Abstract: An improved unit test framework that validates large datasets generated by a data management system is described herein. Typical unit test frameworks validate functions. However, the improved unit test framework validates the underlying data. For example, after each step of a data transformation process implemented by the data management system, the data management system can execute a data unit test that loads data sets into memory, checks a set of preconditions, and applies unit test logic to the loaded data sets. In some embodiments, the data management system executes the data unit tests asynchronously with the data transformation processes and therefore do not interfere with the data transformation processes. Rather, the data management system generates and transmits a notification when any step of the data transformation process fails a particular data unit test.

Abstract: A device configured to periodically monitor operational activity of hardware components within a computing system infrastructure. The device is further configured to detect an issue that is associated with a hardware component, to identify commands that are sent to the hardware component to resolve the first issue, and to identify a test environment configuration for simulating the effect of sending the commands to the hardware component on the computing system infrastructure. The device is further configured to generate a solution script based on the identified commands and a testing script based on the identified test environment configuration, and to store an association between the first issue, the solution script, and the testing script in a script map.

Abstract: The present enhancement leaves production systems undisturbed while a remote application (“testbed application”) executes elsewhere (“testbed host”). An intermediary computing device hosts an enhanced pseudo-disk driver, pseudo-disks, and an enhanced media agent. The enhanced pseudo-disk driver creates the pseudo-disks, each one representing an associated point-in-time backup image residing in secondary storage. A network, e.g., an Internet Protocol (IP) network or a Fibre Channel (FC) Storage Area Network (SAN), connects the intermediary device with the testbed host, and the enhanced media agent exposes pseudo-disks over the network using iSCSI or FC protocol, respectively. The testbed application uses an exposed pseudo-disk as its recovery data source, such that pseudo-disk resources provide data on an as-needed basis sufficient for the testbed application to operate, yet (a) without restoring the entire associated backup image from secondary storage and (b) without impacting the production environment.

Abstract: Examples disclosed herein relate to sharing policy and configuration information related to a configuration item (CI). In an example, a configuration item coupled to a network fabric that is managed via a first management platform may be identified. The configuration item may be managed via a second management platform. A policy associated with the CI may be determined from the second management platform. Configuration information related to the policy may be determined from the second management platform. The policy and the configuration information related to the policy may be stored. The policy and the configuration information related to the policy may be shared with first management platform, wherein the policy and the configuration information related to the policy may be useable to define configuration information for a configuration item managed via first management platform.

Abstract: A computing device and an operation method thereof are provided. The computing device includes a plurality of memories and a processing circuit. The processing circuit is coupled to the memories. The processing circuit dynamically determines which of the plurality of memories to store at least one lookup table according to characteristics of the at least one lookup table. The processing circuit may then execute at least one algorithm by using the at least one lookup table.

Abstract: Systems and methods are provided for optimally determining sensor or infrastructure placement in a fluid network, for determining an anomaly of interest in the fluid network, and for determining sensor coverage in a fluid network, which are based on a model of the fluid network represented by a directed graph.

Abstract: The invention concerns the method of testing of the IoT system process behaviour in the case of limited network connection affecting part of the tested process where the basic structure for the tested process modelling is a directed graph and where the parts of the process in which failures of the network connection are expected are modelled as specific subgraphs—zones with a risk of connection failure (hereinafter referred to as ZRCF).

Abstract: A computer-implemented method of representing a software application to be coded in a procedural language is provided. An initial UML class diagram modelizing the software application is received. Data definition classes within the initial UML class diagram are identified. Class operations within the initial UML class diagram are identified. The initial UML class diagram is modified by a processor to generate an extended UML class diagram by applying a data object stereotype to the identified data definition classes, and applying a program stereotype to the identified class operations. The data definition classes represent logical data, and the class operations represents programs.

Abstract: An information processing apparatus includes: a memory; and a processor coupled to the memory and the processor configured to calculate shortening rates by comparing execution times for each of a plurality of functions in a case where an evaluation target program is executed in an execution environment with execution times for each of the plurality of functions in a case where the evaluation target program is executed in a simulation environment, and generate a simulation program to be used in the simulation environment based on the calculated shortening rates and the evaluation target program.

Abstract: An apparatus, method, and non-transitory computer readable medium provide for configuring a flow algorithm automatically by using a primary element data sheet in multivariable smart line transmitters. The apparatus includes a memory and at least one processor operably connected to the memory. The at least one processor receives a datasheet and an algorithm related to a device in an industrial process and control system, extracts parameters from the datasheet, maps parameters to algorithm items related to the algorithm, generates a template based on the algorithm items and the mapped parameters, and downloads the template to the device.

Abstract: Malicious network content is identified based on the behavior of one or more virtual environment components which process network content in a virtual environment. Network content can be monitored and analyzed using a set of heuristics. The heuristics identify suspicious network content communicated over a network. The suspicious network content can further be analyzed in a virtual environment that includes one or more virtual environment components. Each virtual environment component is configured to mimic live environment components, for example a browser application component or an operating system component. The suspicious network content is replayed in the virtual environment using one or more of the virtual environment components. The virtual environment component behavior is analyzed in view of an expected behavior to identify malicious network content. The malicious network content is then identified and processed.

Abstract: An electronic device includes a controller functional block and a computational functional block. During operation, while the computational functional block executes a test portion of a workload at at least one precision level, the controller functional block monitors a behavior of the computational functional block. Based on the behavior of the computational functional block while executing the test portion of the workload at the at least one precision level, the controller functional block selects a given precision level from among a set of two or more precision levels at which the computational functional block is to execute a remaining portion of the workload. The controller functional block then configures the computational block to execute the remaining portion of the workload at the given precision level.

Abstract: Resource provisioning systems and methods are described. In an embodiment, a system includes a plurality of shared storage devices collectively storing database data, an execution platform, and a compute service manager. The compute service manager is configured to determine a task to be executed in response to a trigger event and determine a query plan for executing the task, wherein the query plan comprises a plurality of discrete subtasks. The compute service manager is further configured to assign the plurality of discrete subtasks to one or more nodes of a plurality of nodes of the execution platform, determine whether execution of the task is complete, and in response to determining the execution of the task is complete, store a record in the plurality of shared storage devices indicating the task was completed.

Abstract: In some embodiments, a computer cluster system comprises a plurality of nodes and a software package comprising a user interface and a kernel for interpreting program code instructions. In certain embodiments, a cluster node module is configured to communicate with the kernel and other cluster node modules. The cluster node module can accept instructions from the user interface and can interpret at least some of the instructions such that several cluster node modules in communication with one another and with a kernel can act as a computer cluster.

Abstract: First and second simulated processing of a stream-based computing application using respective first and second simulation conditions may be performed. The first and second simulation conditions may specify first and second operator graph configurations. Each simulated processing may include inputting a stream of test tuples to the stream-based computing application, which may operate on one or more compute nodes. Each compute node may have one or more computer processors and a memory to store one or more processing elements. Each simulated processing may be monitored to determine one or more performance metrics. The first and second simulated processings may be sorted based on a first performance metric to identify a simulated processing having a first rank. An operator graph configuration associated with the simulated processing having the first rank may be selected if the first performance metric for the simulated processing having the first rank is within a processing constraint.

Abstract: A 3D input system and an angle encoder are disclosed. The 3D input system comprises a computing device and one or more position sensing gloves. The position sensing glove comprises a plurality of angle encoders each installed thereon at a location about a finger joint. An inertial measurement unit (IMU) is installed on the glove. A firmware uses data from the angle encoders and IMU to calculate fingertip positions in a 3D space. The firmware generates keystrokes on a virtual keyboard based on the fingertip positions. The angle encoder comprises a first and a second components rotatable with respect to each other, and an encoder pattern comprising codewords for indicating the angle between the first and second components. The encoder pattern comprises a set of base encoder channels coded with a conventional Gray code, and a set of Booster channels for improving the resolution of angle measurement.

Abstract: Techniques for implementing an apparatus, which includes a memory system that provides data storage via multiple hierarchical memory levels, are provided. The memory system includes a cache that implements a first memory level and a memory array that implements a second memory level higher than the first memory level. Additionally, the memory system includes one or more memory controllers that determine a predicted data access pattern expected to occur during an upcoming control horizon, based at least in part on first context of first data to be stored in the memory sub-system, second context of second data previously stored in the memory system, or both, and control what one or more memory levels of the multiple hierarchical memory levels implemented in the memory system in which to store the first data, the second data, or both based at least in part on the predicted data access pattern.

Abstract: An example apparatus comprises instruction execution circuitry and fetch circuitry to fetch, from memory, instructions for execution by the instruction execution circuitry. The fetch circuitry comprises a plurality of prediction components, each prediction component being configured to predict instructions in anticipation of the predicted instructions being required for execution by the instruction execution circuitry. The fetch circuitry is configured to fetch instructions in dependence on the predicting. The apparatus further comprises prediction tracking circuitry to maintain, for each of a plurality of execution regions, a prediction performance metric for each prediction component. The fetch circuitry is configured, based on at least one of the prediction performance metrics for a given execution region, to implement a prediction adjustment action in respect of at least one of the prediction components.

Abstract: A method includes generating a user profile for an authorized user of a mobile device based on behavior patterns associated with the authorized user. The method also includes detecting subsequent user behavior of a particular user during an attempt by the particular user to access the mobile device. The method also includes comparing the subsequent user behavior to the behavior patterns of the user profile to determine whether the particular user is authorized or unauthorized. In response to determining that the particular user is an unauthorized user, the method includes detecting activity by the unauthorized user and performing a countermeasure of a plurality of countermeasures in response to detecting the activity. Each countermeasure of the plurality of countermeasures has a different security level and corresponds to a degree of the activity.

Abstract: Provided are an apparatus, system and method for offloading data transfer operations between source and destination storage devices to a hardware accelerator. The hardware accelerator includes a memory space and control logic to receive, from a host processor, a command descriptor indicating at least one source storage device having transfer data to transfer to at least one destination storage device and a computational task to perform on the transfer data. The control logic sends read commands to the at least one source storage device to read the transfer data to at least one read buffer in the memory space and performs the computational task on the transfer data to produce modified transfer data. The control logic writes the modified transfer data to at least one write buffer in the memory space to cause the modified transfer data to be written to the at least one destination storage device.

Abstract: Technology for simulating a slow storage disk. The technology intercepts an input/output I/O command to be dispatched to a storage disk and simulates a slow storage disk with the storage disk by injecting a delay to the dispatch of the intercepted I/O command based on a predetermined delay injection policy.

Abstract: Provided is a control station that may be configured to control and/or monitor various devices, such as, for example, industrial devices. The control station may comprise communication circuitry, a first processor, and a second processor configured to communicate with one or more devices via the communication circuitry. Information from the one or more devices are configured to be processed by at least one of the first processor and the second processor, and at least one of the first processor and the second processor is configured to output the processed information to one or more of: an electronic display of the control station, a display external to the control station, and a server.

Abstract: The present invention extends to methods, systems, for malware end-point prevention to refrain malware components from being executed, by detecting execution of sequence of programmed instructions within a computer-based environment; subsequently, automatically suspending all execution of the sequence of the programmed instructions within the computer-based environment; injecting a new remote thread into the sequence of the programmed instructions; and executing the injected remote thread as an isolated particle while the execution of the sequence of the programmed instructions within the computer-based environment is still suspended, wherein the injected remote thread is configured to intercept function calls of application program interface (API) within the programmed instructions and dynamically modify the executable.

Abstract: Generating a set of attempted external contacts associated with a malware sample is disclosed. A malware sample is executed in an accelerated computing environment. In the accelerated computing environment, a guest time is advanced more quickly than a time by which a host time is advanced. A set of one or more attempted external contacts generated by the executing malware sample is recorded. The set of attempted external contacts includes at least one generated domain name. A remedial action is taken with respect to the generated domain name.

Abstract: A coherency manager for receiving snoop requests addressed in a physical address space, the snoop requests relating to a cache memory addressable using a virtual address space, the cache memory having a plurality of coherent cachelines, the coherency manager comprising: a reverse translation module configured to maintain a mapping from physical addresses to virtual addresses for each coherent cacheline held in the cache memory; and a snoop processor configured to: receive a snoop request relating to a physical address; in response to the received snoop request, determine whether the physical address is mapped to a virtual address in the reverse translation module; and process the snoop request in dependence on that determination.

Abstract: Systems, apparatuses and methods may provide for technology that identifies a first set of compute nodes and a second set of compute nodes, wherein the first set of compute nodes execute more slowly than the second set of compute nodes. The technology may also automatically determine a compute node configuration that results in a relatively low difference in completion time between the first set of compute nodes and the second set of compute nodes with respect to a neural network workload. In an example, the technology applies the compute node configuration to an execution of the neural network workload on one or more nodes in the first set of compute nodes and one or more nodes in the second set of compute nodes.

Abstract: Methods and apparatus are provided for selecting a computational platform. The method includes collecting platform feature data for each of a plurality of existing computational platforms in a particular class of computational platforms. The platform feature data for each of the plurality of existing computational platforms includes a plurality of design parameters and a performance measurement for the computational platform to complete a benchmarking software component. The method further includes training a mathematical model using the collected platform feature data to devise a predictive model for predicting a predicted performance measurement for a computational platform in the particular class of computational platforms when provided with design parameters, predicting, with the predictive model, the predicted performance measurement of a new computational platform that is not available for testing, and selecting a computational platform using the predicted performance measurement.

Abstract: A field device and method for starting up an industrial automation network, wherein to allow virtual start-up of at least one field device, an field device integration package is provided, whose user interface plug-in has an extension that allows a software tool to access a simulation model for the behavior of the at least one field device, and upon virtual start-up, the simulation model is used to reproduce the response of the field device, where a process model or interfacing of an external process model via a co-simulation coupling can also be used to stimulate the reproduced field device behavior, and where because the models with the FDI package are provided by the field device manufacturer, correct simulation and hence minimization of the risks upon start-up of industrial installations can be expected.

Abstract: A system and a method for predicting errors and failure of an application and performing preventive maintenance measures is disclosed. The present invention provides for generating timestamped event logs and extracting data which includes application Id, service Id, user Id, host, error information, resource information, user request data and frequently used execution sequences of associated software components. Further, multiple user requests are modelled based on information extracted from the timestamped event logs and an execution sequence of associated software components is created based on data extracted from timestamped event logs. Further, an execution scheme is generated based on modelled user requests, execution sequence of associated applications and resource status.

Abstract: A software-based (“soft”) real-time hub designed and implemented for use in simulation (or control testing) systems such as to provide a modular soft-real-time PIL. A simulation system of the present description typically may include one or more of the following useful subsystems or components: (a) a soft-real-time hub; (b) simulation interfaces; and (c) hardware emulation subsystems/devices. The soft-real-time hub is typically a combination of hardware and software adapted to provide deterministic data transport between simulations and input/output (I/O) emulation. By creating a common point, the hub enables simulation modules to be swapped out as the simulation system progresses without the operator having to worry about interface timing, forcing, or data visualization. A desirable aspect of the simulation system is it allows for testing certain conditions by forcing I/O and then seeing how the controller or system under testing responds.

Abstract: Systems, methods, and computer readable storage mediums for using a cloud assist service to generate a read-only GUI to view the status of a storage system. An authorized user can login remotely to the cloud assist service to view the read-only GUI of the storage system. The read-only GUI will present a view of the status of the storage system that is similar to a local GUI available to users connecting directly to the storage system. Responses used to generate the local GUI are recorded and simulated by the cloud assist service to create a familiar read-only GUI.

Abstract: There is provided an information processing device including a receiving unit for receiving a command to be input to a first operating system and a command to be input to a second operating system different from the first operating system, a storage unit for storing a table in which given information included in the given command received by the receiving unit and information for identifying an application are related to each other, a generation unit for generating an application selection command for selectively executing the application based on the given command received by the receiving unit and the table stored in the storage unit, and an execution unit for executing the application selection command generated by the generation unit to selectively execute the application.

Abstract: A method and apparatus for performing multi-tasking using an external display device in an electronic device are provided. A method for performing a multi-tasking work using an external display device in an electronic device includes the operations of executing at least one application, determining whether to output an application screen to the external display device, in response to determining to output the application screen, sending an emulator execution request to the external display device, and, after sending the emulator execution request to the external display device, determining an application identifier in a screen of an application whose screen is determined to be outputted to the external display device, and transmitting a signal corresponding to the screen and the application identifier to the external display device.

Abstract: A method for deterministic clock replay can include in response to executing a guest clock access instruction, estimating, using a virtual processor of a guest virtual machine, a value of a guest clock of the guest virtual machine based on (a) a current branch counter value that indicates a number of branch instructions executed since a first time and (b) an average time between execution of branch instructions, comparing the estimated value to an actual guest clock value of a guest clock of the guest virtual machine, and in response to determining the estimated value is less than the actual guest clock value by a threshold value, recording the number of branch instructions, the first time, and the average time between execution of branch instructions in a memory.

Abstract: The present invention provides a method and apparatus for simultaneously running multiple virtual machines, and an electronic device. The method includes: initiating a request of running a second operating system in QEMU; triggering an exception to a Hypervisor of a currently running first operating system in a KVM module; storing a context of the Hypervisor of the first operating system in the Hypervisor of the first operating system, and loading the context of the Hypervisor of the second operating system; and storing the context of the first operating system in the Hypervisor of the second operating system, and loading the context of the second operating system. By adoption of the solution provided by the present application, multiple virtual machines can be run simultaneously, and the respective functions can be run independently.

Abstract: Methods, systems, computer-readable media, and apparatuses for performing, providing, managing, executing, and/or running a spatially-optimized simulation are presented. In one or more aspects, authority over one or more components may be changed from one worker to another worker during the simulation. The components may be configured to, for example, indicate behaviors of entities executing in the simulation. The system may determine to hand over authority over the one or more components to another worker, such as based on network and/or simulation conditions. The incumbent worker may be notified that authority will change to another worker, e.g., after a period of time. Authority over the one or more components may be assigned to the other worker, and the incumbent worker may be notified that it is no longer authoritative over the one or more components. The second worker may be notified that it is now authoritative over the one or more components.

Abstract: Techniques for routing requests on a network are described. In accordance with certain aspects, a temporal window is incremented or moved over time to facilitate dynamic routing decisions. The temporal window may be used to project or estimate incoming request traffic based on a suitable probabilistic distribution model, such as a Poisson or Gaussian probability distribution, applied to the window so as to estimate or predict traffic at different times as the window is incremented. Estimated execution times for incoming requests may also be computed so that arrival and completion times of each request or traffic event can be modeled. Processor-implemented routines may be employed to solve the sub-problems defined by the temporal window incoming traffic estimation and the estimated execution times efficiently, allowing the parent or overall routing decision problem to be solved efficiently using dynamic processes, including in real-time contexts.

Abstract: An operation method for an electronic device is disclosed. The operation method for an electronic device according to an embodiment may comprise the steps of: configuring a block layer for virtualizing a storage on a volatile memory as a block device; storing a file in the configured block layer in units of blocks; selectively encoding, in a unit of at least one block, the file which has been stored in units of blocks; and storing at least one of an encoded block and a non-encoded block in the storage.

Abstract: Generating a set of attempted external contacts associated with a malware sample is disclosed. A malware sample is executed, in an accelerated computing environment. In the accelerated computing environment, a guest time is advanced more quickly than a time by which a host time is advanced. A set of one or more attempted external contacts generated by the executing malware sample is recorded. The set of attempted external contacts is provided as output.

Abstract: Described herein are various technologies pertaining to a computing system architecture that facilitates construction of virtual motherboards and virtual storage devices. A computing system includes a plurality of computing nodes and a plurality of storage nodes, where the computing nodes are disaggregated from the storage nodes. The computing nodes include respective system on chip modules. The computing nodes and the storage nodes are communicatively coupled by way of a full bisection bandwidth network, where each storage node is allocated network bandwidth that at least matches the maximum input/output speed of the storage node. Responsive to receipt of a client request, computing nodes are allocated to the client and exposed to an application of the client as a motherboard. Likewise, storage nodes are allocated to the client and exposed to the application of the client as a larger storage device.

Abstract: Methods, systems, computer-readable media, and apparatuses for performing, providing, managing, executing, and/or running a spatially-optimized simulation are presented. In one or more embodiments, the spatially-optimized simulation may comprise a plurality of worker modules performing the simulation, a plurality of entities being simulated among the plurality of worker modules, a plurality of bridge modules facilitating communication between workers and an administrative layer including a plurality of chunk modules, at least one receptionist module, and at least one oracle module. The spatially-optimized simulation may be configured to provide a distributed, persistent, fault-tolerate and spatially-optimized simulation environment. In some embodiments, load balancing and fault tolerance may be performed using transfer scores and/or tensile energies determined among the candidates for transferring simulation entities among workers.

Abstract: According to one embodiment, a malware detection system is integrated with at least a static analysis engine and a dynamic analysis engine. The static analysis engine is configured to automatically determine an object type of a received object. The dynamic analysis engine is configured to automatically launch the object after selecting an action profile based on the object type. The dynamic analysis engine is further configured to, provide simulated user interaction to the object based on the selected action profile either in response to detecting a request for human interaction or as a result of a lapse of time since a previous simulated human interaction was provided.

Abstract: Embodiments are directed to managing file systems over a network. A core specification that defines characteristics of a portion of a file system and parameters may be provided. The characteristics may include one or more storage device characteristics. And, the parameters may include one or more of a cluster size, or a protection level. File system models may be generated based on the core specification and the parameters. Each file system model may correspond to a file system that conforms to a core specification and specific values for the parameters. A simulation engine may be employed to provide simulation results based on the file system models. Deployment models may be generated based on the simulation results. The deployment models may be employed to provision file systems that conform to the file system performance characteristics associated with its corresponding deployment model.

Abstract: A flexible, adaptive performance test platform allows a test developer to customize performance tests to more realistically determine the impact of network behavior on a system under test. The test platform may be accessed through the use of a Graphic User Interface (GUI) by all developers within an enterprise to generate and execute performance tests prior to release of new systems by the enterprise. In one aspect, the test platform enables developers to share performance tests, thereby leveraging existing work product to reduce the overall system development time. In another aspect, the test platform enables developers to customize performance tests, providing the flexibility to easily specify a duration, scale, geography and/or resource for the test. In another aspect, the test platform enables developers to customize and monitor one or more metrics in accordance with the particular performance goals of the SUT, to enable a developer to more easily identify system issues.

Abstract: Remote computing resource service providers, including online retailer, provide externally facing computer systems that allow users to interact with the service provider. Furthermore, the service provider may maintain computer systems and service inside an isolated network not exposed to users. Occasionally, service providers may test these externally facing computer systems using one or more external hosts operating on a public network. A coordinator may archive aggregated testing resources located on the isolated network and deploy the testing resources to the one or more external hosts. A database may be used to track the deployment state of the one or more external hosts in order to allow the coordinator to manage the testing process.

Abstract: In a method for processing a server message block (SMB) service fault, a first storage device generates a file handle according to a first file open instruction from a host, and sends the file handle to a second storage device. The second storage device stores the file handle as a backup handle. The second storage device activates an Internet Protocol (IP) address of the first storage device according to fault information from the first storage device, and establishes a communication connection to the host. After the second storage device determines a file handle matches the handle identifier, the second storage device opens a file. Hence, when a storage device that processes an SMB service is faulty, the SMB service may be taken over by a secondary storage device such that the SMB service is executed without interruption.

Abstract: Disclosed are methods and apparatuses for creating a prototype. The methods include at least: receiving inputs of setting a trigger of a prototype and a response of an external terminal according to the trigger, generating a prototype based on the inputs of setting, receiving the generated prototype, sensing the trigger on the received prototype, generating a message comprising an identifier for identifying the external terminal according to the sensing of the trigger, generating a control command based on the message, using a bridge application of pre-stored bridge applications, which is matched to the identifier, and transmitting the generated control command to the external terminal. The control command comprises a command for enabling the external terminal to output a preset response in response to the control command.

Abstract: A method is executed by a computing device to receive a request for a server via a known network access type, from a known application type, by a known user, or a known policy, instantiate a new unikernel with a differentiated communication protocol stack instance, in response to determining the request is not being serviced by a previously instantiated unikernel, and service the request by a previously instantiated unikernel, in response to determining the previously instantiated unikernel is available, where the new unikernel and the previously instantiated unikernel are separate from an operating system of the computing device.

Abstract: The present disclosure provides machine-exception handling methods and learning rate adjustment methods and apparatuses. One exemplary method comprises: acquiring a gradient consumption time of a target machine, wherein the gradient consumption time is used to indicate a gradient related time consumed by the target machine in a training process; determining whether the gradient consumption time satisfies a predetermined condition compared with a pre-acquired average consumption time, wherein the average consumption time is used to indicate an average value of the gradient related time consumed by all machines other than the target machine in a cluster in the training process; and determining that the target machine is abnormal if the gradient consumption time satisfies the predetermined condition compared with the average consumption time. The present disclosure addresses the technical problem of high training costs caused by low computation or communication speeds of some machines in a cluster.

Abstract: In a virtualized computer system, gray applications that are selected to be executed in a first virtual computing instance are executed and monitored in a second virtual computing instance that is a clone of the first virtual computing instance, and classified according to their monitored behavior. This process is conducted in real-time, in response to a notification that a gray application has been selected for execution in the first virtual computing instance. The execution of the gray application in the first virtual computing instance is delayed until the first virtual computing instance receives a notification from an application admission control manager that the gray application is safe to be executed in the first virtual computing instance.