Abstract: A computer-implemented method for static testing a software system that is decomposed into software units connected by interfaces. The method comprises receiving context information for an interface, which includes at least one postcondition for the at least one output variable of a respective first software unit and/or a precondition for the input variable of a respective second software unit; receiving a selection of a third software unit in so that a substitute decomposition appertaining thereto of the software system into the third software unit and a complement of the third software unit is produced, the third software unit and the complement forming the software system and being connected via a substitute interface; selecting, based on the item of context information a postcondition per output variable of the complement; and testing whether the selected postcondition can be forward-propagated by the third software unit with regard to a formal verification.

Abstract: Described systems and techniques store, at a first time, first system service verification data that includes a first capture of a system services table having at least one system service entry, and a first portion of a system service identified in the at least one system service entry. At a second time, second system service verification data may be stored that includes a second capture of the system services table and a second portion of the system service identified in the at least one system service entry. At least one mismatch between the first system service verification data and the second system service verification data may be determined. At least one security notification message identifying the at least one mismatch with respect to at least one of the second capture of the system services table and the second portion may thus be generated.

Abstract: Systems and methods for adjusting operating parameters of at least one pipelined software asset. Within a pipelined environment, an agent software asset is inserted immediately preceding a software asset whose operating parameters are to be adjusted. The agent software asset receives data and/or data sets from a user and such data and data sets are inserted/used by the software asset. The agent software asset also allows for a reporting of the output of other software assets to thereby provide users with intermediate outputs from the pipelined environment.

Abstract: A system includes a memory and processor. The memory stores code segment vulnerability findings that were generated through static application security testing (SAST). The processor generates a code fingerprint for each code segment, which corresponds to an abstract syntax tree that has been augmented by data flow information and flattened. The processor applies a machine learning clustering algorithm to group the code fingerprints into clusters of fingerprints that share one or more features. The processor additionally determines that both the fingerprint corresponding to the first source code segment and the fingerprint corresponding to a second source code segment belong to the same cluster. In response, the processor transmits an alert to a device of an administrator, identifying the second code segment as vulnerable to a real vulnerability, where a vulnerability finding for the first code segment has been classified as the real vulnerability through external review.

Abstract: Systems and methods of defending against stack-based cybersecurity attacks that exploit vulnerabilities in buffer overflows. The embodiments disclosed herein propose hijacking program flow in a program binary by insert call checking CFI code before calling a target. Examples of a target can be a function within the program binary, a register, or a memory location. If the call target is a valid call target (e.g., included in a global list of addresses), normal program flow resumes and the program flow is transferred to the target. On the contrary, if the call target is not a valid call target (e.g., not included in a global list of addresses), the program binary is deliberately crashed.

Abstract: Disclosed are systems and methods that determine specification portions of Dafny code and transform those specifications into one or more annotations, expressions, comments, and/or assertions that are included in a destination code written in a destination language as part of a compilation of the Dafny code into the destination code. The annotations, expressions, comments, and/or assertions in the destination code may be utilized by a verification component, such as a Checker Framework, to detect errors that are introduced into the destination code by the compiler as part of the compilation or to verify the absence of errors in the destination code.

Abstract: The technology disclosed herein can be used to evaluate system recovery using emulated production systems. In accordance with one example, the technology can involve accessing state data of a target computing device that is in a production environment, the state data can include a performance measurement of a target computing device; updating a configuration of a computing device to adjust a performance of the computing device to correspond to the performance measurement of the target computing device; introduce, by the processing device, a disturbance to the computing device; determining, by the processing device, a performance of the computing device at a time after the introducing the disturbance; and generating performance data indicating an effect the disturbance has on the computing device.

Abstract: Methods and systems for verifying control coupling analysis in testing of software code include: selecting a source file to be tested, the source file having source code, the source file selected from a system set including a plurality of source files from one or more nodes in a system; identifying one or more control couples within the source file by performing static analysis on the source code of the source file; defining one or more test runs of the software code, the one or more test runs including one or more of the identified control couples, and the one or more test runs using dynamic analysis; executing the one or more defined test runs; identifying control coupling coverage of the source file based on the dynamic analysis; and generating a control coupling report based on the identified control coupling coverage of the source file.

Abstract: A computer-implemented system with a processor provides a reversible transfer of an atomic token from one side of an imperfect link to the other, such that if the protocol (or process) on either side fails at a critical moment, the atomic token will be found on both sides to be verifiably incomplete, unless the protocol has completed successfully past its ‘irreversible threshold’ on both sides.

Abstract: A method for visualizing a process map is executed by a process map server. The method includes receiving a flowchart and a step-by-step recording related to a process. Generating a process map by combining the flowchart and the step-by-step recording and displaying the process map. The process map displays a task, step, and action related to the process. A detail window shows information associated with the process, and portions of the process, in response to user input. The action is based on information from the step-by-step recording.

Abstract: A system and method for generating accessible user experience (UX) design guidance materials for software products uses page elements that are optically extracted from an input UX prototype page image and automatically classified into predefined element types to find accessibility rules for at least some of the extracted page elements. At least one accessible UX design guidance material is generated for the input UX prototype page image that indicates the extracted page elements and the accessibility rules corresponding to at least some of the extracted page elements.

Abstract: A method of improving integrity of a computer system includes executing certifiable and qualifiable software applications. The certifiable software application is composed of static program instructions executed sequentially to process input data to produce an output, and the qualifiable software application uses a model iteratively built using a machine learning algorithm to process the input data to produce a corresponding output. The certifiable software application is certifiable for the computer system according to a certification standard, and the qualifiable software application being non-certifiable for the computer system according to the certification standard. The method also includes cross-checking the output by comparison with the corresponding output to verify the output, and thereby improve integrity of the computer system.

Abstract: An approach is disclosed that determines an amount of time before a webpage is ready to use by a user by performing various actions. The approach captures a recording of the webpage from an invocation of the webpage for a period of time sufficient to load completely load the webpage with the capturing resulting in sequenced image frames. An AI system provides a loading point in the sequenced image frames based on an analysis of the frames input to the trained AI system. Image diversity and saturation measurements are calculated on consecutive image frames from the sequenced image frames resulting in an image change analysis. Native webpage events and times are detected from webpage characteristics gathered from the captured digital recording. The amount of time is then calculated based on the loading point from the AI system, the image change analysis; and the webpage events and their corresponding times.

Abstract: Embodiments relate to interactive graphical display. A request is processed by a generative system to generate multiple hypotheses of an output in response to the request, a primary hypothesis of the multiple hypotheses having a highest confidence for the output, multiple secondary hypotheses of the multiple hypotheses having a lower confidence than the highest confidence. At least one region of divergence is determined from the primary hypothesis by the multiple secondary hypotheses, the at least one region of divergence having alternatives in the multiple secondary hypotheses, the alternatives in the multiple secondary hypotheses differing from the primary hypothesis. A graphical user interface displays the at least one region of divergence in the primary hypothesis and alternatives in the multiple secondary hypotheses for the at least one region of divergence, the alternatives and primary hypothesis for the at least one region of divergence being displayed as selectable options for a user.

Abstract: Managing concurrent accesses by a set of tasks to a shared resource of a computer system. Synchronizing the set of tasks for assigning and releasing a resource according to a predefined access period with flexibility of providing an extended access period where an external task is not detected during the predefined access period. Where an extended access period is provided, resynchronizing is performed, and the external task is identified and access is prevented when the external task is determined to be a particular type of task.

Abstract: Example secure runtime systems and methods are described. In one implementation, a secure runtime system is configured to execute multiple applications in a secure manner. The secure runtime is associated with a secure enclave defined by a hardware device. A secure application loader is configured to load an application into the secure runtime system and an OS bridge is configured to provide OS services to the application.

Abstract: Some embodiments may facilitate software development and operations for an enterprise. A communication input port may receive information associated with a software continuous integration/deployment pipeline of the enterprise. An intelligent software agent platform, coupled to the communication input port, may listen for a trigger indication from the software continuous integration/deployment pipeline. Responsive to the trigger indication, the intelligent software agent platform may apply system configuration information and rule layer information to extract software log data and apply a machine learning model to the extracted software log data to generate a pipeline health check analysis report. The pipeline health check analysis report may include, for example, an automatically generated prediction associated with future operation of the software continuous integration/deployment pipeline.

Abstract: Aspects of the disclosure relate to conducting automated web service testing in a continuous integration and delivery test deployment environment using artificial intelligence (AI) generated test data. In some embodiments, a computing platform may receive, from a developer computing platform, a test code request, receive, from a web service computing platform, a training data set, configure a test data set based on the training data set and the test code request, use AI engine to apply one or more corrections to the test data set based on the test code request and to produce a corrected test data set, execute the test code using the corrected test data set to produce test code output results, and send, to the developer computing platform, the test code output results.

Abstract: An automated system automatically creates compliance checking code that is used to test the functional aspects of implemented product code. Intermediate code blocks are created that are then written into compliance checking code, to enable automatic creation of compliance checking scripts designed to test the implemented product code for compliance with persona, outcome, states and state transitions, consistency rules, and annotations specified by the codified user experience design.

Abstract: An system and a method for the detection and visualization of reported ethics cases is disclosed. The system receives a set of digital records corresponding to a reported ethics violations. The system converts each of the digital records from the set of digital records into a common digital format. The system deconstructs the uniform text structure of each digital recorded by a natural language processing module to lemmatize words, remove punctuation, and remove stop words. The system inputs each deconstructed uniform text structure into a binary machine learning data model. The system inputs each deconstructed uniform text structure into a multiclass machine learning data model. The system inputs the determined value and the label to an ensemble machine learning data model. The system prioritizes reported ethics violations into one or more lists based on the determination of the possible class and transmits the list to a user interface.

Abstract: Systems, apparatuses, and methods for modifying metadata associated with database objects obtained from providers, such as cloud providers, are disclosed. Modifying metadata associated with database objects obtained from cloud providers may include identifying resources in a computer network that originate from providers, such as cloud providers that do not have associated metadata. A user interface that includes the resources may be generated, and the resource may receive input to select the resources and a descriptor that may be associated with the resources. The selected resources may then be associated, in a configuration management dataset, with metadata derived from the selected descriptor. The metadata may indicate an association of the selected resources to a parameter.

Abstract: Systems, methods, and media for detecting the presence of return-oriented programming (ROP) payloads are provided, comprising: identifying a potential gadget address space; determining if a piece of the data corresponds to an address of the potential gadget address space; and in response to determining that the piece of the data corresponds to an address of the potential gadget address space: determining whether a plurality of operations, each associated one of a plurality instructions beginning at the address, indicates that an ROP payload is present in the data, and indicating that an ROP payload is present in the data in response to making a determination that a plurality of operations indicates that an ROP payload is present in the data a given number of times.

Abstract: A method and a system for agitation detection and response for a programming language are provided. The method includes collecting software code and activity data pertaining to one or more activities performed by a developer that is using a segment of a programming language. The method also includes evaluating the activity data to generate an agitation level of the developer when using the segment of the programming language. The method can also include generating a developer context by evaluating the software code. The developer context can include insights into the operation of features in the programming language by the developer. The activity and developer context can be provided to a software development provider for independent analysis.

Abstract: Systems, computer program products, and methods are described herein for software compiler integrity verification. The present invention is configured to retrieve, from a source code repository, a source code; process, using a first build machine, the source code into a first object code; process, using a second build machine, the source code into a second object code; initiate an integrity verification engine on the first object code and the second object code; decompile, using the integrity verification engine, the first object code to create a first decompiled object code and the second object code to create a second decompiled object code; compare the first decompiled object code with the second decompiled object code; determine a match between the first decompiled object code and the second decompiled object code; and transmit an approval notification.

Abstract: A process control system includes an engineering system for a project configuration of hardware and software components of a process control system, an operator system having a runtime component for operator control and monitoring of a technical process, and an archive system for archiving project configuration inputs of the engineering system and for archiving operator inputs in the operator system, via which a project engineer and/or an operator may be provided with the relationships between engineering-relevant actions or events and runtime-relevant actions or events.

Abstract: A method for managing nodes is disclosed. The method includes testing a management script on a management server for managing at least one node. The method also includes receiving administrator validation to distribute the management script. The method further includes sending the validated management script to one or more management servers on one or more networks.

Abstract: Techniques for static code analysis tool and configuration recommendation via codebase analysis are described. Multiple codebases are tested using multiple static analysis tools and corresponding configurations, and a machine learning model is trained based on the results and characteristics of the codebases. Users may provide a codebase to be analyzed and job preferences indicating what characteristics of static analysis they desire, the codebase may be analyzed to generate input data for the model, and the model may identify one or more similar testing runs. These candidate runs may be filtered and/or ordered based on the user's stated job preferences, and the resulting tools and configurations associated with these runs may be returned to the user or used to perform static analysis of the user's codebase.

Abstract: Verifying control coupling and data coupling analysis in testing of software code that implements components; identifying control couples by performing static analysis on the source code; defining and executing control couple test runs of the software code including of the identified control couples that test runs using dynamic analysis; identifying control coupling coverage of the source file based on the dynamic analysis; identifying data couples within the source file, the data couples being a variable and a parameter of the components; defining data couple tests for each of the components containing of the identified data couples, the data couple tests using dynamic analysis; executing the data couple tests on the source file; identifying data coupling variable use coverage of the source file based on the dynamic analysis; and generating a report based on the identified control couple coverage and identified data coupling variable use coverage of the source file.

Abstract: A non-transitory computer-readable medium having stored therein a program for causing a computer to execute a process, the process includes detecting a conflict between a first library and a second library in a first program based on a first definition file indicating that the first program depends on the first library and the second library among a plurality of libraries, generating a logical formula indicating that the first program depends on the first library and does not depend on the second library, and outputting a second definition file indicating that the first program depends on the first library and does not depend on the second library when the logical formula is determined to be satisfiable.

Abstract: Techniques for vector-based identification of software dependency relationships are described herein. An aspect includes determining a first dependency relationship value between a first code segment and a second code segment. Another aspect includes calculating a magnitude vector based on the first dependency relationship value and a second dependency relationship value corresponding to the first code segment and the second code segment. Another aspect includes determining a relationship score for the first code segment and the second code segment based on the magnitude vector and the first dependency relationship value.

Abstract: Disclosed is a computer program stored in a computer readable storage medium, the computer program including commands which cause a processor of a server to execute operations below, the operations including: if a first program written in a source language is converted to a second program written in a target language, generating block information for the first program by analyzing the first program; inserting an annotation into the second program, wherein the annotation includes information on at least one source line, which is included in the first program, associated with at least one target line included in the second program; generating meta information associated with runtime verification based on the block information and the annotation.

Abstract: Examples herein disclose via use of a physical processor, detecting a specific application programming interface (API) call to interact with an application running on a production server. Based on the detection of the specific API call, die examples assist, using the physical processor, a scanning session based on the specific API call Using the physical processor, the examples identify a modification to the application based on the scanning session.

Abstract: Automatically generating code from an abstract model of a database. The abstract model is derived from a physical model which may be a source such as a legacy database, an entity relationship diagram, or other schema defining the data tables, objects, entities, or relationships etc. of the source. The generated code exhibits several patterns, interfaces and/or features including (a) separation of generated and developer code (b) context patterns (c) response/action patterns (d) language, database interfaces, operating systems and/or (e) user interface patterns.

Abstract: Aspects of the invention include computer-implemented method that includes generating a preliminary control flow graph from memory dump data and compiler listing data in response to an exception event at a computing program. Code segments associated with each block of the preliminary control flow graph are translated to Boolean statements. Each Boolean statement is determined to be either satisfied or unsatisfied based on input values retrieved from the memory dump data. An edge property value of a first edge and a second edge of a plurality of edges of the preliminary control flow graph based are calculated based on a satisfaction of the Boolean statements. The edge property value of the first edge is compared to the edge property value of the second edge. The preliminary control flow graph is refined by deleting the first edge of the plurality of edges based at least in part on the comparison.

Abstract: Taint is dynamically tracked on a mobile device. Taint virtual instructions are added to virtual instructions of a control-flow graph (CFG). A taint virtual instruction has a taint operand that corresponds to an operand of a virtual instruction and has a taint output that corresponds to an output of the virtual instruction in a block of the CFG. Registers are allocated for the taint virtual instruction and the virtual instructions. After register allocation, the taint virtual instruction and the virtual instructions are converted to native code, which is executed to track taint on the mobile device.

Abstract: A method of operating a system for diagnosing software for a vehicle according to the present invention includes: generating a plurality of data sets including a function and an argument related to a diagnosis of target software executed in each of the plurality of cores; sequentially outputting the plurality of data sets to a shared memory; operating the target software according to the data set of the shared memory; and verifying the operation result in a verifying core.

Abstract: A system and method that provides inter-application relevance management for resources being brokered by an application virtualization platform. A described platform includes a memory configured to store a set of relevance rules for applications hosted by the application virtualization platform, wherein each relevance rule specifies a relevance setting between a first application and a second application. Also included is a processor coupled to the memory and configured to broker resources for the application virtualization platform, according to a method. The method includes: receiving a request from a client to launch a target application hosted by the application virtualization platform; retrieving a subset of applicable relevance rules that specify the target application from the set of relevance rules; and selecting a resource for the target application based on the subset of applicable relevance rules, wherein the resource includes at least one of a session or a session server.

Abstract: Certain aspects of the present disclosure provide techniques for maintaining an application through an execution platform. An example method generally includes receiving a first workflow definition of a plurality of workflow definitions associated with an application. The first workflow definition may be a workflow defining a build operation for building the application. The first workflow definition is executed to build the application by retrieving an executable binary from a binary repository, retrieving source code for the application binary from an application source code repository, building the application binary by executing the executable binary on the retrieved source code, and storing the application binary in the binary repository. A second workflow definition is received to execute the application. The second workflow is executed to execute the application by retrieving the application binary from the binary repository, and executing the retrieved application binary to run the application.

Abstract: Techniques for tailoring security configurations for least-privilege applications are provided. In one technique, multiple software artifacts associated with a software application are identified. For each software artifact, a call graph is generated, the call graph is added to a set of call graphs, and a set of dependencies for the software artifact is detected. The set of call graphs are combined to generate a merged call graph. One or more portions of the merged call graph are pruned to generate a pruned call graph. Annotation data is stored that associates elements in the pruned call graph with the set of dependencies for each software artifact. Based on the annotation data, reachable dependencies are identified. Based on the reachable dependencies, a set of security policies is generated for the software application.

Abstract: A method and a system of selecting test cases from existing test cases for a new software testing requirement are disclosed. In an embodiment, the method may include determining a confidence score associated with each of existing test cases, based on comparing a new software testing requirement with the existing test cases using a Recurrent Neural Network (RNN) model, and selecting a set of test cases from the existing test cases based on the confidence score and a predetermined threshold confidence score. The method may further include predicting a defect slippage rate associated with each test case using a linear regression model, and shortlisting a sub-set of test cases from the set of test cases based on the predicted defect slippage rate associated with each test case and a predetermined threshold defect slippage rate.

Abstract: This disclosure relates generally to field of elimination of false positives during static analysis of an application code, and, more particularly, to a method and a system for identification and elimination of false positives from delta alarms. Existing static analysis tools report/generate numerous static alarms for a version and the same static alarm also gets reported for the subsequent versions, which are referred to as repeated alarms, while static alarms remaining after the suppression of the repeated alarms, are called delta alarms. In an embodiment, the disclosed method and system for identification and elimination of false positives from delta alarms, wherein the delta alarms are post-processed to identify of a set of false positives using a version aware static analysis technique based on a set of reuse computation techniques implementing conservative or an aggressive approach based on a dynamic configuration input.

Abstract: System and methods for simulating an end-to-end upgrade process are provided. The method may include collecting, by an upgrade simulator, a system inventory from a production system. The system inventory includes the production system's hardware configuration. The method may include, in response to a determination that the system inventory is compatible with an upgrade software, configuring, by the upgrade simulator, a simulated system having a downsized hardware configuration compared to the production system's hardware configuration. The method may further include upgrading, by the upgrade simulator, the simulated system using the upgrade software, and evaluating, by the upgrade simulator, the simulated system operating with the upgrade software.

Abstract: Disclosed herein are techniques for analyzing control-flow integrity based on functional line-of-code behavior and relation models. Techniques include receiving data based on runtime operations of a controller; constructing a line-of-code behavior and relation model representing execution of functions on the controller based on the received data; constructing, based on the line-of-code behavioral and relation model, a dynamic control flow integrity model configured for the controller to enforce in real-time; and deploying the dynamic control flow integrity model to the controller.

Abstract: Techniques for obtaining the performance of an integrated circuit design are disclosed. One such technique may retrieve, from a data store, a set of snapshots of a virtual machine of a host system taken during execution of a performance test. For each snapshot in the set of snapshots, the snapshot can be loaded onto a virtual machine running on an emulator that is emulating the integrated circuit design. The virtual machine can be executed for a reduced runtime, and the performances measured during execution of the snapshots can be used to derive the performance of the integrated circuit design.

Abstract: A function management method applied to a memory device includes obtaining a plurality of functions through a map file of a compiler, and parsing at least one source code of the memory device with the map file. The functions include at least one normal function and at least one API function. The parsing includes developing a mapping relationship between the at least one API function and the at least one normal function, and developing a calling relationship between the at least one normal function.

Abstract: A code completion system uses neural components to rank the unordered list of code completion candidates generated from an existing static analyzer. The candidates represent the next sequence of tokens likely to complete a partially-formed program element as a developer is typing in a software development tool. A re-ranking component generates a ranked order of the candidates based on a context embedding of the code context and candidate embeddings of the candidates, where both embeddings are based a common token encoding.

Abstract: A function defined in source code of an application is further partitioned into a plurality of logics without depending on function definition performed by a developer. An application partitioning apparatus (1) for partitioning an application distributively processed by a plurality of information processing apparatuses into a plurality of logics includes an acquisition unit (121) which acquires source code of the application, a first partitioning unit (122) which identifies a plurality of functions defined in the source code and partitioning the source code into the plurality of functions, a determination unit (123) which determines whether each of the partitioned functions can be further partitioned according to rules set in advance, and a second partitioning unit (124) which, when it is determined that each of the partitioned function can be partitioned, partitions the function into a plurality of functions including one or a plurality of rows.

Abstract: A method includes receiving a subject-matter expert (SME) interpretable model. The method further includes converting, by a processing device, the SME interpretable model into a functional mockup unit (FMU). The method further includes integrating the FMU into a control software project (CSP). The method further includes compiling the CSP into binary code.

Abstract: A method implemented by an application (app) store system for providing apps to one or more users through a network, the method comprising managing, by the app store system, a multi-screen application (MSA) package that comprises a set of related apps, wherein one or more relationships among the set of related apps are pre-defined, receiving, by the app store system, a request from a first user device via the network to download at least part of the MSA package; and causing, by the app store system, the set of related apps to be downloaded to a plurality of user devices including the first user device according to the one or more relationships among the set of related apps in response to the request.

Abstract: A computer system for processing unstructured data, the computer system comprising a computer processor, a computer memory operatively coupled to the computer processor and the computer memory having disposed within it computer program instructions that, when executed by the processor, cause the computer system to carry out the steps of receiving unstructured data input from a client device, analyzing the unstructured data for features that satisfy logical segment criteria by using natural language processing (NLP), and partitioning the unstructured data into logical segments based on satisfaction of the logical segment criteria.