Abstract: A device may receive a command to create an object. The object may be associated with representing a set of nodes. A first node, of the set of nodes, may be connected to a second node, of the set of nodes via an edge, of a set of edges. The device may create, based on the command, the object. The object may include a sparse matrix associated with representing the set of nodes and the set of edges. The object may include a first table associated with representing a set of properties associated with the set of nodes. The object may include a second table associated with representing a set of properties associated with the set of edges. The device may store the object.

Abstract: Some embodiments relate to assigning individual log messages to clusters. An initial cluster assignment may be performed by applying a hash function to one or more non-variable components of the message to generate an initial cluster identifier. Subsequently, clustering may be further refined (e.g., by determining whether to merge clusters based on similarity values). An interface can present a representative message of each cluster and indicate which portions of the message correspond to a variable component. Particular inputs detected at the input corresponding to one of these components can cause other values for the component to be presented. For a given cluster, timestamps of assigned messages can be used to generate a time series, which can facilitate grouping of clusters (with similar or complementary shapes) and/or triggering alerts (with a condition corresponding to a temporal aspect).

Abstract: Aspects of the subject disclosure may include, for example, systems and methods aggregating video content and adjusting the aggregate video content according to a training model. The adjusted aggregate video content comprises a first subset of the images and does not comprise a second subset of the images. The first subset of the images is determined by the training model based on a plurality of categories corresponding to a plurality of events. The illustrative embodiments also include presenting the adjusted aggregate video content and receiving identifications for the first subset of the images in the aggregate video content. Further, the illustrative embodiments include adjusting the training model according to the identifications and providing the adjusted training model to a network device. Other embodiments are disclosed.

Abstract: Example embodiments disclosed herein relate to determining permissible activity in an application. Application programming interfaces (APIs) of an application are monitored using a runtime agent. Information about the APIs is provided to a rules engine. A set of rules describing permissible activity is received from the rules engine.

Abstract: Embodiments described herein are directed to computer-implemented methods, systems, and computer program products for regression testing. A non-limiting example of a computer-implemented method includes receiving, by a processing system, application data from a user processing system deploying utilizing an application during normal use of the application. The method further includes generating, by the processing system, a regression test scenario for a new version of the application to be deployed on the user processing system, wherein the regression test scenario is based at least in part on the application data received from the user processing system. The method further includes performing, by the processing system, a regression test on the new version of the application using the regression test scenario.

Abstract: A program generating method acquires a first image set, and retrieves a similar image that is similar to a processing target image included in the first image set, from a database. For each of N number of second image sets in the database, an integrated similarity of an image included in the second image set with respect to the processing target image is calculated based on a first similarity between the image included in the second image set and the processing target image, a second similarity between the second image set and the first image set, and the completeness of the first image set, and the similar image is retrieved based on the integrated similarity.

Abstract: Computer-implemented systems and methods are provided for determining application matching status. In one implementation, a method is implemented with one or more processors and includes accessing, at a server, a first dependency tree representing a first application and a second dependency tree, and acquiring one or more values for the first dependency tree and one or more values for the second dependency tree. The method also includes comparing the one or more values of the first dependency tree with the one or more values of the second dependency tree. The method further includes determining a matching status between the first application and an application represented by the second dependency tree based on the comparison, and providing, for display, an indication of the matching status.

Abstract: A community exchange gathers machine consumable modules in a centralized database. The community exchange receives information associated with the status of a computing device. One or more device tags are generated based on the first information. Each of the device tags is related to at least a portion of the status of the computing device. The community exchange stores a database of machine consumable modules in association with one or more existing tags. By cross-referencing the device tags with the existing tags, the community exchange determines whether one of the machine consumable modules is associated with the device tags. Responsive to a determination that no machine consumable module in the database is associated with the device tags, the information received from the computing device is stored as a machine consumable module associated with the device tags.

Abstract: A remediation server utilizing a deep neural network to analyze a live service to predict when a service is about to experience a failure and determine the least intrusive method of remediation. The remediation server prioritizing maintaining the highest level of system availability when determining a remediation for a failed or failing service.

Abstract: Disclosed herein are systems, devices, and methods related to assets and predictive models and corresponding workflows that are related to the operation of assets. In particular, examples involve assets configured to receive and locally execute predictive models, locally individualize predictive models, and/or locally execute workflows or portions thereof.

Abstract: A technique includes obtaining code coverage information related to lines of code. The code coverage information indicates how the lines of code are covered by a plurality of tests. The technique includes generating a two-way mapping based on the code coverage information. The two-way mapping includes a first mapping that maps a particular test in the plurality of tests to at least one line in the lines of code, which is covered by the particular test; and a second mapping that maps a particular line of code in the lines of code to at least one test in the plurality of tests, which covers the particular line of code.

Abstract: A dynamically-loaded code analysis device includes a memory unit, an extraction unit, and a specification unit. The memory unit memorizes dynamically-loaded code information indicating a class structure of a dynamically-loaded code and call method information in which tag information added to user information is associated with a class structure of a code performed for the user information, for each of the dynamically-loaded codes acquired via a network. The extraction unit detects transmission of user information to another device and specifies tag information that matches the tag information added to the user information from the call method information memorized in the memory unit, to extract a class structure associated with the tag information. The specification unit searches the memory unit for dynamically-loaded code information indicating the class structure, to specify a dynamically-loaded code corresponding to the dynamically-loaded code information.

Abstract: The present disclosure provides a method and a device for detecting network intrusion. The method includes: obtaining a feature vector of a network flow to be detected; and detecting the feature vector using a deep neural network, and determining a network intrusion category of the network flow to be detected, in which the deep neural network is generated by training with training data, the training data includes feature vectors of normal samples and feature vectors of attack samples, the attack samples include original attack samples and generated attack samples by adding noise to the original attack samples. The method can improve an ability to identify unknown attacks and a normalization ability of known attacks.

Abstract: A method for applying test patterns to scan chains in a circuit-under-test. The method includes providing a compressed test pattern of bits; decompressing the compressed test pattern into a decompressed test pattern of bits as the compressed test pattern is being provided; and applying the decompressed test pattern to scan chains of the circuit-under-test. The actions of providing the compressed test pattern, decompressing the compressed test pattern, and applying the decompressed pattern are performed synchronously at the same or different clock rates, depending on the way in which the decompressed bits are to be generated. A circuit that performs the decompression includes a decompressor such as a linear finite state machine adapted to receive a compressed test pattern of bits. The decompressor decompresses the test pattern into a decompressed test pattern of bits as the compressed test pattern is being received.

Abstract: The disclosed principles describe systems and methods for assessing the security posture of a target device, wherein the assessment is performed by a scanning computer in communication with the target device via a communication network. By employing a system or method in accordance with the disclosed principles, distinct advantages are achieved. Specifically, conducting such a remote scan allows for the scanner computer to perform a remote scan of the remote device without installing client software to the remote device. Thus, the disclosed principles reduce the need for internal IT resources to manage the deployment and updates of client software on the target device. Also, conducting a remote scan according to the disclosed principles allows for the remote scan to be performed even if the scanner computer and remote device run different operating systems.

Abstract: A misconfiguration crowdsourcing system arranged to analyze computer system configuration. The computer system configuration may be analyzed with respect to a population of computer systems. In some embodiments, sets of configuration options may be compared for one or more computer systems in a population set. Based on the comparison, a frequency of at least one setting for a client configurable option may be determined. A target characteristic may be identified for a setting of a configuration option based on the frequency of the at least one setting for the configuration option with the population. Computer systems with configuration settings conflicting with target characteristics may be identified as unhealthy.

Abstract: Disclosed herein are systems, devices, and methods related to assets and predictive models and corresponding workflows that are related to the operation of assets. In particular, examples involve assets configured to receive and locally execute predictive models, locally individualize predictive models, and/or locally execute workflows or portions thereof.

Abstract: Aspects of the technology described herein can detect visual regressions in a computer-generated document, such as a web page, caused by programming errors. The technology can be used to detect errors in programs coded in a variety of different languages and used in a variety of applications that generate user interfaces. In one aspect, the technology is used to validate an updated program module prior to replacing a production version of the program module with the updated version. The technology described herein can compare a baseline version of a user interface with a test version of the user interface generated using the updated program module. In an aspect, a visual parity analysis is run to detect a visual regression.

Abstract: A method, system and computer program product for generating answers to questions. In one embodiment, the method comprises receiving a query, conducting a search through one or more data sources to identify candidate answers to the query, and providing each of the candidate answers with a preliminary score. The method further comprises filtering out any of the candidate answers with a preliminary score that does not satisfy a defined condition. The candidate answers having preliminary scores that satisfy this condition form a subset of the candidate answers. Each of the candidate answers in this subset is processed to produce further scores. A ranking function is applied to these further scores to determine a ranking for each of the candidate answers in the subset; and after this ranking function is applied, one or more of the candidate answers are selected as one or more final answers to the query.

Abstract: A novel centralized troubleshooting tool that enables user to troubleshoot a distributed virtual network with a single consistent user interface is provided. The distributed virtual network being monitored or debugged by the centralized troubleshooting tool includes different types of logical resources (LRs) that placed or distributed across different physical endpoints (PEs). The centralized troubleshooting tool provides functions that allow the user to invoke commands on different physical endpoints in order to collect information about the logical resources running in those physical endpoints. This allows the user to compare and analyze the information from different PEs for a same LR.

Abstract: Various aspects directed towards facilitating error management within a shared non-volatile memory (NVM) architecture are disclosed. Data is stored in an NVM, and error correction vector (ECV) information associated with the NVM is stored in an error tracking table (ETT) within one of a dynamic random access memory (DRAM) or a second NVM component. The ETT is then filtered with a Bloom filter to predict a subset of ETT entries that include a reporting of an error in the NVM. A parallel query of the NVM and the ETT is then performed, which includes a query of the NVM that yields a readout of the NVM, and a query of the ETT that is limited to a query of the subset of ETT entries predicted by the Bloom filter which yields a construction of an ECV corresponding to the readout of the NVM.

Abstract: An example method for storing data includes providing a plurality of physical storage pools, each storage pool including a plurality of storage nodes coupled to a network. The method also includes mapping a partition of a plurality of partitions to a set of physical storage pools, where each physical storage pool of the set of physical storage pools is located in a different availability zone, and the storage nodes within an availability zone are subject to a correlated loss of access to stored data. The method further includes receiving a data management request over the network, the data management request being associated with a data object. The method also includes identifying a first partition of the plurality of partitions corresponding to the received data management request and manipulating the data object in the physical storage pools mapped to the first partition in accordance with the data management request.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for generating, in response to a single input operating system command that is invoked independent of a native application, a message that includes an image of a particular environment instance of the native application that was displayed when the single input operating system command and a uniform resource identifier of the particular environment instance of the native application.

Abstract: The current document is directed to methods and systems for processing, classifying, and efficiently storing large volumes of event messages generated in modern computing systems. In a disclosed implementation, received event messages are normalized to identify non-parameter tokens within the event messages. The non-parameter event tokens are used to compute a metric for each event message. The metrics are used, in turn, to identify a type-associated cluster to which to assign each received event message. The type-associated clusters are created dynamically as streams of event messages are processed. The type-associated clusters may be dynamically split and merged to refine event-message typing.

Abstract: An anomaly detection system includes a plurality of signals. Each of the signals is associated with an anomaly detection procedure that will be used to identify anomalies within the signal. Anomaly detection is performed by applying the anomaly detection procedure to a sequential set of data points of a signal. The signals are updated based on incoming data streams. The data streams are analyzed, and the sequential set of data points for each signal is updated based on data points extracted from the data streams.

Abstract: A method and information processing system facilitate debugging of a multi-threaded application. A control program request associated with at least one thread of a process that has been designated for debugging is generated. The control program request is placed into a memory buffer associated with the thread by the debugger. The memory buffer is passed to a control program. A plurality of memory buffers is monitored. Each memory buffer in the plurality of memory buffers is associated with a different thread of the process. At least one memory buffer in the plurality of memory buffers is determined to include debugging event information from the control program determining. The debugging event information is processed. The processing includes at least one of notifying a user of the debugging event information and generating at least one control program request for a thread associated with the at least one memory buffer.

Abstract: An endpoint system provides a REST endpoint for an application. The endpoint system processes request messages based on message pair data for each message that includes an operation and parameter data. The parameter data includes parameter information for each parameter that identifies whether the value for the parameter is to be taken from the URI or payload of a request message. The endpoint system receives request messages that have a URI and payload. The URI includes an operation name. The endpoint system processes each request message in accordance with the message pair data for the operation specified in the request message. For each parameter of the message pair data, the endpoint system extracts the value for the parameter from the URI, payload, headers, or query parameters as specified by the parameter information. The endpoint system invokes the operation passing the one or more extracted values as actual parameters.

Abstract: This application discloses a service chain fault detection method and an apparatus. The method includes: obtaining, by a service forwarding entity SFE, a first fault tracing detection request packet, and then determining to communicate with a first service function SF node, where the first fault tracing detection request packet includes a path identifier ID and an address of a device for initiating fault detection, and the path ID is used to identify a path of a service chain; obtaining, by the SFE, an ID of the first SF node; and sending, by the SFE, a first fault tracing detection response packet to the device for initiating fault detection, where the first fault tracing detection response packet includes the path ID, the ID of the first SF node, and the address of the device for initiating fault detection.

Abstract: Business transactions and the nodes processing the transactions are monitored and actions are applied to one or more nodes when a performance issue is detected. A performance issue may relate to a metric associated with a transaction or node that processes the transaction. If a performance metric determined from data captured by monitoring does not satisfy a health rule, the policy determines which action should be performed to correct the performance of the node. When a problem is detected for multiple nodes, the present technology may address a subset of the multiple nodes rather than apply an action to each node experiencing the problem. When a solution is found to correct the problem with the subset of nodes, the solution may be applied to the other nodes experiencing the same problem.

Abstract: A system and method for determining whether a computer system is experiencing a problem are provided. Multiple data sets are identified. Each data set includes multiple values indicating a set of attributes that relate to a computer system and that correspond to a different time period of multiple time periods, such as days or hours. A model is generated based on the multiple data sets. A particular data set is identified that includes a set of values that correspond to the set of attributes and a particular time period that is subsequent to each of the multiple time periods. The model is used to generate a predicted value based on the particular data set. An actual value that corresponds to the particular time period is identified. A difference between the actual value and the predicted value is calculated and indicates a likelihood that the computer system is experiencing a problem.

Abstract: A distributed processing system is disclosed herein. The distributed processing system includes a server, a database server, and an application server that are interconnected via a network, and connected via the network to a plurality of independent processing units. The independent processing units can include an analysis engine that is machine-learning-capable, and thus uniquely completes its processing tasks. The server can provide one or several pieces of data to one or several of the independent processing units, can receive analysis results from these one or several independent processing units, and can update the result based on a value characterizing the machine learning of the independent processing unit.

Abstract: A testing server tests new code modules, or re-tests previously tested code modules, using individualized sets of test data. The testing server receives test datasets from an execution engine, which runs tested code modules to process operational datasets of computing devices. The testing server receives an untested code module from a user, and obtains test dataset parameters applicable to the untested code module. The testing server generates an individualized set of test datasets based on the test dataset parameters. The testing server tests the untested code module by processing each test dataset in the individualized set of test datasets to produce test results.

Abstract: Methods and systems that detect computer system anomalies based on log file sampling are described. Computers systems generate log files that record various types of operating system and software run events in event messages. For each computer system, a sample of event messages are collected in a first time interval and a sample of event messages are collected in a recent second time interval. Methods calculate a difference between the event messages collected in the first and second time intervals. When the difference is greater than a threshold, an alert is generated. The process of repeatedly collecting a sample of event messages in a recent time interval, calculating a difference between the event messages collected in the recent and previous time intervals, comparing the difference to the threshold, and generating an alert when the threshold is violated may be executed for each computer system of a cluster of computer systems.

Abstract: Dumping resources can include identifying a resource associated with a computing device, dumping the resource associated with the computing device, determining whether the resource has changed since the resource has been dumped, and dumping the resource, prior to a crash of the computing device occurring, when the resource has changed since the last dump.

Abstract: A test and measurement instrument, including an input configured to receive a signal-under-test, a user input configured to accept a first trigger event and a second trigger event from a user, a first trigger decoder configured to trigger on an occurrence of the first trigger event and generate a first trigger signal, a second trigger decoder configured to trigger on an occurrence of the second trigger event occurring after the first trigger event and generate a second trigger signal, and an acquisition system configured to acquire the signal-under-test in response to the first trigger signal and store the acquired signal-under-test based on whether the second trigger signal validates or invalidates the first trigger signal.

Abstract: Methods for stateless management of object properties and corresponding systems and computer-readable mediums. A method includes executing a presenter module that manages interactions with a user via a view module, and identifying a required object property for the presenter module. The method includes registering the required object property, by the presenter module, in a policy manager module as a property policy. The method includes building a request for a service based on the property policy, sending the request to the service, and receiving a response to the request from the service.

Abstract: Aspects of the present invention disclose a method, computer program product, and system for prioritizing test cases for relational database systems. The method includes identifying one or more data tables within a relational database. The method further includes identifying an exclusivity value for each of the one or more identified data tables. The method further includes calculating a table weight for each of the one or more identified data tables. The method further includes prioritizing the one or more identified data tables based on the respective calculated table weights. The method further includes identifying one or more sequences of database statements corresponding to the prioritized data tables, wherein a database statement is a command executed on one of the prioritized data tables. The method further includes prioritizing the one or more identified sequences based on the corresponding database statements.

Abstract: Examples provide a page-fault latency feedback metric to determine performance of workloads or virtual machines (VMs) running on a VM host in a cluster. A hypervisor induces page-faults by varying a memory limit associated with a VM. Page-fault latencies are measured at each of the varying memory limits. A performance loss occurring at each page-fault latency is measured and converted to a performance score. A page-fault translation table is constructed based on the page-fault latencies and assigned performance scores. When a page-fault occurs during execution of a workload on a VM host in the cluster, a cluster manager maps the page-fault latency associated with the page-fault to a performance score in the page-fault translation table. The cluster manager computes a current workload performance or VM performance based on the page-fault latency and the performance score.

Abstract: A method for generating a dump comprising data generated by a virtual system in a computing environment is depicted. The method comprises: initiating a dump process for dumping data generated by the virtual system and stored in guest memory; sending a dump request for the data from the virtual machine monitor to the trusted component; in response to receiving the dump request, generating a symmetric dump generating key; reading the data from the guest memory; encrypting the data with the symmetric dump generating key; encrypting the symmetric dump generating key with the public cryptographic key of the client system; providing the encrypted dump data and the encrypted symmetric dump generating key to the virtual machine monitor; generating a dump comprising the encrypted dump data and the encrypted symmetric dump generating key; and providing the dump to the client system.

Abstract: A Unified Protocol (UniPro) device with self functional test includes a physical layer circuit and a UniPro interface. The physical layer circuit has a transmit (TX) port and a receive (RX) port, wherein the TX port and the RX port are connected to each other via a loopback link under a self-test mode. The UniPro interface generates an outgoing test pattern to the TX port, and checks an incoming test pattern received from the RX port under the self-test mode.

Abstract: Aspects of the present invention disclose a method, computer program product, and system for prioritizing test cases for relational database systems. The method includes identifying one or more data tables within a relational database. The method further includes identifying an exclusivity value for each of the one or more identified data tables. The method further includes calculating a table weight for each of the one or more identified data tables. The method further includes prioritizing the one or more identified data tables based on the respective calculated table weights. The method further includes identifying one or more sequences of database statements corresponding to the prioritized data tables, wherein a database statement is a command executed on one of the prioritized data tables. The method further includes prioritizing the one or more identified sequences based on the corresponding database statements.

Abstract: In a model check with respect to a distributed environment model, in order to reduce redundant search, wasteful search is avoided and efficient search is enabled.

Abstract: A log entry identifies an error in the computer or other system. Another log entry identifies a symptom associated with the system error. The symptom occurs in timeframe prior to the system error and a variable score is determined for the symptom according to the timeframe, the consistency with which the symptom appears along with the error, and the frequency with which the symptom occurs throughout the system log. A new occurrence of the symptom is identified. Whether the symptom's variable score exceeds a threshold value for the symptom is determined. In response to determining that the symptom's variable score exceeds the threshold value, an alert indicating that the associated system error is probable is displayed.

Abstract: The present invention provides a monitor, especially a wake up monitor, for monitoring an integrated circuit, the monitor comprising a first monitoring unit configured to monitor at least one input of the integrated circuit, a second monitoring unit configured to monitor at least one output of the integrated circuit, a measurement unit configured to measure the time elapsed between an event on the at least one input and a reaction to the event on the at least one output and configured to output an alert signal if the elapsed time exceeds a predetermined first time limit. The present invention furthermore discloses an integrated circuit and a method for monitoring an integrated circuit.

Abstract: An apparatus for testing applications includes a data-processing machine including a memory and a processor operably coupled to the memory. The data-processing machine is configured to implement a data-driven testing framework that includes a data engineering module, a computational environment manager, and a result analysis module. The data engineering module is configured to create engineered test data based at least in part on the application to be tested. The computational environment manager is configured to control a computational environment in which the application is to operate on the engineered test data. The result analysis module is configured to compare engineered test data operated upon by the application with an expected output.

Abstract: Methods and systems for supporting a testing environment associated with a website for purchasing insurance products. The testing environment supports a plurality of test scenarios for testing the website. A user of the testing environment can select one of the test scenarios and the methods and systems render the website in a context of the selected test scenario. The methods and systems enable the user to navigate throughout the selected test scenario to aid in testing website functionality. According to embodiments, the testing environment includes a progress indicator that displays a user's progress through the selected test scenario. Further, the user can select a scenario flow chart that indicates various data parameters associated with the selected test scenario.

Abstract: A non-transitory computer-readable recording medium having stored therein a program for causing a computer to execute a process for detecting a sign, the process includes obtaining message information output from one or a plurality of information processing devices; obtaining configuration information in the one or the plurality of information processing devices; storing the obtained message information and the obtained configuration information in a common format; and outputting predetermined message information and predetermined configuration information according to comparison of a predetermined pattern described in the common format and the message information and the configuration information stored in the common format.

Abstract: This disclosure relates to a method and device for detecting and analyzing faults in video conferencing systems. The method includes extracting a diagnostic log that includes unstructured textual information for at least one video conference session from a video conferencing system. The method further includes converting the diagnostic log into a uniform time zone diagnostic log that includes structured textual information. The method includes collecting Quality of Service (QoS) metrics associated with the at least one video conference session and event parameters associated with at least one live event within the at least one video conference session. The method includes processing the uniform time zone diagnostic log, the QoS metrics, and the event parameters based on at least one of a plurality of analytics rules stored in an analytics rule database. The method further includes performing at least one predefined action based on a result of the processing.

Abstract: Some implementations provide techniques and arrangements for causing an interrupt in a processor in response to an occurrence of a number of events. A first event counter counts the occurrences of a type of event within the processor and outputs a signal to activate a second event counter in response to reaching a first predefined count. The second event counter counts the occurrences of the type of event within the processor and causes an interrupt of the processor in response to reaching a second predefined count.

Abstract: In an analysis apparatus, when detecting each packet communicated via a network, an update unit updates statistical information that is stored in a continuous storage area of a storage unit and that indicates the communication state of the network for a first cycle. Then, a first processing unit reads the statistical information from the storage unit at every first cycle, and processes the statistical information and initializes the statistical information in the storage unit. A second processing unit reads partial statistical information that is part of the statistical information from the storage unit at every second cycle shorter than the first cycle, and processes the partial statistical information and initializes the partial statistical information in the storage unit.