Abstract: An integrated circuit is provided with error detection circuitry and error repair circuitry. Error tolerance circuitry is responsive to a control parameter to selectively disable the error repair circuitry. The control parameter is dependent on the processing performed within the circuit. For example, the control parameter may be generated in dependence upon the program instruction being executed, the output signal value which is in error, the previous behavior of the circuit or in other ways.

Abstract: A computer-implemented method may include monitoring a computing system for evidence of potential data failures within the computing system. The computer-implemented method may also include detecting evidence that indicates a potential data failure while monitoring the computing system and identifying data implicated in the potential data failure based on the detected evidence. The computer-implemented method may further include initiating an action configured to proactively facilitate restoration of at least a portion of the data implicated in the potential data failure prior to determining whether the data implicated in the potential data failure needs to be restored. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A system and method for power management of storage resources are disclosed. A method may include detecting an occurrence of an event associated with a storage resource disposed in an array of storage resources. The method may further include transitioning the storage resource into a specified power state in response to the detection of the occurrence of the event. A system may include a storage resource and a power management module communicatively coupled to the storage resource. The storage resource may be disposed in an array of storage resources. The power management module may be operable to detect an occurrence of an event associated with the storage resource, and may be operable to transition the storage resource into a specified power state in response to the detection of the occurrence of the event.

Abstract: A system for executing a cyber investigation by a non-expert user, including a computer having a processor, a memory, and a display; a computer-readable medium having stored thereon instructions for execution of a wizard application, the processor adapted to execute the instructions when the computer-readable medium is inserted into the computer, the processor programmed to: receive case information; receive a type of activity being investigated in response to user inputs to select the activity type from a list of possible activity types; guide the user through capturing data related to the selected activity type through steps presented to the user through one or more screens shown in the display, the steps presented such that a non-expert user can follow them; receive user inputs through a screens to obtain information needed to continue capturing the data related to the selected activity; and store the captured data in a removable data storage device or medium for analysis and use in the cyber investigation

Abstract: A method, system and machine-readable storage medium for providing fault tolerance in a distributed mobile architecture (dMA) system. The method includes receiving a message or failing to receive the message within a predetermined time relating to a first dMA gateway (dMAG) at a second dMAG. It is determined whether the first dMAG is not operational or is otherwise offline based on the received message or the failure to receive the message. One or more dMA nodes associated with the first dMAG are notified in order to request connections to an external system via the second dMAG. The external system is also notified to request connections to one or more dMA nodes associated with the first dMAG via the second dMAG.

Abstract: A computer apparatus includes a managing unit realizing virtual computers including device driver virtual computers and user virtual computers, the user virtual computers communicating with various devices via the device driver virtual computers. Error detection information is received from one of the virtual computers upon detection of error in one of the device drivers used for communication with one of the devices in one of the virtual computers. One or more types of the virtual computers and the contents of recovery process corresponding to the type of device driver and the type of error indicated in the received error detection information are acquired from error recovery control information. A recovery instruction is transmitted to one or more of the virtual computers identified by the one or more acquired types of virtual computers in order to cause the one or more identified virtual computers to perform the acquired contents of the recovery process.

Abstract: A method for automatic protection coordination in a power system network comprises identifying radial source-to-load paths and fault protection devices in the source-to-load paths, for a portion of the power system network to be coordinated. Device settings data for fault protection devices are retrieved, including multiple preconfigured settings for some devices. Fault currents for each of multiple possible electrical faults in said portion of the power system network are predicted, and a selectivity check for each pair of fault protection devices that are adjacent to one another in an identified radial source-to-load path is performed, for each of one or more of the predicted fault currents, taking into account multiple preconfigured settings for remotely controllable fault protection devices.

Abstract: Nano-antennas with a resonant frequency in the optical or near infrared region of the electromagnetic spectrum and methods of making the nano-antennas are described. The nano-antenna includes a porous membrane, a plurality of nanowires disposed in the porous membrane, and a monolayer of nanospheres each having a diameter that is substantially the same as a diameter of the nanowires. The nanospheres are electrically in series with the nanowires.

Abstract: In one embodiment, an intelligent communications device for operating in a network is disclosed. The device includes a storage device having a plurality of partitions storing images for performing boot operations. The device also includes a detection module that is operative to detect a boot failure, and a first restoration module that is operative to restore an active image with a first backup image, in response to a detected boot failure from an active image. The device further includes a second restoration module that is operative to restore a second backup image in response to a detected boot failure after restoration from a first backup image. The device also includes a programmable processor that is programmed to cause execution of boot operations and functions performed by the detection module, first restoration module, and second restoration module.

Abstract: When a node has to restart its control component, or a (e.g., label-switched path signaling) part of its control component, if that node can preserve its forwarding information across the restart, the effects of such restarts on label switched path(s) include the restarting node are minimized. A node's ability to preserve forwarding information across a control component (part) restart is advertised. In the event of a restart, stale forwarding information can be used for a limited time before. The restarting node can use its forwarding information, as well as received label-path advertisements, to determine which of its labels should be associated with the path, for advertisement to its peers.

Abstract: Methods and systems are herein disclosed for write operation retry using the data stored and retained in an internal buffer within the non-volatile memory device. By using the data stored in the internal buffer, the systems and method of the present invention eliminate the need to include a dedicated retry buffer at the system level. Thereby, reducing the system cost, minimizing space consumption on a board within the system and, in some instance, limiting the latency attributed to a retry that relies on retrying the write based on re-transferring of the data contents to the internal non-volatile memory buffer.

Abstract: An information processing apparatus that performs a startup control of redundantly configured modules includes a memory to retain abnormality information regarding an abnormality that occurs at time of startup control of the modules, and a startup controller section executing a startup process by sequentially executing the process, generating the abnormality information, determining whether a reduced operation is possible or not when the module in which an abnormality occurs at the time of startup control is detected, completing an execution of the process block in progress when it is determined that the reduced operation is possible, executing a restart process on a module selected from all the modules in which abnormalities occur at the time of startup control based on the abnormality information and completing an execution of the process block in progress after completing the restart process when determined that the reduced operation is not possible.

Abstract: A system, method, and apparatus for providing continuous operations of a user e-mail application at a user computing device. At least two application servers, such as e-mail servers, are provided with each application server running the user e-mail application concurrently and independently. Each application server may have a persistent storage device associated with it for storing data. In response to a user request for data processing within the user application, the user request is transmitted to the at least two application servers for processing therein. A return result—responsive to the user request as processed by the one of the at least two application servers—is passed to the user computing device from one of the at least two application servers. In this manner, if one of the application servers fails or becomes unavailable due to a disaster or otherwise, the user e-mail requests can be continuously processed by at least the other application server without any delays.

Abstract: Accurate recovery of a primary server at a recovery server is accomplished with reduced network overhead by maintaining at the recovery server checkpoints taken over time of the primary server and an intention log of logical transactions pending and complete by the primary server. The recovery server is brought to the operational state of the primary server as of failure at the primary server by recovering the most recent checkpoint and then executing the transactions indicated by the intention log as received but not complete as of the time that the checkpoint was taken.

Abstract: A method and system for transmitting data corresponding to at least one endpoint device problem in a packet communications network is described. Specifically, an endpoint device detects at least one problem that pertains to the endpoint device. The endpoint device then generates data pertaining to the endpoint device problem. Lastly, the endpoint device then transmits the data detailing that endpoint device problem to the packet communications network.

Abstract: A memory system may enact emergency activities, such as preventing a write abort, by identifying when a power loss occurs at the earliest time possible. The prediction of a power loss during the process of programming a page, but before all power is lost may allow for the memory to initiate emergency activities. A power loss prediction mechanism may utilize a data link lost signal to trigger data protection. The data link lost signal may indicate that the data connection between the memory and a host has been lost. The signal indicating a data link loss may precede the actual detection of a power loss so that data protection can be implemented quicker.

Abstract: A primary virtual machine is formed on a primary machine in which a primary hypervisor runs, and inputs virtual interrupt based on an external interrupt from the primary hypervisor to a primary guest OS. A secondary virtual machine is formed on a secondary machine in which a secondary hypervisor runs, and inputs the virtual interrupt to a secondary guest OS on the basis of timing information on the virtual interrupt transmitted from the primary virtual machine. When inputting the virtual interrupt to the primary guest OS, the primary virtual machine suspends the primary guest OS, and determines whether the suspended position is in a critical section. If the suspended position is not in the critical section, the primary virtual machine inputs the virtual interrupt at the suspended position. If the suspended position is in the critical section, the primary virtual machine changes the suspended position, and again performs the determination.

Abstract: Remediating events of components using behaviors via an administrator system and an administrator client. The administrator system receives an event from a component of an information technology (IT) environment. A behavior is determined at least partly from the event. The behavior is determined to be an anomalous behavior at least partly from a group of previously received events. A coefficient is calculated, via a calculation, for the anomalous behavior at least partly from a weight. The administrator system sends a description of the anomalous behavior and a group of options to the administrator client. The description is at least partly based on the calculation. The administrator system receives a severity indication from the administrator client. The weight, the calculation, and the description are updated based on the severity indication.

Abstract: The scope and impact of an event, such as a failure, are identified. A Containment Region is used to identify the resources affected by the event. It is also used to aggregate resource state for those resources. This information is then used to manage one or more aspects of a customer's environment. This management may include recovery from a failure.

Abstract: In a method for managing resources in a virtualized computing environment, a command to initiate execution of an operating system image dump process for a logical partition of the virtualized computing environment is received while the logical partition is in a process of terminating. One or more resources that are allocated to the logical partition that will not be utilized by the logical partition during execution of the operating system image dump process are determined. A notification to a hypervisor program in the virtualized computing environment is sent. The notification identifies the one or more resources. One of the one or more resources is reallocated. The operating system image dump process is executed.

Abstract: A network layout between network elements and routers using network redundancy to improve reliability of network communication is disclosed. Upon detecting a link failure associated with a primary link between an access switch and a primary router by the access switch via a connectivity verification protocol, the access switch sends a message to the primary router indicating connection defect via the connectivity verification protocol such as IEEE 802.1 ag standard. After enabling protection switching mechanism to activate a secondary link between the access switch and a backup router for network communication, routing data streams are routed between the access switch and the router via the secondary link. In one aspect, the protection switching mechanism is operated in accordance with G.8031 under International Telecommunication Union (“ITU”) standard.

Abstract: The present subject matter discloses methods and systems of sharing of peripheral devices in multi host computing systems (100). In one implementation, the method of sharing a peripheral device (116) amongst a plurality of hosts of the multi-host computing system (100) comprises receiving a request to switch the peripheral device (116) from a first operating system running on a first host from amongst the plurality of hosts to a second operating system running on a second host from amongst the plurality of hosts; generating a request for the first operating system to relinquish control of the peripheral device (116); determining the status of the relinquishment based on response generated by the first operating system; initiating a request for the second operating system to install a device driver for the peripheral device (116) upon determining successful relinquishment; and transferring ownership of the peripheral device (116) to the second operating system.

Abstract: A computer-based method for determining a probability that no path exists from a starting node to a target node within a network of nodes and directional links between pairs of nodes. The nodes and directional links form paths of a reliability graph and the method is performed using a computer coupled to a database. The method includes selecting a set of paths between the starting node and the target node that have been determined to be reliable, calculating a reliability of the union of the selected path sets, setting an upper bound for unreliability of the set of all paths, selecting a set of minimal cutsets from all cutsets that lie between the starting node and the target node, calculating the probability of the union of the minimal cutsets, and setting a lower bound for the unreliability of the set of all cutsets.

Abstract: In accordance with embodiments of the present disclosure, a method is provided for communicating multicast traffic. The method may include in response to receipt of multicast control traffic at a network element to be communicated to a protection switching group, communicating the multicast control traffic to each of a working path and a protection path of the protection switching group. The method may also include in response to receipt of multicast control traffic via either of the working path and the protection path, processing the multicast control traffic as if the multicast control traffic was received via both the working path and the protection path.

Abstract: According to some embodiments, a message generated by a downstream device is received at upstream device. The message may, for example, be received via a peripheral interface and may not require a response. It may then be determined that an error is associated with the message, and an alert message may be sent from the upstream device to the downstream device via the peripheral interface.

Abstract: A user of a mobile station can report a mobile station issue by transmitting a report including a description of the mobile station issue and other information for rapid troubleshooting and resolution by a manufacturer, through a wireless mobile communication network, to the manufacturer of the mobile station or mobile software, via a life cycle management tool program at a network. The report sent by the user of the mobile station may include information relating to the description of the mobile station issue, mobile station device information, device operation information, diagnostic logs, or captured screenshots. The life cycle management tool program stores the report including the information and sends an electronic notification to a technical center of a carrier and/or the manufacturer of the mobile station or mobile software for review and resolution of the reported mobile station issue in real time.

Abstract: A distributed resource managing system has one or more resource managing processes corresponding to each of predefined events that change the states of resources, on a communication network where each of a plurality of tasks can use a plurality of resources. Each of the one or more resource managing processes includes an assignor which, when it receives a request to protect any specific task against the event that changes states of resources to which its own process corresponds, assigns backup resources including a resource already selected by another resource managing process to the task in such a way that all tasks requested to be protected which use the resource can be protected from the event that changes the states of the resources, and an indicator which indicates information of the assigned backup resources to one or more recovery execution processes.

Abstract: Primary and secondary virtual machines each executing on a separate physical host and forming a fault-tolerant pair synchronize their execution with each other as closely as possible such that the secondary can take over execution of the primary with little or no disruption of service and no loss of data. To provide fast takeover, the execution latency between the two virtual machines is kept to a minimum by incrementally adjusting the CPU allocation to the primary virtual machine. The CPU allocation to the primary virtual machine decreases when the execution latency is large and increases when the execution latency is small. In order to maximize the performance of the primary virtual machine, the system seeks to maximize the CPU resource limit for the primary virtual machine for as long as possible while minimizing the execution latency.

Abstract: The present disclosure provides techniques for operating a tape drive. A method of operating a tape drive includes monitoring a parameter of the tape drive during a data access operation. The method also includes detecting an access failure. The method further includes selecting a treatment based on the parameter, applying the treatment, and performing a retry.

Abstract: Methods for managing a communication session in a communication network are disclosed. For example, a method includes detecting, by a first endpoint comprising at least one processor, an error condition associated with the communication session, sending, by the first endpoint, a notification of the error condition to a second endpoint that is using a transport layer session and receiving, by the first endpoint, a communication from the second endpoint, proposing a response to the error condition. Another method includes receiving, by a first endpoint comprising at least one processor, a notification of an error condition associated with the communication session, selecting, by the first endpoint, a response to the error condition, and sending, by the first endpoint, a communication to a second endpoint that is using a transport layer session, proposing a response to the error condition.

Abstract: An exemplary method includes a message broker subsystem 1) attempting to deliver one or more messages intended for a recipient software application to the recipient software application, 2) determining that the recipient software application is in a fault state after failing to deliver the one or more messages to the recipient software application, 3) automatically performing a fail-over process on one or more other messages intended for the recipient software application in response to the determination that the recipient software application is in the fault state, and 4) continuing to attempt to deliver a message selected from the one or more messages to the recipient software application while automatically performing the fail-over process on the one or more other messages. Corresponding methods and systems are also disclosed.

Abstract: Provided are a computer program product, system, and method for synchronous mode replication to multiple clusters receiving a write to a volume from a host. A received write is cached in a memory. A determination is made of a replication rule indicating one of a plurality of replication modes for a first cluster and a second cluster used for replication for the write, wherein one of the replication modes comprises a synchronous mode. A determination is made that the replication rule indicates a synchronous mode for the first and the second clusters. The write is transmitted from the memory to the first cluster to store in a first non-volatile storage of the first cluster and to the second cluster to store in a second non-volatile storage in response to determining that the replication rule indicates the synchronous mode.

Abstract: Each of a plurality of image processing apparatuses includes a module storing unit that stores therein a registered function module and a backup unit that backs up the stored function module and restores a function module based on backup data of the function module. An external storage device stores therein the backup data of the function module. When an error occurs in a first image processing apparatus, the backup unit of a second image processing apparatus restores the function module corresponding to the first image processing apparatus based on the backup data of the function module stored in the external storage device.

Abstract: A storage system comprises a first storage device having a first plurality of hard disk drives and a first controller. The first controller stores data in the first plurality of hard disk drives by stripes. Each stripe includes M data and N parity data allocated to M+N hard disk drives of the first plurality of hard disk drives. A first hard disk drive includes data or parity data of both a first stripe of the stripes and a second stripe of the stripes, while a second hard disk drive includes data or parity data of only one of the first stripe or the second stripe. During data recovery involving failure of one of the first plurality of hard disk drives, the data in the failed hard disk drive is recovered for each stripe by calculation using data and parity data in other hard disk drives for each stripe.

Abstract: A method and system for providing immunity to a computer system wherein the system includes an immunity module, a recovery module, a maintenance module, an assessment module, and a decision module, wherein the immunity module, the recovery module, the maintenance module and the assessment module are each linked to the decision module. The maintenance module monitors the system for errors and sends an error alert message to the assessment module, which determines the severity of the error and the type of package required to fix the error. The assessment module sends a request regarding the type of package required to fix the error to the recovery module. The recovery module sends the package required to fix the error to the maintenance module, which fixes the error in the system.

Abstract: A controller that obtains data from an object device in obedience to an obtaining request from the processor includes an error setter that sets, when a pseudo failure mode that spuriously generates a failure is active, an error associated with a failure type of a pseudo failure to be generated in the data obtained from the object device in obedience to the obtaining request; and an error processor that notifies, when detecting an error in the data under a state where the pseudo failure mode is active, the processor of the failure response corresponding to the failure type associated with the detected error.

Abstract: A method and circuit for implementing an enhanced availability personality card for a chassis computer system, and a design structure on which the subject circuit resides are provided. The personality card includes a first erasable programmable read only memory (EPROM) and a second EPROM, each EPROM storing Vital Product Data (VPD) and a first temperature sensor and a second temperature sensor sensing temperature. A primary bidirectional bus and a redundant bidirectional bus are respectively connected between the first EPROM and the first temperature sensor and the second EPROM and the second temperature sensor, and a pair of chassis management modules. Each chassis management module includes a switch connected to both the primary bidirectional bus and the redundant bidirectional bus providing redundant paths, enabling continued function with failure of any critical personality card component.

Abstract: A system and method for moving wireless subscribers previously registered with a failed source MSC/VLR or SGSN to a new target MSC/VLR or SGSN in GSM and UMTS networks, using super-charger technology. The present invention allows mobile subscriber IMSIs to be transmitted to a new target MSC/VLR or SGSN before a source MSC/VLR or SGSN fails. Upon failure of the source MSC/VLR or SGSN, the addresses of the source MSC/VLR or SGSN serving the transmitted IMSIs are updated in an HLR and are associated with the addresses of the new target MSC/VLR or SGSN using MAP location update procedures. In another embodiment of the present invention, the addresses of the source MSC/VLR or SGSN servicing mobile subscribers are updated in an HLR to the addresses of the new target MSC/VLR or SGSN without the need for mobile subscribe IMSIs.

Abstract: A computer-readable recording medium stores a countermeasure support program that causes a computer to execute a process that includes calculating a time period elapsing from an occurrence timing of a message that is of a predetermined type and related to an operation of an apparatus in a monitored system, until an occurrence timing of a fault; and outputting the calculated elapsed time period.

Abstract: Providing heterogeneous recovery in a redundant memory system that includes a memory controller, a plurality of memory channels in communication with the memory controller, an error detection code mechanism configured for detecting a failing memory channel, and an error recovery mechanism. The error recovery mechanism is configured for receiving notification of the failing memory channel, for performing a recovery operation on the failing memory channel while other memory channels are performing normal system operations, for bringing the recovered channel back into operational mode with the other memory channels for store operations, for continuing to mark the recovered channel to guard against stale data, for removing any stale data after the recovery operation is complete, and for removing the mark on the recovered channel to allow the normal system operations with all of the memory channels, the removing in response to the removing any stale data being complete.

Abstract: A content transaction management server device includes: a memory storing decryption keys used in decryption of encrypted content data; a communication unit for information; a payment-request reception unit receiving, through the communication unit, a first storage address indicating a storage area where the decryption keys of encrypted content data in the memory are stored and user identifiers identifying users who are purchasers of the encrypted content data; a payment-procedure processing unit implementing payment-procedure processes related to purchase transactions of encrypted content data by a user identified by user identifiers in the payment request; and a decryption-key transmission unit that, after payment-procedure processing based on the payment-procedure processing unit is completed, reads out, from the memory, decryption keys stored in the storage area indicated by the first storage address included in the payment request and transmits, through the communication unit, the decryption keys to the

Abstract: A method for commanding and performing network entry is disclosed. The method for commanding network entry using a non-periodic message in a Base Station (BS) includes broadcasting a first pattern indicating ready for restart once or more times to a Mobile Station (MS), when the BS determines to restart due to a serious error of the BS, and performing a restart procedure, and broadcasting a second pattern indicating network entry to the MS, upon completion of the restart procedure.

Abstract: Detecting configuration problems in an ECLIPSE-based software application can be detected. Such a method can begin with the receipt of a user-command to test a configuration of an ECLIPSE-based software application or with a detection of a feature addition/update when an auto-testing feature is enabled. Information about the available sites for the ECLIPSE-based application can then be obtained. Then, a list of software elements required to operate the ECLIPSE-based software application can be compiled. At least one data attribute can be extracted from the meta data of each software element in the compiled list. The extracted data attributes can then be analyzed. When the analysis identifies a configuration problem, the existence of the configuration problem can be validated.

Abstract: A semiconductor integrated circuit, including a first master circuit, a second master circuit, a first slave circuit assigned to the first master circuit, and determines that an access request signal is sent from the first master circuit when an identification information is a first value, a first bus coupled to the first master circuit, the second master circuit, and the first slave circuit, a bus controller is configured to transmit the access request signal to the first slave circuit via the first bus, a system controller directs the bus controller to substitute the first value for a second value on the identification information of the access request signal received from the second master circuit when the first master circuit is in the deactivated state.

Abstract: Method and system for handling error events on a current path for processing an I/O request for reading information from and writing information to a storage space is provided. A system is able to communicate with the storage space via more than one path. If the current path reports an error event, then an alternate path quality is determined to ascertain whether the alternate path will generate an error similar to the current path. The alternate path quality is determined based on a plurality of factors which are assigned certain weights. The weights are determined based on a likely contribution of each factor to a repetition of the error reported by the current path. If the alternate path quality is equal to or exceeds a programmable threshold value, then the alternate path is selected.

Abstract: A system may include, for example, an Interrogating Call Session Control Function (I-CSCF) device having a processor adapted to receive a request from a Serving CSCF (S-CSCF) device communicatively coupled to a first communication device to establish communications with a second communication device responsive to the first communication device initiating a call directed to the second communication device, and to identify a primary S-CSCF device to which the second communication device is registered. The processor can also be adapted to detect a communication fault when attempting to communicate with the primary S-CSCF device, and to identify a secondary S-CSCF device that provides backup communication services to the second communication device responsive to detecting the communication fault. Other embodiments are disclosed.

Abstract: A method for transmitting data in a layer two network having layer three routing capabilities includes transmitting, via a physical loopback, the data from a layer two switching component of a multi service platform to a layer three switching component of the multi service platform. The data specifies an initial routing path for the data that identifies a first layer two switch, and the method includes determining a new routing path for the data, the new routing path identifying a second layer two switch different than the first layer two switch. The method also includes updating the data to specify the new routing path, and transmitting, via the physical loopback, the data that specifies the new routing path from the layer three switching component to the layer two switching component.

Abstract: Systems, methods, and software are provided for dynamically escalating service conditions associated with data center failures. In one implementation, a monitoring system detects a service condition. The service condition may be indicative of a failure of at least one service element within a data center monitored by the monitoring system. The monitoring system determines whether or not the service condition qualifies for escalation based at least in part on an access condition associated with the data center. The access condition may be identified by at least another monitoring system that is located in a geographic region distinct from that of the first monitoring system. Upon determining that the service condition qualifies for escalation, the monitoring system escalates the service condition to an escalated condition and initiates an escalated response.

Abstract: In a method for processing system events of a computing device, the computing device includes a basic input and output system (BIOS) and a baseboard management controller (BMC). The method allocates revised storage blocks in the BMC, for storing normal system events of the computing device, and a backup storage block in the BMC for storing error system events of the computing device. The method detects a error system event via the BMC, and records the error system event into the backup storage block of the BMC. The method obtains the error system event from the backup storage block of the BMC via the BIOS when the computing device is rebooted, and processes the error system event to reboot the computing device using a normal system event stored in the revised storage blocks of the BMC.

Abstract: Aspects of the present invention provide a tool for analyzing and remediating an update-related failure. In an embodiment, a failure state of a computer system that has been arrived at as a result of an update is captured. A semantic diff that includes the difference between the failure state and at least one of an original state or a completion state is then computed. This semantic diff is transformed into a feature vector format. Then the transformed semantic diff is analyzed to determine a remediation for the update. Failure and/or resolution signatures can be constructed using the semantic diff and contextual data, and these signatures can be used in comparison and analysis of failures and resolutions.