Abstract: A memory management system is implemented at an application server. The management system includes a configuration file including configuration settings for the application server and applications. The configuration settings include multiple memory management rules. The management system also includes a memory management framework configured to manage settings of resources allocated to the applications based on the memory management rules. The applications requests for the resources through one or more independently operable request threads. The management system also includes multiple application programming interfaces (APIs) configured to facilitate communication between the applications and the memory management framework. The management system further includes a monitoring engine configured to monitor an execution of the request threads and perform actions based upon the configuration settings.

Abstract: Approaches for securing resources of a virtual machine. An application executes on a host operating system. A user instructs the application to display a file. In response, a host module executing on the host operating system instructs a guest module, executing within a virtual machine, to render the file within the virtual machine. The application displays the file using screen data which was created within the virtual machine and defines a rendered representation of the file. The user is prevented from accessing any resource of the virtual machine unrelated to the file. The virtual machine may consult policy data to determine how to perform certain user-initiated actions within the virtual machine. Examples of the file include image, a document, an email, and a web page.

Abstract: A system for migrating services including a primary virtual environment (VE) with a service manager and a VE manager, and a secondary VE, where both VEs execute a plurality of services, a set of physical hardware, and a hypervisor including a service module for storing extended service attributes for each service. The hypervisor manages migration one of the plurality of services executing on a source VE, obtain hardware requirements of the source VE, obtain extended service attributes associated with the one of the plurality of services to be migrated, and select a target VE for migration of the service. The target VE is selected based on the source VE data and the extended service attributes of the one service. The hypervisor migrates the one service by configuring the target VE and installing the service on the target VE using install scripts that execute on the target VE.

Abstract: A method includes receiving a request to access a resource; determining a presence of a memory buffer in a hardware-assisted memory pool; and determining a response to the request to access the resource based on the presence of the memory buffer. A system includes a plurality of processors, a resource, and a hardware-assisted memory pool including a memory buffer; one of the plurality of processors receives a request to access the resource, determines a presence of the memory buffer, and determines a response to the request to access the resource based on the presence of the memory buffer.

Abstract: Systems and methods for adjusting the rate of transmission of the execution state of a virtual machine undergoing live migration. An example method may comprise: determining, by a migration agent executing on a computer system, a first rate being a rate of change of an execution state of a virtual machine undergoing live migration from an origin host computer system to a destination host computer system; determining a second rate being a rate of transferring the execution state of the virtual machine from the origin host computer system to the destination host computer system; determining that a ratio of the first rate to the second rate exceeds a threshold convergence ratio; and reducing the rate of transferring the execution state of the virtual machine from the origin host computer system to the destination host computer system.

Abstract: An initial request for a reference to a data container is sent to a distributed enhanced virtual machine native interface component of a distributed virtual machine in response to receiving, from a remote execution container, the initial request for the reference to the data container at a distributed enhanced remote execution container native interface component of the distributed virtual machine. A data mirror data structure including immutable data and the reference to the data container is received. The received data mirror data structure including the immutable data and the reference to the data container is stored within a local memory storage area. A reference to the locally-stored data mirror data structure is returned to the remote execution container in response to the initial request for the reference to the data container.

Abstract: Extended features such as registers and functions within processors are made available to operating systems (OS) using an extended-state driver and by modifying instruction set extensions, such as XSAVE. A map-table designates a correspondence between memory locations for storing data relating to extended features not supported by the OS and called by an application. As a result, applications may utilize processor resources which are unsupported by the OS.

Abstract: A system for providing model level protection for resources holding data accessed by multiple tasks in a model is discussed. The protection occurs at the model level so that the protection mechanism does not interfere with model dynamics. Resources concurrently accessed by multiple tasks are identified so that a unified protection mechanism can be applied to the resource. A user interface may be provided which enables the selection of a particular type of protection mechanism for the data in the resource. User supplied protection mechanisms may also be implemented.

Abstract: A diagnostic virtual machine having access to resources of an infrastructure as a service cloud may be created. A user device may be provided access to the diagnostic virtual machine. In some embodiments, the diagnostic virtual machine may be configured to monitor a cluster of hypervisors, and the resources of the infrastructure as a service cloud which the diagnostic virtual machine has access to may include physical resources of the infrastructure as a service cloud that are associated with the cluster of hypervisors.

Abstract: The present invention provides a particular efficient system of scheduling of tasks for parallel processing, and data communication between tasks running in parallel in a computer system. A particular field of application of the present invention is the platform-independent simulation of decomposition/partitioning of an application, in order to obtain an optimal implementation for parallel processing.

Abstract: A computer-implemented method for sending information to guest systems within virtual machines may include receiving, from a guest system within a virtual machine hosted on a host system, a request for virtual device information about a virtual device which may inaccurately represent to the guest system a state of a physical storage device connected to the host system, gathering physical device information via the host system about the physical storage device connected to the host system, determining a mapping of the virtual device within the guest system to the physical storage device connected to the host system, correlating the physical device information with the mapping to determine accurate information about the virtual device and sending the accurate information about the virtual device from the host system to the guest system within the virtual machine. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method and a device for file transfer protocol (FTP) deadlock detection and self recovery are provided by the disclosure in order to solve the sudden deadlock problem in the FTP upload task. The method includes: if a daemon determines that a deadlock occurs in an FTP upload task by a heartbeat detection mechanism, the socket resources used by the FTP upload task is recorded at the storage location in a socket resource cycle queue, and a process of ending the FTP upload task is started; determining whether the socket resource cycle queue is full, if it is not full, the socket resources used by the FTP upload task in the current deadlock is put into the socket resource cycle queue, otherwise, the earliest socket resources in the socket resource cycle queue are released, and the socket resources used by the FTP upload task in the current deadlock is put into the socket resource cycle queue.

Abstract: A system may receive a request to create a virtual machine, create the virtual machine on a first physical server in response to the request, and receive parameters for configuring a second physical server. The system may also configure the second physical server in accordance with the parameters during an installation of an operating system on the second physical server, and notify a user that the second physical server is ready for use.

Abstract: A mechanism for utilizing a virtual machine cloud for automated test system deployment is disclosed. A method of embodiments of the invention includes selecting a master image used to initialize one or more virtual machines (VMs), providing a list of repository definitions and test packages to the one or more VMs, and receiving test results from executing the test packages on a computer system of the VM defined by the master image, wherein the computer system includes an operating system and one or more software applications.

Abstract: A method for virtual disk usage transparency may include 1) identifying a secondary volume at a secondary site configured for synchronization with a primary volume at a primary site, 2) identifying a set of blocks present within the primary volume but not present within the secondary volume, 3) identifying a virtual disk file within the primary volume, the virtual disk file including at least one block within the set of blocks, 4) determining that the block represents an unused block within a guest file system configured to use the virtual disk file, 5) selecting a subset of the set of blocks to transmit from the primary site to the secondary site, where selecting the subset includes excluding the block from the subset, and 6) transmitting the subset of the set of blocks from the primary site to the secondary site. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A system for handling client/server traffic and communications pertaining to the delivery of hypertext information to a client. The system includes a central server which processes a request for a web page from a client. The system operates by receiving a request for a web page from a client. Relevant information is then processed by an annotator to generate additional relevant computer information that can be incorporated to create an annotated version of the requested web page which includes additional displayable hypertext information. The central server then relays the additional relevant computer information to the client so as to allow the annotated version of the requested web page to be displayed. The central server can also interact with different servers to collect and maintain statistical usage information.

Abstract: Approaches for executing untrusted software on a client without compromising the client using micro-virtualization to execute untrusted software in isolated contexts. A template for instantiating a virtual machine on a client is identified in response to receiving a request to execute an application. After the template is identified, without human intervention, a virtual machine is instantiated, using the template, in which the application is to be executed. The template may be selected from a plurality of templates based on the nature of the request, as each template describe characteristics of a virtual machine suitable for a different type of activity. Selected resources such as files are displayed to the virtual machines according to user and organization policies and controls. When the client determines that the application has ceased to execute, the client ceases execution of the virtual machine without human intervention.

Abstract: Requests of a PCD are determined if they are part of a transaction involving a plurality of resources. Next, each resource that is part of the request involving multiple resources is identified. As each resource is identified, a framework manager determines if a resource has completed processing the request directed at it. If the resource has returned a value that it has completed the request, then the framework manager allows the resource to return to an unlocked state while other requests in the transaction are being processed. If the resource has not completed processing and has deferred some of the processing to the end of the transaction, then the resource is added to a deferred unlock list. It is determined if the resource is a dependent on another resource in the current request path. If it is dependent, then the other resource is also placed on the deferred unlock list.

Abstract: A multiprocessing system executes a plurality of processes concurrently. A process execution circuit (10) issues requests to access a shared resource (16) from the processes. A shared access circuit (14) sequences conflicting ones of the requests. A simulating access circuit (12) generates signals to stall at least one of the processes at simulated stall time points selected as a predetermined function of requests from only the at least one of the processes and/or the timing of the requests from only the at least one of the processes, irrespective of whether said stalling is made necessary by sequencing of conflicting ones of the requests. Thus, part from predetermined maximum response times, predetermined average timing can be guaranteed, independent of the combination of processes that is executed.

Abstract: Techniques are disclosed for providing thread specific protection levels in a multithreaded processing environment. An associated method includes generating a group of threads in a process, one of the group of threads opening a thread entity, and that one of the group of threads specifying one or more levels of access to the thread entity for the other threads. In one embodiment, when a first of the threads attempts to perform a specified operation on the thread entity, the method of this invention determines whether that first thread is the one of the group of threads that opened the thread entity. When the first thread is not that one of the group of threads, the first thread is allowed to perform the specified operation if and only if such operation is permitted by the specified one or more levels of access.