Abstract: Methods, systems, and computer program products are included for executing one or more instructions of a program in a debugging session; receiving a command at a debugger, the command comprising an expression for the debugger to evaluate in the debugging session; evaluating the expression, at least in part by the debugger, the evaluating including attempting to perform a write operation to write a data value to a target; preventing the data value from being written to the target; and outputting, by the debugger, a result of the evaluating.

Abstract: According to one embodiment, a system comprises one or more counters; comparison logic; and one or more hardware processors communicatively coupled to the one or more counters and the comparison logic. The one or more hardware processors are configured to instantiate one or more virtual machines that are adapted to analyze received content, where the one or more virtual machines are configured to monitor a delay caused by one or more events conducted during processing of the content and identify the content as including malware if the delay exceed a first time period.

Abstract: Embodiments of the present invention provide a system, method, and program product for an abnormal timing breakpoints. A computer determines a code section, wherein the code section is part of computer code edited by a user. The computer determines an expected timeframe and an expected count for the code section, wherein the expected timeframe represents a predicted time to execute the code section, and wherein the expected execution count represent a predicted number of executions of the code section. The computer determines that an execution of the code section is abnormal based on one or more of: determining a current execution time is greater than the expected timeframe, and determining a current execution count is greater than the expected count. The computer halting the execution of the code section based on determining that the execution of the code section is abnormal and displays the abnormal code section.

Abstract: Near clones for a set of targeted computing systems are provided by determining a highest common denominator set of components among the computing systems, producing a pseudo-clone configuration definition, and realizing one or more pseudo-clone computing systems as partially configured backups for the targeted computing systems. Upon a planned failover, actual failure, or quarantine action on a targeted computing system, a difference configuration is determined to complete the provisioning of the pseudo-clone system to serve as a replacement system for the failed or quarantined system. Failure predictions can be used to implement the pseudo-clone just prior to an expected first failure of any of the targeted systems. The system can also interface to an on-demand provisioning management system to effect automated workflows to realize pseudo-clones and replacement systems automatically, as needed.

Abstract: Method and apparatus for enhancing an executable is disclosed herein. In one embodiment, the method includes instrumenting an executable with additional program code to detect run-time errors, and while running the instrumented executable within a debug environment generating the run-time errors detected by the additional program code, upon reaching a breakpoint, identifying any of the run-time errors which occurred while executing a function in which the breakpoint is located, and transmitting an indication of the identified run-time errors to the debugging environment.

Abstract: Method and apparatus for enhancing an executable is disclosed herein. In one embodiment, the method includes instrumenting an executable with additional program code to detect run-time errors, and while running the instrumented executable within a debug environment generating the run-time errors detected by the additional program code, upon reaching a breakpoint, identifying any of the run-time errors which occurred while executing a function in which the breakpoint is located, and transmitting an indication of the identified run-time errors to the debugging environment.

Abstract: An apparatus for recording game history is coupled between a game host and a game console and performs a game history recording and interaction method. The apparatus communicates with the game host through a first wireless unit, and communicates with the game console through a second wireless unit, to receive game operation information generated from operations of the game console. The apparatus receives a video signal outputted by the game host through a video input port. The processing module is coupled to the wireless units and the video input port respectively and is used to obtain the game operation information from the wireless units and generate operation information images corresponding to the game operation information. The processing module superimposes the operation information images on the video signal correspondingly to form game history video data and outputs the superimposed game history video data to a display device for display.

Abstract: A method is provided for managing a network storm associated with a physical port of a physical switch. The method, performed by a management application, includes receiving a notification of the network storm associated with the physical port, identifying a virtual switch supported by a server host that is coupled to the physical port, identifying a virtual machine coupled to the virtual switch that causes the network storm, and isolating the identified virtual machine while the physical port remains enabled.

Abstract: A network application is verified at a network processor by selecting network application functions based on a field of an ingress packet. The network application is composed of a set of network application functions, with each function carrying out a corresponding packet processing operation, such as packet parsing, statistical gathering, and the like. Each network application function can be invoked by the network processor with a corresponding command. Based on a field of an ingress packet, the network processor can select a sequence of functions to process the packet, wherein the sequence corresponds to functions of the network application or a portion thereof.

Abstract: An apparatus and method are provided for controlling debugging of program instructions executed on processing circuitry, where the program instructions include a transaction comprising a number of program instructions that execute to generate updates to state data, with the processing circuitry then committing the updates if the transaction completes without a conflict. In addition to the processing circuitry, the apparatus has control storage for storing stepping control data used to control operation of the processing circuitry. The processing circuitry is responsive to the stepping control data having a first value to operate in a single stepping mode, where the processing circuitry initiates a debug event following execution of each instruction.

Abstract: A system and method for analyzing big data activities are disclosed. According to one embodiment, a system comprises a distributed file system for the entities and applications, wherein the applications include one or more of script applications, structured query language (SQL) applications, Not Only (NO) SQL applications, stream applications, search applications, and in-memory applications. The system further comprises a data processing platform that gathers, analyzes, and stores data relating to entities and applications. The data processing platform includes an application manager having one or more of a MapReduce Manage, a script applications manager, a structured query language (SQL) applications manager, a Not Only (NO) SQL applications manager, a stream applications manager, a search applications manager, and an in-memory applications manager. The application manager identifies if the applications are one or more of slow-running, failed, killed, unpredictable, and malfunctioning.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a management device. The management device initiates a first booting process of a program from a first image stored at a primary storage device of the management device. The management device re-initiates the first booting process from the first image when the first booting process is not successful and a number of re-initiation is less than a predetermined number. The management device locates a second image of the program from a secondary storage device when the first booting process is not successful and the number of re-initiation is greater than or equal to the predetermined number. The management device initiates a second booting process of the program from the second image subsequent to the locating the second image.

Abstract: Dynamically collecting data pertaining to a program execution. A method can include monitoring execution of the program in a plurality of threads and, responsive to identifying an exception triggered by the program execution in a first of the plurality of threads, initiating at least one data collector to collect data exclusively relevant to the program execution in the first thread.

Abstract: Techniques for implementing operating system layering are described herein. In one example, a method includes managing one or more container temporary storage spaces and one or more container runtime environments. Furthermore, the method includes loading, one or more drivers to provide compatibility between a container operating system and a host operating system, the one or more drivers comprising application program interface (API) compatibility libraries to enable API compatibility between the container operating system and the host operating system; metadata arbitration logic to enable compatibility between the container operating system and the host operating system by modifying container operating system references; and file arbitration logic to modify operating system file locations accessed by the container operating system and the host operating system.

Abstract: A system and method for increasing lockstep core availability provides for writing a state of a main CPU core to a state buffer, executing one or more instructions of a task by the main CPU core to generate a first output for each executed instruction, and executing the one or more instructions of the task by a checker CPU core to generate a second output for each executed instruction. The method further includes comparing the first output with the second output, and if the first output does not match the second output, generating one or more control signals, and based upon the generation of the one or more control signals, loading the state of the main CPU core from the state buffer to the main CPU core and the checker CPU core.

Abstract: According to a first aspect of the present invention there is provided a method of protecting a computer system from malware, which malware attempts to prevent detection or analysis when executed in an emulated computer system. The method comprises determining if an executable file should be identified as being legitimate and, if not, executing the executable file while providing indications to the executable file that it is being executed within an emulated computer system.

Abstract: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.

Abstract: A processor includes a logic to determine an error condition reported in an error bank. The error bank is communicatively coupled to the processor and is associated with logical processors of the processor. The processor includes another logic to generate an interrupt indicating the error condition. The processor includes yet another logic to selectively send the interrupt to a single one of the logical processors associated with the error bank.

Abstract: A method, system and computer program product for commit sensitive testing is provided. The method includes applying a full set of different tests to an application and monitoring the application of the full set of different tests to determine files of the application affected by the full set of the different tests. The method also includes generating a mapping of each of the files and corresponding ones of the full set of the different tests affecting each of the files. Finally, the method includes responding to a change in one of the files by identifying in the mapping only a subset of the full set of the different tests affecting the changed one of the files and applying only the subset of the full set of the different tests to the changed one of the files.

Abstract: A system and method to identify recursion in a virtual product structure. Initially, the virtual product structure is analyzed to identify the existence of a recursion. Once a recursion is identified, a graphical representation of the virtual product structure is generated and displayed to graphically exposure the recursion. Other embodiments are also described and claimed.

Abstract: A software test method used in a software test system that includes a memory that stores a plurality of computer executable instructions and a processing unit coupled to the memory is provided. The software test method includes the steps outlined below. The processing unit detects input and output parameters of under-test software. The processing unit detects inner operation parameters of the under-test software. The processing unit establishes parameter variance probability of each parameter variances between any two functions included in the under-test software to generate test case including test parameters accordingly. The processing unit transmits test parameters of the test case to the under-test software to perform test.

Abstract: A system and method for communicating software images includes a local area network, a client device and a local area network server that associates the client device and stores a client device location and a client identifier therein. A central distribution server stores the client device location and the client identifier therein and communicates a client reboot signal to the local area network server. The local area network sever communicates the client reboot signal to the client device. The client device reboots in response to the reboot signal.

Abstract: An example method of debugging an application running in a container includes detecting, by a kernel, a system call from an application running in a container. The method also includes performing a capability check based on detection of the system call. The capability check provides a set of capabilities used by the system call. The method further includes associating the system call with the set of capabilities and providing debug information based on the application run in the container. The debug information includes the association between the system call and the set of capabilities.

Abstract: A system and method for executing privileged code in a process are described. The method includes establishing, by an authorized library, a privileged function. The privileged function has a first privilege level used by a processor that is executing the privileged function, while preserving a different privilege level for a process invoking the privileged function. The method includes communicating, to a computer process, access information of the privileged function, to allow the computer process to invoke the privileged function. The method includes executing the privileged function for the computer process. Executing the privileged function includes setting a processor that is being used by the computer process to use the first privilege level associated with the privileged function, executing the privileged function with that processor at the first privilege level, then restoring that processor to a previous privilege level, and returning control of that processor to the computer process.

Abstract: A method, product and computer program product for building a malware detector, the method including the steps of: receiving at least one characteristic for each of a plurality of malware variants; categorizing each of the characteristics as a malicious characteristic or a non-malicious characteristic; generating a detector; training the detector to distinguish between the malicious characteristic and the non-malicious characteristic; and rating the detector based on an accuracy of detection of an amount of malicious characteristics for each malware variant.

Abstract: A system may determine to perform an internal and an external malware detection operation to detect a malware infection associated with a client device. The system may perform the internal operation by modifying an environment, executing on a particular device, to form a modified environment. The system may perform the external operation by performing a communication from the particular device. The system may monitor the modified environment for a first behavior indicative of the malware infection, and may monitor a result of performing the communication for a second behavior indicative of the malware infection. The system may detect that the first or second behavior has occurred. The system may provide a notification that the client device is infected with malware based on detecting that the first or second behavior has occurred. The notification may cause one or more network devices to block network traffic to or from the client device.

Abstract: Methods, systems, and computer program products for providing fault injection to Cloud-provisioned machines are provided herein. A method includes determining one or more fault conditions to be associated with a fault injection implementation based on one or more parameters associated with a request for the fault injection implementation; generating a specification for a lifecycle of the fault injection implementation based on the one or more fault conditions; and executing the fault injection implementation in a target system, wherein said executing comprises effecting the lifecycle of the fault injection implementation according to the generated specification.

Abstract: A monitor includes a register configured to store at least two contexts and a context change value. A context selector is configured to select at least one of the two contexts for context monitoring. The selection is made dependent on whether the context change value matches a first part of a memory access address.

Abstract: Various methods and systems for documenting interactive graphical design are provided. An exemplary graphical design environment stored on a non-transitory computer-readable medium comprises a documentation element in an interactive graphical design. The design environment also comprises a design element that displays a plurality of states in a rendering of the interactive graphical design in an external player. The documentation element: (i) is enabled to receive a selection from the user of a state in the plurality of states; and (ii) displays a representation of the design element in the state in response to receiving the selection from the user. The documentation element and design element are both instantiated by a processor operating in combination with the non-transitory computer-readable medium.

Abstract: Embodiments presented herein provide techniques for evaluating for dynamically testing an application or “app” on multiple computing devices at the same time. Each device participating in a testing session runs a device agent which monitors and records user input directed to the app on that device. When a user input event occurs is directed to the app on one of the devices, the corresponding device agent translates the user input into replication events that can be broadcast to, and then replayed by, the app on the other computing devices participating in the testing session.

Abstract: An enhanced find and replace feature for a spreadsheet program module is disclosed. The enhanced find and replace feature allows users to search for terms and attributes across multiple sheets of a workbook. The find and replace feature also allows searches to be performed based on the formatting attributes of a cell as well as the textual or numerical contents of a cell. The enhanced find and replace feature also allows users to perform bulk formatting of cells (even cells without text) in a spreadsheet. In another aspect, the enhanced find and replace feature lists all the results of the find operation in a results list so that the user may choose which result(s) to view and edit.

Abstract: The present invention provides for debugging a target program with a computer comprising a storage unit and a processing unit. In one aspect, this comprises: storing, in the storage unit, reliability information including the reliability of individual indices of classification items of the program; reading, by the processing unit, the reliability information of the target program from the storage unit and determining a reliable code area and an unreliable code area by using the reliability of the individual indices in the reliability information; and executing debugging of the debug target program only for the unreliable code area while omitting debugging of the reliable code area. A graphical user interface to support debugging of only unreliable code areas is also disclosed.

Abstract: During execution of a computer program, mouse movements, keyboard inputs, and screen snapshots are recorded and stored in one or more files as a test flow. Next, selected recorded keyboard inputs are replaced with user-specified variable parameters to generate a keyboard testing input, each of the parameters corresponding to a plurality of possible keyboard inputs. Execution is triggered of the test flow including the recorded mouse movements, the recorded screenshots, and the keyboard testing input. If the initially displayed screen is not equivalent to the first screen indicted in the test flow as being the start of the test, the test flow is stopped. Otherwise, the test flow is executed utilizing a random selection of the plurality of possible keyboard inputs of the keyboard testing input. At least one output is provided for the execution of the test flow.

Abstract: Generally, this disclosure provides systems, methods and computer readable media for a page table edit controller configured to control access to guest page tables by virtual machine (VM) guest software through the manipulation of extended page tables. The system may include a translation look-aside buffer (TLB) to maintain a policy to lock one or more guest linear addresses (GLAs) to one or more allowable guest physical addresses (GPAs); a page walk processor to update the TLB based on the guest page tables; and a page table edit control (PTEC) module to: identify entries of the guest page tables that map GLAs associated with the policy to a first GPA; verify that the mapping conforms to the policy; and place the guest page table into one of a plurality of restricted accessibility states based on the verification, the restricted accessibility applied to the VM guests and to the page walk processor.

Abstract: A computer system has a plurality of computer servers, each including at least one central processing unit (CPU). A memory appliance is spaced remotely from the plurality of computer servers. The memory appliance includes random access memory (RAM). A photonic CPU link is operatively attached to the at least one CPU. A photonic circuit switch is operatively attached to the photonic CPU link. An allocated portion of the RAM is addressable by a predetermined CPU selected from the plurality of computer servers.

Abstract: The present disclosure provides a system and method for performing an analysis of a software application in a computing environment. A receiving module accepts source code of the software application as input data and obtains a list of the entry points. Intermediate representation from the input data is generated in order to construct informative structure for the software application. Uncalled functions in the software application are identified and are considered as entry points. The entry points are wrapped into one entry point and analyzed maintaining calling context of all the entry points.

Abstract: Assistance is given to aid in optimizing a program's performance during initial development while the program's features are still being implemented and/or debugged, without interfering with that development, by providing easy-to-ignore yet accurate tips about a program's performance inside a debugger. Raw performance information for a software program which is being debugged in a debugger is adjusted by removing from it a measured debug overhead or other diagnostic overhead. Some factors considered when measuring overhead include pauses, context switches, debug versus release build presence, bounds checking, funceval, and call stack analyses. The debugger is enhanced to display the adjusted program performance measure in a graphical user interface, next to the corresponding source code. The enhanced debugger updates the adjusted program performance measure value and keeps its screen location current as the developer moves through the source code, providing more detailed performance information upon request.

Abstract: A malware detection system configured to detect suspiciousness in obfuscated content. A multi-stage static detection logic is utilized to detect obfuscation, make the obfuscated content accessible, identify suspiciousness in the accessible content and filter non-suspicious non-obfuscated content from further analysis. The system is configured to identify obfuscated content, de-obfuscate obfuscated content, identify suspicious characteristics in the de-obfuscated content, execute a virtual machine to process the suspicious network content and detect malicious network content while removing from further analysis non-suspicious network content.

Abstract: A method and system are provided for performing an antivirus scan of a file on a virtual machine. An example method includes performing a first execution of the file on the virtual machine, recording a first log that includes an API function call and an internal event detected during execution, and determining if any signatures in the log are stored in a signatures database. Moreover, if no signatures in the first log are found in the first database of signatures, the file is classified as not malicious. In contrast, if at least one signature is found, a second execution of the file is perform and a second log is recorded that includes a detected internal event. Moreover, the method includes determining if any signatures in the second log are stored in a second database of signatures; and classifying the file as not malicious if no signatures are found.

Abstract: A device may be configured to receive, from a first device, first test scripts for testing an application. The first test scripts may include information for reproducing interactions with the application on the first device. The device may generate second test scripts, for testing the application on a second device, that reproduce the interactions with the application on the second device. The second test scripts may be generated based on the first test scripts and mapping information that maps resources of the first device to resources of the second device. The first device and the second device may be different device types. The device may provide the second test scripts to the second device. The device may receive and store test results of executing the second test scripts on the second device that indicate results of reproducing the interactions on the second device.

Abstract: A system and method for detection and correction of single-bit errors in a multi-core processing resource (MCPR) of an avionics processing system includes a RAM EDAC testing module called by the MCPR health monitor to access EDAC registers of a system-on-chip module coupled to the MCPR and access memory addresses passed by the MCPR health monitor to detect single-bit errors. Single-bit errors detected in memory mapped to the hypervisor are corrected by the RAM EDAC testing module. Single-bit errors detected in memory associated with a partition or core of the MCPR are corrected by the health monitor running on the particular partition or core with which the memory portion is associated. Single-bit errors may be detected in unmapped memory associated with a partition or core by accessing the unmapped memory via a temporary TLB entry.

Abstract: Systems, methods, and media for testing software patches are provided. The methods include: injecting a software patch into a program; determining a portion of the program modified by the software patch; concurrently executing a first instance of the portion of the program prior to modification by the software patch and a second instance of the portion of the program that has been modified by the software patch; obtaining a first outcome of the first instance and a second outcome of the second instance; comparing the first outcome and the second outcome with a policy associated with the program; and determining whether the software patch has executed correctly based at least in part on the comparison.

Abstract: Disclosed are a content recording method and device, for use in software development. The method includes: capturing the content displayed on a screen in the software development process; acquiring a mouse event related to the content displayed on the screen; and processing the mouse event and the content displayed on the screen to obtain the recorded content, the recorded content containing the content displayed on the screen and the mouse event. The technical solution can record a screen capture and a mouse/keyboard operation related thereto in the software test development process, thus effectively recording the test and development process, and improving test and development efficiency.

Abstract: A distributed dashboard system including related server side and communication related functionality is provided. The key is loosely defined metadata for input data coupled with the fact that metadata can be defined after the data is loaded to system. Only the part of metadata relevant to use of dashboard needs to be mapped. In current invention data can be loaded before “import file specification” is defined, and then meaning given in “point and click” fashion. Users can subscribe to different type of gauges (that make up the dashboard) to construct their own dashboard, mostly in a web based user interface, but also from the dashboard itself. In addition to gauges displaying information also input controls called levers are supported allowing users to input commands to the system that are processed by local device or server side system.

Abstract: Embodiments relate to an isolated program execution environment. An aspect includes receiving, by the isolated program execution environment on a computer comprising a processor and a memory, a request to run a program. Another aspect includes wrapping program code corresponding to the program as a function. Another aspect includes cloning a real global object of the isolated program execution environment to create a fake global object. Another aspect includes passing the fake global object to the function. Another aspect includes executing the function, such that the function executes the program.

Abstract: An application which utilizes a single thread is monitored and context for the individual requests and business transactions operating on that platform are provided. A wrapper is placed is around an object that calls a request. The wrapper renames a request object. Request objects are renamed with a unique name when they are called. When a call stack is sampled, the sampler will retrieve the unique name. Performance data associated with the unique name may be correlated to a business transaction and particular request as metrics are subsequently analyzed. For subsequent reporting, such as call graph reporting, the report or call graph will have requests in the context of a particular business transaction and a particular request instance. This provides more context in reporting of an business application request for frameworks that utilize as single request for multiple threads.

Abstract: One or more test controls within code under test are enabled and then executing the code under test is executed. When enabled, the test control will interact with a tester when the code under test is executed (e.g., by providing data to the tester). The selection to enable the test control can be made based on whether the system accessing the code under test is a tester. If the system is a tester, the test control is enabled. Otherwise, the test control is disabled. The test control can include an execution control, a data definition control, and/or a log control.

Abstract: A self-repairing enterprise workstation that selects a workstation repair script based on a currently experienced workstation problem, retrieves the workstation repair script from a repair script repository, and executes the retrieved repair script in a user context of the workstation to repair the problem. The self-repairing enterprise workstation comprises an automated computer repair application stored in the memory, that when launched by an operating system of the workstation in response to the receipt of an input selection of a custom URL moniker downloads a script associated with the URL moniker from a repair script repository, executes the script in a user context of the automated computer repair application, repairs a problem experienced by the self-repairing enterprise workstation.

Abstract: A method for profiling an application on a virtual machine is provided. A series of analysis steps to be performed on profiled data can be created. The series of analysis steps can be saved as a report specification. A back-end profiler can then be caused to perform profiling on the application. Profiled data can be received from the back-end profiler. The profiled data can be stored as a model. The model can then be adapted based on the series of analysis steps from the report specification. Output data can be generated based on the adapted model. Finally, the output data is displayed to a user.

Abstract: A computer-implemented method for recognizing behavioral attributes of software in real-time is described. An executable file is executed. One or more runtime events associated with a behavior of the executable file are traced. The one or more traced runtime events are translated to a high level language. A recognizable pattern of the translated traced runtime events is produced. The pattern is a unique behavioral set of the translated traced runtime events.