Abstract: In one example aspect, a computerized method of automatically detecting and blocking at least one attack on an application includes the step of modifying instructions of the application to include at least one sensor. The at least one sensor generates a set of events related to detecting an attack on the application or a computing system implementing the application. The method includes the step of reviewing, from within the application, the set of events generated by the at least one sensor. The method includes the step of detecting a presence of at least one attack on the application based on the review of the set of events. The method includes the step of invoking an attack response action.

Abstract: Enacting a compliance action using an assessment that considers a mix of coldpatches and hotpatches includes identifying a policy defining the compliance condition based on patching status of a software component. A patching state of the software component is determined, including identifying evidence of coldpatched binary file(s) and hotpatch binary file(s) applicable to the software component, and using the evidence to determine whether or not the hotpatch binary file(s) have been applied to a memory image into which an instance of the software component is loaded. Based on the policy and on the patching state of the software component, a compliance action is enacted for the compliance condition. The compliance action includes generating a health report or a health attestation, initiating a patching action, initiating an execution control action, and the like.

Abstract: In certain embodiments, a software pipeline (“pipeline”) is configured by the use of gates for progressing an application from one stage to another (e.g., from a development stage to a production stage). A configuration file having a set of attribute values that is descriptive of an application, and a gate mapping file having information associated with the gates to be invoked for different combinations of attribute values are obtained. The configuration file is processed using the gate mapping file to determine a set of gates to be invoked for progressing the application in the pipeline based on the attribute values of the application. The set of gates are invoked to cause a corresponding set of software routines to be executed for progressing the application.

Abstract: Techniques are disclosed for handling database queries from multiple different application versions using a single database. A computer system executing a database management system (DBMS) may receive a database query for a database, where the database query is received from a particular version of an application having a plurality of versions. The database query may specify the particular version. The computer system may then identify catalog tables, where the catalog tables include version information columns storing version access information. The computer system may determine that version access information for the database query indicates that one or more database objects corresponding to the database query are accessible to the particular version of the application.

Abstract: Remote data management, including: receiving, at a data storage service from a client device and via a remote data management application program interface (API), a data object; receiving, at the data storage service from the client device and via the remote data management API, a message including an indication of updated metadata and including an identification of a particular data object stored by the data storage service; and generating, in accordance with the updated metadata received from the client device, a modified data object that is a reduced version of the particular data object specified by the message received from the client device, wherein the reduced version of the particular data object is stored by the data storage service.

Abstract: Methods, systems, and storage media are described for indicating deceptive or trustworthy resources are provided. A client system generates and renders a graphical user interface (GUI) comprising one or more graphical objects in a client application. The client system identifies resources corresponding to individual graphical objects. The client system communicates the identified resources to a reputation system, and obtains indicators indicating deceptive resources to be obfuscated and/or trustworthy resources to be illuminated. The client system obfuscates the deceptive resources and illuminates the trustworthy resources according to the received indicators. Other embodiments may be described and/or claimed.

Abstract: An apparatus and a method for updating firmware by using a security integrated circuit in an electronic device. An electronic device may include a security integrated circuit (IC) providing a rich execution environment and a secure execution environment. The security integrated circuit includes a main processor operating in the rich execution environment and a secure processor operating in the secure execution environment. The secure processor is configured to perform user authentication based on firmware update information received from a server through the main processor. If the user authentication is successful, authentication information is generated corresponding to the firmware update information and stored in at least a part of a secure memory. If the firmware is installed, authentication of the firmware is performed based on the authentication information stored in the secure memory, and if the authentication of the firmware is successful, the firmware is installed.

Abstract: A relational database system that implements persistent version storage may include an in-row module that is executable by one or more processors to implement an in-row scheme by storing in-row previous version information within a payload of a row within a database page. The relational database system may additionally include an off-row module that is executable by the one or more processors to implement an off-row scheme by storing off-row previous version information in an off-row page that is separate from the database page. The relational database system may additionally include a storage policy that defines when previous version information is stored in accordance with the in-row scheme and when the previous version information is stored in accordance with the off-row scheme. The relational database system may additionally include a cleanup module that cleans up older versions when they are deemed unnecessary by the system.

Abstract: This application provides a biological sequence data processing method including selecting a target base from bases in a biological sequence fastq file according to characteristic information of each base. A base patch file is generated by using characteristic information of the target base. Lossless compression is performed on the biological sequence fastq file to obtain a compressed fastq file, and lossless compression is performed on the base patch file to obtain a compressed patch file. The compressed patch file and the compressed fastq file are decompressed. In response to determining that characteristic information of the target base in the decompressed compressed patch file is inconsistent with characteristic information of the target base in the decompressed compressed fastq file, the characteristic information of the target base in the decompressed compressed fastq file is modified to the characteristic information of the target base in the decompressed compressed patch file.

Abstract: An information processing system including a device and a client terminal which is able to create action configuration data for implementing a plurality of functions in the device includes a first management unit configured to manage a first version of firmware for implementing a plurality of functions in the device and a second version of a schema usable in the firmware of the first version, a second management unit configured to manage the action configuration data, which has been created based on information managed by the first management unit, and the second version, and a transmission unit configured to, in response to a request from the device, specify the action configuration data managed by the second management unit and to transmit the specified action configuration data and the first version to the device.

Abstract: An information update apparatus that updates first information stored in a vehicle control apparatus to second information. The information update apparatus includes: a download control unit that receives an update package including an update body that is a difference between the first information and the second information or the second information, procedure information including a procedure of updating the first information to the second information using the update body, and an activation condition that is a condition of starting updating the first information to the second information; and an event management unit that acquires a state of a vehicle on which the vehicle control apparatus and the information update apparatus are mounted, and causes an update execution unit to execute the update based on the procedure information when the state of the vehicle matches the activation condition.

Abstract: Systems and methods for updating remote databases are provided. In certain embodiments, a method includes determining an installed version for a remote database stored on a vehicle computer. Further, the method includes identifying an incremental update for the remote database, wherein the incremental update contains differences between a desired version for the remote database and the installed version. Additionally, the method includes providing the incremental update to the vehicle computer. Also, the method includes updating the remote database with the incremental update.

Abstract: In entity transition from legacy systems to a big data distributed data platform, numerous system-based architectural gaps have surfaced. There exists a need for a bridge component for each of the architectural gaps in order to support the entity transition to the big data distributed data platform. These bridge components include a variety of frameworks that are configured to automate certain processes that are needed for the transition. These processes have only become necessary as a result of the Hadoop platform. The automated processes include a snapshot load platform. The snapshot load platform enables the addition of a new view to the historical tables. The platform includes replacing the entire table in a truncated scenario. The platform includes replacing cases in a refresh or update scenario.

Abstract: A computer system modifies a compiled application to monitor performance. A request routing function of the compiled application is replaced with jump code that directs processing to a data collection function and backing up the request routing function. In response to receiving, during execution of the compiled application, an incoming request from a remote device for handling by the request routing function, the data collection function is executed based on the jump code. Using the data collection function, data associated with the incoming request is collected, the data comprising performance metrics. The backup of the request routing function is called using the data collection function to process the request and provide a response. Embodiments of the present invention further include a method and program product for modifying a compiled application to monitor performance in substantially the same manner described above.

Abstract: Described embodiments provide systems and methods of migrating clients between databases with different schemas. A database migrator may identify a first database accessible by the client including a first data object maintained in accordance with a first schema. The database migrator may generate, using the first database, a second database including the first data object from the first database. The database migrator may store, onto the second database in accordance with a second schema, a second data object received by the first database subsequent to generation of the second database. The database migrator may convert the first data object of the second database from the first schema to the second schema. The database migrator may migrate the client from the first database to the second database responsive to the completion of storing and converting.

Abstract: Disclosed is a method, a system and a computer readable medium for additive independent object modification. The method includes determining an association between an independent object modification and a base object of a software application, modifying at least one element of the base object based on the associated independent object modification, and configuring the software application to execute in a computer system using the modified base object.

Abstract: A method for an application management service is provided. In the method, a request for a list of available applications is received and a list of available applications is generated based on a whitelist. The list of available applications is transmitted and a selection of an available application is received. A package file corresponding to the selected application is generated and the package file and an installation file corresponding to the selected application are transmitted.

Abstract: A variety of applications can include apparatus and/or methods of operating the apparatus in which functionalities of a memory device of the apparatus can be extended by changing data flow behaviour associated with standard commands used between a host platform and the memory device. Such functionalities can include debug capabilities. In an embodiment, a standard write command and data using a standard protocol to write to a memory device is received in the memory device, where the data is setup information to enable an extension component in the memory device. An extension component includes instructions in the memory device to execute operations on components of the memory device. The memory device can execute operations of the enabled extension component in the memory device based on the setup information. Additional apparatus, systems, and methods are disclosed.

Abstract: Examples disclosed herein relate to providing a subset of software components customized for a device to the device prior to the device installing an associated operating system. An update platform including a repository including a number of software components associated with multiple operating systems and multiple hardware sets is to determine that an operating system install is to occur on the device. The update platform is to select a subset of the software components for the device based on the operating system install and hardware devices on the device. The update platform is to push the subset to a storage coupled to a baseboard management controller of the device prior to the operating system install.

Abstract: A controller for a memory component comprises a processing unit and at least one memory unit coupled to the processing unit, the memory unit comprising at least a first area for storing a user firmware and a second area for storing a controller firmware; the processing unit is configured to capture a memory address of a program instruction to be executed, compare the memory address with a reference value, and, based on that comparison, enable/restricting actions associated with the program instruction. A related memory component and related methods are also disclosed.

Abstract: A method for transporting configuration data may include determining that a customization created at a development system for a software application is being deployed at a production system hosting the software application. In response, a transport request including the customization may be verified to determine whether errors are present in the transport request. The errors may include dependent data that is required to deploy the customization at the production system being absent from the transport request. If errors are present in the transport request, a request for a corrected transport request may be sent to the development system. The customization included in the corrected transport request may be deployed at the production system by applying, to a configuration of the software application, the customization included in the corrected transport request. Related systems and articles of manufacture, including computer program products, are also provided.

Abstract: An electronic apparatus includes circuitry. The circuitry acquires, from an external server, information related to software that is downloadable on the electronic apparatus through a network and installable on the electronic apparatus. The circuitry determines whether at least conditions of authentication settings with respect to the electronic apparatus are satisfied. The circuitry displays, on a display, a notification screen for notifying the acquired information, according to a determination result.

Abstract: Apparatus and methods for deploying a web application including a plurality of binary objects. The methods may include isolating from the plurality of class files a class file in which a run-time behavior occurs. The methods may include updating the class file to produce a modified class file that does not have the behavior. The methods may include testing performance of the modified class file. The methods may include storing the class file in a dynamic configuration database. The methods may include recognizing the modified class file as being modified. The methods may include, using a cron job processor, reading the metadata. The methods may include compiling the modified class file into binary code. The methods may include executing the binary code instead of a different binary code that corresponds to the class file in which the run-time behavior occurs.

Abstract: Disclosed are systems and methods for trusted and secure application deployment via collective signature verification of the application artifacts. The trusted and secure application deployment may include receiving multiple application artifacts, decoding verifications from at least one cryptographic signature associated with each received artifact, comparing the verifications to a first set of requirements specified in an admission control list, comparing the verifications from a first received artifact to a second set of requirements specified in the verifications of a second received artifact, halting the deployment of the artifacts in response to the decoded verifications not satisfying one or more requirements from the first set of requirements or the second set of requirements, and deploying the artifacts to a set of compute nodes in response to the verifications decoded from the received artifacts satisfying the first set of requirements and the second set of requirements.

Abstract: A node may determine the topology of a computation system. The computation system is a network of nodes and multiple nodes are capable of being a grandmaster clock source. The method includes starting a best clock selection process, announcing clock information, and if the node is not acting grand master then receiving messages announcing clock information from other nodes of the network. Topology information is extracted from the messages, and if the node is acting grandmaster then retiring from the position of grandmaster. The best clock selection process steps are repeated until no node of the network becomes acting grandmaster.

Abstract: A method is provided to automatically perform a firmware upgrade of a wireless network. The method includes receiving by a node of the wireless network using slave-mode, a firmware upgrade request from another node of the wireless network and performing by the node a firmware upgrade using upgrade instructions included with the firmware upgrade request. The method further includes determining by the node using master mode, at least two eligible nearby nodes of the wireless network, updating the firmware upgrade request, and transmitting by the node using master mode the firmware upgrade request to the at least two eligible nearby nodes of the network.

Abstract: A platform security processor is booted and reads a set of write-once memory bits to obtain a minimum security patch level (SPL). The security processor then verifies that a table SPL for a firmware security table is greater than or equal to the minimum SPL. The firmware security table includes a plurality of firmware identifiers for firmware code modules, and a plurality of check SPL values each associated with respective one of the firmware identifiers. The security processor verifies SPL values in a plurality of firmware code modules by, for each firmware code module, accessing the module to obtain its firmware SPL value and check if the respective firmware SPL value is equal to or greater than a respective check SPL value in the firmware security table.

Abstract: Aspects of feature-based reporting of software versions are described. A set of features of a software configured on a computing device is ascertained. A first database is queried, based on a current version of the software installed on the computing device and the set of features, to obtain a list of relevant defects addressed for each feature in later versions of the software. A second database is queried, based on the current version of the software and the set of features, to obtain a list of relevant enhancements provided for each feature of the set of features in the later versions. A report is generated based on responses received from the first and second database. The report comprises, for each feature, a summary of the list of relevant defects addressed and the list of relevant enhancements provided in each later version.

Abstract: What is provided is a device which is added to a computer system and operated by firmware, the device including a policy designation unit configured to cause a storage unit to store, in advance, a user policy for defining conditions for determining the firmware in a case where there is no version information of the firmware recommended for the device, and a firmware determination unit configured to determine the firmware to be applied to the device on the basis of the user policy in a case where information indicating that there is no version information of the firmware has been acquired when the firmware is determined.

Abstract: A method of facilitating bidirectional programming of a user may include receiving an original program source code and evaluating the original program source code in the forward direction to generate a program output. The evaluation may occur in a programming environment. The program output may be displayed, and an indication of the user corresponding to modifying the program output may be received. The modified program output may be evaluated to generate an updated program source code, wherein the updated program source code, when evaluated, may generate the modified program output. The modified program output may be displayed in a display device of the user. A computing system including a bidirectional programming environment may also be included.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for centralized deployment of advertising code. Advertising code is stored for use by a web page, the advertising code comprising at least one of vendor advertising code or vendor reporting code. An application programming interface is provided for the web page to access the advertising code, the application programming interface allowing the advertising code to be updated such that updated advertising code is automatically provided to the web page without changing source code that the web page uses to accesses the advertising code. A request for advertising code is received from the web page using the application programming interface. The advertising code is determined to be a most recently updated version of advertising code stored by the computing device. A response to the request can be generated using the advertising code. The response can be transmitted to the web page.

Abstract: A game machine for development is connected to a host computer, reads out a file requested by a game program under development from a storage device, and executes the game program. In the game machine for development, a file confirmation section confirms whether or not the file requested by the game program is stored in the storage device, a file request section requests the host computer to transmit the file in a case where the file is not stored, and a storage processor acquires the file from the host computer and stores the file in the storage device.

Abstract: A method is provided for a key-value (KV) store database management system (DBMS) to provide a KV store to an application. The method includes providing a first low-level KV store and a top-level KV store. The first low-level KV store includes a root node and leaf nodes. The top-level KV store includes a leaf node pointing to the first low-level KV store. The leaf node in the top-level KV store includes a minimum key in the first low-level KV store and a pointer to the root node of the first low-level KV store. The method further includes determining a key-value insertion to the KV store would increase a number of keys in the first low-level KV store over an upper threshold and, in response to said determining, creating a second low-level KV store.

Abstract: Implementations include a first application server interacting with a first infrastructure table of a first version through a first access schema, providing, during an upgrade, a second application server to execute a portion of the upgrade by interacting with data schema through the first access schema, adjusting a structure of a second infrastructure table to provide an adjusted structure, the structure of the first version and the adjusted structure of the second version, the second infrastructure table including a copy of the first infrastructure table, providing a second access schema of the second version, providing a third application server configured to interact with data schema through the second access schema, and activating, by the third application server using an activator of the second version, objects of the second version, the activator including features that are different than an activator of the first version.

Abstract: Systems and methods are disclosed for providing a multi-component application, including a first and second component. Functionality of the application may be easily and rapidly modified by modification to the first component, without requiring modification to the second component. The first component may be implemented locally at a client device, while the second component is implemented remotely. While modification of the second component may require privileges of a remote location, a user of a client device may modify the first component while maintaining interoperability and compatibility with the second component, thereby enabling the end user to modify functionality of the multi-component application. In some instances, different versions of a first component are provided, and an end user of a client device is enabled to specify which version of the first component should be used.

Abstract: Apparatus and method for distributed authentication in a data storage system using block chain technology. In some embodiments, a requested transaction is generated to perform a selected security operation upon a data processing device in a computer network. The requested transaction is validated and propagated to a plurality of nodes. The nodes use a consensus mechanism to quasi-randomly select a particular node to generate a new block listing the requested transaction. The new block is validated, propagated among the plurality of nodes, and added to a block chain data structure. A processing node processes the requested transaction from the block chain data structure to authorize the selected security operation. Credits may be debited and credited between requesting nodes and the processing node for each transaction. Different types of credits may be used for different types of security operations.

Abstract: A multimedia streaming and network apparatus that includes a network module, a storage module and a multi-core processing module is provided. The multi-core processing module performs network communication through the network module and executes the hypervisor from the storage module to perform a multimedia streaming and network apparatus operation method that includes the steps outlined below. A virtual system is established. A router virtual machine is established in the virtual system to execute a router operating system configured to perform a network routing function. A multimedia streaming virtual machine is established in the virtual system to execute a multimedia streaming operating system configured to perform a multimedia playback function. The router virtual machine receives a multimedia network stream and transmits the multimedia stream through a bridge of the virtual system to be playback by the multimedia virtual machine.

Abstract: Embodiments of the present invention provide a computer-implemented method for generating an API difference description file that describes the differences between multiple API versions to assist in migrating an application program from a first version to a second version. The method includes receiving a first API description file of a first version of a web API, receiving a second API description file of a second version of the web API, generating an API difference description file that describes differences between the first and second API description files, and then updating an application program using the API difference description file.

Abstract: A method for detecting and identifying items of equipment communicating according to a Modbus communication protocol, connected by means of a first communication network of Ethernet type and by means of at least one second communication network, the first and the second communication network being linked by a communication gateway. A communication controller implementing such a method also is disclosed.

Abstract: A proposed modification to a record of a base data structure is identified, the records of the base data structure sorted by primary key. A type of modification of the proposed modification is identified. A record is added to a differential data structure of the type, the differential data structure record describing the proposed modification. A record is added to a delta data structure sorted by the primary key, the delta data structure record including the primary key value of the record, the type of the proposed modification, and a pointer to the record added to the differential data structure. Data can be fetched using the delta data structure to apply modifications to a set of records requested in the fetch and generate a modified set of records to be returned in a response to the request.

Abstract: Methods and systems may be associated with a cloud computing environment. A provisioning application data store may contain information associated with services representing a plurality of multi-tenant cloud applications including, for a first SaaS application, indications that a first tenant qualifies for early software updates and has opted to receive early software updates. A cloud platform provisioning framework may determine that a new software update to the first application is available and is scheduled to be installed within a pre-determined time period (e.g., one day or week). The framework may then access the provisioning application data store to verify that the first tenant qualifies for early software updates and has opted to receive early software updates. As a result of the verification, the cloud platform provisioning framework may automatically install the new software update to the first application for the first tenant prior to the scheduled installation.

Abstract: In general, in one aspect, the invention relates to a method for managing nodes in a cluster. The method includes obtaining metadata from controllers on a node, processing the metadata to obtain solution groups and a processing sequence of the solution groups, notifying a solution manager to initiate performance of pre-update tasks associated with the node, and performing, after the notifying, an update of the nodes in the cluster based on the processing sequence of the solution groups.

Abstract: A method includes monitoring access by a first user to a first updating server and a second updating server, suspending access by the first user to the second updating server when the first user accesses the first updating server to load code updates to the first updating server, comparing a first code update from the first updating server and a second code update from the second updating server, and downloading the first code update based on the comparing step. The downloading step occurs only when the first code update and the second code update are identical.

Abstract: The present disclosure provides enhanced techniques for dynamically monitoring and controlling user experiences on a website based on user activity of associated software applications. A system can offer a number of web pages to different user groups in an experiment. Each web page can describe respective configurations of an application, and each user group may receive a particular web page based on one or more criteria. An application installer and a resource identifier are transmitted to the client device in response to an installation request. A configuration file is also delivered to the client device based on the resource identifier. The configuration file causes the installation of a particular application configuration on the client device. The application configuration sends telemetry data indicating user retention data to a service. A usage report summarizing the telemetry data is generated and utilized to adjust the criteria for controlling one or more experiments.

Abstract: Systems and methods are disclosed for providing a multi-component application, including a first and second component. Functionality of the application may be modified by modification of the first component, potentially without requiring modification of the second component. However, some functionalities added to application may require modifications to both the first and second component. To maintain compatibility between components, the first component can be configured to detect versioning information of a second component, and adjust its functionality to disable functions unavailable due to lack of compatibility with a current version of the second component. The first component can notify an end user of any such lack of compatibility, and potentially instruct the end user in updating the second component.

Abstract: Performing non-disruptive upgrades to a cloud-based storage system may include receiving a request to update one or more components of the cloud-based storage system, the request comprising an identification of an updated codified state of the cloud-based storage system; determining, based on the updated codified state and a current state of the cloud-based storage system, one or more transitional codified states; and updating the one or more components by applying the one or more transitional codified states.

Abstract: Techniques for implementing a software-as-a-service (SaaS) infrastructure that supports flexible multi-tenancy are provided. In various embodiments, this SaaS infrastructure employs a hybrid design that can flexibly accommodate both single-tenant and multi-tenant instances of a SaaS application. Accordingly, with this infrastructure, a SaaS provider can advantageously support high levels of isolation between certain tenants of its application (as dictated by the tenants' needs and/or other criteria) while keeping the marginal cost of operating the infrastructure as low as possible.

Abstract: Systems, methods, and computer-readable media are disclosed for a systems and methods for improved smart infrastructure data transfer. An example method may involve determining, at a first time, that a first number of smart infrastructure devices included within a smart infrastructure system are accessible over a network. The example method may also involve creating a first software image including a software update for the first number of smart infrastructure devices. The example method may also involve sending, over the network, the first software image to a device of the smart infrastructure system. The example method may also involve determining, at a second time, that a second number of smart infrastructure devices included within the smart infrastructure system are accessible over the network. The example method may also involve determining that the first number of devices is different than the second number of devices.

Abstract: Disclosed herein are systems and methods for database replication to a remote deployment with automated fulfillment. In an embodiment, a data platform provisions a remote-deployment account of a data provider at a remote deployment of the data platform with a set of one or more replication-preparation objects associated with a primary-deployment database that is resident in a primary-deployment account of the data provider at a primary deployment of the data platform. After the provisioning, the data platform detects receipt of a database-replication request associated with a data consumer, requesting availability of a local instance of the primary-deployment database in the remote-deployment account of the data provider. The data platform responsively performs one or more remote-deployment-activation operations, which makes available to the data consumer a local instance of the primary-deployment database in the remote-deployment account of the data provider at the remote deployment of the data platform.

Abstract: Systems and methods are disclosed to implement a request routing layer of a service provider system, where the request routers are aware of different versions of a service implemented by the servers of the system. In embodiments, the request routers may discover the different versions of the service via periodic health messages or request responses from the servers. Requests are routed to the servers according to a routing policy that specifies the relative proportions of requests that are to be routed to each version. Version metrics generated from the requests may be captured and provided to a version change manager, which may update the routing policy based on the metrics, either increasing or decreasing the proportion of requests for the different versions. In embodiments, the request router may implement additional rules that control their routing behavior in response to detected error conditions.