Abstract: The flow of events though an event-analysis system is controlled by a number of event throttles which filter events, prioritize events and control the rate at which events are provided to event-processing components of the event-analysis system. Incoming events to the event-analysis system are associated with a profile, and a metrics engine generates metrics based on the incoming events for each profile. The flow of events to the metrics engine is controlled on a per profile basis, so that excessive generation of new metrics and new profiles is limited. If the system from which the events originate is compromised, metrics associated with compromised profiles may be frozen to avoid corrupting existing metrics. Processing of events and anomalies by analysis engines within the event-analysis system may be delayed to allow the accumulation of metrics necessary for accurate analysis.

Abstract: A system and method for managing peripheral device failures is disclosed. The method includes detecting, at a processor of a peripheral bus, a failure of a first bus device at a downstream port from the processor. The downstream port is populated by the first bus device and the processor is communicatively coupled at an upstream port to a root complex. The processor is configured to isolate the failure of the first bus device from the root complex. The method also includes, responsive to detecting the failure, suspending communication of data to the first bus device, receiving information regarding a second bus device selected from a cluster of a plurality of bus devices, and assigning the second bus device to the downstream port.

Abstract: A security patch tool includes a retrieval engine, a parser, and a reporting engine. The retrieval engine retrieves, from a first database, a log indicating a plurality of patches that have been applied and whether each patch of the plurality of patches was applied successfully. The parser determines, based on the log, a second plurality of patches of the plurality of patches that were not applied successfully and determines, based on the log, an error code for each patch of the second plurality of patches. The retrieval engine further retrieves, from a second database, a remedy for each error code for each patch of the second plurality of patches. The reporting engine generates a report indicating the plurality of patches, the error code for each patch of the second plurality of patches, and the remedy for each error code for each path of the second plurality of patches.

Abstract: The disclosed computer-implemented method may include (1) providing a framework that includes (A) a user-space component and (B) a kernel-space component, (2) identifying, via the user-space component, a series of kernel functions to be tested in kernel space, (3) identifying, via the user-space component, one or more arguments for the series of kernel functions to be tested in kernel space, and then (4) performing, via the user-space component, unit testing of a kernel from user space by (A) generating at least one message that identifies the series of kernel functions and the arguments and (B) sending the message to the kernel-space component to direct the kernel-space component to (I) populate a queue in kernel space with the series of kernel functions and the arguments and (II) sequentially execute the series of kernel functions in the queue with the arguments. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A source code migration tool comprising a memory, a receiver, a resolved source code file generation engine, and a verification engine. The memory is configured to store source code for an application, a plurality of configuration files comprising one or more parameter values defining one or more parameters, and metadata corresponding to the application. The receiver is configured to receive notice that the application has migrated from a lower environment and the resolved source code file generation engine is configured to generate a resolved source code file based on the source code of the application. The verification engine is configured to perform one or more checks on the resolved source code file and determine whether the resolved source code file passes or fails each performed check. The checks comprise one or more of a parameter check, a metadata check, a connectivity check, a credentials check, and an access check.

Abstract: A computer-implemented method for distributing a plurality of data partitions among a cluster of computer nodes includes dividing a database into a plurality of primary partitions, storing the primary partitions on a plurality of nodes associated with a computer network, duplicating the primary partitions to create a plurality of secondary partitions and storing the secondary partitions on the nodes, wherein the primary and secondary partitions are substantially evenly distributed among the nodes, each secondary partition is stored on a different node than its corresponding primary partition, diversity exists with respect to each secondary partition and the node where it is stored, the primary partitions are available to serve a system workload, and one or more secondary partitions corresponding to one or more primary partitions of a failed node are available to be upgraded to primary status to maintain workload balancing and data availability after one of the computer nodes fails.

Abstract: A system and methods are disclosed for testing guest firmware in virtualized computer systems. In accordance with one embodiment, a hypervisor executed by a processing device infers that firmware has created a system table in a portion of memory of a virtual machine. In response to the inferring, the hypervisor locates the system table and executes one or more commands to test the system table.

Abstract: A system, method, and computer program product are provided for automatic discard of corrupt memory segments. In use, one or more memory blocks are allocated to specific business related information. Additionally, the one or more memory blocks allocated to the specific business related information are assigned to one or more first memory regions, the one or more first memory regions being a portion of a memory that includes a plurality of memory regions in addition to the one or more first memory regions, the plurality of memory regions including a plurality of other business related information. Further, it is identified that the specific business related information is corrupt. Moreover, the specific business related information is discarded from the memory and a master memory, such that the plurality of other business related information is not discarded.

Abstract: A method to efficiently checkpoint and reconstruct an in-memory index associated with a log-structured object store includes enabling asynchronous write operations to occur to a log-structured object store. The log-structured object store utilizes an in-memory index to access objects therein. The method further enables checkpoint operations to occur to the log-structured object store without pausing the asynchronous write operations. When initiating checkpoint operations, the method establishes a “begin checkpoint” marker on the log-structured object store. This “begin checkpoint” marker is configured to point to an oldest known log location recorded in the in-memory index. In the event the in-memory index is lost, the method reconstructs the in-memory index by analyzing the log-structured object store starting from the oldest known log location. A corresponding system and computer program product are also disclosed and claimed herein.

Abstract: A method to efficiently checkpoint and reconstruct an in-memory index associated with a log-structured object store includes enabling asynchronous write operations to occur to a log-structured object store. The log-structured object store utilizes an in-memory index to access objects therein. The method further enables checkpoint operations to occur to the log-structured object store without pausing the asynchronous write operations. When initiating checkpoint operations, the method establishes a “begin checkpoint” marker on the log-structured object store. This “begin checkpoint” marker is configured to point to an earliest address in the log-structured object store that is uncommitted to the in-memory index. In the event the in-memory index is lost, the method reconstructs the in-memory index by analyzing the log-structured object store starting from the earliest address uncommitted to the in-memory index. A corresponding system and computer program product are also disclosed.

Abstract: A computing device receives session description protocol (SDP) information including network parameters, from a plurality of client devices participating in an audio-video conference hosted by a primary conference host. The computing device selects a secondary conference host from the plurality of client devices. In response to receiving the SDP information from the plurality of client devices, the computing device sends a reply, including network parameter information identifying the secondary conference host, to the plurality of client devices of the audio-video conference. The computing device determines a failure of the primary conference host, wherein the failure is based, at least in part, on a violation of a threshold limit of a transmission rate of the primary conference host, and in response to determining the failure, the computing device sends information to activate the secondary conference host as the audio-video conference host, to the plurality of client devices.

Abstract: A server node in an IaaS (Infrastructure as a Service) cloud includes a hypervisor arrangement and virtual machine arrangements at least a subset of which together defines at least one application utilizing the IaaS cloud. The server node includes a cloud infrastructure monitor within the hypervisor arrangement. The cloud infrastructure monitor includes a monitor arrangement monitoring an infrastructure of the IaaS cloud by monitoring a physical network, storage within the physical network, the server node, or the virtual machine arrangements. A detector arrangement detects faults within the monitored IaaS infrastructure. A notifying arrangement provides notifications of detected faults on a message bus between the hypervisor arrangement and each at least one application. The message bus relays the fault notifications from the cloud infrastructure monitor to the at least one application.

Abstract: Code block rating for guilty changelist identification and test script suggestion is discussed herein. An embodiment operates by assigning, by at least one processor, a respective code block rating to each code block of a plurality of code blocks; determining, by at least one processor, a change list rating for a change list, wherein the determining comprises: assigning, by at least one processor, a respective suspicious code block rating to each code block of the plurality of the code blocks modified by the change list, wherein the respective suspicious code block rating of a code block is based upon the respective code block rating of the code block, and calculating, by at least one processor, the change list rating based upon the respective code block ratings of each code block modified by the change list; and performing, by at least one processor, maintenance on the change list based upon the calculated change list rating.

Abstract: The disclosed computer-implemented method for healing images in deduplication storage may include (i) detecting that a data segment stored within deduplication storage is corrupted by executing an algorithm on the data segment to generate a numerical identifier for the data segment and determining that the numerical identifier does not match a previously stored numerical identifier for the data segment, (ii) checking, during a backup operation, whether a digital fingerprint of a data segment of an image being backed up matches a digital fingerprint of the corrupted data segment that was taken prior to corruption and that is already stored within the deduplication storage, and (iii) appending the data segment from the image being backed up to a container that already contains the corrupted data segment rather than replacing the corrupted data segment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The subject matter described herein relates to methods, systems, and computer readable media for emulating network devices with different clocks. One method includes steps occurring in a network equipment test device. The steps include generating or obtaining timing information. The steps further include obtaining clock modification information. The steps further include emulating a plurality of different clocks using the timing information and the clock modification information. The method further includes emulating at least one network device that transmits test packets to a device under test using the different clocks.

Abstract: Systems and methods may provide for conducting an object trace of an allocation status of one or more objects in a computing system and using one or more hardware performance counters to conduct a hardware based address profiling of the computing system. Additionally, one or more stale objects in the system may be automatically identified based on the object trace and the hardware based address profiling. In one example, the object trace is initiated prior to a start of a task on the computing system and the hardware based address profiling is initiated in response to an end of the task on the computing system.

Abstract: Methods, systems, and computer program products are included for performing tracing in a protected kernel environment. A method includes scanning at least a portion of a kernel to locate one or more instructions. The locations of the one or more instructions are provided to a hypervisor. The one or more instructions are replaced with one or more other instructions. After replacing the one or more instructions, a kernel protection feature is activated. After activating the kernel protection feature, they hypervisor detects an attempted modification of the kernel. The hypervisor determines that the attempted modification corresponds to the at least one location provided to the hypervisor and that the attempted modification corresponds to an authorized code variant. The hypervisor modifies the kernel to include the authorized code variant at the at least one location.

Abstract: Aspects of the present disclosure involve systems and methods for removes and/or adding log and/or cache devices to storage pools of a storage appliance. Users, via a graphical-user interface, identify the log and/or cache devices for removal or addition. Subsequently, the log and/or cache devices are moved, according to a data profile corresponding to the devices, from a first storage appliance to a second storage appliance.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include mirroring, in a distributed storage system having multiple storage nodes, data on the storage nodes. Upon the distributed storage system detecting a loss of communication with a given storage node, a log including updates to the data stored in the given storage node is recorded and, the recorded updates can be applied to the given storage node upon communication with the given storage node being reestablished. In some embodiments, the distributed storage system may be configured as a software defined storage system where the storage nodes can be implemented as either virtual machines or software containers. In additional embodiments, upon detecting the loss of communication, a redistribution of the mirrored data among remaining storage nodes is initiated upon detecting the loss of communication, and the redistribution is rolled back upon reestablishing the communication.

Abstract: The disclosure is directed towards fault-tolerant methods, systems and architectures for data distribution. One method includes generating fault distribution tables. The table entries correspond to a copy of data records. The entry and copy are associated with a fault status, a node, and a group that are based on a position of the entry within the distribution table. The method also includes storing the copy of the data record that corresponds to the entry in a database that is included in a plurality of databases. In response to determining an unavailable node included in the plurality of nodes, the method determines a fault status, a node, and a group. The method provides an available node sequential access to data records that are stored in a particular database that is stored locally on the available node in a tree structure.