Abstract: An analysis system receives data streams generated by instances of instrumented software executing on external systems. The analysis system evaluates an expression using data values of the data streams over a plurality of time intervals. For example, the analysis system may aggregate data values of data streams for each time interval. The analysis system determines whether or not a data stream is considered for a time interval based on when the data value arrives during the time interval. The analysis system determines a maximum expected delay value for each data stream being processed. The analysis system evaluates the expression using data values that arrive before their maximum expected delay values. The analysis system also determines a failure threshold value for a data stream. If a data value of a data stream fails to arrive before the failure threshold value, the analysis system marks the data stream as dead.

Abstract: A method includes transmitting, by a distribution server, to each of a plurality of worker computers, a request for an enumeration of Internet Protocol (IP) addresses ranked according to a criterion. The method includes receiving, by the distribution computer, from a first of the plurality of worker computers, a first partial enumeration of the requested IP addresses ranked according to the criterion, the first partial enumeration stored in a hash table. The method includes receiving, by the distribution computer, from a second of the plurality of worker computers, a second partial enumeration of the requested IP addresses ranked according to the criterion, the second partial enumeration stored in a hash table. The method includes generating, by the distribution computer, a combined enumeration including the first partial enumeration and the second partial enumeration, the combined enumeration ranked according to the criterion. The distribution computer deduplicates the combined enumeration.

Abstract: Techniques are disclosed to identify a frequently-executed region of code during runtime execution of the code, generate initial profiling code for the frequently-executed region of code, cause the initial profiling code to be executed for a minimum number of processing cycles of the computer, and identify replacement candidate store instruction(s) that store a value that is not read by the frequently-executed region of code during execution of the initial profiling code. Replacement candidate load instruction(s) may also be identified that load a value that is not stored or loaded by the frequently-executed region of code during execution of the initial profiling code. Optimized code for the frequently-executed region of code may be generated by replacing each of the replacement candidate store or load instructions(s) with a non-temporal store or load instruction. The optimized code may be executed instead of the frequently-executed region of code during subsequent runtime execution.

Abstract: The disclosure provides an approach for automatically analyzing data related to software development, such as the number of defects, number of code line changes, number of test cases covering code, etc., and creating exploratory tests based on tour templates. In one embodiment, a test generating application matches descriptions, tags and/or keywords in the tour templates with data from development tools used to develop and test software. The test generating application combines the tour templates with the matching data to create exploratory tests for testers to perform. In addition, the test generating application may rank the created tests based on a measure of importance and determine a number of highest ranking tests or test types that can be executed given a capacity of the software tester or testing team. The highest ranking tests may then be provided to the software tester or testing team to perform prior to the software's release.

Abstract: A method includes receiving stateful code that is called from a first location and executed at a second location. The method includes acquiring contextual information associated with the stateful code. The method includes determining a location for storage of state information based on the contextual information. The method includes, based on the determined location, transforming the stateful code into stateless code. The transforming includes storing state information for the stateful code into storage at the determined location. In response to the determined location being the first location, the stateless code includes: retrieving the state information from the storage; from the first location, sending a call to the second location; at the first location, receiving a response from the second location; and storing the new state information into the storage at the first location. One argument of the call includes the retrieved state information. One return value includes new state information.

Abstract: A system according to certain aspects improves the process of managing log data. The system may receive a log data file including one or more log lines that contain information relating to computing operations. At least some of the log lines may include a static portion and a variable portion. The system may process a first log line to identify and extract a static portion from the first log line, and determine a first value for the first log line based on the extracted static portion. The system may process a second log line to identify and extract a static portion from the second log line, and determine a second value for the second log line based on the extracted static portion. The system may compare the first and second values, and based on the comparison, organize the first and second log lines together for presentation to a user.

Abstract: This disclosure provides systems and methods for tying cyber-security risk analysis to common risk methodologies and risk levels. A method includes identifying a plurality of connected devices that are vulnerable to cyber-security risks and identifying cyber-security risks in the connected devices. The method includes assigning a risk level to each of the risks and comparing the risk levels to a first threshold and to a second threshold. The method includes assigning each identified cyber-security risk to a risk classification and displaying a user interface that includes a notification according to the identified cyber-security risks and the corresponding assigned risk classifications.

Abstract: A computer program product, system, and method for: registering one or more agents within a program, wherein each agent is located along an execution path of the program and is configured to change the program's internal state; and executing at least one of the agents located along a first path in response to the program executing the first path. In some embodiments, executing the at least one of the agents includes changing internal data of the program and/or causing the program to execute varying amounts of data on the first path.

Abstract: Systems and methods for delta state tracking for event stream analysis. Events at a device are tracked and stored locally or forwarded to a server. The events collectively form an event stream. When an event of interest occurs, the precise configuration of a device at the time of the event of interest can be determined by applying the event stream in chronological or reverse chronological order to a snapshot of the device's configuration. Thus, the snapshot can be taken at any time. Tracking the deltas to the device's configuration enables the precise configuration at the time of the event of interest to be determined.

Abstract: Specific example debugging sessions are used to generate a generic decision tree (flow diagram) for use in future debugging sessions. Debug metadata is recorded for each debugging session. The debug metadata includes log file accesses and key traces. A generic decision tree is generated for use in future debugging sessions. Each file accessed by a developer during debug sessions creates a node in the generic decision tree. Branches of the decision tree are created between the nodes by aggregating the plurality of debug sessions together based on similarities and differences among the file accesses and results for the various debug sessions. The recorded metadata is genericized by identifying specific actions taken by developers and specific results thereof. The actions and results are abstracted to create more general types of actions and results such that the generic decision tree is applicable to a wider variety of problems in the software program.

Abstract: Some embodiments provide a system that allows application developers to track and monitor crashes that are occurring with their applications on various mobile devices. In some embodiments, crash logs are received from the mobile devices. Hash codes are generated based on the crash logs. A report to summarize the crash logs is generated based on the hash codes.

Abstract: A method of analyzing out-of-memory errors may include receiving a memory dump generated in response to an out-of-memory error, receiving an identification of an object class in the memory dump as a leak suspect that may be responsible for the out-of-memory error, matching the leak suspect with an analysis pattern specific to the object class, and extracting usage information from the memory dump using the analysis pattern.

Abstract: A quality score for a computer application release is determined using a first number of unique users who have launched the computer application release on user devices and a second number of unique users who have encountered at least once an abnormal termination with the computer application release on user devices. Additionally or optionally, an application quality score can be computed for a computer application based on quality scores of computer application releases that represent different versions of the computer application. Additionally or optionally, a weighted application quality score can be computed for a computer application by further taking into consideration the average application quality score and popularity of a plurality of computer applications.

Abstract: Various embodiments provide an automated testing analysis tool, termed a “pre-release analysis tool”, that tests applications for functional and nonfunctional requirements. In at least some embodiments, the pre-release analysis tool can perform both static analysis and dynamic analysis on an application. A report module can provide rich feedback, including actionable feedback, to an application developer in order to enable the developer to make their applications more secure, reliable, efficient, and performant. Actionable feedback can include feedback that suggests various remedial measures that an application developer may put in place in order to improve their applications. Application analysis can be performed in various different categories with actionable feedback provided in each. These different categories can include, by way of example and not limitation, application crashes, performance, security, usability, application statistics, code warnings, localization issues, and network issues.

Abstract: Methods and apparatus are disclosed to generate software test script from video. Example methods disclosed herein include determining a user action in a frame of a video comprising recorded testing of software. The example method also includes identifying an action parameter corresponding to the user action. The example method also includes based on the action parameter, generating without user intervention a script to execute on the software.

Abstract: Techniques for data restoration are disclosed. In one particular exemplary embodiment, the techniques may be realized as an apparatus for data restoration. The apparatus may comprise a module to identify a missing or corrupt file. The apparatus may also comprise a module to determine a file fingerprint of the missing or corrupt file from one or more associated databases and a module to determine if one or more clients has a copy of the missing or corrupt file. The apparatus may further comprise a module to request the missing or corrupt file from one or more of the one or more clients.

Abstract: A computer implemented method of automatically generating tests for COBOL code units, comprises using at least one hardware processor adapted to designate a COBOL source code comprising a plurality of code lines, extract automatically a plurality of code units each comprising a subset of the code lines for executing one or more functionalities of the COBOL source code, the code units are identified by analyzing the plurality of code lines, generate automatically one or more tests for testing each of the code units by generating an input stimulus for each of the code units, and create one or more mock code segments to simulate interaction of each code unit with one or more external code segment comprising code lines not included in the code unit and testing each code unit using the one or more test(s).

Abstract: Systems, methods, and other embodiments associated with continuous capture of replayable workload for a database are described. In one embodiment, a method includes capturing workload units being executed on a production database and storing the captured workload units in a circular workload buffer. The circular workload buffer is configured to write newest captured workload units over oldest workload units in the workload buffer when the workload buffer becomes full. The method includes, in response to detecting an event, exporting contents of the workload buffer to offline memory. The exporting includes at least one I/O operation. In one embodiment, an advisor feature guides set up of the continuous capture feature by providing historical workload data and making recommendations regarding an amount of memory that should be allocated to the workload buffer.

Abstract: A system according to certain aspects improves the process of managing log data. The system may receive a log data file including one or more log lines that contain information relating to computing operations. At least some of the log lines may include a static portion and a variable portion. The system may process a first log line to identify and extract a static portion from the first log line, and determine a first value for the first log line based on the extracted static portion. The system may process a second log line to identify and extract a static portion from the second log line, and determine a second value for the second log line based on the extracted static portion. The system may compare the first and second values, and based on the comparison, organize the first and second log lines together for presentation to a user.

Abstract: Disclosed is an approach for implementing implicit follow and automatic unfollow of objects in an enterprise application system. Automated following and unfollowing can be provided for objects in a CRM application, such as objects pertaining to sales opportunities.

Abstract: A method includes receiving, by a distribution server, a plurality of network traffic records. The distribution server generates a first hash from a first plurality of fields in a first of the plurality of network traffic records and generating a second hash from a second plurality of fields in a second of the plurality of network traffic records. The distribution server determines that the first and second of the plurality of network traffic records relate to a session. The method includes transmitting the first and second of the plurality of network traffic records to one of a plurality of worker computing devices selected based on the determination and on at least one of the first and second hash. The distribution server transmits a request for an enumeration of addresses ranked according to a criterion, receives partial enumerations from a plurality of worker computers, and generates a combined, deduplicated enumeration.

Abstract: In an embodiment, a system is configured to replay and/or reconstruct execution events and system states in real time or substantially in real time starting from the point when execution of a target program has stopped to the point when the user desires to step through the target program's execution in order to debug the software. In an embodiment, a system is configured to efficiently collect trace data that is sufficient to reconstruct the state of a computer system at any point of time from the start of execution to the time execution was stopped. Efficient and effective debugging of the software can be performed using embodiments of the disclosed methods, systems, and devices.

Abstract: In an embodiment, a system is configured to replay and/or reconstruct execution events and system states in real time or substantially in real time starting from the point when execution of a target program has stopped to the point when the user desires to step through the target program's execution in order to debug the software. In an embodiment, a system is configured to efficiently collect trace data that is sufficient to reconstruct the state of a computer system at any point of time from the start of execution to the time execution was stopped. Efficient and effective debugging of the software can be performed using embodiments of the disclosed methods, systems, and devices.

Abstract: A method of analyzing target software for security vulnerabilities comprises, with a processor, scanning a codebase of a target software using a static analysis scan to identify a number of security flaws, and calculating a number of code metrics of the codebase of the target software for a number of iterations over a period of time to obtain a number of historical scans.

Abstract: A computing environment includes a home site and a cache site with nonhomogeneous thin-provisioned storage configurations. A file management system updates files stored at the cache site. Each updated file has an updated file size and a pre-update file size. When a resynchronization is needed between the cache site and the home site, for example due to an extended communication failure, the storage requirement changes for the updated files are calculated and a notification is sent to the home site. The notification identifies the updated files and the storage requirement changes. The home site sends a reply to the cache site. The reply identifies which files are approved for immediate processing. The cache site transfers resynchronization data for the approved files to the home site, and delays transferring resynchronization data for the unapproved files until subsequent replies from the home site indicate that the previously unapproved files are now approved.

Abstract: Disclosed is a computerized system for detecting unauthorized code in a software application. The system typically includes a processor, a memory, and a software analysis module stored in the memory. The system for is typically configured for: executing a software application in a development environment and in a production environment; monitoring execution of the software application in the development environment and in the production environment; comparing the execution of the software application in the development environment and the execution of the software application in the production environment; identifying a discrepancy between the execution of the software application in the development environment and the execution of the software application in the production environment; and, based on identifying the discrepancy, transmitting an alert to a user computing device. Unauthorized code associated with the discrepancy may then be removed from the software application.

Abstract: A method and system for server-side capturing, logging, and replaying terminal data of a terminal is described.

Abstract: An application analysis platform enables automatic generation of abstract program representations (APRs) that are amenable to static analyzes for finding security vulnerabilities. The APR is generated automatically, preferably from an existing build system or a source repository, and then encapsulated into a binary archival format for consumption by a static analysis tool, which operates on-premises or in the cloud. The abstract program representation is a highly compact version of the actual source code it represents. The archival format obfuscates the source code that is subjected to the analysis, thus protecting it from being reverse-engineered when moved off-premises or otherwise shared with other users, teams and even organizations.

Abstract: An automated software testing system tests a running application from a viewpoint of user of a graphical user interface of the running application. A programmed processor executes a plurality of meta-layer implementations defining controls of the graphical user interface using algorithms. Each of the meta-layer implementations receives at least one abstraction layer object as input and generates a second at least one abstraction layer object as output responsive to at least one of the algorithm for an associated identity, property, collection or meta-object. A plurality of declarative function modules define each algorithm for each of the plurality of meta-layer implementations. Each of the plurality of declarative function modules encapsulates a predetermined result responsive to execution of the declarative function without providing any detail of how the predetermined result is achieved.

Abstract: A tracing management system may use cost analyzes and performance budgets to dispatch tracing objectives to instrumented systems that may collect trace data while running an application. The tracing management system may analyze individual tracing workloads for processing, storage, and network performance costs, and select workloads to deploy based on a resource budget that may be set for a particular device. In some cases, complementary tracing objectives may be selected that maximize consumption of resources within an allocated budget. The budgets may allocate certain resources for tracing, which may be a mechanism to limit any adverse effects from tracing when running an application.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, are described that enable automated testing of web applications. Techniques include receiving a web application and a test script including user-specified instructions for testing the web application. The user-specified instructions are converted into commands that include first-type commands executable by a browser automation module to control operations of a web browser, and second-type commands that are not executable by the browser automation module, where the total number of commands exceeds a number of instructions in the test script. The first-type commands are provided for execution to the browser automation module to control operations of the web browser, and the second-type commands are executed to control operations of the at least one computer that cannot be controlled by the browser automation module. A report is output based on executing the first-type and second-type commands.

Abstract: Techniques are described herein that are capable of determining a scope of testing to be performed with respect to machine code based on change(s) that occur with respect to corresponding program code. For instance, behaviors that may be exhibited during execution of the machine code may be determined based on relationships between code elements in the program code, relationships between program data elements that are produced by and/or consumed by the code elements, relationships between the code elements and the program data elements, and/or relationships between the code elements and runtime attributes of the program code. When a change is made to the program code, functionalities are recommended for inclusion in the testing of the machine code. The functionalities are defined to test the machine code with regard to those behaviors that are to be altered by the change that is made to the program code.

Abstract: A system and method are disclosed for runtime probing of software. In accordance with one embodiment, a target method of a software application is modified to include a call to a first helper method and a call to a second helper method that occurs after the call to the first helper method. The first helper method collects runtime information, and at least one of the first helper method or the second helper method passes data comprising the runtime information to a native method that provides the data to a software tool (e.g., a performance monitoring tool, a debugger, etc.). The modified target method is then executed within a virtual machine.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for using an imports scanner to maintain a compilation cache. One of the methods includes receiving an original set of source code files to be compiled for a compilation target. Each file in in the original set having an entry point is added to a reduced set of source code files. Each unscanned file in the reduced set of source code files is scanned for import statements until no unscanned files in the reduced set of source code remain. Each file identified by an import statement is added to the reduced set of source code files. If the reduced set of files is not represented by an entry in a compilation cache, the compilation target is generated using only the reduced set of source code files instead of the original set of source code files.

Abstract: A method and system dynamically configures faults during software testing. During runtime of a service platform, a computer system hosting the service platform receives a request from a test program to register a list of controllers. Each of the registered controllers controls the generation of a different fault. The test program triggers the execution of a service to be tested on the service platform. During execution of the service, a predefined condition is encountered. A fault is generated if one of the registered controllers controls the fault generation associated with the predefined condition. Based on the generation of the fault, the behavior of the service can be verified.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for extracting source code. One of the methods includes receiving, by a newly created process, a request to execute code of an executable file in the newly created process, wherein the request specifies a parameter. The newly created process loads a process interception library. Library initialization code of the process interception library determines whether the parameter should be intercepted. In response to determining that the parameter should be intercepted, the parameter is provided to another process.

Abstract: The invention provides a technique for managing write operations issued to a non-volatile memory included in a wireless device. A monitor software application executes on the wireless device and is configured to determine that a number of write operations issued to the non-volatile memory is greater than or equal to a write operation threshold associated with the non-volatile memory. In response, at least one application is isolated as the application responsible for issuing excessive write operations. The isolation can be carried out locally on the wireless device, or the isolation can be carried out remotely at a server by sending information about the write operations to the server. The monitor then limits additional write operations from being issued to the non-volatile memory so as to protect the non-volatile memory from becoming corrupted or inoperable.

Abstract: Disclosed aspects include identifying basic blocks of a program. For each basic block, the compiler inserts an identifier that includes the function name, and is coupled with a counter variable. In response to generating the identifier coupled with the counter variable, the program is compiled. During program execution, the counter value is incremented in response to a call of the basic block when executing the program. In response to incrementing the counter value, the counter value coupled with the identifier is displayed.

Abstract: Systems, methods, and computer program products to discover weak consistency errors in an application, by executing, by a debugger, a first thread of the application, by, determining that a first instruction in the first thread specifies to store a first value at a first memory address, setting a current value stored in the first memory address as an old value for the first memory address in a container for the first thread, executing the first instruction to store the first value at the first memory address, and setting the first value as a new value for the first memory address in the container for the first thread. The debugger then executes a second thread of the application, by restoring old values in the containers for all other threads and restoring a new value for each memory address specified in a container for the second thread to its respective memory address.

Abstract: Methods to discover weak consistency errors in an application, by executing, by a debugger, a first thread of the application, by, determining that a first instruction in the first thread specifies to store a first value at a first memory address, setting a current value stored in the first memory address as an old value for the first memory address in a container for the first thread, executing the first instruction to store the first value at the first memory address, and setting the first value as a new value for the first memory address in the container for the first thread. The debugger then executes a second thread of the application, by restoring old values in the containers for all other threads and restoring a new value for each memory address specified in a container for the second thread to its respective memory address.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for remote testing. In one aspect, a method includes receiving a first message from a first user device indicating initialization of a client application. The method includes determining that the first user device is a member of a first testing group. The method includes identifying a first testing component associated with the first testing group and capable of altering the client application. The method includes sending the first testing component to the first user device.

Abstract: A system according to an embodiment may include: a generation unit that acquires axis information in a coordinate system drawing execution status of a program, and generates an axis object representing the coordinate system based on the axis information; a display event information generation unit that acquires event information related to each of the two or more events and program structure information related to a section of the program generating the two or more events, and generates display event information related to one or more display events representing the two or more events; and an object generation unit that acquires the display event information and display event unit information indicating a display unit of the display event, and generates one or more event objects based on the display event information and the display event unit information.

Abstract: A method, a system, and computer-readable medium for processing of data are disclosed. An acknowledgement is received to store business object data. Based on the acknowledgement, an indication that the business object data is stored in a repository is generated. Processing of the business object data to enable storage in the repository continues while generating such indication.

Abstract: An embodiment provides a level of assurance regarding correct operation of software. An embodiment creates baseline and real-time measurements of software and compares the measurements to determine whether the software is operating correctly. An application provider may include “tracing elements” in target software application. While producing the application the trace elements are detected and provide trace events, which collectively provide a “baseline trace” indicating proper application execution. The provider supplies the application and the baseline trace to a user. The user operates the application in real-time to produce a “real-time trace” based on the application still having trace elements that produce trace events (which collectively form the “real-time” trace). A comparator compares the baseline and real-time traces. If the traces are within a pre-determined range of each other the user has a level of assurance the software is operating correctly. Other embodiments are included herein.

Abstract: According to one aspect of the present disclosure, a method and technique for OCR-based single sign-on in a computing environment is disclosed. The method includes: responsive to launching of an application login interface, capturing an image of the login interface; determining a location of a cursor on the login interface from the image; determining whether the location of the cursor corresponds to a credential input field of the login interface; and responsive to determining that the location of the cursor corresponds to the credential input field of the login interface, automatically sending a keystroke to the login interface to insert at least one character to the login interface.

Abstract: An integrated circuit includes a pool of processors and a Tripwire Data Merging and Collision Detection Circuit (TDMCDC). Each processor has a special tripwire bus port. Execution of a novel tripwire instruction causes the processor to output a tripwire value onto its tripwire bus port. Each respective tripwire bus port is coupled to a corresponding respective one of a plurality of tripwire bus inputs of the TDMCDC. The TDMCDC receives tripwire values from the processors and communicates them onto a consolidated tripwire bus. From the consolidated bus the values are communicated out of the integrated circuit and to a debug station. If more than one processor outputs a valid tripwire value at a given time, then the TDMCDC asserts a collision bit signal that is communicated along with the tripwire value. Receiving tripwire values onto the debug station facilitates use of the debug station in monitoring and debugging processor code.

Abstract: A method for debugging a computer program is proposed. The method includes a step of running at least part of the computer program on a computer, thereby prompting the computer to execute a sequence of instructions and to generate a trace corresponding to the executed sequence of instructions. When the program has generated an exception, selecting a set of one or more exception strings on the basis of the trace, so that each of the exception strings is a unique substring of the trace. The exception strings are indicated to a user or to a debugging tool. The set of exception strings may notably include the ultimate shortest unique substring of the trace. A computer program product is also described.

Abstract: Methods, systems, and articles of manufacture for injecting faults at select execution points of distributed applications are provided herein. A method includes monitoring a run-time state of each of multiple components of a distributed application to determine one or more sequence of events that triggers a fault injection point at one of the multiple components; defining a fault injection scenario in a specification based on said monitoring, wherein said fault injection scenario comprises a description of one or more sequence of events during which an intended fault is to be injected to a target component of the multiple components at one selected event; and executing the fault injection defined in the specification to perform injection of the intended fault during run-time of the distributed application.

Abstract: A method includes transforming a mode of a computer from an operating system mode to a kiosk mode, wherein the kiosk mode provides a user interface for one web application, and wherein the kiosk mode prevents access to any other application or the operating system of the computer. The computer automatically updates the web application via a network while the computer is operating in kiosk mode, and automatically updates an operating system of the computer via the network while the computer is operating in kiosk mode. The computer automatically re-launches the web application in response to detecting an interrupted status of the web application while the computer is operating in kiosk mode.

Abstract: The present disclosure generally relates to warnings generated based on static analysis and, more particularly, to grouping warnings generated based on static analysis. In one embodiment, a method for grouping a plurality of warnings generated based on a static analysis of an application program is provided. The method may include analyzing, by one or more processors using programmed instructions stored in a memory, the application program to generate the plurality of warnings; identifying, by the one or more processors, one or more similar warnings based on the plurality of warnings, the similar warnings having structurally and semantically similar expressions of interest (EOI); and generating, by the one or more processors, one or more groups of warnings based on the plurality of warnings, the one or more groups of warning including one or more of corresponding identified similar warnings.