Abstract: Techniques for managing node failures in container environments are disclosed. In one example, a method determines when a first node executing at least one containerized workload has failed. In response to determining the first node has failed, the method marks a configuration object for the first node with an indicator that the first node is not to be used to schedule execution of a subsequent containerized workload, isolates from the first node one or more storage volumes used by the first node, and deletes configuration objects for the one or more storage volumes and for the containerized workload. The method then causes creation of a replacement containerized workload for execution on a second node, removes one or more artifacts associated with the containerized workload from the first node, and removes the indicator from the configuration object for the first node.

Abstract: A system including a distributed network of one or more virtual machines, having a first portion of committed virtual machines dedicated to a user and a second portion of on-demand virtual machines. The system may also include a workload scheduler configured to receive workloads associated with the user. The scheduler may determine whether to schedule a given workload to be performed by a combination of virtual machines in the first and second portions, or by virtual machines included in only the first portion. The given workload may be scheduled to be performed by virtual machines in only the first portion at a first time if a sum of an anticipated resource consumption level of the given workload and a first consumption level of the first portion of virtual machines at the first time is less than or equals a total amount of resources included in the first portion.

Abstract: Runtime errors in a source code program are detected in advance of execution by machine learning models. Features representing a context of a runtime error are extracted from source code programs to train a machine learning model, such as a random forest classifier, to predict the likelihood that a code snippet has a particular type of runtime error. The features are extracted from a syntax-type tree representation of each method in a program. A model is generated for distinct runtime errors, such as arithmetic overflow, and conditionally uninitialized variables.

Abstract: A method for facilitating the testing of a data sample involves a computing device carrying out the following actions: displaying a data sample on a user interface; receiving, via the user interface, a selection of a test to be performed on the data sample; receiving, via the user interface, an input of a result of the test; generating, in a graph database, a vertex representing a visual indicator corresponding to the input result; and creating, in the graph database, an association between the vertex representing the visual indicator and a vertex representing a file containing the displayed data sample.

Abstract: A system and method are presented for invoking integration actions in a unified collaboration system. A client communicates with a bridging web server through a ReST. The bridging web server comprises a cloud service which facilitates communication with integration servers, which may be located on-premises. In an embodiment, the integration server(s) host a number of plugins which are capable of implementing integration actions. The bridging web server decides which action implementation is the best one to service a request. The implementation may be based on prior configuration. Routing decisions on the bridging web server may be automatically selected based on prior configuration.

Abstract: Debugging a graphics application executing on a target device. The graphics application may execute CPU instructions to generate graphics commands to graphics hardware for generation of graphics on a display. A breakpoint for the graphics application may be detected at a first time. In response to detecting the breakpoint, one or more graphics commands which were executed by the graphics hardware proximate to the first time may be displayed. Additionally, source code corresponding to CPU instructions which generated the one or more graphics commands may be displayed.

Abstract: Various methods, apparatuses/systems, and media for automatically generating fully integrated regression and system testing (FIRST) analytics are disclosed. A processor accesses a production database to obtain production data associated with an application, and accesses a user acceptance testing (UAT) database to obtain UAT data associated with the application. The processor generates gap data on test coverage based on comparing the production data with the UAT data; analyzes the generated gap data; automatically generates, in response to analyzing the generated gap data, executable full coverage of test scenarios for testing the application; and automatically executes testing of the application based on the generated test scenarios.

Abstract: An electronic device comprises a processor operable at a variable processor privilege level and a memory comprising a secure memory area. A hardware module is operable at a variable module privilege level and is arranged to access the memory directly. The secure memory area is accessible by the hardware module only when the module privilege level exceeds a threshold value. The device has a first mode of operation in which said processor privilege level is higher than said threshold value and said module privilege level is lower than said threshold value. A controller is arranged, upon receiving a privilege promotion signal and the device being in the first mode, to move the device to a second mode wherein the module privilege level is higher than said threshold value.

Abstract: Runtime errors in a source code program are detected in advance of execution by machine learning models. Features representing a context of a runtime error are extracted from source code programs to train a machine learning model, such as a random forest classifier, to predict the likelihood that a code snippet has a particular type of runtime error. The features are extracted from a syntax-type tree representation of each method in a program. A model is generated for distinct runtime errors, such as arithmetic overflow, and conditionally uninitialized variables.

Abstract: An example computer-implemented method includes presenting, by a hardware control of a computing system, an exception to an untrusted entity when the untrusted entity accesses a secure page stored in a memory of the computing system, the exception preventing the untrusted entity from accessing the secure page. The method further includes, in response to the exception, issuing, by the untrusted entity, an export call routine. The method further includes executing, by a secure interface control of the computing system, the export call routine.

Abstract: Apparatus and methods related to on-boarding software applications on a platform used in a content delivery and/or service provider network. In one embodiment, a centralized platform such as a premises gateway is provided to act as an application portal or store for all consumer devices that connects to a service provider network. In one variant, a software architecture is provided for the gateway which includes at least one of an open-sourced OS (e.g., OpenWrt) and containerization engine (e.g., Docker) which enables a broader range of application compatibility with the gateway itself and end user devices within the premises by abstracting the services and functions above the specific hardware/firmware configurations of each of the end user devices.

Abstract: Defects are identified in a pre-production version of an application. Input used to test the pre-production version is derived from input received by a production version of the application. Input to the production version may be selectively filtered and/or amplified before being provided as test input to the pre-production version. In this way, the makeup and rate of the test input can be controlled while maintaining the character, pattern, and unpredictable nature of real-world input. Defects may be identified when the test input causes the pre-production version to crash, hang, write to an error log, or otherwise manifest or report a malfunction. In addition to identifying defects, filtered and amplified input may also be used to perform regression testing, load testing, performance testing, etc.

Abstract: Analyzing and mitigating privacy issues on a computing device using cookie generation flows. The method includes initiating a headless web browser, monitoring a request made of a website accessed by the headless web browser, monitoring scripts created on the website, instrumenting a function used to create a cookie on the computing device, tracing an initial generation of a call used to create the cookie on the computing device, obtaining a cookie generation flow related to the creation of the cookie, and initiating a security action based on obtaining the cookie generation flow.

Abstract: A system receives real-time log messages from an executing process that experiences a runtime error. Information such as a filename and line number for the underlying source code may be embedded in the log messages using compiler macros. When the log messages are received, a developer URL may be generated that links a developer workstation directly to the underlying source code file and line number in a source code repository. A support URL may also be generated with a link to a support center and an embedded search string that retrieves resources that are known to address the process error.

Abstract: An information handling system may obtain timing information for processing among layers of a first client-side information handling system, and compare the timing information to threshold values to provide a comparison. The information handling system may use the comparison to identify an area of the first client-side information handling system in which a problem exists, and initiate remedial action directed to the problem.

Abstract: A method and system for computer processes and data structures is described that define an environment for monitoring tasks that together constitute a project, where such processes utilize a scripting language to define certain functions that may relate data from one part of a project to another.

Abstract: A system and method for automated firmware testing. The system includes test stations for testing firmware products. The stations split into pools, with each pool including multiple test stations. The system also includes multiple execution instances, each execution instance for executing tests corresponding to the associated pool. Each of competing test stations delivers a test start event to a corresponding execution instance. The corresponding execution instance receives test start events from the competing test stations, and executes a run test command on a select test station among the competing test stations such that the select test station performs test execution based on a test sequence.

Abstract: An example computer-implemented method includes presenting, by a hardware control of a computing system, an exception to an untrusted entity when the untrusted entity accesses a secure page stored in a memory of the computing system, the exception preventing the untrusted entity from accessing the secure page. The method further includes, in response to the exception, issuing, by the untrusted entity, an export call routine. The method further includes executing, by a secure interface control of the computing system, the export call routine.

Abstract: Systems and methods for correlating continuous integration compute jobs with log messages. In some examples, a computing testing component may cause a first compute job to be deployed by a system under test (SUT) including at least one compute node. First identifier data may be generated that identifies the first compute job from among other compute jobs. The SUT may receive configuration data including the first identifier data. The SUT may generate a log message during execution of the first compute job. The log message may include the first identifier data. The computing testing component may receive result data for the first compute job from the SUT. The result data may include the first identifier data. The log message may be stored in a data store in association with the first identifier data and the first identifier data may correlate the log message with the first compute job.

Abstract: A webpage content self-protection method includes: running a set of webpage elements of at least one webpage through a browser, wherein at least one portion of webpage elements within the set of webpage elements includes webpage contents of the aforementioned at least one webpage; monitoring a target webpage element within the set of webpage elements to determine whether any content variation event associated to the target webpage element occurs; when the content variation event occurs, storing previous data of the target webpage element, and generating a first password, wherein the first password is a one-time password; trying extracting a second password from the target webpage element, in order to perform password verification; and when failure of extracting the second password occurs or the first password and the second password are different from each other, recovering the target webpage element according to the previous data. An associated server is also provided.

Abstract: Disclosed herein are systems and method for determining a boot status of a failover server. In an exemplary aspect, a method may receive a failover test request for a failover server that provides disaster recovery for a production server, wherein the failover test request queries a successful boot status of the failover server. The method may determine whether a login into the failover server can be performed to execute the failover test request. In response to determining that the login cannot be performed, the method may retrieve server metrics for a failover server from a metric store and may determine a probability of the successful boot status based on both the retrieved server metrics and historic server metrics. In response to determining that the probability is greater than a threshold probability, the method may mark a recovery point of the failover server as validated.

Abstract: Implementations of the disclosure describe manageable external wake of virtual machines. In one implementation, a method of the disclosure includes receiving, by a processor of a computer system, a message generated by a hardware device of the computer system while a virtual machine that is hosted by the computer system is asleep. The method further includes determining, by the processor, whether to wake the virtual machine in view of a hardware event of the hardware device that generated the message.

Abstract: Disclosed are embodiments of a installed software program that receive a model from a product management system. The model is trained to select one of a plurality of predefined states based on operational parameter values of the installation of the software program. Each of the plurality of predefined states define configuration values of the installation of the software program. The defined configuration values indicate, in some embodiments, updates to operational parameter values of the installation of the software program.

Abstract: Methods and systems for repairing user devices infected with malicious code. One method includes storing registration information for a plurality of user devices accessing a remote file storage system, the registration information including a unique identifier of each user device and an identifier of an antivirus software installed locally on each user device. The method also includes, in response to detecting an infected file within the remote file storage system, determining a unique identifier of one of the a user device included in the plurality of user devices interacting with the infected file, accessing the registration information to identify, based on the unique identifier of the user device interacting with the infected file within the remote file storage system, an identifier of antivirus software installed locally on the user device, and remotely initiating the antivirus software installed locally on the user device based on the identifier of the antivirus software.

Abstract: A real-time debugger implementation maintains and manages multiple debug contexts allowing developers to interact with real-time applications without “breaking” the system in which the debug application is executing. The debugger allows multiple debug contexts to exist and allows break points in real-time and non-real-time code portions of one or more applications executing on a debug enabled core of a processor. A debug monitor function may be implemented as a hardware logic module on the same integrated circuit as the processor. Higher priority interrupt service requests may be serviced while otherwise maintaining a context for the debug session (e.g., stopped at a developer defined breakpoint). Accordingly, the application developer executing the debugger may not have to be concerned with processing occurring on the processor that may be unrelated to the current debug session.

Abstract: A trace risk indicator is determined based on statistical analysis of one or more risk factors associated with a portion of code of a computer program being executed. The one or more risk factors include data of at least one source external to the portion of code. Based on the trace risk indicator having a predetermined relationship with respect to a threshold value, tracing is automatically initiated for the portion of code.

Abstract: Adaptive database compaction technology automatically identifies cost-effective opportunities for database compaction. The adaptive compaction technology may maintain a baseline sleeve representing a performance indicator's normal range, track the current performance indicator values, and initiate compaction of a database when a compaction trigger based on at least the performance indicator occurs. The performance indicator may be a ratio of logical size to physical size, and may be based on samples from a proper subset of the database. Kernel overhead may be recognized. A low-fragmentation secondary replica may be selected, compacted, and promoted to replace the prior primary replica. Secure cloud blob storage may be used. A compaction decision may allow, delay, or even prevent compaction after the trigger is met. An automatic balance between computational costs of compaction and costs of continued database use without compaction is kept, and may be tunable by an administrator.

Abstract: An artificial intelligence (AI) platform to support a continuous integration and deployment pipeline for software development and operations (DevOps). One or more running processes are subject to monitoring to identify presence of vulnerabilities. An automated rebuild of the monitored processes is initiated, which includes constructing a map representing a relationship of test code elements corresponding to different portions of source code. The identified vulnerable source code reflected in a new container image is subject to an automatic verification to ascertain if the source code is covered by at least one of the represented test code elements. A risk assessment is employed as part of the verification. A new container image is selectively deployed responsive to the risk assessment.

Abstract: The present disclosure provides a framework for quantitatively testing network services and their supporting APIs. To facilitate the testing, a testing script may be generated. The testing script may be parameterized with input data derived from a historical database. The testing script may be executed and responses received from the network during testing may be analyzed to determine metrics associated with execution of the testing script. The metrics may indicate successfully tested conditions, unsuccessfully tested conditions, untested conditions, other testing metrics, or a combination thereof. After the initial testing cycle a determination is made regarding whether a stop condition has been satisfied and if it has not been satisfied, another testing cycle may be executed. The next testing cycle may utilize a different set of input data that may be dissimilar to the input data used in the previous testing cycle so that additional conditions and functionality may be tested.

Abstract: The present system provides continuous delivery and service regression detection in real time based on log data. The log data is clustered based on textual and contextual similarity and can serve as an indicator for the behavior of a service or application. The clusters can be augmented with the frequency distribution of its occurrences bucketed at a temporal level. Collectively, the textual and contextual similarity clusters serve as a strong signature (e.g., learned representation) of the current service date and a strong indicator for predicting future behavior. Machine learning techniques are used to generate a signature from log data to represent the current state and predict the future behavior of the service at any instant in time.

Abstract: According to one embodiment, a system for detecting an email campaign includes feature extraction logic, pre-processing logic, campaign analysis logic and a reporting engine. The feature extraction logic obtains features from each of a plurality of malicious email messages received for analysis while the pre-processing logic generates a plurality of email representations that are arranged in an ordered sequence and correspond to the plurality of malicious email message. The campaign analysis logic determines the presence of an email campaign in response to a prescribed number of successive email representations being correlated to each other, where the results of the email campaign detection are provided to a security administrator via the reporting engine.

Abstract: A non-transitory computer-readable storage medium may comprise instructions for determining health statuses of multiple virtual machine templates stored thereon. When executed by at least one processor, the instructions may be configured to cause a health status server to at least run multiple scripts against multiple virtual machines, each of the multiple virtual machines being generated from one of the multiple virtual machine templates, and generate, for each of the multiple virtual machines, an output report indicating success or failure for each of the multiple scripts.

Abstract: In some examples, a method may include detecting a vulnerability in an application during execution on a first computing device. The method may include triggering a breakpoint based on the detecting, thereby pausing the execution of the application before execution of a portion of code that exploits the vulnerability. The method may include communicating a message indicating occurrence of the breakpoint. The method may include receiving a connection request from a second computing device in response to the message. The method may include resuming execution of the application from the breakpoint subject to a signal from the second computing device.

Abstract: Disclosed herein are systems and methods for a system for distributing user requests. The system may comprise a memory storing instructions and at least one processor configured to execute instructions to perform operations.

Abstract: The disclosed embodiments are directed to a mobility services platform for self-healing mobility clients. In an embodiment, a method comprises: obtaining, by one or more server computers, diagnostic data from a plurality of mobility clients; applying, by the one or more server computers, machine learning to the diagnostic data; identifying, by the one or more server computers, outlier data resulting from the machine learning; identifying, by the one or more server computers and from the outlier data, a new error class; determining, by the one or more server computers, an impact of the error class (e.g., short-term, medium-term, long-term impact) on the plurality of mobility clients; and generating, by the one or more server computers and based on the determined impact, an update for the plurality of mobility clients.

Abstract: Aspects of the disclosure relate to using a set of warning data to manage distributed development of an application in a computing environment. In embodiments, the computing environment may include a distributed computing environment or a stream computing environment. A first portion of the application may be developed by a first user. A second portion of the application may be received by the first user. The second portion of the application may be compiled and developed by a second user. Based on the set of warning data, a curative action for utilization to develop the application may be formulated. The curative action may be carried-out to develop the application.

Abstract: A system includes determination of a rule branch of a rule, the rule branch comprising a first condition expression including a first condition value, reception of one or more condition values compatible with the first condition expression, and automatic generation of a respective rule branch of the rule for each of the one or more received condition values.

Abstract: Behavioral analysis of a mobile application is performed to determine whether the application is malicious. During analysis, various user interactions are simulated in an emulated environment to activate many possible resulting behaviors of an application. The behaviors are classified as hard or soft signals. A probability of the application being malicious is determined through combining soft signals, and the application is classified as malicious or non-malicious. Users of the application, the developer of the application, or a distributor of the application are notified of the application classification to enable responsive action.

Abstract: Techniques for monitoring an access request are described. For instance, a method comprises: obtaining a request parameter indicating a target storage space to which the access request is directed; determining a target address range of the target storage space based on the request parameter; determining, in a set of kernel logs, a target kernel log associated with the access request based on the target address range, the set of kernel logs recording operations that occur in a kernel of an operating system; and determining information of an operation of the access request based on the kernel log, the operation corresponding to the target kernel log.

Abstract: An error-handling system provides detection of an error on an I/O hardware endpoint, triggering of an operating system interrupt in response to detected error, reception of the interrupt at an operating system component, determination, in response to the received interrupt, whether to handle the error using an operating system handler or a firmware error handler associated with the I/O hardware endpoint, and, if it is determined to handle the error using a firmware runtime error handler associated with the I/O hardware endpoint, triggering of a firmware interrupt associated with the firmware runtime error handler.

Abstract: An image deployment method includes obtaining a configuration policy for a container, where the configuration policy for the container includes an autoscaling policy or a replication control policy. The autoscaling policy includes a first image identifier, a maximum quantity of containers corresponding to the first image identifier that can be deployed, and a quantity of currently deployed containers corresponding to the first image identifier. The replication control policy includes a second image identifier and a quantity of containers corresponding to the second image identifier that are expected to be deployed. The method determines an identifier of a to-be-deployed image according to the configuration policy for the container.

Abstract: Provided in the disclosed embodiments are methods and apparatuses for switching service nodes in a distributed storage system, the service nodes comprising a current service node and backup service nodes. The method comprises: monitoring response states of the service nodes to a service request; and if a response state of the current service node is abnormal, stopping communication between the current service node and the backup service nodes, and triggering a switching process for the current service node. In the case of a service timeout, service unavailability, service abnormality, or the like caused by a hardware failure or software defect, logic is checked with a service node that performs logical determination and data statistics collection for multiple factors affecting response states of service nodes, thereby achieving autonomous switching and recovery of the service nodes and improving service availability.

Abstract: Instrumentation is extensible because the language construct to be instrumented and the particular instrumentation desired for the language construct can be provided to the compiler for each individual compilation using input provided during compilation of a program using a dynamic analyzer. The dynamic analyzer can identify the programming language construct to be instrumented and the instrumentation to be inserted into the code. The dynamic analyzer can analyze the data that is collected.

Abstract: A system and method for executing privileged code in a process are described. The method includes establishing, by an authorized library, a privileged function. The privileged function has a first privilege level used by a processor that is executing the privileged function, while preserving a different privilege level for a process invoking the privileged function. The method includes communicating, to a computer process, access information of the privileged function, to allow the computer process to invoke the privileged function. The method includes executing the privileged function for the computer process. Executing the privileged function includes setting a processor that is being used by the computer process to use the first privilege level associated with the privileged function, executing the privileged function with that processor at the first privilege level, then restoring that processor to a previous privilege level, and returning control of that processor to the computer process.

Abstract: According to at least one aspect, a system is provided. The system comprises at least one hardware processor; and at least one non-transitory computer-readable storage medium storing processor executable instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform: monitoring execution of a first computer program configured to control a second computer program to perform a task at least in part by controlling the second computer program, through a graphical user interface (GUI) and/or an application programming interface (API) for the second computer program, to perform at least one action in furtherance of the task; detecting at least one anomaly in the execution of the first computer program; and outputting the detected at least one anomaly in the execution of the first computer program.

Abstract: A computer-implemented method is disclosed. The method includes receiving from a remote device a search query, generating a plurality of different category-directed result sets for the search query, determining an order for the plurality of category-directed result sets based on the search query, and transmitting the plurality of category-directed result sets to the remote device, in a manner that the result sets are to be displayed in the remote device in the determined order.

Abstract: A computer-implemented method and a computer program product are provided for converting a first object having a first data format to a second object having a second data format that is different from the first format in that the second data format requires an object header. The method includes adding the object header to the first object. The method further includes returning, as a pointer, an address of the added object header to a user defined function that uses the second object. The first object lacks pointers to other objects, and does not escape.

Abstract: An information processing apparatus that includes a memory that is configured to store written information and to store a writing program for writing information to the memory; and an electronic control unit that is configured to write information to the memory in accordance with the writing program stored in the memory, wherein: the memory stores a disabling program for disabling overwriting of the information stored in the memory, the electronic control unit disables overwriting of the information stored in the memory in accordance with the disabling program stored in the memory for disablement when writing of the information executed by the electronic control unit is finished, the memory stores reference information to be referred to when the electronic control unit executes writing of information, and the electronic control unit overwrites the reference information stored in the memory with information that is unrelated to the reference information.

Abstract: A method for operating an automation component by a control program having a plurality of control program components, the method including the steps: detecting error events of the control program during an operation of the automation component, downloading a current control program component for error analysis based on error events from a central system, and updating an existing control program component for error analysis by way of the current control program component for error analysis.

Abstract: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.