Abstract: Various hardware and software configurations are described herein which provide improved security and control over protected data. In some embodiments, a computer includes a main motherboard card coupled to all input/output devices connected to the computer, and a rusted operating system operates on the main motherboard which includes an access control module for controlling access to the protected data in accordance with rules. The trusted operating system stores the protected data in an unprotected form only on the memory devices on the main motherboard. The computer may also have a computer card coupled to the main motherboard via a PCI bus, on which is operating a guest operating system session for handling requests for data from software applications on the computer.

Abstract: A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.

Abstract: Systems and methods for detection and classification of malware using an AI-based approach are provided. In one embodiment, a T-node maintains a sample library including benign and virus samples. A classification model is generated by training a classifier based on features extracted from the samples. The classification model is distributed to D-nodes for use as a local virus detection model. Responsive to detection of a virus by a D-node, the T-node receives a virus sample from the D-node. When the virus sample is not in the sample library, it is incorporated into the sample library. A feature depository is created/updated by the T-node by extracting features from the samples. Responsive to a retraining event: (i) an improved classification model is created by retraining the classifier based on the feature depository; and (ii) the D-nodes are upgraded by replacing their local virus detection models with the improved classification model.

Abstract: Systems and processes for operating an intelligent automated assistant are provided. An example method includes receiving, from one or more external electronic devices, a plurality of speaker profiles for a plurality of users; receiving a natural language speech input; determining, based on comparing the natural language speech input to the plurality of speaker profiles: a first likelihood that the natural language speech input corresponds to a first user of the plurality of users; and a second likelihood that the natural language speech input corresponds to a second user of the plurality of users; determining whether the first likelihood and the second likelihood are within a first threshold; and in accordance with determining that the first likelihood and the second likelihood are not within the first threshold: providing a response to the natural language speech input, the response being personalized for the first user.

Abstract: A cooling system includes: a core casing configured to house a compressor, a combustion chamber, and a turbine; a tail cone configured to form at least part of an exhaust passage of the turbine together with the core casing; struts configured to connect the core casing with a support body of the tail cone; a housing installed in the tail cone, configured to house an electrical apparatus; and at least one primary duct configured to connect between an internal space of the housing and an outlet passage of the compressor or a discharge port of a blower installed in a gas turbine engine via at least one of the struts and a radial outside of the core casing.

Abstract: Controlling functionality of a core on a per-instance basis can include implementing, within an accelerator, an instance of a core by configuring the accelerator using configuration data, receiving, within the instance of the core, encrypted authorization data for the instance of the core, generating, using control circuitry of the instance of the core, decrypted authorization data for the instance of the core by decrypting the encrypted authorization data using a core instance identifier stored in a first control register of the instance of the core, and writing the decrypted authorization data to a second control register in the instance of the core, wherein the instance of the core enables core functionality therein based on the decrypted authorization data in the second control register.

Abstract: According to an example aspect, there is provided a method for obtaining profile information by a node of a distributed network. Need for providing profile information for a user by a node of a second local private network is detected. A profile request transaction is provided to a public distributed ledger for obtaining profile information associated with the user. Profile information associated with the user is received from a providing node capable of accessing a first private distributed ledger storing the profile information. At least some of the received user profile information is provided for at least one device connected to the second local private network.

Abstract: A method and a hardware acceleration managing node for managing a request for hardware acceleration (HA). The hardware acceleration managing node receives, from a HA interfacing node, the request for hardware acceleration of processing of source data. The hardware acceleration managing node sends an indication of a source memory location(s) for storing of the source data. The hardware acceleration managing node selects one or more hardware acceleration devices. The hardware acceleration managing node receives a chunk of code to be accelerated. The hardware acceleration managing node sends, to the one hardware acceleration device, a set of acceleration instructions related to the chunk of code and the indication of the source memory location. The hardware acceleration managing node receives an indication of a result memory location indicating result data. The hardware acceleration managing node sends an indication of completed hardware acceleration to the HA interfacing node.

Abstract: Systems and methods are provided that intercept access to mainframe computing systems' messaging systems. For example, a method may include using a replacement messaging interface adapter to intercept a messaging request being directed from a client program to a messaging interface module of a messaging subsystem that is identified by a messaging stub interface module that implements a documented messaging interface. The method may also include performing an auxiliary function on the messaging request. The method may additionally include transmitting the messaging request to the messaging interface module of the messaging subsystem. The method may further include receiving a response from the messaging subsystem. Additionally, the method may include providing the response to the client program.

Abstract: Disclosed herein are systems and method for intercepting malicious messages for training a malware detection classifier. In an exemplary aspect, an application selection module may select, from a plurality of applications, an application for execution in an execution environment based on a priority level of the application. During the execution of the selected application, a network interception module may monitor network activity comprising information about data being sent and received over a network connected to the execution environment and storing the network activity in memory of the execution environment (e.g., in a network activity log). A message selection module may subsequently extract, from the stored network activity, an electronic message, in response to determining that the electronic message corresponds to the selected application, may storing the electronic message in a message database used for training the malware detection classifier.

Abstract: An information processing device includes: a BIOS flash ROM that is connected to a shared memory having an alternative BIOS written therein and being accessible using a MMIO, and that stores a currently used BIOS; a processor that can execute the currently used BIOS immediately after resetting; and a retaining means for retaining a setting indicating whether updating of the currently used BIOS is possible. The BIOS includes: a procedure for executing determination as to whether updating is possible after initialization necessary for executing the determination; a procedure for executing initialization necessary for updating the currently used BIOS to the alternative BIOS read from the shared memory, if updating is possible; a procedure for executing updating if updating is possible; a procedure for executing initialization necessary for operating the information processing device if updating is impossible; and a procedure for calling a boot loader if updating is impossible.

Abstract: A variety of techniques are disclosed for detection of advanced persistent threats and similar malware. In one aspect, the detection of certain network traffic at a gateway is used to trigger a query of an originating endpoint, which can use internal logs to identify a local process that is sourcing the network traffic. In another aspect, an endpoint is configured to periodically generate and transmit a secure heartbeat, so that an interruption of the heartbeat can be used to signal the possible presence of malware. In another aspect, other information such as local and global reputation information is used to provide context for more accurate malware detection.

Abstract: Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based hierarchical data storage. One of the methods includes determining, based on a blockchain stored in a database that includes multiple levels of storage, a level of storage of the multiple levels of storage that meets a data migration condition as a target level of storage, wherein state data of the blockchain are stored as state Merkle trees in data worksheets of the multiple levels of storage, generating, for the target level of storage, an empty data worksheet in response to determining that the target level of storage meets the data migration condition, and storing at least a portion of a state Merkle tree corresponding to a newly created block of the blockchain to the empty data worksheet.

Abstract: The system generates evidence of a recommended configuration for a distributed system based on a plurality of configuration parameters. The system displays, on a screen of a user device, the evidence, which includes a list of configuration parameters, including a name, a current value, and a recommended value for a respective configuration parameter. The recommended value is obtained based on a strategy for optimizing security, functionality, or both. The system further displays interactive elements which allow the user to: view a resolution of a pair of mutually incompatible constraints resulting in the recommended value for the respective configuration parameter, wherein the resolution includes a name of the configuration parameter removed from the list and a reason for the removal; and view information associated with each of the pair of mutually incompatible constraints, wherein the information includes a name, a goal, a security impact, and a description of the constraint.

Abstract: An example non-transitory computer-readable medium storing machine-readable instructions that, when executed by a processor, cause the processor to: set a graphical processing unit (GPU) power allocation, the GPU power allocation indicating power available for use by a GPU. The processor sets a processor power allocation, the processor power allocation indicating power available for use by the processor. The processor receives a GPU usage value and modifies the GPU power allocation to a modified GPU power allocation based on the GPU usage value. The processor modifies the processor power allocation to a modified processor power allocation based on the modification of the GPU power allocation.

Abstract: Updated radio protocol data may be propagated in a peer-to-peer (P2P) distribution scheme so that peer devices that are incompatible with a particular radio protocol may be dynamically re-configured to communicate with other devices using the particular radio protocol. A remote server(s) may push updated radio protocol data to a hub device, which thereafter disseminates the radio protocol data to other peer devices. These peer devices can forward the data to downstream peer devices, and so on, without further intervention by the remote server(s) that initiated the distribution. The transfer of radio protocol data over P2P connections may occur using a broadcasting technique where, prior to the transfer, a device in possession of the radio protocol data broadcasts an indication to nearby peer devices, which can receive the broadcast and indicate to the broadcaster whether they are ready to receive the radio protocol data.

Abstract: An image file conversion method includes: obtaining an original image file of a virtual machine on an original platform; detecting whether the original image file has a first file characteristic and a second file characteristic that are corresponding to a target platform, wherein the first file characteristic comprises a target driver used when the virtual machine runs on the target platform, and the second file characteristic comprises a target file format supported by the target platform; and changing, in response to detecting that the original image file does not have at least one of the first file characteristic or the second file characteristic, the original image file by calling a predetermined interface, to obtain a target image file of the virtual machine on the target platform, wherein the target image file has the first file characteristic and the second file characteristic.

Abstract: A method of performing backup for a group of virtual machines (VMs) is provided. The method identifies at least a first VM of the group of VMs based on a threshold and removes the at least first VM from the group of VMs such that the group of VMs includes first remaining VMs. The method also initiates creating a first snapshot for the first remaining VMs at the first level of consistency and identifies a failure of creating the first snapshot for at least a second VM of the first remaining VMs. The method further removes the at least second VM from the first remaining VMs such that the group of VMs includes one or more second remaining VMs and creates a second snapshot for the one or more second remaining VMs at the first level of consistency.

Abstract: Disclosed are a method, device and system for health monitoring of SoC. The method includes: acquiring in real time sensor data of sensors monitoring SoC performance, the sensor data including reliability degradation sensor data, temperature sensor data, noise sensor data and current sensor data; extracting characteristic data representative of the SoC performance from the sensor data; performing analysis and prediction on the characteristic data in real time by using a prediction algorithm to obtain a performance state and a performance degradation trend of the SoC; outputting performance state information and performance degradation trend information of the SoC. The disclosed method, device and system for health monitoring of SoC can monitor the performance state of the SoC in real time and predict the performance degradation trend of the SoC in real time.

Abstract: Systems and methods are disclosed herein that relate to partially reconfiguring a Field Programmable Gate Array (FPGA) of a wireless communication device to provide time-slicing of modem and application functionality. In this manner, a low-cost, small size, and low power consumption implementation of the FPGA and thus the wireless communication device is provided.

Abstract: Method, apparatus, and computer program product are provided for merging multiple compute nodes with trusted platform modules utilizing provisioned node certificates. In some embodiments, compute nodes are connected to be available for merger into a single multi-node system. Each compute node includes a trusted platform module (TPM) provisioned with a platform certificate and a signed attestation key (AK) certificate and is accessible to firmware on the compute node. One compute node is assigned the role of master compute node (MCN), with the other compute node(s) each assigned the role of slave compute node (SCN). A quote request is sent from the MCN to each SCN under control of firmware on the MCN. In response to receiving the quote request, a quote response is sent from each respective SCN to the MCN under control of firmware on the respective SCN, wherein the quote response includes the AK certificate of the respective SCN's TPM.

Abstract: A firmware settings data structure and a settings mapping table for a first firmware are stored in a non-volatile memory. A second firmware settings data structure and a second settings mapping table for a second firmware are also stored. An entry is selected in the second firmware settings mapping table. A search is made of the first settings mapping table for an entry having an identifier that is the same as an identifier in the selected entry in the second firmware settings mapping table. If a matching entry is located, a value in the first firmware settings data structure identified by the entry in the first firmware settings mapping table is copied to the second firmware settings data structure. If a matching entry is not found in the first firmware settings data structure, a default value for the firmware setting is stored in the second firmware settings data structure.

Abstract: An information handling system may reset components logged in a memory of the information handling system. For example, an information handling system may determine components logged in an information handling system memory and may perform a bulk reset of the logged components.

Abstract: A managed directory service obtains a request to generate a first account of a first directory within a first network. In response to the request, the managed directory service creates the first account within the first directory. From the request, the managed directory service also obtains credential information of a second account of a second directory within a second network. The managed directory service updates the first account to include this credential information to enable the first account to be used to access the second directory within the second network.

Abstract: An electronic device for changing a notification mode and a method therefor are provided. The electronic device includes communication circuitry, at least one processor, and a memory. The memory stores instructions, when executed, configured to cause the at least one processor to establish communication with a wearable device through the communication circuitry, and upon identifying a change in an operation state of the wearable device, change from a first notification mode of the electronic device to a second notification mode according to the identified operation state of the wearable device.

Abstract: The claimed subject matter includes techniques for providing an application testing service with a user interface that enables a user to evaluate performance data for computer implemented decision policies. An example method includes displaying a first reward statistic comprising an actual performance result for a policy implemented by an application. The method also includes obtaining experimental data corresponding to previously implemented policies, computing a second reward statistic for a hypothetical policy using a reward function applied to the experimental data. The method also includes displaying the second reward statistic together with the first reward statistic to enable a user to compare the first reward statistic and the second first reward statistic.

Abstract: Particular embodiments described herein provide for an electronic device that can be configured to include a plurality of chiplets, a plurality of resources, a system thermal engine, and at least one processor. The at least one processor is configured to cause the system thermal engine to monitor the plurality of chiplets, where the plurality of chiplets are part of a multi-chip module, determine that a first chiplet from the plurality of chiplets has reached a threshold temperature, and reduce power to the first chiplet without reducing power to the other chiplets in the plurality of chiplets.

Abstract: Methods, apparatuses and systems for cloud-based disaster recovery are provided. The method, for example, includes configuring, at a cloud-based computing platform, a declaration including servers associated with a plurality of selected workloads configured based on information provided by a user for corresponding servers used at a client machine, the declaration including generated steps listing the servers, and restoring the servers for each of the generated steps of the declaration upon receiving, from the client machine, a failure indication associated with the servers.

Abstract: Apparatuses and methods for determining soft data for fractional digit memory cells are provided. One example apparatus can include a controller to determine states of memory cells of a group of memory cells operated as fractional digit memory cells, and determine soft data based, at least partially, on dimensions to which particular memory cells correspond with respect to the group of memory cells, determined states of the memory cells with respect to a state adjacent a state corresponding to a swapping shell, and whether a particular memory cell is a candidate for swapping.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving, by a network device, a request from a computing device to join a network, where the network is segmented to include a provisioning network, a first network segment, and a second network segment, and the second network segment provides limited network access privileges to computing devices compared to network access privileges provided by the first network segment. Providing the computing device access to the provisioning network. Determining, while the computing device is connected to the provisioning network, properties of the computing device. Selecting which of the first network segment and the second network segment to assign access to the computing device based on the properties of the computing device. Providing security credentials to the computing device for accessing the selected one of the first network segment or the second network segment.

Abstract: A benchmark generating system is presented. The system monitors an execution of a computer program to collect performance traces for one or more load metrics. The system generates a program model based on the collected performance traces. Each state of the program model corresponds to a workload level at one load metric or a combination of workload levels at the two or more load metrics. The system also generates one or more workload models based on the collected performance traces. Each workload model is configured to generate simulated workload for one load metric of the one or more load metrics at a workload level that is determined based on a state of the program model. The system provides the generated program model and the generated workload models as a benchmark of the computer program.

Abstract: Method and systems for generating an adjacency matrix A and a directional relation graph representing a relationship between one or more diagnostics. The adjacency matrix with all zero's is initialized. One or more entries in the adjacency matrix A are revised by, for each source diagnostic s, decreasing a corresponding count A(s,d) in the adjacency matrix A to decrease a corresponding directional relation in response to the diagnostic s failing and one or more other diagnostics d passing; increasing the corresponding count A(s,d) in the adjacency matrix A to increase the corresponding directional relation in response to the diagnostic s failing and one or more other diagnostics d failing; and maintaining a current value of the corresponding count A(s,d) in the adjacency matrix A in response to the diagnostic s passing or having no corresponding data. The directional relation graph is generated based on the adjacency matrix A.

Abstract: A platform may receive a first smart contract. The first smart contract may be associated with an entity that stores a plurality of smart contracts in a distributed ledger. The platform may determine a state of the first smart contract and a state of a second smart contract and compare the state of the first smart contract and the state of the second smart contract. The platform may determine, based on the state of the first smart contract and the state of the second smart contract, that a conflict exists between the first smart contract and the second smart contract. The conflict may be determined based on at least one of the first smart contract or the second smart contract being in violation of a respective term of at least one of the first smart contract or the second smart contract.

Abstract: In an anomaly detection by an electronic control unit connected to an other electronic control unit via a communication network, a data frame is received from the other electronic control unit, and a reception interval is calculated between a first data frame and a second data frame received immediately before the first data frame. A determination value for determining whether the data frame is anomalous is updated by adding a predetermined value to the determination value when the reception interval is equal to or less than a threshold value, and the data frame is determined to be anomalous when the determination value exceeds a limit value.

Abstract: Systems and methods for maintaining voice assistant persistence across multiple network microphone devices are described. In one example, first and second NMDs each identify a wake word based on detected sound, and are each transitioned from an inactive state to an active state in which the NMD captures and transmits sound data over a network interface. The first NMD is selected over the second NMD to output a first response, and both NMDs remain in the active state to further capture and transmit sound data. After further capturing and transmitting of sound data, the second NMD is selected over the first NMD to output a second response. After a predetermined time, one or both of the NMDs are transitioned back to the inactive state. The selection of one NMD over another for outputting a response can be based at least in part on user location information.

Abstract: A method includes receiving, by a processor of a computing device, a first keystroke signal from a keyboard indicating that a first key has been pressed. Prior to receiving the first keystroke signal, the keyboard operates in a first state. The method further includes switching, by the processor, the keyboard from the first state to a second state in response to receiving the first keystroke signal. The method further includes receiving, by the processor during the second state, a second keystroke signal from the keyboard indicating that a second key has been pressed. The first key is different from the second key. The method further includes determining, by the processor, a plurality of keystroke signals in response to receiving the second keystroke signal during the second state. The method further includes sending, by the processor during the second state, the plurality of keystroke signals to a second computing device.

Abstract: A parallel hypervisor system for virtualizing application-specific supercomputers is disclosed. The hypervisor system comprises (a) at least one software-virtual hardware pair consisting of a software application, and an application-specific virtual supercomputer for accelerating the said software application, wherein (i) The virtual supercomputer contains one or more virtual tiles; and (ii) The software application and the virtual tiles communicate among themselves with messages; (b) One or more reconfigurable physical tiles, wherein each virtual tile of each supercomputer can be implemented on at least one physical tile, by configuring the physical tile to perform the virtual tile's function; and (c) A scheduler implemented substantially in hardware, for parallel pre-emptive scheduling of the virtual tiles on the physical tiles.

Abstract: Devices and techniques for NAND temperature-aware operations are disclosed herein. A device controller can receive a command to write data to a component in the device. A temperature corresponding to the component can be obtained in response to receiving the command. The command can be executed by the controller to write data to the component. Executing the command can include writing the temperature into a management portion of the device that is separate from a user portion of the device to which the data is written.

Abstract: One example of a system includes a server, a plurality of power supplies, and a system controller. The plurality of power supplies are electrically coupled to the server and each power supply includes machine readable instructions. The system controller updates the machine readable instructions of each of the plurality of power supplies one at a time while maintaining power to the system controller from at least one of the plurality of power supplies.

Abstract: A self-correcting secure computer system is provided. The computer system includes a read-only memory (ROM) device, a random access memory (RAM) device, and at least one processor in communication with the ROM device and the RAM device. The at least one processor is programmed to receive an activation signal, retrieve, from the ROM device, data to execute an operating system, and execute, on the RAM device, the operating system based on the data from the ROM device.

Abstract: An electronic device includes a first device housing and a second device housing, with a hinge coupling the first device housing to the second device housing such that the first device housing is pivotable about the hinge relative to the second device housing between a closed position and an axially displaced open position. At least one inertial motion unit is situated in the first device housing and determines an orientation of the first device housing in three-dimensional space, delivering the same in an orientation determination signal. An inertial motion unit adjustment engine, activated by at least one predefined condition of electronic device, can apply at least one correction factor to the orientation determination signal when activated to create a modified orientation determination signal.

Abstract: An arrangement and a method for updating a control software in a high-voltage control device, has as its objective to specify a solution with which an update of the control software, independently of a current operational state of the high-voltage region of the high-voltage control device, is enabled for the low voltage region as well as also the high-voltage region of the high-voltage control device.

Abstract: Embodiments include an autonomous core perimeter, configured to save the state of a core of a multi-core processor prior to the processor package being placed into a low-power state. The autonomous core perimeter of each core is configured to save an image of a microcontroller firmware to an external store if it has not been previously saved by another core, along with the unique working state information of that core's microcontroller. Upon restore, the single microcontroller firmware image is retrieved from the external store and pushed to each core along with each core's unique working state.

Abstract: A flexible and extensible architecture allows for secure searching across an enterprise. Such an architecture can provide a simple Internet-like search experience to users searching secure content inside (and outside) the enterprise. The architecture allows for the crawling and searching of a variety of sources across an enterprise, regardless of whether any of these sources conform to a conventional user role model. The architecture further allows for security attributes to be received at query time, for example, in order to provide real-time secure access to enterprise resources. The user query also can be transformed to provide for dynamic querying that provides for a more current result list than can be obtained for static queries.

Abstract: An example method includes: obtaining an image of an object captured by a device during relative motion between the object and the device; determining a location of the device relative to the object during image capture based on one or more attributes of the object in the image; storing the image of the object and the location of the device during image capture; mapping a 3D graphical model representing the object to the object in the image based, at least in part, on the location of the device; receiving, at a time subsequent to capture of the image, first data representing an action to be performed for the object in the image; and generating second data for use in rending content on a display device, where the second data is based on the image stored, the location of the device stored, and at least some information from the model.

Abstract: A system includes reception of a first portion of a firmware image, determination, based on the first portion of the firmware image, of whether to update the firmware based on the firmware image, transmission of an acknowledgement signal if it is determined to update the firmware based on the first portion of the firmware image, reception of a remaining portion of the firmware image, and updating of the firmware based on the firmware image.

Abstract: A memory tiering system includes a data mover device coupling a memory fabric to a processing system. At each of a plurality of different times, the data mover device receives a data access request for data from a computer context provided by the processing system, retrieves the data based on a compute-context-memory-fabric mapping that maps the compute context to the first memory subsystem, and provides the data to the processing system for use with the computer context. If the data mover device determines that the data has been retrieved and provisioning for use with the compute context above a memory tiering frequency, it moves the data from the first memory subsystem to a second memory subsystem in the memory fabric that includes higher performance memory characteristics, and causes the compute-context-memory-fabric mapping to be modified to provide a modified compute-context-memory-fabric mapping that maps the compute context to the second memory subsystem.

Abstract: Systems and methods for implementing a lightweight checkpoint technique for resilience against soft errors are disclosed. The technique provides effective, safe, and timely soft error detection and recovery using software. In an exemplary aspect, resilience against data flow errors and control flow errors is provided in critical or mixed-critical applications in each basic block or at critical basic blocks. Verified register preservation is provided at each basic block, along with memory preservation checkpoints. In this manner, soft errors are quickly detected and addressed. The register and memory preservation further allows for safe re-execution from recoverable soft errors. Control flow errors can also be detected at the beginning and/or end of each basic block.

Abstract: A method of controlling use of network-connectable devices is provided. The method includes monitoring by a first computational process, operating at a first processor utilization level, communication on a user device operated by a particular user and determining based on the monitoring by the first computational process a trigger event. The method further includes monitoring by a second computational process, operating at a second processor utilization level higher than the first processor utilization level, the communication on the user device responsive to determining the trigger event. Use of the user device is restricted based at least on the monitoring by the second computational process of the communication.

Abstract: A computing device and automatic method for reducing memory usage in a device having an execution environment, such as one using an interpretive scripting engine. Application code is analyzed to determine unused features. Based upon this analysis, a build process is configured to omit the unused features. Then, the execution environment is built for the application code that excludes features not used by the application code. The application code and the execution environment can then be loaded into a deployment device for execution of the application code by the execution environment.