Abstract: A method, computer system, and a computer program product for determining a cluster connectivity is provided. The present invention may first include receiving as input a connectivity graph. The present invention may then include generating a minimal list of firewall rules from the received connectivity graph by iteratively merging firewall rules with commonality of connectivity attribute.

Abstract: An example system includes a processor to receive a source code sample to be classified. The processor can execute a hybrid code analysis to generate an internal analysis state. The processor can extract features from the internal analysis state via a trained machine learning model modified using transfer learning. The processor can generate a label based on the extracted features via a machine learning classifier model trained on internal analysis states of hybrid code analyses.

Abstract: Embodiments relate to a system, program product, and method for random generation of recoverable errors in the generated instruction stream for post-silicon validation testing. The intentional raising and handling of exceptions in post-silicon validation exercisers randomly creates recoverable errors in a generated instruction test stream. Multiple exceptions may be raised either in a single instruction or in multiple instructions, while the present instruction is permitted to fully execute. The errors responsible for raising the exceptions are automatically repaired.

Abstract: An example system includes a processor to receive a source code sample to be classified. The processor can execute a hybrid code analysis to generate an internal analysis state. The processor can extract features from the internal analysis state via a trained machine learning model modified using transfer learning. The processor can generate a label based on the extracted features via a machine learning classifier model trained on internal analysis states of hybrid code analyses.

Abstract: A method, an apparatus and a computer program product for detecting and protecting against just-in-time Return-Oriented Programming (ROP) attacks on computer code by selective runtime activation of anti-ROP defenses. The method comprises executing a dynamic agent while the computer code is being executed that monitors for exploitation of memory exposure vulnerabilities and flow hijack vulnerabilities within the computer code. The dynamic agent identifies, during execution of the computer code, an exposed portion of the computer code that was exposed by the exploitation of the one or more memory exposure vulnerabilities. In o response to the identification of the exposed portion of the computer code, the dynamic agent performs an anti-ROP defense on the exposed portion.

Abstract: A method, computer program product, and computer system for physical memory allocation of a computer system, the method including collecting computer system architecture specifications, a configuration, and user requirements, identifying a plurality of memory intervals to be allocated, based on the computer system architecture specification, the configuration, and the user requirements, grouping memory intervals into a plurality of color groups, wherein each memory interval within each of the plurality of color groups comprise identical memory attributes, dividing memory into sets of memory segments, wherein each set of memory segment is assigned a color of the plurality of color groups, allocating a memory interval of the plurality of memory intervals within the set of memory segments of corresponding color, and selecting a page size for a translation of a memory interval of the plurality of memory intervals, depending upon the allocation of the memory interval and the sets of memory segments.

Abstract: A method, computer program product, and computer system for physical memory allocation of a computer system, the method including collecting computer system architecture specifications, a configuration, and user requirements, identifying a plurality of memory intervals to be allocated, based on the computer system architecture specification, the configuration, and the user requirements, grouping memory intervals into a plurality of color groups, wherein each memory interval within each of the plurality of color groups comprise identical memory attributes, dividing memory into sets of memory segments, wherein each set of memory segment is assigned a color of the plurality of color groups, allocating a memory interval of the plurality of memory intervals within the set of memory segments of corresponding color, and selecting a page size for a translation of a memory interval of the plurality of memory intervals, depending upon the allocation of the memory interval and the sets of memory segments.

Abstract: A method, computer program product, and computer system for physical memory allocation of a computer system, the method including collecting computer system architecture specifications, a configuration, and user requirements, identifying a plurality of memory intervals to be allocated, based on the computer system architecture specification, the configuration, and the user requirements, grouping memory intervals into a plurality of color groups, wherein each memory interval within each of the plurality of color groups comprise identical memory attributes, dividing memory into sets of memory segments, wherein each set of memory segment is assigned a color of the plurality of color groups, allocating a memory interval of the plurality of memory intervals within the set of memory segments of corresponding color, and selecting a page size for a translation of a memory interval of the plurality of memory intervals, depending upon the allocation of the memory interval and the sets of memory segments.

Abstract: A method, computer program product, and computer system for physical memory allocation of a computer system, the method including collecting computer system architecture specifications, a configuration, and user requirements, identifying a plurality of memory intervals to be allocated, based on the computer system architecture specification, the configuration, and the user requirements, grouping memory intervals into a plurality of color groups, wherein each memory interval within each of the plurality of color groups comprise identical memory attributes, dividing memory into sets of memory segments, wherein each set of memory segment is assigned a color of the plurality of color groups, allocating a memory interval of the plurality of memory intervals within the set of memory segments of corresponding color, and selecting a page size for a translation of a memory interval of the plurality of memory intervals, depending upon the allocation of the memory interval and the sets of memory segments.

Abstract: A method for generating address translation stimuli for post-silicon functional validation is provided. The method includes determining a plurality of memory configurations based on a plurality of translation tables used by a stimuli generator to solve a plurality of test templates, providing a test template from the plurality of test templates, selecting a memory configuration from the plurality of memory configurations based on the test template, a memory variable, and a set of testing parameters, identifying a translation table from the plurality of translation tables based on the test template, allocating a memory space for the translation table, and executing the test template on the stimuli generator based on the translation table, the memory space, and the set of testing parameters.

Abstract: A method for generating address translation stimuli for post-silicon functional validation is provided. The method includes determining a plurality of memory configurations based on a plurality of translation tables used by a stimuli generator to solve a plurality of test templates, providing a test template from the plurality of test templates, selecting a memory configuration from the plurality of memory configurations based on the test template, a memory variable, and a set of testing parameters, identifying a translation table from the plurality of translation tables based on the test template, allocating a memory space for the translation table, and executing the test template on the stimuli generator based on the translation table, the memory space, and the set of testing parameters.

Abstract: A method and apparatus for transmitting frames, the method comprising: determining a maximal frame size, maximal frame size violation threshold larger than the maximal frame size, maximal bitrate and maximal transmission time; receiving a frame to be transmitted, the frame having a size; responsive to the size not exceeding the maximal frame size: transmitting the frame during a time period not exceeding the maximal transmission time; responsive to the size exceeding the maximal frame size but not exceeding the maximal frame size violation threshold: transmitting the frame at a bitrate substantially equal to the maximal bitrate; and transmitting at least one subsequent frame during a time period shorter than the maximal transmission time; and responsive to the size exceeding the maximal frame size violation threshold: transmitting the frame; and skipping one or more subsequent frames.

Abstract: A computer-implemented method, apparatus and computer program product for overcoming data loss in streaming video in IP networks. The method comprising: receiving by a computing device associated with a server transmitting video, one or more notifications from a client, each notification related to a missing packet or a corrupted frame, wherein the packet or the frame are to be received by the client; determining a situation based upon the notifications; and subject to the situation being a first situation, transmitting to the client an indication that the client is to transmit to the server notifications of a first type, and subject to the situation being a second situation, transmitting to the client an indication that the client is to transmit to the server notifications of a first type and of a second type.

Abstract: A computer-implemented method, apparatus and computer program product for overcoming data loss in streaming video in IP networks. The method comprising: receiving by a computing device associated with a server transmitting video, one or more notifications from a client, each notification related to a missing packet or a corrupted frame, wherein the packet or the frame are to be received by the client; determining a situation based upon the notifications; and subject to the situation being a first situation, transmitting to the client an indication that the client is to transmit to the server notifications of a first type, and subject to the situation being a second situation, transmitting to the client an indication that the client is to transmit to the server notifications of a first type and of a second type.

Abstract: A method and apparatus for transmitting frames, the method comprising: determining a maximal frame size, maximal frame size violation threshold larger than the maximal frame size, maximal bitrate and maximal transmission time; receiving a frame to be transmitted, the frame having a size; responsive to the size not exceeding the maximal frame size: transmitting the frame during a time period not exceeding the maximal transmission time; responsive to the size exceeding the maximal frame size but not exceeding the maximal frame size violation threshold: transmitting the frame at a bitrate substantially equal to the maximal bitrate; and transmitting at least one subsequent frame during a time period shorter than the maximal transmission time; and responsive to the size exceeding the maximal frame size violation threshold: transmitting the frame; and skipping one or more subsequent frames.