a 5 GHz band. The first value may be a minimum of SR parameter values for first and second bandwidths in the bandwidth.

A method and a radio network node for scheduling wireless devices. The node assigns, to each wireless device, a D2D pair out of the D2D pairs based on spatial compatibilities for each of the D2D pairs with respect to each wireless device. The node estimates, for each wireless device and the assigned D2D pair, a first respective throughput for cellular communication and D2D communication, and estimates, for each wireless device, a second respective throughput for only cellular communication. The node schedules one or more of the wireless devices of the cellular network based on the first and second respective throughputs. Each of the wireless devices is scheduled for cellular communication together with the D2D communication of the assigned D2D pair when the first respective throughput exceeds the second respective throughput, or for only cellular communication when the first respective throughput is below the second respective throughput.

A wireless transmit/receive unit (WTRU) may receive a system information block (SIB) associated with proximity related localized applications broadcasted by an eNodeB. The WTRU may receive in response to sent location information, a proximity detection associated with another WTRU associated with the proximity related localized application. The transceiver may also receive scheduling information for a proximity related localized application and for other applications where a first radio network temporary identifier (RNTI) is for scheduling information for the proximity related localized application and a second RNTI is for scheduling information for the other applications.

Provided is a network self-healing method in which, when a link between a parent device and a child device breaks down in a wireless communication network of a cluster-tree structure in which a main communication device (referred to an access point (AP)) manages network operation, routers that are devices capable of having their child devices, and end devices that are devices incapable of having their child devices are associated with each other in a parent-child device relationship, the link is restored. When a router becomes an orphan device, the router makes network re-association in a cluster unit while maintaining synchronized operation with its child devices, and thus time, energy and signaling burden for network self-healing is largely reduced.

Vehicle internetworks provide for communications among diverse electronic devices within a vehicle, and for communications among these devices and networks external to the vehicle. The vehicle internetwork comprises specific devices, software, and protocols, and provides for security for essential vehicle functions and data communications, ease of integration of new devices and services to the vehicle internetwork, and ease of addition of services linking the vehicle to external networks such as the Internet.

A computer system, comprising at least one controlled execution space hosting an operating system and an application program; a vulnerability monitoring agent coupled to the controlled execution space; one or more vulnerability profiles coupled to the vulnerability monitoring agent, wherein each of the vulnerability profiles comprises an application program identifier, an operating system identifier, a vulnerability specification describing a vulnerability of an application program that the application program identifier indicates when executed with an operating system that the operating system identifier indicates, and a remedial action which when executed will remediate the vulnerability; wherein the vulnerability monitoring agent is configured to monitor execution of the operating system and the application program in the controlled execution space, to detect an anomaly associated with the vulnerability, to determine the remedial action for the operating system and application program based on one of the vulnerability profiles, and to cause the remedial action.