Abstract: Determination and provision of improved representations of program flow control are provided by a method that monitors execution of binary code of a program on a computer system. The monitoring includes monitoring manipulation(s) of call stack(s) maintained by the computer system for the execution of the binary code. The method, based on the monitoring, determines function call pattern(s) and branch pattern(s) exhibited by the execution of the binary code. The method identifies, from the binary code and using the determined function call pattern(s) and branch pattern(s), function calls and branches, relations between the function calls and branches, and function and variable names. The method also provides a representation of program flow control of the program using the identified function calls and branches, relations, and function and variable names.

Abstract: Determination and provision of improved representations of program flow control are provided by a method that monitors execution of binary code of a program on a computer system. The monitoring includes monitoring manipulation(s) of call stack(s) maintained by the computer system for the execution of the binary code. The method, based on the monitoring, determines function call pattern(s) and branch pattern(s) exhibited by the execution of the binary code. The method identifies, from the binary code and using the determined function call pattern(s) and branch pattern(s), function calls and branches, relations between the function calls and branches, and function and variable names. The method also provides a representation of program flow control of the program using the identified function calls and branches, relations, and function and variable names.

Abstract: An embodiment includes generating a caller list of callers that issue requests for calling a designated program at runtime. The embodiment also includes generating an authorized caller list of authorized callers allowed to call the designated program, wherein the authorized callers are selected from among callers on the caller list. The embodiment also includes generating an authorization key for each of the authorized callers that the designated program will require as a condition for completing call requests.

Abstract: The technology relates to a seamless interface between an autonomous vehicle service provider and one or more ridesharing, ride-hailing or delivery partner companies, in order to provide timely, efficient rider or delivery services and support. A partner trip application programming interface (API) provides robust features to the ridesharing or ride-hailing partner companies and also supports delivery of meals, groceries, packages or other cargo. For instance, the API may be employed with delivery partners (e.g., food, package or bulk cargo delivery), and/or for concierge services (e.g., a hotel or medical provider or an e-commerce specialist that coordinates deliveries). The technology supports both ad hoc and scheduled trips. Agents for different partners may schedule trips to or from specific stores or other (geofenced) locations, and observe and manage trips for an entire enterprise. Permissions can be tailored for each agent.

Abstract: Example methods for a network device to perform address resolution handling. The method may comprise: in response to a first distributed router (DR) port of a first DR instance detecting an address resolution request from a second DR port of a second DR instance, generating a modified address resolution request that is addressed from a first address associated with the first DR port instead of a second address associated with the second DR port. The modified address resolution request may be broadcasted within a logical network that is connected to the first DR instance through network extension. The method may also comprise: in response to detecting an address resolution response that includes protocol-to-hardware address mapping information associated with an endpoint located on the logical network, generating and sending a modified address resolution response towards the second DR port of the second DR instance.

Abstract: A computer-implemented method, computer program product and computer system are provided. A processor receives an indication of sensitive data in one or more files. A processor updates at least one bit in the virtual address space for the one or more files indicated to have sensitive data. A processor, in response to a program accessing the one or more files, evaluates a respective virtual address for the one or more files. A processor, in response to the at least one bit in the respective virtual address for the one or more files, marks intermediate data generated by the program as sensitive data.

Abstract: Embodiments of the present disclosure relate to a method, system, and computer program product for dynamic update of a computer program in memory. According to the method, one or more processors obtain incremental information, the incremental information specifying an incremental update to at least one section of at least one target function in a computer program. One or more processors identify, based on the incremental information, the at least one target function to be updated from the computer program. One or more processors generate at least one updated copy of the at least one target function by updating the at least one section of the at least one target function based on the incremental information. One or more processors update the computer program based on the at least one updated copy of the at least one target function while the computer program is running.

Abstract: A novel design of a gateway that handles traffic in and out of a network by using a datapath daemon is provided. The datapath daemon is a run-to-completion process that performs various data-plane packet-processing operations at the edge of the network. The datapath daemon dispatches packets to other processes or processing threads outside of the daemon by utilizing a user space network stack.

Abstract: Mechanisms are provided for scheduling a workload in a cloud computing system. A cloud affinity factor (CAF) computer model is trained, via a machine learning process based on a training dataset comprising static characteristics of a workload binary for a workload, and dynamic characteristics corresponding to historical performance data for the workload, such that the trained CAF computer model predicts a performance classification for a given workload binary. The trained CAF computer model processes a new workload to generate a performance classification for the new workload. Cloud affinity factor(s) are generated based on the performance classification for the new workload. Node affinity and dispatch rule(s) are applied to the cloud affinity factor(s) to select one or more nodes of the cloud computing system to which to dispatch the workload. The workload is then scheduled on the selected one or more nodes.

Abstract: A system includes one or more data processors configured to run a basic input/output system (BIOS) service and a bootloader configuration manager for tuning kernel parameters. The system further includes a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations. The operations include receiving administrative inputs and checking the administrative inputs against a checklist to determine whether any errors are introduced by the administrative inputs. The operations further include writing the administrative inputs to a temporal configuration file in response to no errors being introduced by the administrative inputs. The operations further include exporting the temporal configuration file to a designated output path. The exported temporal configuration file includes kernel parameter settings for configuring a bootloader of a computing device.

Abstract: Some embodiments of the invention provide novel methods for providing a stateful service at a network edge device (e.g., an NSX edge) that has a plurality of north-facing interfaces (e.g., interfaces to an external network) and a plurality of corresponding south-facing interfaces (e.g., interfaces to a logical network). A set of interfaces on each side of the network edge device for a set of equal cost paths, in some embodiments, are bonded together in the network edge device to correspond to a single interface on either side of a logical bridge including at least one logical switch providing a stateful service implemented by the network edge device. The bond is implemented, in some embodiments, by a bonding module executing on the network edge device that maintains a mapping between ingress and egress interfaces to allow deterministic forwarding through the network edge device in the presence of bonded interfaces.

Abstract: Automated material welding including starting a welding operation, scanning a weld in-progress, creating a simulation of the weld in-progress, detecting a flaw in the weld in-progress according to the scanning and the simulation, remediating the weld in-progress, and completing the welding operation.

Abstract: A method for selecting between a plurality of paths for sending an encrypted packet from a source endpoint to a destination endpoint is provided. The method selects a first path of the plurality of paths for sending the encrypted packet from the source endpoint to the destination endpoint, each of the plurality of paths associated with a different one of a plurality of source ports, the encrypted packet being encrypted based on a security association established between the source endpoint and the destination endpoint in accordance with an IPSec protocol. The method further encapsulates, based on the SA having NAT-T enabled, the encrypted packet with a UDP header having a first source port associated with the first path. The method then transmits the encapsulated encrypted packet from the source endpoint to the destination endpoint via the first path.

Abstract: In an embodiment, a computer-implemented method for using virtual tunnel interface teaming to achieve load balance and redundancy in virtual private networks (“VPNs”) is disclosed. In an embodiment, a method comprises: receiving, by a gateway, configuration data from a control plane; based on the configuration data, configuring on the gateway a bonded virtual tunnel interface (“bonded VTI”) having a plurality of slave virtual tunnel interfaces (“slave VTIs”); configuring a plurality of VPN tunnels between the plurality of slave VTIs configured on the gateway and a plurality of slave VTIs configured on a remote gateway; configuring an IPsec VPN tunnel between the bonded VTI configured on the gateway and a corresponding bonded VTI configured on the remote gateway; logically combining the plurality of VPN tunnels into the IPsec VPN tunnel; and enabling communications of IPsec VPN traffic via the IPsec VPN tunnel.

Abstract: A piezoelectric actuator includes a square suspension plate, an outer frame, a plurality of brackets and a square piezoelectric ceramic plate. The outer frame is arranged around the suspension plate. A second surface of the outer frame and a second surface of the suspension plate are coplanar with each other. Each of the plurality of brackets has two ends, a first end is perpendicular to and connected with the suspension plate, and a second end is perpendicular to and connected with the outer frame for elastically supporting the suspension plate. Each bracket has a length in a range between 1.22 mm and 1.45 mm and a width in a range between 0.2 mm and 0.6 mm. A length of the piezoelectric ceramic plate is not larger than a length of the suspension plate. The piezoelectric ceramic plate is attached on a first surface of the suspension plate.

Abstract: A thrombectomy device (100) comprising an aspiration pump (10), a catheter (20) and a valve (30) is provided. The aspiration pump (10) is for providing an negative pressure continuously or by interval. The catheter (20) having a distal end (23), mid portion (22) and a proximal end (21) and defining a longitudinal axis. The valve (30) connects between the aspiration pump (10) and the proximal end (21) of the catheter (20) or connects to the catheter (20). Wherein, the catheter (20) comprises at least one elastic area (24), which is compressed along the longitudinal axis in response to application of the negative pressure and expanded along the longitudinal axis in response to relieve of the negative pressure.

Abstract: Provided are an anti-HER3 antibody and an anti-HER3 antibody-drug conjugate and a medical use thereof, specifically, the anti-HER3 antibody, and the anti-HER3 antibody-drug conjugate as represented by general formula (Pc-L-Y-D), wherein Pc is an anti-HER3 antibody, and L, Y and n are as defined in the description.

Abstract: A method for recovering lithium from a lithium precipitation mother liquor, the method using the following cycle steps including adsorption, displacement, desorption and transformation: a. mounting a lithium-sodium separation resin in a resin column, and adding the lithium precipitation mother liquor to the resin column for adsorption, wherein the adsorption rate can reach 90% or more; b. after adsorption, washing the resin with water, displacing the resin with a lithium-salt-containing solution to wash out residual sodium from the resin; c. after displacement, desorbing the resin by means of an acid solution to obtain a solution with a high lithium content and a low sodium content, which solution has passed desorption criteria; and d. after desorption, carrying out reverse transformation on the resin by means of a transformation solution in order to ensure that no bubbles appear and then reduce the adsorption effect during the adsorption process.

Abstract: This document provides methods and materials for using butyrylcholinesterases (BChE) to treat cancer (e.g., triple negative breast cancer or prostate cancer). For example, methods and materials for using nucleic acid vectors (e.g., viral vectors) to express BChE polypeptides under conditions that reduce the number of cancer cells (e.g., triple negative breast cancer cells or prostate cancer cells) within a mammal (e.g., a human) and/or reduce the growth rate of cancer cells (e.g., triple negative breast cancer cells or prostate cancer cells) within a mammal (e.g., a human) are provided.

Abstract: A method, computer system, and a computer program for monitoring synchronization and aggregation are provided. The method may include receiving a plurality of metrics and identifying a plurality of metadata associated with the plurality of metrics. The method may further include calculating a hash value of the plurality of metadata based on the plurality of metrics. The method may further include detecting at least one modification to the plurality of metadata based on the hash value and updating the plurality of metrics based on the at least one modification in which the plurality of metrics are displayed in a self-adapting metric diagram.