text:
|Publication number
|Publication type
|Application number
|Publication date
|Mar 1, 2011
|Filing date
|Feb 25, 2008
|Priority date
|May 13, 2002
|Fee status
|Also published as
|Publication number
|Peter A. J. van der Made
|Original Assignee
|International Business Machines Corporation
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (5), Referenced by (12), Classifications (9), Legal Events (3)
|External Links: USPTO, USPTO Assignment, Espacenet
This application is a continuation of and claims priority to application Ser. No. 10/145,592 filed May 13, 2002 now U.S. Pat. No. 7,370,360, entitled "Computer Immune System and Method for Detecting Unwanted Code in a P-Code or Partially Compiled Native-Code Program Executing Within a Virtual Machine," the entire contents of which are incorporated by reference.
1. Field of the Invention
The present invention relates to the field of computer security and specifically to the analysis of P-code and partially compiled computer programs of the type that execute within a run-time virtual environment, and more specifically to the detection of such programs that exhibit malicious or self-propagating behavior including computer viruses, network worms and Trojans.
2. Discussion of the Related Art
Detection of malicious programs has been a concern throughout the era of the personal computer. With the growth of communication networks such as the Internet and increasing interchange of data, including the rapid growth in the use of e-mail for communications, the infection of computers through communications or file exchange is an increasingly significant consideration. Infections take various forms, but are typically related to computer viruses, Internet or other network worms, Trojan programs or other forms of malicious code. Recent incidents of e-mail mediated attacks have been dramatic both for the speed of propagation and for the extent of damage, with Internet service providers (ISPs) and companies suffering service problems and a loss of e-mail capability. In many instances, attempts to adequately prevent file exchange or e-mail mediated infections significantly inconvenience computer users. Improved strategies for detecting and dealing with virus attacks are desired.
One conventional technique for detecting computer viruses (including Internet worms and Trojans) is signature scanning. Signature scanning systems use sample code patterns extracted from known malicious code and scan for the occurrence of these patterns in other program code. In some cases program code that is scanned is first decrypted through emulation, and the resulting code is scanned for signatures or function signatures (footprints). A primary limitation of this signature scanning method is that only known malicious code is detected, that is, only code that matches the stored sample signatures of known malicious code is identified as being infected. All viruses or malicious code not previously identified and all viruses or malicious code created after the last update to the signature database will not be detected. Thus, newly created viruses are not detected by this method; neither is malicious code in which the signature, previously extracted and contained in the signature database, has been overwritten.
In addition, the signature analysis technique fails to identify the presence of a virus if the signature is not aligned in the code in the expected fashion. Alternately, the authors of a virus may obscure the identity of the virus by opcode substitution or by inserting dummy or random code into virus functions. Nonsense code can be inserted that alters the signature of the virus to a sufficient extent as to be undetectable by a signature-scanning program, without diminishing the ability of the virus to propagate and deliver its payload. In addition, signature scanning fails where malicious programs have similar code structure to benign application programs. In such a case, the signature scanner will generate large numbers of false positives, or fail to detect the malicious code if the signature is abandoned.
An example of the signature scanner technique generating large numbers of false positives involves the analysis of malicious or potentially malicious code produced by a compiler that produces P-code or N-code. P-code or pseudocode is compiled and executable within a virtual machine environment. P-code is used in such languages as Java and is compiled to a form that is executable within an appropriate virtual machine in a host computer. N-code is partially compiled native code that requires a run-time environment for execution. Both P-code and N-code are executable within a virtual machine environment and the event procedures constructed by these compilers have a high degree of similarity whether the code is malicious or ordinary. Consequently, signature scanning tends to identify a large number of false positives for P-code and N-code programs.
Another virus detection strategy is integrity checking. Integrity checking systems extract a code sample from known, benign application program code. The code sample is stored, together with information from the program file such as the executable program header and the file length, as well as the date and time of the sample. The program file is checked at regular intervals against this database to ensure that the program file has not been modified. Integrity checking programs generate long lists of modified files when a user upgrades the operating system of the computer or installs or upgrades application software. A major disadvantage of an integrity check based virus detection system is that a great many warnings of virus activity issue when any modification of an application program is performed. It is difficult for a user to determine when a warning represents a legitimate attack on the computer system. Another drawback of the integrity checking method is that malicious code must modify other files to be detectable and the method therefore only works with computer viruses, not other forms of malicious code such as Internet worms and Trojan programs which do not alter other program files. Yet another disadvantage of the integrity checking method is that the virus has to be activated on the target system, that is, running in memory and performing its infection function on the target computer's files in order to be detectable, since changes to files only occur after the virus is activated.
Checksum monitoring systems detect viruses by generating a cyclic redundancy check (CRC) value for each program file. Modification of the program file changes the CRC value for that file and it is that change that indicates infection of the program file. Checksum monitors improve on integrity check systems in that it is more difficult for malicious code to defeat the monitoring. On the other hand, checksum monitors exhibit the same limitations as integrity checking in that the method generates many false positives.
Behavior interception systems detect virus activity by interacting with the operating system of the target computer and monitoring for potentially malicious behavior. When such malicious behavior is detected, the action is blocked and the user is informed that a potentially dangerous action is about to take place. The potentially malicious code can be allowed to perform this action by the user. This makes the behavior interception system somewhat unreliable, because the effectiveness of the system depends on user input. In addition, resident behavior interception systems are sometimes detected and disabled by malicious code.
Another conventional strategy for detecting infections is the use of bait files. This strategy is typically used in combination with other virus detection strategies to detect an existing and active infection. This means that the malicious code is presently running on the target computer and is modifying files. The virus is detected when the bait file is modified. Many viruses are aware of bait files and do not modify files that are either too small, obviously a bait file because of their structure or that have a predetermined content in the file name.
Another virus detection method is known as sand-boxing. This method is based on the fact that normal programs interact with the operating system through a set of predefined entry points referred to as API calls (application program interface calls). The API calls are made to procedures located in memory whose entry points are maintained by the operating system and stored in an API table. Such an API table is present in each program space created under the operating system. In the sand-boxing method, the API table is replaced (in the program's process space only) with an API table that consists of pointers to the anti-virus protection shell which then monitors each API call before passing the call to the real operating system API address. This method also has the drawback that the malicious code has to be activated on the target computer's platform before detection can take place. Another drawback of this method is that it works only for those programs that employ the documented manner of calling the system's API's. Many programs containing malicious code, including viruses, Internet worms and Trojans do not follow the standard convention and directly call the operating system at an address determined by scanning the operating system memory for an export table contained within the kernel 32 and other standard system DLLs. Such programs are capable of immediately infecting the target computer during the sand-box examination process.
It is apparent that improved techniques for detecting viruses and other malicious types of code are desirable.
An aspect of the present invention provides a method for identifying the presence of malicious code in program code within a computer system. The method includes initializing an analytical virtual P-code engine (AVPE) within the computer system. P-code is virtual machine code, whereby a run-time engine is required to interpret the P-code for execution. The run-time engine translates each P-code to one or more instructions in machine code. The AVPE comprises software simulating functionality of a P-code interpreter and exposes a set of library routines for N-code compiled programs, where a virtual central processing unit and virtual memory perform the actual processing. A target program is virtually executed within the AVPE so that the target program interacts with the computer system only through the AVPE and the virtual central processing unit. The behavior of the target program is analyzed following virtual execution to identify occurrence of malicious code behavior and indicating in a behavior pattern the occurrence of malicious code behavior. The AVPE is terminated after the analyzing process, thereby removing from the computer system a copy of the target program that was contained within the AVPE, including the de-allocation of all virtual memory resources containing data or program statements created by the virtualized program.
According to some implementations of this aspect, the method may deallocate all virtual memory resources containing data or program statements created by the target program.
In some other implementations of this aspect, library routines for N-code compiled programs are exposed to the AVPE through an application program interface.
In still other implementations of this aspect, P-code is virtual machine code and a run-time engine simulates the operations performed by each P-code. Another aspect of the present invention provides a method for identifying the presence of malicious code in program code within a computer system. A virtual engine is initialized within the computer system. The virtual engine comprises software simulating functionality of a central processing unit, a P-code interpreter, memory and an operating system including application program interface (API) calls to the virtual operating system and a set of API calls to the P-code engine library routines. A target program is virtually executed within the virtual engine so that the target program interacts with the virtual operating system and the virtual central processing unit through the virtual engine. The behavior of the target program is monitored during virtual execution to identify presence of malicious code and to indicate in a behavior pattern the occurrence of malicious code behavior. The virtual engine is terminated, leaving behind a record of the behavior pattern characteristic of the analyzed target program.
Still another aspect of the present invention provides a method for identifying the presence of malicious code. An analytical virtual P-code engine (AVPE) is initialized. The AVPE simulates the functionality of a P-code interpreter, the AVPE interacting with a virtual central processing unit that provides processing and virtual memory management functions. The method virtually executes a target program within the AVPE so that the target program interacts with the host computer system only through the AVPE and the virtual central processing unit. The AVPE triggers behavior bits to identify the occurrence of all I/O actions present in the program, generating a behavior pattern. The AVPE terminates and thereby removes from the host computer system a copy of the target program that was contained within the AVPE.
Significant aspects of this description relate to N-code programs and program code compiled within a computer system to an intermediate language generally referred to as P-code. P-code is virtual machine code, whereby a run-time engine is required to interpret the P-code for execution. The run-time engine simulates the operations performed by each P-code. Preferred embodiments of the present invention provide a method or apparatus for identifying the presence of malicious P-code or N-code programs in a manner that preferably limits the possibility of the malicious code infecting the target computer. Particularly preferred embodiments initialize an analytical virtual P-code engine (AVPE) within the target computer system. N-code is defined as native executable code, which requires the presence of a P-code engine to execute. The N-code is executed by accessing library routines within the P-code engine though a set of application program interface (API) calls. A number of commercial compilers generate such N-code executable programs. The produced code will not function unless the P-code engine for that language is present on the target computer platform. It is consequently particularly preferred that the initialized AVPE comprises software that simulates the functionality of a P-code or intermediate language engine and memory as well as machine language facilities that simulate the P-code (API) library routines that allow the execution of N-code programs.
Most preferably the AVPE executes a P-code target program so that the target program interacts only with the AVPE. Alternately, an N-code program may interact only with the AVPE and a virtual processing unit. The analytic behavior method analyzes the behavior of the target program following virtual execution to identify occurrence of malicious code behavior and indicate in a behavior pattern the occurrence of malicious code behavior. In preferred embodiments the behavior pattern is stored in a behavior data structure and the behavior observed in the program is recorded as a sequence of symbols representative of the observed behaviors. Particularly preferred embodiments of the present invention provide a behavior description language for more accurate characterization of the observed behavior. The AVPE preferably is terminated at the end of the analysis process, thereby removing from the computer system a copy of the target program that was contained within the AVPE.
Other embodiments of the present invention might provide a method for identifying the presence of malicious code in N-code or P-code program code within a computer system. A preferred method includes initializing an analytical virtual P-code engine (AVPE) within the computer system, where the AVPE includes software simulating functionality of a P-code or intermediate language engine, memory and an operating system including API calls to the virtual operating system. A target program execution is simulated within the AVPE so that the target program interacts with the virtual operating system through the AVPE. Behavior of the target program is monitored during virtual execution to identify presence of malicious code and the occurrence of malicious code behavior is indicated in a behavior description pattern. The AVPE is terminated, leaving behind a record of the behavior pattern characteristic of the analyzed target program.
A particularly preferred embodiment of the present invention provides an automated analysis system that detects viruses and other types of malicious code within a computer system by generating and subsequently analyzing a behavior pattern for each computer program introduced to the computer system. New or modified computer programs are analyzed before being executed by the computer system. Most preferably the computer system initiates an AVPE representing a simulation of the computer system and the AVPE executes the new or modified computer program to generate a behavior pattern prior to the new computer program being executed by the physical computer system. An analysis is performed on the behavior pattern to identify infected programs upon initial presentation of the program to the computer system.
The preferred behavior description language implementation of the behavior pattern stores data associated with each action undertaken by the unknown program. Analysis takes place by evaluating a set of actions, the data and the sequence in which these actions have been executed. For instance, an action of writing a data file with data indicates a legitimate operation. A write action to a system file, which inserts code into such a system file and most particularly when the new program writes its own code into the system file, may indicate an infection of the system file. If such an action is followed by the new program patching the system file header to modify the program's entry point then the malicious infection of a system file is considered as confirmed. This analysis takes place outside the AVPE and, in the presently contemplated implementation is not considered part of the AVPE. This allows the analysis of potentially malicious code to be conducted outside the AVPE environment and so would not be subject to interference from the potentially malicious code.
A variety of different terms are used in programming to describe different functional programming subunits. At different times and for different programming languages subunits of various sorts have been called applets, servlets, objects, functions, routines, subprograms, subroutines and other names. Such designations and the context or differences they represent are not significant to the present discussion and so this discussion is made simply in terms of programs, intending the term program to refer to functional programming units of any size that are sufficient to perform a defined task within a computer system or computing environment.
For convenience and brevity, this discussion references viruses in the known sense of that term as being a self-propagating program generally undesired in the infected computer system. In general, the term 'virus' covers all types of malicious code. Trojans are sometimes referenced separately and are referenced in the known sense of an application program that contains hidden within the body of that program a malicious subroutine or a payload that may cause damage to other software, hardware or information stored within the hardware of the computer system or its peripheral equipment. Trojans may or may not replicate automatically, and may be passed on by human interaction as joke programs or games. Similarly, "worms" are also sometimes discussed separately and sometimes within the overall description of a virus. The term "worm" refers to a program that replicates across a network connection set up between computer systems and infects computer systems connected to such a network by inserting itself within the set of programs that comprise the operating system of that computer system or the programs that are started during the initialization of the operating system. As used here, the term Windows is intended to reference any of the personal desktop operating systems sold by the Microsoft Corporation under the Windows brand name. The term PC or personal computer is used, unless specifically modified to indicate otherwise, to indicate a computer system based on the well-known x86 architecture, including those machines that presently are based on microprocessors sold by Intel Corporation under its Pentium brand name and successors to that microprocessor and architecture. This discussion is provided to illustrate implementation of aspects of the invention. Aspects of the present invention find application in a range of different computer systems in addition to the illustrated personal computer systems.
The present inventor has analyzed the behavior of a variety of different viruses and other malignant code including P-code of the type associated with Visual Basic and including N-code programs. Certain general characteristics of viruses have been identified. A virus needs to infect other programs and eventually other computers to propagate. Worms generally replicate over network connections by scanning the network for open connections, or though the email system. Worms and Trojans generally contain payloads. The payload allows the Trojan or worm to affect the infected system or communicate its presence. A payload might be, for example, a tool that monitors Internet traffic and keyboard entries to spy on passwords and mail those passwords to an anonymous email address or a malicious function that damages the infected computer, for example by corrupting or erasing the data on the hard disk or by altering or disabling the BIOS within the BIOS flash or EEPROM.
These behaviors are characteristic of a virus and are not, in the aggregate, characteristic of other, non-malignant programs. Consequently, a program can be identified as a virus or infected with a virus if it possesses certain ones of these behaviors, certain collections of these behaviors or all of these behaviors. In preferred embodiments of the present invention, the occurrence of these behaviors or combinations of the behaviors is indicated by collections of bits in a behavior pattern data set representing behavior characteristic of the infected program. An example of bit-based behavior patterns for a normal and an infected file are illustrated in
In the illustration of
In preferred embodiments of the present invention, the behavior of newly loaded or called P-code programs is determined in an analytical virtual P-code engine (AVPE) that simulates in software a complete PC, or a sufficiently complete PC, and it is that virtual PC that generates the behavior pattern for later analysis within an analysis module. In some implementations the AVPE may include a virtual central processing unit and in other implementations the AVPE may cooperate with a virtual central processing unit. Generally the virtual PC includes both the AVPE and the virtual central processing unit to simulate the execution of N-code programs. The virtual PC simulates execution of the new or modified program, simulating a range of system functions, and the virtual PC monitors the behavior of the suspect program and makes a record of this behavior that can be analyzed to determine whether the target program exhibits virus or malignant behaviors. The result of the virtual execution by the AVPE is a behavior pattern representative of the program. As discussed in greater detail below, the behavior pattern generated by the virtual PC identifies that a program is infected with a virus or is itself a virus.
An advantage for the use of virtual execution and analysis of new programs for viruses is that the AVPE is virtual and so, if the virtualized new program contains a virus, only the totally isolated AVPE environment is infected. The infected instance of the AVPE most preferably is deleted after the simulation, so the infection is ineffective and the virus does not propagate. Most preferably the virtual CPU, whether within the AVPE or associated with the AVPE, is also deleted so that infection of the virtual CPU is also ineffective. Preferably after the analyzing process the system deallocates all virtual memory resources containing data or program statements created by the virtualized program. The behavior pattern survives the deletion of the AVPE, allowing an analysis program to identify the existence of the virus and of the infection within the new program.
Most preferably, each time a new program is analyzed a new instance of the AVPE is generated, free of modification by any previously virtualized programs including any earlier analyzed viruses. The new program then is run on the new instance of the AVPE preferably followed by initiation of a modified interrupt caller procedure, as described in greater detail below. While the AVPE is executing the new program, the AVPE preferably monitors all decryption loops, operating system calls, DPMI/DOS interrupts and I/O port read/write (r/w) operations, setting bits in the behavior pattern register according to the observed behaviors. It is these bits in the behavior pattern that are retained after the simulation is complete and the virtual PC has been terminated. The bits stored in the behavior pattern register are the behavior pattern and subsequent analysis indicates whether the virtually executed program includes behaviors indicative of the presence of a virus or other malignant code. In other presently preferred implementations, the behaviors are recorded in a more descriptive, object-oriented behavior description language.
The modified interrupt caller procedure calls interrupts that the program being analyzed has modified within the virtual PC and generates a behavior pattern for each of those interrupt service routines as well. This allows particularly preferred embodiments of the present invention to identify certain types of viruses that initially modify only the interrupt service routines and do not begin propagating until the modified interrupt or interrupts are called by another program. By allowing the various interrupt service routines in the AVPE to be modified and then analyzing the modified interrupts, these embodiments of the invention can detect this delayed propagation mechanism. The same is true for viruses that plant a program within the computer's file system and modify the operating system registry to begin execution of that program after the next time the computer is restarted. Programs created by the program in this manner will spawn another virtual PC containing the newly created program. The newly created program will be virtualized in the usual manner, as described in the ABM (analytical behavior method) application, but the behavior pattern preferably is stored as a 'child' of the 'parent' behavior pattern representing the first program. The ABM is described in U.S. patent application Ser. No. 09/642,625, filed Aug. 18, 2000 and entitled "Computer Immune System and Method for Detecting Unwanted Code in a Computer System," which application is incorporated by reference in its entirety.
In some embodiments, only the static, final version of the behavior pattern is analyzed. It is possible, and in many circumstances desirable, to monitor the sequence in which the bits in the behavior pattern register are set. The order in which the behavior pattern bits are set provides additional information allowing identification of additional virus behaviors. Tracking of the order in which the behavior pattern bits are set is accomplished within the AVPE. Further information can be recorded using a more complex behavior data structure and a behavior description language that can more precisely identify behaviors that occur.
Preferred implementations of the analytical behavior method (ABM) proceed by extracting a behavior pattern and sequence from a modified, new, unknown or suspect program, for example using an instance of the AVPE. The behavior pattern is preferably used to analyze the behavior of the unknown program to determine if the behavior of the unknown program is malicious. Identification of malicious behavior in this manner allows identification of virus carrying files prior to infection of the host computer system. The behavior pattern can also be stored in a database and the AVPE can subsequently analyze the behavior of the program following modification to determine if its functionality has been modified in a suspect (malicious) manner. This provides post-infection analysis.
The described analytical behavior method differs from conventional virus detection methods in that it does not match program code to a set of stored patterns as do signature scanners and integrity checkers. Rather, an AVPE is used to generate a behavior pattern and, in particularly preferred embodiments, a sequence of flags within that behavior pattern or a sequence of behavior patterns. The generated behavior pattern does not change significantly between program version updates, but does change dramatically when a virus infects a program. For example, a word processor will still behave like a word processor when the program is replaced or updated with a new version of the program but the word processor changes significantly when the word processor is infected with a virus. The differences reflected in the behavior patterns are illustrated in
In particularly preferred embodiments of the invention, the analysis procedure specifically targets infection methods such as, but not limited to, the insertion of code into other executables or documents, submitting code to other applications to be transmitted or stored, insertion of code into high memory blocks and the modification of memory control blocks. Preferred implementations of the analysis method further look for destructive content, such as, but not limited to, functions that overwrite disk areas or the BIOS ROM, delete files or directories, modify data files or submit data to be transmitted. Most preferably, the analysis makes an exception and does not identify as infected a program whose other behavior characteristics indicate that the program is a development tool or software debugging tool and where the modifying behavior is an integral part of the tool's normal function. A viral infection of a development tool can be detected where an expressed function is not part of the tool's normal function, that is, within the development process. Both active (1) and inactive (0) flags present in the behavior pattern may be significant in this analysis, as well as the sequence in which actions take place (i.e., the order in which flag values are changed).
In accordance with preferred embodiments of the present invention, the AVPE or virtual PC represents a simulation of a complete computer system. A complete computer system preferably includes an emulated central processing unit (CPU), emulated memory, input/output (I/O) ports, BIOS firmware, operating system and the operating system data areas, as well as high level engines such as the AVPE and other language emulators. This stands in contrast to the simple emulation of a processor, in which only the processor processes are emulated. In emulation, program instructions are converted from their native form to a stream of instructions that perform the same function on a different hardware platform. Some signature scanning software employs emulation to decrypt the body of a suspect program before the suspect program is scanned for signatures. In virtualization, the entire computer is simulated including operating system calls, which are not actually executed but seem to the calling program to perform the desired functions and return the correct values as if they were executed.
As discussed above, the virtual PC includes a CPU, memory, I/O ports, a program loader, and the operating system application program interface (API) entry points, high level language engines and interface. Using such a complete virtual PC is particularly preferred because it gives the analytical behavior method a high level of control over the virtualized program, including over the sophisticated direct calls to the operating system API. Operating system memory areas and the IAT (import address table) preferably are simulated within the virtual PC and contain address pointers at procedures within the simulated operating system. The virtualized program most preferably is not given access to any of the facilities of the physical machine, thereby avoiding the risk that a potential virus or other malicious code escapes from the controlled environment to infect the host computer system.
On the left-hand side of
The kernel superstructure allocates the memory for the virtual PC including the virtual AVPE. Memory interface 16 represents the memory management interface to the virtual memory 18. When initiated, the AVPE allocates memory to be used as virtual memory, with additional memory being allocated as needed in blocks (or pages) of approximately 4 KB each. Generally the AVPE is a state machine running in a multi-threaded manner.
Typical programs include an initialization routine and a number of event procedures that are triggered by external actions. The virtual P-code engine includes an event procedure fetcher 20 that fetches the event procedures used by the program. Each event procedure preferably includes P-code or N-code instructions and is associated with a button or form action, such as a button click of a form load action. A preprocessor identifies the event procedures used by the program, including the entry point and the event associated with each of the event procedures, and the AVPE executes each of the event procedures used by the program to analyze the behaviors of those event procedures and hence of the P-code program. Declared variables are stored within the variable dictionary 28. The virtual P-code engine includes P-code interpreter and decoder 22 that accesses the P-codes required by the event procedures and decodes those P-codes. The decoded P-codes are virtually executed by the execution engine 24, which implements procedures simulating the execution procedures for executing the decoded P-codes. The functions for the illustrated P-code engine components are virtually executed and so do not produce actual events within the computer. Thus, if the P-code indicates that a box should be created and displayed, the function will be simulated within the code but no box will be displayed. The parameters of that box are stored within the simulated operating system so that the box can be referenced further on in the program.
Viruses including worms might access the API according to conventional schemes or may instead create an object that in turn makes an API call. Thus, it is preferred that the AVPE include an object I/O handler 26 to simulate object handling. When the target program calls an object, the AVPE preferably accesses a real version of the called object and virtualizes that object, which is then used by the AVPE to simulate the object call. This will not always be necessary or desirable, as emulations of the called object may exist and such an emulation is preferably used when it exists.
The virtual memory 18 stores the P-code program in the manner illustrated in
Push 00400789
Call MSVBVM60::ThunMain
The value following the PUSH instruction points to a location in the program that contains tables. The tables define the event procedures, forms and resources within the program. The tables also define whether the stored program is a P-code or N-code program. Following the header is storage 30 for the event procedures that are called by the program and a scratch pad memory 32 used by the execution engine. As discussed, all of this is virtual memory is accessed through the interface 16.
The analytical behavior method preferably includes: (1) file structure extraction; (2) change detection; (3) virtualization; (4) analysis; and (5) decision.
Before a program can be virtualized, the file format containing the target program preferably is evaluated. N-code or P-code compiled programs may reside in a PE-file format 'container,' an NE-file format 'container' or an executable 'container' that is in a propriety format. These formats are summarized below. The entry point code is extracted and loaded into the virtual computer's memory at the correct simulated offset. In a physical computer this function would be performed by the program loader function, as part of the operating system and the intermediate language virtual machine.
The AVM virtual computer loader function and the virtual computer P-code engine preferably are capable of dealing with the file formats and binary image files shown above. The loader function is performed by virtualizing the operating system program loader and so varies depending on the operating system used in the host computer. The file structure analysis procedure looks in the file header and file structure to determine the file format, rather than using the file extension because file extensions are unreliable in general use. The .EXE formats described above therefore include DLL, AX, OCX and other executable file format extensions. The NE/PE/LE executable file formats are similar in complexity; these file formats use a segment or page table. The PE file format is based on the COFF file specification.
Throughout the operation of the
A memory mapping utility maps the virtual memory map to the offset for the file type that is virtualized. The loader utility dynamically assigns physical memory to the virtual computer memory array each time a program is virtualized, and proceeds to build a new AVPE. Each AVPE contains a filled environment string area. Each virtualized program runs in a fresh memory area, created when that program is loaded into the virtual PC. Previous instances, where infected programs may have been virtualized, therefore cannot affect the performance of subsequent programs. An exception to this rule is where the program is spawned from a previous instance of a program, for instance where a program creates or drops another program that was contained within the body of the first program. In the cased of spawned programs, the memory resources are shared, as are the virtual file system and the operating system data areas and registry. At the end of the virtualization process, the AVPE is shut down and its memory resources are released (deallocated) and the AVPE completes assembly of the behavior pattern for the target program.
The program loader simulates the loader functions of the operating system and creates system areas that represent similar system areas in the physical computer. This is particularly advantageous functionality because the code under evaluation most preferably runs in the same manner as if executed on a physical computer system. The program headers follow the PE headers, which contain the entry point of the program. At that entry point a value is pushed onto the stack, followed by a call to the P-code engine initialization routine usually called 'main' or 'ThunRTmain'. The value pushed onto the stack represents the point at which the AVPE starts interpreting the header tables. Depending on the content of these tables the event procedures that follow the tables are either compiled to P-code or N-code. In the case of N-code, the virtualized program is executed by fetching instructions from the virtual memory array into a pre-fetch instruction queue. The instructions in the queue are decoded and their length is determined by their operational parameters.
The instruction pointer is incremented accordingly so that the instruction loader is ready to fetch the next instruction. The virtual low level (LL) engine determines from the r/m field of the instruction parameters where to fetch the data on which the instruction operates. The data fetch mechanism fetches this data and presents the data to the logic unit, which then performs the operation indicated by the code. The destination of the processed data is determined from the parameters of the instruction code. The data write mechanism is used to write the processed data to emulated memory or the emulated processor register set. This process accurately reflects what takes place in a physical CPU (central processing unit). Where the virtual CPU encounters an API call to the P-code virtual machine, a call to the AVPE API is substituted.
All areas of this process are simulated, as generally illustrated in
During the virtualization process, flags are set in the behavior pattern (Tstruct) field as the functions represented by program instructions and/or API calls are virtualized. The sequence in which these functions are called is recorded in the sequencer. The behavior pattern therefore matches closely the behavior of the program under evaluation to the behavior of that program in a physical PC environment.
In case of programs compiled to P-code, the AVPE is initialized from within the virtual machine to fetch P-codes and interpret the P-codes. The AVPE then calls the appropriate library routines as API's to execute the function. The processing of subsequent instructions is very similar to the processing of N-code as described above, except that the P-code engine performs the fetching of P-codes from the virtual machine virtual memory array and performs the interpretation of those P-codes.
Encrypted viruses are no problem, because the execution of the code within the virtual machine effectively decrypts any encrypted, packed or polymorphic virus, as it would in a physical PC environment. These decryption and unpacking actions preferably take place before the P-code engine is initiated, since the virtual machine only finds out the nature of the embedded executable after unpacking or decryption. Because all parts of the virtual computer are virtualized in preferred embodiments, and at no time is the virtualized program allowed to interact with the physical computer, the viral code should not escape from the AVPE and infect the physical computer.
The present invention has been described here with respect to certain preferred embodiments thereof. Those of ordinary skill will appreciate that various modifications and alternate embodiments of the invention might be practiced without varying from the basic teachings of the present invention. As such, the present invention is not to be limited to the particular embodiments described here. Rather, the scope of the present invention is to be determined from the claims.
|Cited Patent
|Filing date
|Publication date
|Aug 18, 2000
|Aug 15, 2006
|Internet Security Systems, Inc.
|Computer immune system and method for detecting unwanted code in a computer system
|Sep 26, 2003
|Apr 29, 2008
|International Business Machines Corporation
|Method for encrypting and decrypting data using derivative equations and factors
|May 13, 2002
|May 6, 2008
|International Business Machines Corporation
|Computer immune system and method for detecting unwanted code in a P-code or partially compiled native-code program executing within a virtual machine
|Nov 10, 2006
|Feb 2, 2010
|International Business Machines Corporation
|Analytical virtual machine
|Sep 25, 2001
|Oct 31, 2002
|Zhaomiao Tang
|Method and system for scanning and cleaning known and unknown computer viruses, recording medium and transmission medium therefor
|Citing Patent
|Filing date
|Publication date
|Apr 3, 2006
|Aug 2, 2011
|Trend Micro Incorporated
|Determining the address of a system call table to perform antivirus tasks in a computer
|Nov 26, 2012
|Oct 8, 2013
|Kaspersky Lab Zao
|System and method for countering detection of emulation by malware
|Nov 13, 2009
|Oct 22, 2013
|Kaspersky Lab, Zao
|Asynchronous processing of events for malware detection
|Sep 25, 2013
|Dec 9, 2014
|Kaspersky Lab Zao
|System and method for countering detection of emulation by malware
|Mar 28, 2013
|Jan 27, 2015
|Kaspersky Lab Zao
|System and method for improving the efficiency of application emulation acceleration
|Mar 29, 2010
|Feb 10, 2015
|Microsoft Corporation
|Automatically redirecting method calls for unit testing
|Dec 14, 2011
|Sep 22, 2015
|Microsoft Technology Licensing, Llc
|Process for generating dynamic type
|Feb 22, 2013
|Sep 22, 2015
|The Trustees Of Columbia University In The City Of New York
|Systems, methods, and media protecting a digital data processing device from attack
|Sep 17, 2012
|Nov 15, 2016
|The Trustees Of Columbia University In The City Of New York
|Detecting return-oriented programming payloads by evaluating data for a gadget address space address and determining whether operations associated with instructions beginning at the address indicate a return-oriented programming payload
|Aug 31, 2015
|Jan 10, 2017
|The Trustees Of Columbia University In The City Of New York
|Systems, methods, and media protecting a digital data processing device from attack
|Nov 13, 2009
|Apr 7, 2011
|Kaspersky Lab, Zao
|Asynchronous processing of events for malware detection
|Mar 29, 2010
|Sep 29, 2011
|Microsoft Corporation
|Automatically redirecting method calls for unit testing
|U.S. Classification
|726/24, 726/26, 717/134, 713/187, 717/135
|International Classification
|Cooperative Classification
|European Classification
|Sep 26, 2014
|Surcharge for late payment
|Sep 26, 2014
|Fee payment
Year of fee payment: 4
|Oct 20, 2014
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:INTERNATIONAL BUSINESS MACHINES CORPORATION;REEL/FRAME:033983/0262
Effective date: 20140930
Owner name: PALO ALTO NETWORKS, INC., CALIFORNIA


text:
Military Service (Army)
Royal Corps of Signals
WO2 Yeoman of Signals (Senior Operations Manager) - 1989 to 1993
- Led a team of four in the day to day running of a joint UNIX and Novell network throughout the School of Signals. The network clients where Windows, DOS and UNIX based.
- Responsible for training and effectiveness of the team, conflict management and mentoring.
- Produced bespoke database applications using xBase 4GL languages such as dBase, DBXL and Foxpro.
- Maintained large multi operating system LAN and servers with a help desk for signals staff.
WO2 Yeoman of Signals (Senior Operations Manager) - 1985 to 1989
- Responsible for training and operational effectiveness of a unit of 200 soldiers.
- Managed large scale secure communications infrastructures both in barracks and over large parts of Germany. These infrastructures where built with secure communications switches over radio relay communications links. Planned the geographic location of these nodes, frequency usage and moved them when necessary to give the best communications possible.
- Responsible for all unit Top Secret Cryptographic codes and equipment.
Early Army Career - 1971 to 1985
Management of secure data terminal communications between a mainframe computer at base and outlying terminals across Northern Ireland. This entailed liaison with BT for communication lines and modems as well as management of operational staff and technical resources.
Honours and Awards
Long Service and Good Conduct (22 Years Service)
General Service Medal with clasp Northern Ireland
Return to CV

subset: commoncrawl


text:
- "Hey folks Hey folks its me Emily Youcis and I'm here with yet another fantastic punch to your groin in the form of Fantastic Cartoon Dog entertainmen.t"(sic)—From Emily's Website/Newgrounds userpage
General traits to this Creator:
Tropes relating specifically to her art/animation:
- Art Evolution: For what had began as crude cut-and-paste MS Paint doodles animated into distorted music videos has slowly evolved into more and more sophisticated Flash animations. Most recently, the Alfred Alfer movie has produced segments featuring detailed expressions, shadows and lighting, and smoother motions.
- Bowdlerisation: The Alfred Christmas Episode had received mixed reviews and some criticism on Newgrounds, mainly for Emily's heavy use of "lame" euphemisms and less offensive humor.
- Brother Chuck: In her early animations, Emily had another dog character, named Phat Dawg, who played Sidekick to Alfred. After "Perpetual Limbo of the Room", there was no mention or appearance of him there onwards. Coincidentally, the voice of Phat Dawg happened to be her own brother, Lee.
- Some fans theorize that the loss of his best (likely his only) friend is what caused him to fiinally fall of the deep end.
- Darker and Edgier: Her earliest works comprised mostly of Affectionate Parodies and goofy, lighthearted skits of Alfred Alfer and an abandoned character called Phat Dawg. Over the past decade, the animations she's produced have grown increasingly sexual, violent, and depressing. Her current project crosses over with Where the Dead Go to Die.
- Deranged Animation: You'll have a hard time finding a work of hers that isn't Up to Eleven in wackiness. The most outrageous (and that's putting it lightly) has got be her music video for MC Bushpig's "Eat My Rotten Meat".
- Early Installment Weirdness: See Darker and Edgier entry.
- Mad Artist: She has a touch of this trope. She's very odd, random, and full of energy... But it pretty much just makes her charming and funny. You can watch her and be like, "Yeah, that's the person who made Alfred's Playhouse".
- Reference Overdosed: All of her animations make abundant references to all her favorite media, far too much for this page alone. For a full list, see her Reference Overdosed entry.
- Take That!: Emily claims that the titular character from Mr. Pickles had been a rip off of her character Dictator Pickles, so in a teaser for the Alfred movie she has Alfred tie him up and violate him with a pickle, post-mortem.
Tropes relating to her music:
Da Emily Show and other live-action tropes:
- Blasphemous Boast: In an episode of Da Emily Show she inquires of the audience if she would be on the stage and "this throne" if she were not the Savior.
- Comedic Underwear Exposure: Although exhibitionism is nothing new for her, there was a particular example of her half-nude as a gag in an episode of Smut Cave. Notably, the Spelunker auctioning off her worn undies in the Christmas Episode. Unwashed, of course.
- Large Ham: On camera, she is known to bark, howl, spontaneously begin headbanging and so forth; all to express her identity as thee Emily Youcis.
- The Stoner: She acts and looks stoned, constantly, and can occasionally be seen lighting up during livestreams. This is especially evident in her show which by and large is her convulsing and uttering non-sense.
- Surreal Humor: Her standard style of comedy.


text:
ELL Workshop: PART 2: Inquiry-based Strategies for Engaging Your Special Populations
February 5, 2016
New York Historical Society
170 Central Park West, New York, NY 10024
Presented by The New York Historical Society
In this hands-on session – the second in a two-part series – seasoned educators from the NYHS will build on the strategies in Part 1 (October 28) and extend into the realm of using visual aids to drive student learning. Participants will practice the deconstruction and analysis of visuals and discuss how using these strategies in the classroom can provide a powerful learning opportunity for all students, particularly those with language and learning needs. Attendees will walk away with classroom-ready strategies and sample lessons to scaffold this inquiry-based work for their students.
- this event will be hosted AT the NY Historical Society, 170 Central Park West, New York, NY 10024
- you did not have to attend Part 1 in order to attend Part 2
- this event is organized by the NYC Charter School Center and does not detract from Special Education Collaborative member seat allotments. Consider it a freebie!
Suggested Audience: Gen Ed Teachers, Special Ed. Teachers, ELL Teachers


text: Princess Fionna Cover Contents[show] SynopsisEdit Fionna becomes princess while her older sister becomes queen. Later on, she gets tracked down by an assassin. PlotEdit TBA CharactersEdit Major Edit Princess Fionna Elisa Water Wolfy Sharlot (Assassin) BizzyBee JR Retrieved from "http://friendz.wikia.com/wiki/Princess_Fionna_(episode)?oldid=5642" Ad blocker interference detected! Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers Wikia is not accessible if you've made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected. Categories: Episode Add category Cancel Save


text:
Grades 4/5 GATE Back to School Open House - AUGUST 23, 5:00PM-6:00PM. Come and see the new space and meet the teachers!
Grades 6-8 GATE will follow their respective grade level orientation outlined on the Stillwater Middle School webpage.
The goal of the GATE program is to meet the academic and social needs of highly gifted learners. These learners are children whose academic abilities indicate the need for in-depth, complex and rigorous curriculum and instruction beyond that which can be provided in the gifted cluster groupings that are currently in place. Unlike clustering, which includes students of various abilities, the classes at GATE include only highly gifted learners.
The GATE program provides students with a highly challenging instructional program which meets and exceeds the Stillwater Area Public Schools' academic standards. Differentiation in the depth, breadth, and pace of instruction with an emphasis on higher level thinking skills is utilized to meet the needs of advanced learners.
Program Details
Beginning in 2017-2018, GATE will be located at Stillwater Middle School, which will allow for expanded opportunities for students. We've designed a GATE program that will provide a sheltered experience for fourth and fifth graders - similar to what they've known at Oak Park. Our sixth graders will be clustered together in houses and in core classes, with access to support from a GATE teacher for English Language Arts and Science. A specialized GATE math class will also be provided to our sixth grade students.
In addition, we've designed gifted and talented services for our 7th and 8th grade students. Much like sixth grade, our 7th and 8th students will be clustered for core classes, and a specialized "push-in or pull-out" math class taught by a GATE teacher will be provided to keep them on track with their individualized learning needs.
Learn more about what to expect for next year.
View the GATE 2017-2018 Program presentation (shared with school board Feb. 9, 2017)
Transportation will be provided beginning 2017 and school hours will be 7:50 a.m. to 2:20 p.m. This program is an optional alternate educational setting available to students who meet eligibility criteria.
Entrance Criteria
GATE eligibility will be determined by a District Identification Team following established Eligibility Criteria. Students will be accepted beginning with the highest scores and will be added as space allows. The Cognitive Abilities Test is given in November.
Full scale scores from outside IQ tests will be considered if they are completed by a professional included on this list.
Application Process
If you are a parent of a child who meets eligibility criteria and is currently attending a Stillwater Area Public School, you may apply using the GATE Alternate School Enrollment form. See below.
If you are a parent of a child who meets eligibility criteria and is not currently attending a District 834 school, you may apply using the Application Form for Out-of-District Students. See below.
Important Dates:
- November 16, 2016: Deadline for parents/teachers to recommend CogAT testing
- November 29-Dec. 9, 2016: CogAT testing in all elementary buildings
- January 11, 2017: GATE applications due (This does not commit you to GATE)
- January 18, 2017: Families notified of GATE acceptance
- January 23, 2017: New GATE parent meeting 5:00-6:00 and Current GATE parent meeting 7:00-7:45 at Stillwater Middle School
- January 24, 2017: Potential student visit 9:15-10:45 at Oak Park Elementary
- January 26, 2017: Deadline to commit to GATE


text:
Standard 4: Teachers facilitate learning for their students
Teachers use multiple indicators, including formative and summative assessments, to evaluate student progress and growth as they strive to eliminate achievement gaps. Teachers provide opportunities, methods, feedback, and tools for students to assess themselves and each other. Teachers use 21st century assessment systems to inform instruction and demonstrate evidence of students' 21st century knowledge, skills, performance, and dispositions.
Critical Elements: Clarity, Assessment, Objectives, Planning
Assessment-The purpose of assessment is to motivate students to want to do better while giving them information they can use to do better. Additionally, a teacher's re-teaching plans are informed to support students to do better. The Skillful Teacher suggests that certain changes in the classroom can have unusually large effects into other practices. Good… [read more]
Clarity, according to The Skillful Teacher, is the ability to cause mental acts within student's minds that will result in their understanding or being able to do something. Compare the definition of Clarity with the definition of teaching. Teaching: Anything a person does that increases the probability of intended learning. The Skillful Teacher text uses… [read more]
A clear objective is an anchor of good daily lesson planning. The quality of a teacher's thinking about objectives during planning directly accounts for the effectiveness of student learning experiences. A learning objective should describe what students should know or be able to do at the end of the course that they couldn't do before…. [read more]
Creating a lesson plan is an integral part of each teacher's day. The lesson plan answers the most basic question: "What are we doing in class today?" The centerpiece of planning is the lesson: the period of planned time in which students engage in content through experiences the teacher has designed. Planning helps teachers focus… [read more]


text:
Subscribe to our Newsletter!
East Sacramento Preservation
- Important High School Meeting—Parents Please Attend August 3, 2017
- Mayor Steinburg Invites You… August 1, 2017
- National Night Out July 25, 2017
- Next Water Vault Meeting July 24, 2017
- McKinley Park Water Vault Meeting June 13, 2017
Meeting About Park on Sutter Memorial Site
This entry was posted in Trees, Uncategorized and tagged stonebridge, Sutter Memorial Hospital, Sutter Memorial Site, Sutter Park. Bookmark the permalink.


text: Hope, you find it a good idea to make a thread of a daily video of Russell. Post whatever you want - current or "oldies". Music, film scenes, trailer, interviews... It would be nice, if you could post a matching picture, but it's not necessary. If you don't know, how to embed a video, please ask.


text:
Please enter your email address to receive a password reminder.
Log into Tax-News+
Email Address:
The Costa Rican Government on March 10, 2015, launched a public consultation on its plan to implement a value-added tax (VAT) in place of the current general sales tax.
Under the proposal, the VAT would come into force in 2016 at a rate of 13 percent (the same rate currently applied to the general sales tax) before rising to 15 percent in 2017.
Exemptions would be granted to the supplies of companies operating in free trade zones and certain sectors, such as the healthcare and public transport sectors.
The Government also plans to make changes to the income tax regime. Together, the proposed reforms are expected to raise Government revenue by about CRC600bn (USD1.12bn), or two percent of gross domestic product (GDP).
The Government aims to submit the proposal to the legislative assembly by April 13.
The planned tax reforms are part of the Government's efforts to rein in a widening deficit. In 2014 the deficit stood at 5.6 percent of GDP, and in 2015 it is expected to reach 5.7 percent of GDP if reforms are not implemented.
At the beginning of this year Fitch Ratings assigned Costa Rica a negative credit rating outlook due partly to slow tax reform progress.
Archive | Resources | Partners | Site Map | Links | Newsletter Archive | Contact | RSS Feeds | About | Syndication | Advertising & Marketing | Recruitment | Terms & Conditions | Privacy & Cookies
IMPORTANT NOTICE: Wolters Kluwer TAA Limited has taken reasonable care in sourcing and presenting the information contained on this site, but accepts no responsibility for any financial or other loss or damage that may result from its use. In particular, users of the site are advised to take appropriate professional advice before committing themselves to involvement in offshore jurisdictions, offshore trusts or offshore investments.
All rights reserved. © 2017 Wolters Kluwer
TAA Limited


text:
Dr. Thomas Abel MD, FACP Patient Reviews
- Rheumatology Berkeley, CA
Overall Rating
8 Patient Reviews
- Friendly Staff
- Promptness
- Wait Time 18 minutes
- Appropriate Followup
- Spends Time With Patients
- Bedside Manner
- Fair and Accurate Diagnosis
- Easy Appointments
Showing 1 - 8 reviews
5.0 of 5
August 17th, 2017
Excellent doctor
He was extremely competent and immediately handled my medical concerns. He was also patient and explained everything I needed to know. He called me personally after our appointment to explain my test results, which rarely happens with other doctors. I would 100% return to him - I was very impressed.
1.0 of 5
July 13th, 2017
Rude Doctor who treats patients as inferior human beings.
1.0 of 5
July 6th, 2014
Definitely Not Recommended
Unhelpful, uncaring and woefully out of date with his medicine. Provides the most minimal of diagnostics and treatments. Treatments provided were aimed at covering up symptoms rather than preventing future joint damage. I spent months trying to work with him and it was a huge waste of time and money. He's also arrogant and can be rude. I would be okay with his personality deficits if he actually provided me with a diagnosis or, at the least, some reasonable treatments. If you want at good attempt at an accurate diagnosis, a doctor who knows his medicine and you want reasonable treatments that will work to help prevent future joint damage, I cannot recommend this doctor. If you want inadequate treatment, an uncaring doctor and you enjoy being treated dismissively, this is the guy for you. Overall, I think he just needs to retire and the sooner the better.
1.0 of 5
October 14th, 2013
Cannot Recommend
Dr. Abel seemed very disinterested in helping me. He was pretty dismissive of my symptoms, didn't listen to what I was saying and jumped to conclusions. When the treatments he gave me didn't help, he didn't seem interested in trying something else. What treatments he did want to prescribe were those which would cover up the problem (cover up the symptoms) and not anything that would treat the underlying problem and prevent future joint damage. His understanding of medicine seems very out of date and I think he could use some serious continuing education both in general medicine and in rheumatology. Overall, I spent several months trying to work with him and get some help and it was just a frustrating waste of my time and money. He did very minimal diagnostics (and didn't seem interested in working to provide me with an actual diagnosis) and provided me with minimal, ineffective, treatments. Finally, I have to say that I just didn't like him as a person, either. I found him to be pretty arrogant and rather rude. I'd be okay with those personality deficits if he actually provided me with a diagnosis and did his best to treat me, but, he didn't. Overall, I would not recommend him as a doctor.
1.0 of 5
October 12th, 2011
Don't waste your time with this sarcastic, uncaring doctor!
5.0 of 5
June 19th, 2017
5.0 of 5
March 20th, 2015
5.0 of 5
June 12th, 2012
Health Guides
Get the facts about chronic obstructive pulmonary disease (COPD), including symptoms and complications.
more health guides
Nearby Doctors
Dr. Thomas Abel, MD, FACP is similar to these 3 Doctors near Berkeley, CA.
Berkeley, CA
Berkeley, CA
Berkeley, CA


text:
Prayer When A Comet or Other Strange Signs Appear in the Heavens. Ev. Luth. Gebets-Schatz
from Evangelische Lutherischer Gebets-Schatz (Concordia, 1881-15th Ed.)
386. Prayer When a Comet or Other Strange Signs Become Visible in the Heavens
(from Michael Cubach's Grosses und vollkommnes Gebetbuch [1655])
Great God, You do wonders in heaven about and on the earth beneath. You number the stars and give them all their names, and do marvelous things that are past searching out. O hidden God, You who made the eye, open our eyes, that we may behold this present wondrous sign with amazement, and consider that it has not happened by chance, but through Your divine providence, to terrify the godless and to comfort the pious. O Lord Jesus Christ, through this sign we are reminded of Your return and our promised redemption, that the last day is at the door. O God the Holy Spirit, since the signs in the heavens preach repentance to us, help us, that through such signs we remember our sins and amend our lives in accordance with them, through Jesus Christ. Amen.
386. Gebet, wenn ein Comet oder andere wunderlich Zechen am Himmel sichtbar werden.
Großer Gott, du thust Wunder oben im Himmel und unten auf Erden, du zählest die Sterne und nennest sie alle mit Namen, und thust große Dinge, die nicht zu forschen sind. O verborgener Gott, der du das Auge gemacht hast, öffne uns die Augen, daß wir das gegenwärtige Wunderzeichen am Himmel mit Verwunderung ansehen, und bedenken, daß es nicht ohngefähr, sondern durch deine göttliche Vorsehung geschehe, die Gottlosen zu schrecken und die Frommen zu trösten. O Herr Jesu Christe, hierdurch werden wir deiner Zukunft erinnert und unserer Erlösung vertröstet, daß der jüngste Tag vor der Thür sei. O Gott Heiliger Geist, weil die Zeichen des Himmels unsere Bußprediger sein, so hilf, daß wir uns unserer Sünden dadurch erinnern und nach solchen Zeichen uns bessern, durch Jesum Christum. Amen.
Prayer of a Pastor
Prayer of a Teacher and Pastor for Himself and His Conduct of His Office
J. Heermann (1585-1647)
from Michael Cubach's Prayer Treasury
Lord Christ! From the beginning of the world, through all time, You have given teachers and pastors, to teach Your congregation to keep all that You have commanded. I also have been called by You through means of people, that I should be for the service of Your Church and Your Word, advance Your glory with all might, and should lead Your lambs, purchased with Your rose-red blood, to You in eternal blessedness. Dearest Jesus! It is of Your grace that I am what I am, for I am the weakest of Your servants, such that I am not worthy that I should be called Your minister. I am of impure lips. I am slow of speech and have an uninstructed tongue, and I have never been eloquent. So endue me now with power from on high to carry out this holy office as You require. Give me through Your Spirit what I should think and say, that I teach transgressors Your ways, and sinners be converted to You.
Lord! Give me, according to Your promise, a mouth and wisdom. Open my understanding, that I may understand the Scripture, and grace me with an instructed tongue, that I know how to speak to the weary at the proper time. Lend me courage and strength, that I lift up my voice as a trumpet, and show my parish children, the rich as well as the poor, their misdeeds, without timidity and respect of persons, and keeping quiet about nothing. Grant that I show favoritism neither to the rich or the poor for the sake of a handful of barley and a bit of bread, so that thereby the godless may not be strengthened in their sins and in the future their blood be required from my hand. Help that I preach Your Word with all candor and withhold nothing from all the counsel of God, that I also do not cease day and night with tears to admonish, that I may be pure from all blood-guilt, and so rescue my soul and those of sinners from destruction.
Lord Christ, the matter and the office is Yours. Give me grace to convert many souls. Through my foolish preaching, create laud and honor to You and great and rich profit in Your Church and congregation, that I may exhort and rebuke the bad, bear the weak, and instruct with a meek spirit those who are overtaken in a fault. Thus may I serve God with a pure conscience and lose nothing which You have entrusted to me. Let me not talk into the wind, and my work in the Lord be in vain, but let it save myself and those who hear me. Teach me, Lord, Your way, that I walk in Your truth, and what I teach others out of Your Word, do myself; that I give no one offense, nor be to anyone an example and an excuse to sin, but instead in all things demonstrate myself to be a servant of God. Grant that I may do the work of an evangelical preacher, that I may cause all laboring and heavy-laden hearts and troubled and anguished consciences to stand upright through the staff of Your Word; that I use sharpness on the unrepentant, according to the power which the Lord has given me to build up and not destroy. Grant me to rightly carry out my office.
But when I, like Jeremiah and all prophets and apostles, will be derided by everybody and become the world's curse and spectacle, then let me not become languid and impatient in my spirit, nor depart from my service and apostleship, like Judas Iscariot, on account of the world's thanklessness and for the sake of temporal things, but instead in faith and patience hope for and await the eternal reward. Grant also, that I do not seek glory and honor before men, but rather honor with God, and confess Your Word, which is a Word of the Cross, confidently before the evil world. Then I will be recognized by You, Lord Christ, before Your heavenly Father, and all holy angels and saints on that day, and as a faithful servant may enter into Your eternal glory and perfect joy, for Your own sake. Amen.
Prayer in Great Weakness of Faith
Prayer in Great Weakness of Faith
Ev. Luth. Gebets-Schatz
O Lord, I now experience it in truth, that not everyone has faith. I believe, dear Lord, but help my unbelief! You who would not break the crushed reed, nor put out the smoldering wick, O Jesus, You who sit at the right hand of God, intercede and pray for me, that my faith may not cease. Be the beginner and the finisher of faith, wherewith I extinguish all the fiery darts of the evil one. Let me believe, even if I cannot see, and so be saved. Amen.
(Johann Albinus, Pastor at Naumburg. d. 1679)
Prayer for the Church in a Congregational Meeting
- Prayer for the Church in a Congregational Meeting
(Israel's Comfort and Joy, 1660)
Lord and God, indeed the number of Your saints has declined, and Your believers have become few on earth. It is to be feared that the godly might become so few that everywhere the godless will abound. Therefore up! Rouse Yourself, and help Your poor and miserable ones, that we, who now are sighing to You, may not be totally destroyed.
Let Your divine truth be confidently taught and confessed without hypocrisy before men. Spread Your Word, which is pure as refined and tested silver, far and wide. Protect us from the evil generation which professes and pushes unprofitable things, or would otherwise not allow religion to be a serious thing among us. Increase the little flock, that it stand firm against the great crowd of the godless and all the gates of hell might do nothing against it, for Christ's sake. Amen.
Morning and Evening Blessing on Wednesday
Morning Blessing on Wednesday (Marburg Hymnal)
O Almighty, merciful God, gracious Father in heaven, I will declare from my heart Your praise, honor, and eternal thanks, because You have protected me once again through the guardianship of Your joyful spirits, the holy angels, so that I have lived to see this day fresh and healthy. I place all my doings and things left undone, my beginnings and endings, into Your will. I pray You that You would from this moment graciously pity me, and rule all my intentions and aspirations, my heart, senses, courage and understanding, and all my words and works, so that I might understand what is good and evil. Grant that in this evil and changeable present time I might walk and live apart from my sins, and carry within myself a heartfelt longing after the eternal fatherland, which Christ my Savior has purchased and won for me, and not make a joke of it by an evil, sinful life. To this end, please graciously help me with Your divine love and the power of the Holy Spirit, for the sake of Jesus Christ, Your dear Son. Amen
Evening Blessing on Wednesday (Marburg Hymnal)
I thank You, O great and mighty God, kind Father, that you have once again graciously protected me this day from all harm and evil. I pray You, through Your divine goodness, that you would cover the sins that I have committed today with my heart and mouth against You and Your holy commandments; that you would not forsake me, Your creation, which You have paid for dearly with the blood of Your dear Son, Jesus Christ. Defend me this night under Your almighty, gracious wings against the evil foe, who goes around me as a roaring lion to devour me. Let me rest and sleep securely in the shade of Your goodness and mercy, that the evil foe may not come near me nor do me any harm. Amen.
Prayer for Reconciliation with the Neighbor. Gebets-Schatz
Prayer for Reconciliation with Neighbors.
(Seckendorf Hymnbook) (Ev. Luth. Gebets-Schatz)
Good Jesus, by Your grace I have prepared and fit myself to come to private confession [zum Beichtstuhl] for the forgiveness of my sins. But I remember that You earnestly commanded: "When you are offering your gift at the altar, and there remember that your brother has something against you, then leave your gift there before the altar, and first go and reconcile yourself with your brother, and then come and offer your gift."
Unfortunately, now I have fallen into misunderstanding and disagreement with my neighbor. Therefore grant me your grace and govern me, so that my heart lets itself be found willing to be reconciled.
I recognize the hardness of my heart and confess that it is difficult to force flesh and blood and to let go of all anger and vengefulness. But I hope, yes, I pray, that You, Lord, would take from my flesh the heart of stone and give me a heart of flesh—that is, a heart rich in love and willing to be reconciled—and that you would make me a person who loves his enemy, blesses those who curse him, does good to those who hate him, and prays for those who insult and persecute him.
Ah! Let me think on the judgment and strict accounting that I will have to give [one day], that I may let go of hostility (which seeks only death and destruction), and be reconciled with my adversaries while I am still on the way with them, according to Your command, and never again let the sun go down on my anger.
And as I pardon and forgive all those who have offended me, so also let me find those whom I have grieved and angered to be submissive to Your word, so that they for Your sake also forgive and pardon me for all the ways I have offended them.
Oh Jesus, forgive all our sins and govern our hearts, that we may live peaceably as Christians with one another, and praise Your name together here in time until there in eternity we laud You forever. Amen.
Prayer after a Deep Fall Into Sin. Gebets-Schatz
Prayer after a deep fall into sin
Oh my most heartily beloved heavenly Father, whom I love with my whole heart; O You righteous judge of the world, how awfully have I, a poor sinner, sinned against You! Oh, what have I done! How have I so completely and shamefully forgotten your holy commandments, your good deeds toward me, your hard threats against sins, Your terrible, secret judgment, that I have committed this great sin, over which I now fear day and night! Oh God, how frightened Is my soul, how my heart trembles, how must I now be ashamed of myself in my own conscience before You! What a deep abyss of sin and damnation I see before my eyes!
Now, Lord my God, oh dear Father, in this my anxiety I take refuge in childlike trust in your unfathomable, unmerited mercy, and pray You through Jesus Christ for grace. Oh, how many are my sins! How great is my debt, so very great that I can never, even in eternity, pay it! Still have patience with me, a poor sinner, and pay for my misdoings according to your superabundant mercy for Christ's sake, who also has paid for me.
I have indeed done wrong and sinned very terribly. But it pains me to my heart, and on account of it I suffer daily, as You, O knower of hearts, see in me. Yes, now, O dear God, you will not cast out such a terrified and crushed heart. Yes, You are near to them who are of a crushed spirit, and you help those whose hearts are broken. Oh, then also do not cast me out! Heal, Lord, my stricken heart, my wounded conscience! Help me, a poor sinner, for the sake of Christ, and bind up my wounds. Yes, You are my Father, my Creator, and You know what kind of strength I have; you know that I am weak. Yes, Your Son Jesus Christ also has come into the world to save poor sinners, and His blood cleanses us from all sin. Oh God, thus do not allow the precious merit of Christ to be lost on me, a poor, sorrowful, repentant sinner.
Yes, you have promised that you do not desire the death of the sinner, but instead that he be converted and live. Now, dear God, I desire from my heart to repent by Your grace. You are acquainted with my heart and know that the sin I have committed is truly painful to me, and that I desire to improve myself. Oh, give me life and convert me, Lord, and I will be converted. Indeed, do not enter into judgment with me, and let me not perish in my affliction. Oh God, I am so shaken at times because of my sins that I don't know where I should go and what I should do. O Lord, cast me not away from your countenance, and take not your Holy Spirit from me. Free my feet from the net. Please forgive my misdeed, and let me receive joy and gladness through the power of Your Spirit, that the bones which You have broken may rejoice.
I find now that, as light as Satan previously made out the sin to be, in order to cast me into it, now so terrible and hard he makes it in my conscience in order to bring me to despair. O my God, forsake me not in such hard struggle. Let Your power be mighty in my weakness. Arm me with the power of your might, that in it I might stand against the cunning trials of the devil. Enlighten my eyes also, that I henceforth walk carefully and protect myself from similar sins.
Oh God, when You give joy to my heart with Your grace, how gladly I will to thank You, how diligently I want to improve my life through Your grace, how gladly will I teach other transgressors your ways, that sinners be converted to You. It shall be a warning to me, dear God, and I will protect myself from such plague of conscience for the rest of my life.
I hope in this, my God, that You are gracious, and my heart rejoices that You so gladly help and cast no one out who comes to You. Therefore I come to You now and pray You, be gracious to me, a poor sinner, for the sake of Your most dear Son, my only Savior and mediator Jesus Christ, who has promised that what we will ask in His name, the same You will also give to us, and who has commanded us to pray: Our Father, who art in heaven, hallowed be Thy name. Thy kingdom come. Thy will be done on earth as it is in heaven. Give us this day our daily bread, and forgive us our trespasses, as we forgive those who trespass against us. And lead us not into temptation, but deliver us from evil. For Thine is the kingdom, and the power, and the glory, forever and ever. Amen.
(Riegisches Gebetbuch, 18th century)
from Ev. Luth. Gebets-Schatz


text:
Please rate this asset if you have it. Your feedback helps me improve. Thank you!
A collection of minimalist blocky pixel fonts (4 so far) suitable for retro games.
min and submin express minimalism through number of pixels. orthogonal expresses minimalism through the number of angles used (mostly right angles). careless script expresses minimalism through the amount of effort employed to create it ;-)
Made using BitFontMaker2
Min.ttf is my first font! I enjoyed making it, if you like it I'll probably make more.
End User Licence Agreement (EULA).
Version 3.0.1. Published August 30, 2014
Created with GameMaker: Studio v1.4.1398
You can only review assets you've bought.
Works great!
Looks good too, Thank you for making this
Nice resource
Also have a free rating for people who leave 1 star reviews due to their own lack of understanding
Doesn't work
Tried many times to add to GM but it won't show in the font list and i can't find the font when looking at the folder where it's in. I even tried to drag it to GM and it only flickered a little and nothing happened. Would be awesome if the font actually worked. After trying to force it, it says: Invalid character was found: line 1: 7z
Why did you pack these in a .gmez instead of rar? dafuq
I'm sorry you had trouble with installation. I'm not aware that there is any other way to package assets other than creating a gmez, so that's why they're in a .gmez.
What you need to do is download the extension, then extract the .ttf font files and install them into Windows. Once they are installed as Windows fonts, you can create font resources in your GameMaker project, and the newly added fonts should show up in the font list.
Please give that a try and re-rate.
Also, rather than giving a poor rating, how about writing to the developer to ask them for help, or to suggest a way to improve it?
Pretty good
Thanks needed a pixel font
Will help a lot with prototypes thank you
Pretty dank
Better than my 8-bit font. 10/10
Total size 11.2 KB


text:
Relieving those pesky braxton hicks contractions and sciatica pains plus sleeping Sue
Picnic corn hole champ
Blue Ridge Swim Club
French breakfast radishes; our first harvest!
Pregnancy ennui
Baby shower at Keswick. Our luncheon view!
Cute nursery corner
All ready!
Time is dragging. I vacillate between total excitement and energy and a feeling of having so much to do! and a lethargic ennui that causes me to either stare off into space or tear up or freak out / worry. I am officially in the 38th week, the baby's head is in zero station and we are both progressing as we should. Waiting, waiting, waiting….The song below is soooo my song today.
It's funny how life contains all of these pockets of waiting in anticipation. At every age none of us are immune to it. We always want to be at that next place, that next phase of life. Even though MOST of where I am is just perfect and I am content…it seems there is always something to attain, right? I can't wait to meet this sweet little one. I can't wait to live life with our son in person. But, I'm trying to be still and just enjoy these last few weeks of where we are now. The lyrics to this great song are below from my new favorite album "Skying" by The Horrors. I know that James and I are about to embark on a great adventure, but I also know that it will soon settle down and we'll be in a groove and things will be "normal" again. Then we'll be so excited for each phase of life our children go through.
Still Life – The Horrors
Under a sky, no one sees,
Waiting, watching it happening.
Don't hurry, give it time,
Things are the way they have to be.
Slow down, give it time,
Still life, you know I'm listening.
The moment that you want is coming if you give it time
When you wake up, when you wake up,
You will find me
When you wake up, when you wake up,
You will find me
Under a sky, no one else sees,
yourself appears in front of me
The sky clears, the sun hits I'm here,
Waiting, it's happening.
The moment that you want is coming if you give it time
When you wake up, when you wake up,
You will find me
When you wake up, when you wake up,
You will find me


text:
Back to index
Printable version
Send to a friend
An endless coverage of olive trees, along with 13 metal viaducts impressive nineteenth century, are the main hallmarks of the 128 km route in the provinces of Jaén and Córdoba.
On this point tapestry, a closed rail has been recovered as a green route to enjoy an area of attractive scenery and a rich legacy of history. This Vía Verde is the longest one of Andalucía.
Download leaflet
Municipalities: Jaén, Torre del Campo, Torredonjimeno, Martos, Alcaudete, in Jaén; Luque, Baena, Zuheros, Doña Mencía, Cabra, Lucena, Moriles, Aguilar de la Frontera and Puente Genil in Córdoba.
Natural landscape: Betica ranges. Natural Reserve Laguna Honda. Natural Reserve Laguna del Salobral. Subbetica Natural Park. Bat Cave Zuheros. Spur to Baena: olive grove.
How to get there:
Managing entity of the Greenway:
More information on the Guía de Vías Verdes (Ed. Anaya Touring) Volume II
After skirting round the Cerro Alvarillo hill, our Greenway crosses the Arroyo del Fresno river on a spectacular, 132 m long railway viaduct, the Sima Viaduct.
A kilometre later we cross the road by another, shorter viaduct called "Los Dientes de la Vieja" (The Old Woman's Teeth), a mere 25m long. We cross the same road twice more, the first time at a level crossing and the second by a bridge, and a little later the town of Cabra comes into view at the end of a gently winding track.
The Olive Oil Greenway
Festivals and holidays
Managing Authority
Town Councils
Coaches & buses


text:
This property has been removed by the agent. It may be sold or temporarily removed from the market
2 bedroom flat for saleTapestry, Canal Reach, King's Cross, London, N1C
Under Offer £1,350,000
Property Description
Key features
- 2 bedrooms
- 1 reception room
- 2 bathrooms
- Leisure Facilities
- Porter / Concierge
- Balcony
- Communal Garden
- New Build
- New Development
- Purpose Built
Full description
Tenure: Leasehold
A large 2 bedroom, 2 bathroom apartment in a superb position on the fourth floor overlooking the Gasholder Park and canal.
Situated on the fourth floor of the stunning Tapestry building is this spacious 2 bedroom apartment with 2 private balconies.
The flat measures over 1000 square feet and enjoys stunning views over the Gasholder Park and the canal.
Tapestry is the third private residential building to be completed on Argent's much heralded King's Cross Development Site and is due for completion in November 2016.
Please note that images are not of this specific apartment.
Tapestry is situated just a couple minutes' walk from King's Cross and St. Pancras transport hub which links six London Underground lines with two national mainline rail stations and international high speed rail. And with Euston Station just a five minute walk away, the UK's major cities are within easy reach.
London's five international airports are within an hour – with direct services to Heathrow, Gatwick and Luton. Add 14 bus lines and a bike interchange, and you have a location that's unrivalled for connections – locally, nationally and internationally.
Please note all distances are approximate.
More information from this agent
To view this media, please visit the on-line version of this page at www.rightmove.co.uk/new-homes-for-sale/property-54512320.html
Energy Performance Certificate (EPC) graphs
Listing History
Map & Street View
View in fullscreenView in fullscreen
Street View is unavailable in this location
Market Info
Disclaimer - Property reference KGX160021. The information displayed about this property comprises a property advertisement. Rightmove.co.uk makes no warranty as to the accuracy or completeness of the advertisement or any linked or associated information, and Rightmove has no control over the content. This property advertisement does not constitute property particulars. The information is provided and maintained by Knight Frank, Kings Cross. Please contact the selling agent or developer directly to obtain any information which may be available under the terms of The Energy Performance of Buildings (Certificates and Inspections) (England and Wales) Regulations 2007 or the Home Report if in relation to a residential property in Scotland.
Map data ©OpenStreetMap contributors.


text:
According to Travel Weekly, Ontario is going to shell out the big bucks to bring back tourists post SARS.
It might be a good time to pitch some Ottawa stories. Here's a link to Ottawa Tourism.
While several publications do not take articles from sponsored trips, there are some that are too small to say no to that. From what I hear (I haven't done this just yet), tourist boards prefer that you have an assignment before they hand over the goods.
It would seem to me that if a region is shelling out marketing cash, there's a good chance they'll have some budget to help with your travels if you're going to promote them in your travel writing outlets.
Good luck.


text:
Work some do-goodery into your Sunday Funday and join us to raise money for RefugeeOne, a Chicago-based 501c3 organization that provides resources (funds, residences, supplies, classes & training, and mentorship) to refugee families from all over the world who need support in their new home in the Windy City. They are the largest full-service refugee organization in Illinois, and they need our community's support now more than ever.
$20 a ticket gets you a bespoke cocktail from our socially-conscious friends at Spilt Milk Tavern and a buffet of nibbles from local Syrian-American caterer Honeydoe. An additional special cocktail menu will also be available - so come thirsty!- with an extra dollar from each drink also benefiting RefugeeOne. Special thanks to H2Vino and Maison Ferrand for their generous donation of product and to Spilt Milk for hosting.


text:
Rs. 1,860.00
Classy blue and white cushion cover is one gorgeous design to add to your home decor. These decorative cushion cover designs are great to enhance the overall look of your home décor and make your guests say wow! To offer your best comfort and soft feel premium quality cotton material is used for crafting these covers. There is beautiful leaf design on it with bright blue color that makes it so attractive and modish. Give your room interior a distinct touch of beauty and class with this classy looking blue and white cushion cover. Kantha work is originated from Rajasthan which is one vital handicraft works within the local folk in the region. The cushion covers are shrink resistant and color resistant for longer use. You can adorn your living room, room interior, bed rooms, sofas with this cushion covers. These covers when added to your decor it will grab eyes and you will be complimented for your spectacular choice in decor
Size: 40cm L x 1cm W x 40cm H.
Weight: 400grams.
• Classy blue and white cushion cover comes with Kantha embroidery of Rajasthan.
• It is made up of pure cotton material to offer best quality and comfort.
• It comes in the set of five with pretty blue and white print and work.
• Adorn in your living room, bed rooms, on sofas, couch.
Rs. 1,889.00
Measurement INFO Add some 3D floral designs to your home décor with this Hungarian...
Rs. 1,778.00
Measurement INFO Aboriginal art blue design wall plate is one mesmerizing piece of art...
Rs. 1,500.00
Measurement INFO Abstract African art style wall plate is a design portraying the tribal...
Rs. 1,500.00
Measurement INFO Are you searching for Decorative Wall Plates Or Antique Wall Plates For...


text:
Olivia Coin Bracelet - Carnelian / Gold
Olivia Coin Bracelet - Carnelian / Gold
Olivia Coin Bracelet - Carnelian / Gold
> Semi-precious Faceted Carnelian Coin
> High Quality 18K Gold Vermeil Bezel Setting
> High Quality 14K Gold Fill Chain, Clasp, Tag
> Adjustable, Measures ~ 6" in Length + 1" Extension
(Can be worn up to 7")
> Stone measure ~ 15mm
> R + R Tag + Coordinating Stone at Extension
- Delivered to you gift wrapped in a special R + R box!
- Every stone is uniquely selected by designer, Melanie RR Edwards, for its beauty + brilliance of color. Thoughtfully, designed into the perfect setting, each treasure is handcrafted one-at-a-time @ the RIFLE + RADFORD Studio in Austin, Texas. Pride in our quality is important ; Embrace each piece with its unique craftsmanship & individual characteristics. Stones from the Americas ; Made in the U.S.A.
- Need more information? Email email@example.com


text:
Log In or Register.
Louis Vuitton Outlet Store - 2016 LV Online Store
Louis Vuitton is one of the most iconic and recognizable luxury brand names in the world. It's no secret that the company sells some pricey stuff, but do you know just how pricey some of these items are? Here, we present our list of the top eight most expensive Louis Vuitton items. Prepare to be shocked and surprised!


text:
You know, I'm feeling quite salty that Drake pulled a pump-fake with the Popcaan version of Controlla. What a tease! Replacing it with a Beenie Man sample doesn't do the song justice, jus' mi two cents. If you read my write-up, I was hype about it. It's such a sexy song and then here comes Beenie. Le sigh, #why. It's like that moment when you're vibing and dancing by yourself and some random guy comes to dagger. Just stop.
No one really knows why Popcaan isn't on the album and I'm quite curious to know what really happened. But anyway, let's talk about the rest of Views.
Drake seems to be highly influenced by Caribbean culture, specifically Dancehall in the newest album. "9", starts off with him saying "fi di dawgs dem, you know?" in his best Caribbean accent. It could use some work but we see you and I love the song. The track samples "Dying" by Mavado feat. Serani, a 2007 hit.
One Dance, which is now no. 2 on the Billboard 100, is an afrobeat-dancehall influenced song, and we all know azonto and afrobeats has been on a continuous rise and crossover in the Caribbean music industry. The young woman singing "Tell Me, I Need to Know, Where Do You Wanna Go" is actually from Kyla's "Do You Mind," which is a 2008 UK house music vibe. It also features Nigerian music sensation, Wizkid, who is best known for songs like P-Squared, Show You The Money, and Ojulegda, which was actually remixed featuring Drake just last summer.
I'm sure growing up in Toronto and being surrounded by the culture has much to do with Drake's musical diversity. "Find Your Love", released on May 5th, 2010, has a dancehall-hip hop riddim and was filmed in Kingston, Jamaica. Mavado makes a cameo playing the gully-side gangster whose girlfriend was having a love affair with Drake. The video was then criticized by the Jamaican ministry of tourism because of the violence and how the island was portrayed.
Let's not forget the recent dancehall-pop favourite, Rihanna's "Work", which I recently touched on, that is still in the top 10 of the charts. It's a bare bashment setting choreographed by the biggest choreographer from Toronto, Tanisha Scott, who also assisted Drake with his moves in the Hotline Bling video.
The Caribbean influence is also prevalent in other artistes, for example one my favorites, Major Lazer. They are mostly known for selling out EDM concerts worldwide and have done recordings for an album in Jamaica. They're known for collaborations with Busy Signal, Vybz Kartel, T.O.K., Machel Montano, Bunji Garlin, and Faye Ann, just to name a few. By the way, two thirds of the group are from the Caribbean. Jillionaire, born in Trinidad & Tobago, and Walshy Fire, hailing from Jamaica, never fail to represent for the islands. Something about this music makes people want more sazón in their life. There's so much bad going on the world and feel-good music is a healer.
I've always been a fan of Drake and I say the whole album has something for everyone to enjoy and it doesn't disappoint. When he first started singing and rapping, he was clowned by most saying he wasn't hip hop or a real rapper. Let's face it guys, he's dope and it works for him. His songs have probably gotten most of you past first base, so don't hate. The fans are from all over the world and being exposed to the Caribbean through music is never a bad thing.
The Summer Sixteen Tour launches on July 20 in Austin, Texas. but let's not talk about these tickets and how they sold out in 2.5 seconds. I need answers.
One Love.


text:
FW: [serr] SERR 2011 Conference Program
Expand Messages
- Forwarded program for SERR 2011.robRobert S. Bristow, Ph.D.Geography & Regional PlanningWestfield State UniversityWestfield, MA 01086413-572-5215
From: serr-owner@... [serr-owner@...] On Behalf Of Yu-Fai Leung [leung@...]
Sent: Friday, February 11, 2011 10:31 AM
To: serr@...
Subject: [serr] SERR 2011 Conference Program
Dear colleagues,Attached please find the program schedule for the 2011 Southeastern Recreation Research (SERR) Conference which is being hosted by Appalachian State University in Boone, NC from February 27 (Sunday) through March 1 (Tuesday). This program and more information about the conference is available at www.serrconference.org. Please contact Dr. Jeffrey Hallo (jhallo@...)) or Stephanie West (westst@...), the conference co-chairs should you have any question. Thanks!Yu-Fai_________________________________________________
Yu-Fai Leung, Ph.D.
Associate Professor
Parks, Recreation & Tourism ManagementCollege of Natural Resources
North Carolina State University
Box 7106, 5107 Jordan Hall
Raleigh, NC 27695-7106, USA
Ph: (919) 513-3489
Fax: (919) 515-3439
Email: Leung@...
>>> Jeffrey Hallo <JHALLO@...> 2/11/2011 10:15 AM >>>
Hi Yu-Fai,
The conference program was posted to the SERR website (www.serrconference.org). It is also attached to this message.
Your message has been successfully submitted and would be delivered to recipients shortly.