Abstract: The present disclosure refers to a method of dynamically saving metadata in a process of operating a medical system, comprising: running a software application for operating a medical device; storing metadata in a transient memory by a controller, wherein the metadata are assigned to one or more operation events while the software application is running; detecting an error operation event by the controller; in response to the detecting the error operation event, transmitting present metadata currently stored in the transient memory and assigned to one or more operation events before the error operation event was detected from the transient memory to a log data memory; storing the present metadata in the log data memory; and storing metadata different from the present metadata and assigned to the error operation event in the log data memory. Further, a medical system, and a computer program product are provided.

Abstract: A method for diagnosing computer system faults using log retrieval based on joint semantic and syntactic similarities includes receiving a set of query logs, defining joint semantic and syntactic similarities between the set of query logs and respective ones of multiple sets of historical logs based on semantic content and syntactic information obtained for the set of query logs and the multiple sets of historical logs, the multiple sets of historical logs being associated with historical computer system fault diagnoses, retrieving a set of historical logs from the multiple sets of historical logs to obtain a retrieved set of historical logs for computer system fault comparison based on a similarity measure corresponding to each of the multiple sets of historical logs derived from the joint semantic and syntactic similarities, and transmitting the retrieved set of historical logs to one or more computing devices to perform the computer system fault comparison.

Abstract: A method can include detection of policy anomalies in packets on a 1553B bus of an airborne system. A computer network defense (CND) capability message is decoded and indicates an interface to monitor. The interface is a 1553B bus of the airborne system. A CND command message, associated with the CND capability message, is decoded and includes a policy set. Packets are received from the 1553B bus. The 1553B packets are analyzed based on the policy set to determine anomalies. Non-anomalous 1553B packets are allowed to reach destinations of the non-anomalous 1553B packets. Anomalous 1553B packets are discarded such that the anomalous 1553B packets do not reach respective destinations of the anomalous 1533B packets.

Abstract: A computer program product is provided for fault diagnostics and recovery of network service chains. The product includes a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a computer to cause the computer to perform a method. The method includes identifying intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The method further includes selectively repairing one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: The present disclosure describes systems and methods that provide a hybrid framework for augmenting statistical anomaly detection with contextual features, machine learning and human Subject Matter Expert (SME) input to learn significant characteristics of true anomalies for which alerts should be generated. The framework presented herein is domain agnostic and independent of the underlying statistical anomaly detection technique or the machine learning algorithm. The framework described herein is therefore applicable and adaptable to a number of real world service provider systems and applications, such as, for example, detecting network performance degradation in a service provider network or detecting anomalous conditions from data received from a sensor while filtering out false positives.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes identifying, by a processor, intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The network graph represents the components of the network service chains. The method further includes selectively repairing, by the processor, one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: The systems and methods provide an action recognition and analytics tool for use in manufacturing, health care services, shipping, retailing, restaurants and other similar contexts. Machine learning action recognition can be utilized to determine cycles, processes, actions, sequences, objects and or the like in one or more sensor streams. The sensor streams can include, but are not limited to, one or more video sensor frames, thermal sensor frames, infrared sensor frames, and or three-dimensional depth frames. The analytics tool can provide for establishing traceability.

Abstract: A storage device includes a nonvolatile memory device and a controller. A nonvolatile memory device includes a plurality of memory blocks. Each of the plurality of memory blocks is divided into a plurality of zones and is formed on a substrate. Each of the plurality of zones comprises one or more word lines. A controller performs a reliability verification read operation on a first zone of the plurality of zones of a memory block selected from the plurality of memory blocks if a number of read operations performed on the first zone reaches a first threshold value and performs the reliability verification read operation on a second zone of the plurality of zones of the selected memory block if a number of read operations performed on the second zone reaches a second threshold value.

Abstract: Methods, apparatus, and computer readable media are described related to causing processing of sensor data to be performed in response to determining a request related to an environmental object that is likely captured by the sensor data. Some implementations further relate to determining whether the request is resolvable based on the processing of the sensor data. When it is determined that the request is not resolvable, a prompt is determined and provided as user interface output, where the prompt provides guidance on further input that will enable the request to be resolved. In those implementations, the further input (e.g., additional sensor data and/or the user interface input) received in response to the prompt can then be utilized to resolve the request.

Abstract: Systems and methods for predicting computing system issues include: receiving a set of incident management tickets for a set of computing system issues and a set of computer log files for multiple modules of the computing system; arranging the set of tickets into chronologically ordered groups associated with particular computing system issues; pre-processing the set of computer log files to remove specified information, append to each log entry an indicator of the module of the log file, and merge the log entries; determining for each group a set of patterns for the group's associated computing system issue before the group's associated computing system issue arises; calculating for each pattern in each group a similarity score; selecting a subset of patterns whose similarity scores exceed a specified threshold; and generating a computing model associating the subset of patterns in each group with the group's associated computing system issue.

Abstract: An adaptive timeout value for a script operation associated with functional testing of an application is determined. The script operation specifies detecting display of a specific graphical user interface (GUI) element by the application. The adaptive timeout value is dynamically determined based on prior functional testing of the application. Responsive to encountering the script operation within a script while functionally testing the application under direction of the script, waiting occurs until display of the specific GUI element by the application has been detected, or until timing out has occurred in correspondence with the dynamically determined adaptive timeout value.

Abstract: Methods, systems, and computer program products for categorizing log records at run-time are provided herein. A computer-implemented method includes generating one or more template signatures to be associated with each of multiple templates, wherein each of the multiple templates comprises a concatenation of one or more words; processing each of multiple log records derived from a data stream to determine a composition of each of the multiple log records; matching one or more of the generated template signatures to each of the multiple log records based on the determined composition of each of the multiple log records; and outputting an identification of (i) each of the multiple log records and (ii) the one or more generated template signatures matched thereto.

Abstract: In one embodiment, an apparatus includes a controller to couple between a system on chip (SoC) and an external connector of a platform. The controller may include: a digitizer to digitize platform telemetry information of the platform; and a control circuit to receive a command from a debug test system and direct the platform telemetry information to a destination in response to the command. Other embodiments are described and claimed.

Abstract: In an exemplary embodiment, computer circuitry determines term characterization values for terms in computer performance logs and generates vectors that indicate the term characterization values. The computer circuitry determines vector similarity scores for these vectors. The computer circuitry aggregates the computer performance logs into aggregated logs based on the vector similarity scores. The computer circuitry selects rare logs from these aggregated logs and obtains computer performance anomaly labels for the rare logs. The computer circuitry matches new computer performance logs with the rare logs to detect the labeled computer performance anomalies.

Abstract: A data processing apparatus, including at least: a register for storing a data set W; a processor, coupled with the register to divide the data set W into a plurality of groups according to an experimental independent variable set V, |V|?1; use a dividing method yx, where (x,y) belongs to a dividing parameter set L={(x,y)| both x and y are positive real numbers}, |L|?1, to divide each of the plurality of groups into a plurality of regions in a space of a dimension determined by an element of a data variable set Q, |Q|?1; perform a statistical analysis with respect to an element Du of a dependent variable set D on the plurality of regions of each of the groups, where Du?D and |D|?1; and output a statistical result set R.

Abstract: A computer-implemented method of providing a materialisation of a set of logical rules on a logical database comprising a set of logical facts. Each of a plurality of parallel processing threads performs the following steps. A logical fact that has not previously been received by any thread is received by the thread. By applying any of the logical rules to the received logical fact and/or any of the logical facts received by any thread prior to the received logical fact, the thread determines whether a new logical fact is implied, and if so the new logical fact is added to the set of logical facts. The thread then repeats the above steps on any further logical facts in the set of logical facts that have not previously been received by any thread. When all threads are waiting for a new logical fact, the method has completed.

Abstract: The disclosed embodiments provide a system for performing unified error monitoring, alerting, and debugging of distributed systems. During operation, the system receives logs of activity within a distributed system over event streams in a distributed streaming platform. Upon identifying an error in the received logs, the system collects, from the event streams, log entries generated within a time window of the error into a contextual log associated with the error. The system then outputs an alert containing metadata for accessing the contextual log.

Abstract: An operating system for a container handling machine, including an operating device for the container handling machine having a screen and a data transmitter for transmitting information and at least one separate additional screen having a data receiver for receiving information, with the operating device designed for selecting the information and the additional screen designed for displaying the selected information.

Abstract: A method for recommending responses to emergent conditions is provided. The present invention may include receiving a query from a user. The present invention may also include retrieving a plurality of recommended responses for the received query from a plurality of entities and a plurality of relations stored in a graph-based knowledge resource. The present invention may further include presenting the retrieved plurality of recommended responses to the user.

Abstract: Aspects of the present disclosure involve systems and methods for improving the performance of a telecommunications network by monitoring the performance of one or more storage drives. Operational data is received from a plurality of storage drives of a storage server of a telecommunications network. A plurality of operational coefficients for each of the plurality of storage drives is derived based on the operational data, and a cluster plot is created from the plurality of operational coefficients for each of the plurality of storage drives. A distance is calculated between a subset of operational coefficients of the plurality of operational coefficients of the cluster plot, and a remedial action is initiated on a storage drive of the plurality of storage drives when a calculated distance of an operational coefficient associated with the storage drive exceeds a distance value from a cluster of the cluster plot.

Abstract: A high-speed interface apparatus and method of correcting skew in the apparatus are provided. A high-speed transmitter includes a transmission D-PHY module that generates and transmits a clock signal through a clock channel, generates a deskew synchronous code and test data in response to a deskew request signal, transmits the deskew synchronous code followed by the test data through a data channel, and transmits a normal synchronous code followed by normal data through the data channel in normal mode.

Abstract: A security inspection system verifying a security system of electronic equipment may include an inspector having: a communicator connecting wireless diagnostic communication with the electronic equipment entering a process line; a KMS inspection portion inspecting a management state of generation and destruction of encryption key of a key management system device included in the electronic equipment; an application firewall inspection portion inspecting security policy of an application firewall disposed in a gateway of the electronic equipment; a version inspection portion updating at least one of a patch program and a firmware of the security system included in the electronic equipment; a database storing a program and data for a security inspection of the electronic equipment; and a controller performing diagnostic test of a firewall installation state, an encryption key management state, a transmission/reception state of an encrypted message, or blocking of abnormal data of the security system.

Abstract: A method, computer system, and a computer program product for recommending responses to emergent conditions is provided. The present invention may include receiving a query from a user. The present invention may also include retrieving a plurality of recommended responses for the received query from a plurality of entities and a plurality of relations stored in a graph-based knowledge resource. The present invention may further include presenting the retrieved plurality of recommended responses to the user.

Abstract: A device stores time series data, based on time stamps, in a compact prefix tree, and receives new time series data to be added to the compact prefix tree. The device determines whether the new time series data is different than previously stored time series data in the compact prefix tree. The device selectively stores the new time series data in the compact prefix tree by storing the new time series data in the compact prefix tree when the new time series data is different than the previously stored time series data in the compact prefix tree, and updates a last time stamp for one of the previously stored time series data, based on the new time series data, when the new time series data is not different than the one of the previously stored time series data.

Abstract: In some examples, learning based incident or defect resolution, and test generation may include ascertaining historical log data that includes incident or defect log data associated with operation of a process, and generating, based on the historical log data, step action graphs. Based on grouping of the step action graphs with respect to different incident and defect tickets, an incident and defect action graph may be generated to further generate a machine learning model. Based on an analysis of the machine learning model with respect to a new incident or defect, an output that includes a sequence of actions may be generated to reproduce, for the new incident, steps that result in the new incident, reproduce, for the new defect, an error that results in the new defect, identify a root cause of the new incident or defect, and/or resolve the new incident or defect.

Abstract: A device creates tasks to implement a software code change in a software code and to generate new software code, and performs, via a development environment, a unit test on the new software code to generate a unit test result. The device performs, via the development environment, a functional test on the new software code to generate a functional test result, and updates, based on the unit test result and the functional test result, the new software code to generate updated new software code. The device performs, via a quality assurance environment, a regression test on the updated new software code to generate a regression test result, and updates, based on the regression test result, the updated new software code to generate final software code. The device automatically deploys the final software code in a production environment, and performs actions based on deploying the final software code.

Abstract: A storage device includes storage circuitry and multiple memory cells. The memory cells are organized in multiple memory blocks of a nonvolatile memory. The storage circuitry is configured to define a partial verification scheme that specifies testing only a data portion of the data programmed to the memory blocks, to program data to a memory block, calculate redundancy data over the data, and save the calculated redundancy data in a dedicated memory, to verify that the data portion specified for the memory block in the partial verification scheme has been programmed successfully, to check a predefined condition for conditionally performing full verification to the memory block, when the predefined condition is fulfilled, to verify that data programmed to the memory block and not tested using the partial verification scheme has been programmed successfully, and to recover, using the redundancy data, at least part of the data programmed that failed verification.

Abstract: The present disclosure relates to sharing an I/O device across multiple virtual machines. According to one embodiment, a computing system configures shared ownership of the I/O device between a first partition and one or more of the plurality of virtual machines. The computing system transfers partial ownership of the I/O device from the first partition to the one or more virtual machines and generates device configuration information for the I/O device. The virtual machines can use the generated device configuration information to access and configure the I/O device. Once the I/O device is configured for shared ownership, the computing system boots the one or more virtual machines.

Abstract: Examples described herein generally relate to device analytics. Specifically, the present disclosure provides resource deployment at an organization including one or more devices. The present disclosure provides for receiving telemetry data from the one or more devices associated with the organization. The present disclosure further provides for generating a set of deployment rings for the deployment of the software resource at the one or more devices of the organization. Additionally, the present disclosure provides for deploying the software resource within the organization based on the set of deployment rings.

Abstract: A system is disclosed comprising: a memory and at least one processor operatively coupled to the memory, the at least one processor being configured to: present a user interface for registering an advertiser with the system and specifying an attribution rule for calculating a fee that is owed by the advertiser to a first advertising platform; obtain an analytics report; generate an attribution report based on the analytics report and the attribution rule, the attribution report including an indication of a fee that is calculated based on the attribution rule; and transmit the attribution report to the first advertising platform.

Abstract: A live help system provides an intuitive display of help information on a user's graphical user interface. A request is received from a client device for help, and a live help provider interface is initiated at a live help location. Data is acquired regarding a user's location, including data on external devices in the user's location. Indicators are provided to allow the live help provider to point to or otherwise indicate items on the user interface or outside of the user interface. Live help input is captured at the live help provider interface. Instructions are then transmitted to the display of the client device to display live help input, as though the agent were present and interacting with or indicating items on the screen or off the screen.

Abstract: Declarations of annotation types, which specify annotations, are themselves annotated by meta-annotations. Meta-annotations define constraints based on modular dependencies.

Abstract: A debugging apparatus sequentially receives logs generated accompanying an operation of a program to be debugged along with lapse of time, sets the logs in a predetermined range as processing batch data to be batch-processed, and groups the processing batch data. If the set of grouped logs does not satisfy the condition, the group is determined to be in an incomplete state and recorded, and when there exist common groups between the new processing batch data and the incomplete group, the log data of the incomplete group is added to the new processing data.

Abstract: Techniques are disclosed relating to diagnosing a network-accessible device. A first computer may store authorization information associated with a plurality of network-accessible computing devices associated with a user. The first computer system may receive, from a second computer system, a request from the user to perform a diagnostic operation that involves communication between a third computer system and a particular one of the plurality of network-accessible computing devices. The first computer system may request, based on a permission indicated by the stored authorization information, that the third computer system retrieve diagnostic information from the particular network-accessible computing device and perform the diagnostic operation. The first computer system may receive, from the third computer system, result information relating to the diagnostic operation.

Abstract: A device using parity for verification of data transmitted from a first device through a data line to a second device includes a processor and a memory. The data line includes first to fourth pins for transmitting data and fifth to eighth pins for transmitting parity information. The processor receives values of first to eighth pins, calculates sum of the values of combinations of the first to fourth pins for data and applies modular operations on results of the four combinations. Equality or non-equality with the parity values of the fifth to eighth pins is determined, and the second device is permitted to receive the data when the results correspond, the modular operation being a (mod 2) operation. A method applied to such device is also disclosed.

Abstract: A method in one embodiment comprises extracting features from each of a plurality of software investigation log sets, generating representations for respective ones of the software investigation log sets based at least in part on the corresponding extracted features, and storing the representations in a knowledge base. In conjunction with obtaining at least one additional software investigation log set, the method generates a representation of the additional software investigation log set, identifies one or more of the representations previously stored in the knowledge base that exhibit at least a specified similarity to the representation of the additional software investigation log set in accordance with one or more statistical models, and presents information characterizing the one or more software investigation log sets corresponding to respective ones of the identified one or more representations in a user interface.

Abstract: Disclosed are an apparatus, a system and a non-transitory computer readable medium that implement processing circuitry that receives non-dialog information from a smart device and determines a data type of data in the received non-dialog information. Based on the determined data type, the processing circuitry transforms the received first data using an input from a machine learning algorithm into transformed data. The transformed data is standardized data that is palatable for machine learning algorithms such as those used implemented as chatbots. The standardized transformed data is useful for training multiple different chatbot systems and enables the typically underutilized non-dialog information to be used to as training input to improve context and conversation flow between a chatbot and a user.

Abstract: In a communication network system connected between a transmission node and a reception node, both the transmission node and the reception node store the same secret information with their secret information storage units. The transmission node includes a counter configured to increase its transmission count value by 1 for transmitting each message, wherein a MAC generator generates MAC based on secret information, transmission data, and its transmission count value, thus transmitting a message including transmission data and MAC. The reception node includes a counter configured to increase a reception count value by 1 for receiving each message, wherein a MAC checking part generates MAC based on secret information, reception data, and its reception count value, obtained from the received message, thus checking whether the generated MAC matches the MAC obtained from the received message.

Abstract: An information processing apparatus according to embodiments of the present invention installs a printer driver by specifying a name of a logical printer, adds customization information for changing a setting of the printer driver to a database, and deletes a logical printer of the specified name from the operating system if it is determined that addition of the customization information to the database has failed with respect to the logical printer.

Abstract: Embodiments of the present disclosure provide a method, computer program product and apparatus for a white-box testing by determining a code line being changed in a target version of codes, determining a function to which the code line belongs, determining, based on a first mapping from functions to test cases, a set of test cases corresponding to the function to which the code line belongs, thereby enhancing efficiency of automatic testing.

Abstract: Devices, methods, and systems for distributed rule based automated fault detection are described herein. One system includes a data extractor engine configured to: extract configuration data relating to an environment based on a number of defined rules, and receive monitored data relating to the environment, an AFD engine configured to evaluate the monitored data in view of the configuration data to determine a state of the environment, and a fault generation engine to determine whether the state of the environment is outside a range defined by the number of defined rules.

Abstract: Technologies for managing fault recovery in a cloud computing environment may be used after faults of various sizes, including faults which put total functioning capacity below subscribed capacity. Computing services have repair priorities. A fault recovery manager selects a higher priority service whose capacity is below a minimum availability, and chooses a lower priority service still above its minimal availability, and reassigns capacity from the lower priority service to the higher priority service without depriving the lower priority service of operability. Capacity reassignment continues at least until the higher priority service is at or above minimal availability, or the lower priority service is at minimal availability. Lower priority services may also be terminated entirely to free up resources for higher priority services. New deployments may be prevented until all services are at or above minimal availability. Spare capacity may be reserved against demand fluctuations or further faults.

Abstract: An endpoint system provides a REST endpoint for an application. The endpoint system processes request messages based on message pair data for each message that includes an operation and parameter data. The parameter data includes parameter information for each parameter that identifies whether the value for the parameter is to be taken from the URI or payload of a request message. The endpoint system receives request messages that have a URI and payload. The URI includes an operation name. The endpoint system processes each request message in accordance with the message pair data for the operation specified in the request message. For each parameter of the message pair data, the endpoint system extracts the value for the parameter from either the URI or payload as specified by the parameter information for the parameter. The endpoint system then invokes the operation passing the one or more extracted values as actual parameters.

Abstract: In some examples, after a client system encounters a problem, a technical support specialist may connect to the client system via a console. The console may display a graphical representation of a client system that includes a plurality of components. The console may execute a machine learning module to determine one or more potential solutions to the particular problem. Each solution of the one or more solutions may correspond to a previously resolved problem that is similar to the particular problem and may have an associated confidence level determined based on: a similarity of the particular problem to the previously resolved problem, a similarity of the plurality of components to a second plurality of components included in a second client system associated with the previously resolved problem, a similarity of a network topology of the client system to a second network topology of the second client system.

Abstract: Systems and related approaches for monitoring the notification rate of live alarms being presented to an operator in the presentation tool. The number of notifications being received is counted and managed as a rate due to the update frequency of the tool. In some embodiments, when the number of notifications received exceeds a threshold, an indicator is presented to the operator alerting them to the abnormality. The operator may then examine the system as necessary to locate the source of the abnormality.

Abstract: Described herein are systems, methods, and software to provide enhanced security when opening applications. In one implementation, an application service receives, over a network, an application request from an end user device to support a file open request on the end user device, wherein the application request occurs based on a security status of a file associated with the file open request. The application service further allocates a virtual node with an application to the end user device to support the application request, provides a remote connection for the application to the end user device, and opens the file in the application of the virtual node to support the file open request.

Abstract: A computing platform may obtain observed data vectors related to the operation of a topology of nodes that represents a software application running on an uncontrolled platform, wherein each observed data vector comprises data values captured for a given set of operating variables at a particular point in time. After obtaining the observed data vectors, the computing platform may apply an anomaly detection model to the observed data vectors and then based on the anomaly detection model, may identify an anomaly in at least one operating variable. In turn, the computing platform may determine whether each identified anomaly is indicative of a problem related to the application, and based on a determination that an identified anomaly is indicative of a problem related to the software application, cause a client station to present a notification.

Abstract: Methods and apparatus for tightly-coupled external cluster monitoring are disclosed. A system includes a service-providing cluster with a first set of nodes, and a monitoring cluster with a second set of nodes. Nodes of the monitoring cluster comprise respective monitoring agents operable to issue probes to nodes of the service-providing cluster in accordance with a first cluster health monitoring policy, and generate a health check record of the service-providing cluster based on probe results. At least one node of the service-providing cluster comprises a meta-monitoring agent operable to generate a health check record indicative of a health state of the monitoring cluster based at least in part on a second cluster health monitoring policy.

Abstract: A system for automated testing of functionally complex systems, comprising a test manager, a test execution module, and a correlation engine, is disclosed. The test manager module causes tests to be executed by the test execution engine, and on detection of an anomalous test result, the test manager module at least causes additional testing to be performed and causes the correlation engine module to analyze the results of at least some of the additional testing in order to isolate at least one component exhibiting anomalous behavior.

Abstract: Techniques for detecting an anomaly in queries of a relational database are disclosed. The techniques include obtaining a set of semantic attributes for a query of a relational database. The semantic attributes are then used to calculate a set of similarities between the query and a set of non-anomalous queries of the relational database. When a highest similarity in the set of similarities does not meet a similarity threshold, an indication that the query is anomalous is outputted.