Abstract: A machine learning model is applied to at least determine whether a computer program includes vulnerable code. The machine learning model is trained to determine whether the computer program includes vulnerable code based at least on a presence and/or absence of a first trait. An indication can be provided, via a user interface, an indication that the computer program includes vulnerable code, when the computer program is determined to include vulnerable code. Related methods and articles of manufacture, including computer program products, are also provided.

Abstract: Techniques for handling failures in the execution flow of provisioning operations for a computer infrastructure system are disclosed. The techniques can include determining a service type of a service that generated an error during provisioning. An error handler can be selected based on the service type.

Abstract: Embodiments for detecting data anomalies by a processor. A machine learning model may be trained according to collected scores and anomaly labels of a plurality of anomaly detection operations applied to one or more data sets such that the collected scores and labels identify a degree of accuracy of estimating anomalies for each of the plurality of anomaly detection operations. An anomaly may be detected in an unstructured data set by applying the trained machine learning model on an unstructured data set.

Abstract: A method to more effectively and efficiently diagnose problems in a storage network is disclosed. In one embodiment, such a method includes generating, for a storage network, a resource map that identifies components therein. For each component in the resource map, the method identifies an importance factor that indicates the component's importance in the storage network. When a problem is detected in the storage network, the method identifies, for each component in the resource map, a potential cause factor that indicates how likely the component is to have caused the problem. The method also calculates, for each component in the resource map, a problem responsibility factor to indicate to what extent the component is held responsible for the problem. A corresponding system and computer program product are also disclosed.

Abstract: A device management apparatus includes a storage device configured to store a number of fed sheets in an early failure period, the number of fed sheets in the early failure period being a certain number of fed sheets and being a preset number of fed sheets, which is treated as an early failure where the maintainable component has a failure, and calculates a failure density depending on a number of fed sheets based on a number of fed sheets at a time when a failure occurred in the component, which is received from the multiple image forming apparatuses, and outputs information about replacement of the maintainable component based on the failure density to the number of fed sheets in the early failure period from a number of fed sheets at a time when the parameter exceeds the threshold after an operation, which is received from one image forming apparatus.

Abstract: Methods for automatic and intelligent incident routing are performed by systems and apparatuses. The methods intelligently optimize routing of incidents to correct owners from a pool of many possible owners by utilizing learning models and algorithms based on feature vectors. Users provide information related to incidents of services or systems. The information is cleaned and featurized to generate a feature vector for the incident. The systems and apparatuses intelligently and automatically determine sets of candidate recipients based on outputs of algorithms, e.g., machine learning algorithms, such as classifiers using the feature vectors as inputs. Classifiers may utilize models or algorithms trained with featurizations used for feature vectors. Sets of candidate recipients are provided to users for selection of a recipient for the information from the set of candidate recipients instead of from all the possible recipients.

Abstract: The current document is directed to methods and systems for detecting the occurrences of abnormal events and operational behaviors within the distributed computer system. The currently described methods and systems continuously collect metric data from various metric-data sources, generate a sequence of metric-data observations, each metric-data observation comprising a set of temporally aligned metric data, and employ principle-component analysis to transform the metric-data observations to facilitate reduction of the dimensionality of the metric-data observations.

Abstract: A technique for repairing an indirect addressing structure of a file system damaged by corruption of a mid-level mapping (MID) page includes scanning selected leaf pages to identify leaf pages associated with the corrupted MID page, then recreating the MID page by recreating pointers to the identified leaf pages. The scanning includes (1) based on an association of groups of leaf pages with corresponding sets of families of storage objects, scanning the leaf pages of only those groups of leaf pages associated with the family of storage objects for the corrupted MID page. The scanning further includes (2) performing a two-pass process including first identifying all leaf pages for the logical offset range of the corrupted MID page and then pruning those identified leaf pages that are reachable via non-corrupted MID pages, yielding the leaf pages for the corrupted MID page only, usable to recreate the corrupted MID page.

Abstract: This method for installing avionics software applications on a platform with a multi-core processor and intended to be on board an aircraft is implemented by an electronic installation device. Each avionics software application includes one or several software processing operations to be executed over a predefined time period including one or several successive time clusters.

Abstract: A system for providing security to a railway system, the system comprising: a data monitoring and processing hub; a network comprising a plurality of data collection agents synchronized to a same network clock and configured to monitor railway infrastructure devices and onboard devices of rolling stock having a train communication network (TCN), train to wayside communications (such as GSM-R) and forward monitored data to the hub for processing by the hub to detect anomalies in railway operation that are indicative of a cyber-attack; wherein an agent of the plurality of data collection agents monitoring an onboard device connected to the TCN of a given rolling stock receives signals propagated to or from the device via the TCN and forwards to the hub data based on a given received signal together with a time stamp comprising a network clock time at which the given received signal is received by the agent.

Abstract: Embodiments described herein relation to IT incident management that can involve predictive analytics, prescriptive analytics, and descriptive analytics. An IT incident management platform can enable IT incident solution prediction using prescriptive models and natural language processing. An IT incident management platform can enable IT incident ticket volume prediction using predictive models and natural language processing. An IT incident management platform can generate visual elements for display at an interactive interface that represents data centre topology network graphs using descriptive models.

Abstract: An apparatus of a System on Chip (SoC) to implement a one out of two diagnostics (1oo2D) safety system comprises a memory comprising firmware to provide monitoring of the SoC and a second SoC, and a communication interface to provide cross-monitoring between the SoC and the second SoC. The firmware and the communication interface enable the SoC and the second SoC to implement the 1oo2D safety system without significant hardware or software external to the SoC.

Abstract: A method performed by a server processing computer for a plurality of monitored servers is provided. The method includes receiving a server alarm of a first type in response to one of a first set of server metrics, each of which includes a measure of a first property for the monitored servers, exceeding a first threshold. The method also includes receiving a server alarm of a second type in response to one of a second set of server metrics, each of which includes a measure of a second property for the monitored servers, exceeding a second threshold. The method includes determining a server alarm correlation between the received server alarm of the first type and the received server alarm of the second type, and generating a new server alarm configuration for a server alarm of the first type and/or the second type based on the server alarm correlation.

Abstract: Among other disclosures, a method may include collecting historical communication data and personal data relating to a portion of a plurality of communications, a sender of one or more of the communications or one or more recipients of the communications. The method may include depositing the collected data into a repository of historical communication data and personal data. The method may include presenting one or more items in the repository, in response to user behavior.

Abstract: A virtual solid state storage system is provided with solid state storage error emulation. An exemplary apparatus comprises a virtual solid state storage device configured to emulate a solid state storage device. The virtual solid state storage device comprises an interface that communicates with a solid state storage controller; an address translation module that translates memory addresses from a solid state storage-based memory space to a second memory space of a second memory device; and a non-solid state storage memory controller that communicates with the second memory device; and an error module to emulate solid state storage errors for testing error handling functions of the solid state storage controller for predefined error types of the solid state storage memory device by: (i) flipping bits sent to and/or read from the second memory device; and/or (ii) changing a status response sent to the solid state storage controller.

Abstract: In one embodiment, an apparatus comprises a communication interface to communicate over a network, and a processor. The processor is to: receive a workload provisioning request from a user, wherein the workload provisioning request comprises information associated with a workload, a network topology, and a plurality of potential hardware choices for deploying the workload over the network topology; receive hardware performance information for the plurality of potential hardware choices from one or more hardware providers; generate a task dependency graph associated with the workload; generate a device connectivity graph associated with the network topology; select, based on the task dependency graph and the device connectivity graph, one or more hardware choices from the plurality of potential hardware choices; and provision a plurality of resources for deploying the workload over the network topology, wherein the plurality of resources are provisioned based on the one or more hardware choices.

Abstract: A method is provided for providing mobile device support services. The method may include monitoring a mobile device status. The method may additionally include performing device diagnostics based at least in part on captured device status data to identify potential faults that may affect mobile device functionality. A corresponding system, apparatus, and computer program product are also provided.

Abstract: A data reception apparatus connected to a data transmission apparatus via transmission paths includes: error detection circuits that are each provided for each of the transmission paths and that each detect an error in received data that has been received from the data transmission apparatus; storage circuits that are each provided for each of the transmission paths and that each store the received data and read the received data at a reported read position at a reported read timing; a selection circuit that selects one of the transmission paths according to error detection results provided by the error detection circuits; and a report circuit that compares received data stored by a storage circuit corresponding to a selected transmission path with received data stored by each of other storage circuits and, according to a comparison result, reports the read timing and the read position to each of the storage circuits.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing an automated scripting and testing system. An embodiment operates by receiving an interaction between a user and an application. It is determined that the received interaction corresponds to at least one stored interaction based on a comparison of the received interaction with one or more of a plurality of stored interactions. A count of stored corresponding interactions is incremented. It is determined that the count exceeds a threshold. A scripted interaction with the application is generated based on the received interaction and the at least one stored interaction. The scripted interaction is provided for testing the application.

Abstract: A method for performing safety analysis includes determination of diagnostic coverage of safety mechanisms. The method includes considering the estimation of failure rapture for different scenario and potential sources of failure. The method includes considering and quantifying the effect of dependent failures that arise from other errors that may be already accounted for by existing safety mechanisms.

Abstract: Apparatus and method for scalable error reporting. For example, one embodiment of an apparatus comprises error detection circuitry to detect an error in a component of a first tile within a tile-based hierarchy of a processing device; error classification circuitry to classify the error and record first error data based on the classification; a first tile interface to combine the first error data with second error data received from one or more other components associated with the first tile to generate first accumulated error data; and a master tile interface to combine the first accumulated error data with second accumulated error data received from at least one other tile interface to generate second accumulated error data and to provide the second accumulated error data to a host executing an application to process the second accumulated error data.

Abstract: In a system where resources are used in a varying manner, when performances are monitored based on detected past behavior when the system was operating normally, if performance behavior is detected that is different, it is difficult to determine whether the detected performance behavior results from resources being used differently than when the system was operating normally. According to the present invention, monitoring accuracy is improved by determining whether performance behavior results from change in characteristics relating to the usage of the system by using means for measuring performances when the system is in operation and detecting a performance different from when the system was operating normally, means for measuring characteristics relating to the usage of the system and detecting whether the characteristics are different from when the system was operating normally, and means for comparing performance information with characteristic information relating to the usage of the system.

Abstract: According to an example, event anomaly analysis and prediction may include accessing a master directed graph that specifies known events and transitions between the known events, and ranking each of the known events. Each of the ranked known events may be clustered into a plurality of anomaly categories. A plurality of rules to analyze new events may be determined based on the plurality of anomaly categories. A determination may be made, based on an application of the plurality of rules to data that is to be analyzed for an anomaly, whether the data includes the anomaly. In response to a determination that the data includes the anomaly, a device associated with the data may be controlled.

Abstract: A system and method to intelligently formulate automation strategies for technology infrastructure operations are disclosed. The system and method include analyzing infrastructure issue data from support tickets and predicting automation solutions. A cost-benefit analysis is then performed on the automation solutions. Solutions can be ranked and recommended according to the cost-benefit analysis.

Abstract: System and method for autonomous trouble shooting of a unit under test (UUT) having a plurality of replaceable components include: a test station that stores an artificial intelligence (AI) program and a knowledge database (KDB) including acceptable test results for each test point represented by an acceptable test vector, a test probe to test the circuit card assembly; and an operator station to send commands to the test station via the communication network to teach the AI program to capture and store the acceptable test result for each test point of the UUT by the test probe, in the KDB, wherein the AI program commands the test probe to test the UUT, stores the test results in a test result vector, compares the test result vector with the stored acceptable test vector, and displays recommendation as which replaceable component in the UUT to be repaired or replaced.

Abstract: A system, method, and computer program product are provided for error handling in multi-layered integrated software applications. In operation, a system monitors a multi-layered integrated software application utilizing a process that runs in parallel with the multi-layered integrated software application and reads one or more logs generated by the multi-layered integrated software application. The system identifies one or more errors from the one or more logs. The system parses the one or more errors based on one or more decision files, wherein the one or more decision files include specific keywords that are defined as part of rule configuration utilized to identify a source of the one or more errors. Further, the system identifies the source of the one or more errors in the multi-layered integrated software application utilizing the one or more decision files.

Abstract: Configuration data collection at a device is disclosed, including: detecting, with respect to a device, a data collection event, wherein the data collection event is specified by a configuration file, wherein the configuration file further specifies a set of target data information and a corresponding set of target data information providers from which to collect target data in response to a detection of the data collection event; in response to the detection of the data collection event, collecting the target data based at least in part on the set of target data information and the corresponding set of target data information providers; and controlling the device based at least in part on the collected target data.

Abstract: A determination is made that a graphical representation of network health state information pertaining to a client account of a provider network is to be provided. Using respective network metrics groups corresponding to several data sources, a network health state descriptor corresponding to a resource associated with the client account is generated. A data set usable to generate a graphical display of network health state information of the resource of the client account is transmitted.

Abstract: An application performance analyzer adapted to analyze the performance of one or more applications running on IT infrastructure, comprises: a data collection engine collecting performance metrics for one or more applications running on the IT infrastructure; an anomaly detection engine analyzing the performance metrics and detecting anomalies, i.e. performance metrics whose values deviate from historic values with a deviation that exceeds a predefined threshold; a correlation engine detecting dependencies between plural anomalies, and generating anomaly clusters, each anomaly cluster consisting of anomalies that are correlated through one or more of the dependencies; a ranking engine ranking anomalies within an anomaly cluster; and a source detection engine pinpointing a problem source from the lowest ranked anomaly in an anomaly cluster.

Abstract: Methods and systems are provided for guiding or otherwise assisting a stabilized approach to a destination by presenting an energy state associated with an aircraft with respect to a target energy state for the stabilized approach. One method involves providing a graphical indication of a targeted energy state at a first position, a second graphical indication of a current energy state at a second position, and a third graphical indication of a configuration change at a third position. The distance with respect to a reference axis between the first position and the second position corresponds to a difference between a target parameter value associated with the targeted energy state and a current parameter value associated with the current energy state, and while a second distance between the first position and the third position with respect to the reference axis corresponds to an estimated amount of time before the configuration change.

Abstract: An application performance management system is disclosed. Operational elements are dynamically discovered and extended when changes occur. Programmatic knowledge is captured. Particular instances of operational elements are recognized after changes have been made using a fingerprint/signature process. Metrics and metadata associated with a monitored operational element are sent in a compressed form to a backend for analysis. Metrics and metadata from multiple similar systems may be used to adjust/create expert rules to be used in the analysis of the state of an operational element. A 3-D user interface with both physical and logical representations may be used to display the results of the performance management system.

Abstract: Techniques for detecting malicious content using simulated user interactions are described herein. In one embodiment, a monitoring module monitors activities of a malicious content suspect executed within a sandboxed operating environment. In response to detection of a predetermined event triggered by the malicious content suspect requesting a user action on a graphical user interface (GUI) presented by the malicious content suspect, simulating, a user interaction module simulates a user interaction with the GUI without user intervention. An analysis module analyzes activities of the malicious content suspect in response to the simulated user interaction to determine whether the malicious content suspect should be declared as malicious.

Abstract: An information handling system may include a first power supply for a first system, a second power supply for a second system, and a management controller. The management controller may detect that the first power supply has failed, receive first information from the first system related to the operation of the first power supply prior to the failure of the first power supply, receive second information from the second system associated with the second power supply, and determine a probability of failure of the second power supply based upon a comparison of the first information with the second information.

Abstract: According to an aspect, software test failures are analyzed using natural language processing (NLP) and machine learning. A failure is detected during a code build associated with a software product. Each change set since a last successful code build associated with the software product is identified and analyzed using NLP to extract change set features. A software defect origin model is applied to the extracted features in each analyzed change set to detect an origin of the failure. The software defect origin model includes a mathematical description of patterns learned from previously detected failures and their corresponding features.

Abstract: Techniques for monitoring Voice-over-IP (VoIP) network services over the Internet are disclosed. In some embodiments, a system, process, and/or computer program product for monitoring and/or troubleshooting VoIP network services over the Internet includes performing VoIP call initiation testing using a source agent and a target agent; performing synthetic VoIP call quality testing using the source agent and the target agent over the Internet; and generating a report based on the VoIP call initiation testing and the synthetic VoIP call quality testing over the Internet.

Abstract: The disclosed computer-implemented method may include (i) configuring a packet filtering policy at least in part by defining an attribute map and a set of network-packet filtering rules that use logical groupings of distinguishing attributes as input parameters, (ii) after configuring the packet filtering policy, receiving an incoming network packet, (iii) extracting distinguishing attributes from the incoming network packet, (iv) translating, based on the attribute map, the distinguishing features extracted from the incoming network packet into logical groupings associated with the network packet, and (v) applying the packet filtering policy to the incoming network packet by using the logical groupings associated with the network packet as input parameters to the filtering rules. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Structured metadata is automatically captured regarding issues reported by a user when the user interacts with application software for presentation, analysis, or management of structured data. The reported issues correspond to structured data that is displayed by the application software. During user interaction with the application software, a user interface display screen is presented that includes one or more fields for reporting an issue with respect to structured data that is presently being displayed by the application software. Structured metadata is then automatically captured related to the reported issue. The structured metadata includes at least a location within the structured data for the reported issue. Records are stored of each reported issue in a database. Each record includes the reported issue, and the automatically captured structured metadata related to the reported issue.

Abstract: An alert management system for a configuration management database (CMDB) platform includes a client instance configured to: apply a first filter of an alert rule to CMDB alerts to select a first alert based on context of the first alert and apply a second filter of the alert rule to the CMDB alerts to select a second alert based on context of the second alert, wherein the context of the first and second alerts includes details regarding the first and second alerts and associated configuration items (CIs). The client instance is also configured to: evaluate at least one condition of the alert rule using the context of the first and/or second alert; and in response to evaluating the at least one condition of the alert rule to be true, performing at least one action of the alert rule using the context of the first and/or second alert.

Abstract: Techniques for implementing zone redundant computing services in distributed computing systems are described herein. In one embodiment, a computing device is configured to query a database in a first availability zone for a list of computing services corresponding to a user account and provided by servers in a second availability zone different than the first availability zone. The computing device can then selects one or more computing services provided by the servers in the second availability zone from the queried list of computing services and transmit an instruction to the servers in the second availability zone for performing the requested data operation.

Abstract: Methods and systems for addressing malfunction of a medical imaging device are disclosed. The method includes classifying a type of an image artifact in a medical image acquired by the medical imaging device by using a trained machine learning model. The method also includes analyzing system data associated with acquisition of the medical image to identify one or more system parameters that might have contributed to the type of image artifact and providing an action for addressing the image artifact based on the identified one or more system parameters.

Abstract: A system for autonomously testing a computing system is disclosed. The system parses data obtained from a variety of sources, and extracts source concepts from the parsed data to generate models for inclusion in a set of agglomerated models. The system interacts with and explores features of a software application being tested by the system. Outputs and information obtained from the interaction are utilized by the system to update the models or generate new models for the set of agglomerated models. The agglomerated models are utilized by the system to execute tests on the application to detect potential defects and conflicts. Detected defects and conflicts may be included in a report for review. Feedback on the defects and conflicts may be utilized to further update the agglomerated models. The agglomerated models are updated recursively as additional data is obtained, further interactions are performed, and further outputs are generated over time.

Abstract: A reasoning engine is disclosed. Contemplated reasoning engines acquire data relating to one or more aspects of various environments. Inference engines within the reasoning engines review the acquire data, historical or current, to generate one or more hypotheses about how the aspects of the environments might be correlated, if at all. The reasoning engine can attempt to validate the hypotheses through controlling acquisition of the environment data.

Abstract: A method and system. A health and compliance check report for a network including two or more devices is received. The report includes a list of health and compliance check findings at a particular time. Each finding indicates a determination of non-compliance of a subject device of the two or more devices with a predetermined requirement and includes a severity value associated with the determination of non-compliance of the subject device. For each finding in the report, a ranking value is determined based on the associated severity value and an importance value of one or more devices connected to the subject device.

Abstract: An error diagnosis method of a robot includes determining operational status of components of a robot and determining an operational status of a main control process of the robot, generating diagnosis data comprising a data format having an error status level, a name of an error diagnosis processes of the components, and an error code identity (ID) number, packaging diagnosis data of the operational status of the components as diagnosis information in a predetermined data format, storing the diagnosis information in memory.

Abstract: A plant asset failure prediction system and associated method. The method includes receiving user input identifying a first target set of equipment including a first plurality of units of equipment. A set of time series waveforms from sensors associated with the first plurality of units of equipment are received, the time series waveforms including sensor data values. A processor is configured to process the time series waveforms to generate a plurality of derived inputs wherein the derived inputs and the sensor data values collectively comprise sensor data. The method further includes determining whether a first machine learning agent may be configured to discriminate between first normal baseline data for the first target set of equipment and first failure signature information for the first target set of equipment.

Abstract: A system is provided for decomposing events from managed infrastructures. A first engine is configured to receive message data from a managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information, the at least one engine is configured to determine common characteristics of events and produce clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in a physical hardware of the managed infrastructure directed to supporting the flow and processing of information. The first engine is configured to create one or more situations that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. A second engine is configured to determine one or more common steps from events and produces clusters relating to events.

Abstract: One or more processors determine that one or more memory locations in a client computing device contain one or more software artifacts that provide a match to a first software signature. One or more processors send instructions not to scan the one or more memory locations against a second software signature.

Abstract: A method and an associated SDCDN device for delivering data content in a communication network. A software defined content delivery network (SDCDN) monitors one or more performance indicators regarding an exchange of the data content between a first content delivery network (CDN) and at least one client device using a communication channel, The SDCDN determines that at least one performance indicator of the one or more performance indicators exceeds a threshold performance value. The SDCDN identifies a different CDN in operative communication with the at least one client device. The different CDN includes the data content. In response to determining that at least one performance indicator- exceeds the threshold performance value, the SDCDN transmits a transfer command to the at least one client device to cause the at least one client device to switch to the different CDN and receive the data content from the different CDN.

Abstract: An online system optimizes for longer attribution window conversions with an additive decomposition model by predicting the probability that a predefined action happens given an impression/click. The online system receives a content item from a content provider for display to a target user, and predicts a probability that a target user will convert given an interaction with the content item by the target user. The online system computes, by a first trained model, a short-term conversion probability of a conversion event happening within a first conversion window after the interaction. The online system computes, by a second trained model, a long-term conversion probability of the a conversion event happening within a second conversion window after the interaction, the second conversion window being longer than the first conversion window. The online system computes the conversion probability given the interaction based on the short-term conversion probability and the long-term conversion probability.

Abstract: In one implementation, a computer-implemented method includes receiving information that describes an issue with a building; accessing data that identifies (i) a plurality of components that are included in the building and (ii) features of the plurality of components; identifying one or more candidate components that have at least a threshold likelihood of being a cause of the issue; selecting a candidate service provider from among a plurality of service providers based on a comparison of (i) the one or more candidate components and (ii) information identifying technical qualifications for the plurality of service providers; transmitting a service request for the issue to the candidate service provider; receiving a response from the candidate service provider; and scheduling, based on the response, a service appointment with the candidate service provider to resolve the issue.