Abstract: Techniques for identifying computer program security access control violations using static program analysis are provided. In one example, a computer-implemented method comprises generating, by a device operatively coupled to a processor, a mathematical model of a computer program product, wherein the mathematical model defines data flows through nodes of the computer program product that reach a secure node corresponding to a secure resource. The computer implemented method further comprises evaluating, by the device, a security protocol of the computer program product using static program analysis of the mathematical model to determine whether any of the data flows provides access to the secure node without proceeding through one or more security nodes corresponding to the security protocol, wherein the one or more security nodes are included in the nodes of the computer program product.

Abstract: Mechanisms are provided in which a first knowledge graph, comprising nodes representing entities and edges between nodes indicative of a relationship between the entities, is received. The mechanisms identify a candidate missing edge connecting a node of the first knowledge graph to another node not present in the first knowledge graph and evaluate the candidate missing edge to determine if the candidate missing edge should be added to the first knowledge graph. The mechanisms expand the first knowledge graph to include the candidate missing edge connecting the node to a newly added node that is newly added to the first knowledge graph, to thereby generate an expanded knowledge graph, in response to the evaluation indicating that the candidate missing edge should be added to the first knowledge graph. The mechanisms then perform an operation on the expanded knowledge graph to generate a knowledge output.

Abstract: An association between two or more segments of committed program code can be determined so that the segments of committed program code can be used together for building a software project. For example, one or more communications can be received and indicate that two or more segments of program code are to be committed to one or more repositories associated with a software project. Thereafter, the segments of program code, a database, or other information can be analyzed to determine an association between the two or more segments of program code. Based on the association between the two or more segments of program code, the two or more segments of program code can be integrated together into combined program code. A build tool can then build the software project using the combined program code.

Abstract: A method and system for testing a server code in a server concurrently handling multiple client requests create a job-specific breakpoint in the server code using a library application programming interface (API) that allows the job-specific breakpoint in the server code being enabled or disabled based on a job identifier. The library API controls the job-specific breakpoint in the server code via a plurality of readymade functions that execute, in a desired sequence, various synchronous and asynchronous program paths associated with the multiple client requests. By using the library API, the method and system are capable of establishing a new server connection with the server and retrieving the job identifier from the server associated with the established new server connection, pausing execution of a client job based on enabling the job-specific breakpoint, and resuming execution of the client job based on disabling the job-specific breakpoint.

Abstract: A memory system may include: a nonvolatile memory device suitable for storing write-requested data; and a controller including a first volatile memory region suitable for storing meta-data for the write-requested data and a second volatile memory region suitable for storing a meta-log for the meta-data, the controller may store the meta-data or the meta-log according to a logical address range of the meta-data.

Abstract: A method and apparatus of a device that performs a hitless update a boot image of a network element. In this embodiment, the device identifies the network element to update and determines if the network element has redundant paths. If this network element has redundant paths, the device configures the network element to drain data processing of the network element. In addition, the device updates the network element to a new boot image when the data processing of the network element is drained.

Abstract: Actions in an electronic environment are monitored during a learning period and behavior profiles generated using feature values for those actions. Subsequent behavior can be compared against the profiles to track the anomalies, or mismatches between features of incoming events and features of the profiles. A high percentage of mismatch can make a feature a candidate for exclusion from the behavioral profile. Normalization methods can be applied on features flagged as exclusion candidates. If any normalization sufficiently decreases the mismatch rate, the feature will not be excluded from the behavior profile. Any exclusion candidate feature which does not have an adequate mismatch value after normalization can be removed from tracked features of the corresponding profile. The behavior profile can be used to detect anomalous behavior that deviates from values of the behavior profile.

Abstract: In a computer-implemented method for determining feature utilization in a software-defined network, an available feature set for the software-defined network is determined, wherein the available feature set is based on a version of the software-defined network. Features enabled on the software-defined network are determined. The features enabled in the software-defined network are compared to the available feature set. A network profile score is generated based on the comparing, where the network profile score includes constituent feature scores for features of the available feature set. The network profile score is presented in a graphical user interface, the network profile score providing an indication of feature utilization of the available feature set, where the graphical user interface allows for receiving a user interaction for presenting the constituent feature scores for the features of the available feature set responsive to the user interaction.

Abstract: A method implemented by an application (app) store system for providing apps to one or more users through a network, the method comprising managing, by the app store system, a multi-screen application (MSA) package that comprises a set of related apps, wherein one or more relationships among the set of related apps are pre-defined, receiving, by the app store system, a request from a first user device via the network to download at least part of the MSA package; and causing, by the app store system, the set of related apps to be downloaded to a plurality of user devices including the first user device according to the one or more relationships among the set of related apps in response to the request.

Abstract: A device receives application information associated with a cloud application provided in a cloud computing environment, and utilizes a first AI model to generate test cases and test data based on the application information. The device utilizes a second AI model to generate optimized test cases and optimized test data based on the test cases and the test data, and utilizes a third AI model to generate test classes based on the optimized test cases and the optimized test data. The device executes the test classes to generate results, and utilizes a fourth AI model to generate an analysis of the results, recommendations for the cloud application based on the analysis of the results, or a code coverage report associated with the cloud application. The device automatically causes an action to be performed based on the analysis of the results, the recommendations, or the code coverage report.

Abstract: A system and method for facilitating construction of and/or adaptation of a dynamic software model. One embodiment provides for generating software models by mapping user selections to one or more model features as specified by feature definitions. An initial software model is used to obtain the user selections. Artifacts are associated with the initial business planning model according to the selections by mapping the selections to model features according to previously determined feature definitions.

Abstract: A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files, and patterns within this event graph can be used to detect the presence of malware on the endpoint. The underlying recording process may be dynamically adjusted in order to vary the amount and location of recording as the security state of the endpoint changes over time.

Abstract: Systems and methods are provided for facilitating the transformation of data from a tabular data set organized according to a data schema to an object based data set organized according to data ontology. The data schema and the data ontology may be used to generate a custom coding language suitable for facilitating the creation of a transform script. Error checking, type checking, autocomplete, and preview tools may be provided to permit the verification of the transform script as it is created.

Abstract: A speaker system includes a case, an audio input, speakers, an accelerometer, and a computer processor. The audio input is structured to receive a program audio signal from an audio device. The speakers are configured to play an audio output based on the program audio signal, the audio output causing a vibration of the case. The accelerometer is configured to detect the vibration of the case as well as a user tap on the case. The computer processor is configured to identify a user gesture that includes the tap on the case, to identify the tap apart from the case vibration by processing the detected vibration of the case and the detected user tap on the case based on information from the program audio signal to separate the detected user tap from the detected vibration, and to commence a particular function associated with the user gesture.

Abstract: A method and a testing tool for automated testing of HMI applications includes: identifying, at least one vehicle from a plurality of vehicles as HMI enabled vehicle, and a HMI application installed on an electronic device corresponding to the at least one vehicle; identifying one or more errors in one or more additional features being integrated with the HMI application; generating test data based on one or more test scripts related to the one or more additional features and historical test analysis of the HMI application; and executing the one or more test scripts on the HMI application based on the test data for automated testing of Human Machine Interface (HMI) applications associated with vehicles. The disclosed method and the testing tool provide a common framework for testing HMI applications of various vehicles.

Abstract: An upgrade campaign is generated for entities of a system described by a source configuration. According to the upgrade campaign, the system is upgraded to a target configuration using available software. A change model describes changes from the source configuration to the target configuration. According to the change model, an upgrade campaign specification model is generated, which contains at least one upgrade campaign element for each change in the change model. A subset of upgrade campaign elements are matched based on a first set of rules, and the matched upgrade campaign elements are merged into an upgrade procedure in the upgrade campaign specification model. The upgrade procedures are ordered based on a second set of rules and dependencies among the entities of the system, where the dependencies are extracted from the source configuration, the target configuration and the description of available software.

Abstract: A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files, and patterns within this event graph can be used to detect the presence of malware on the endpoint. The underlying recording process may be dynamically adjusted in order to vary the amount and location of recording as the security state of the endpoint changes over time.

Abstract: Methods, systems, and computer-readable storage media for providing notifications in distributed development. In some implementations, actions include receiving change information, the change information indicating one or more changes to source code, processing the change information to determine one or more entities associated with the change, comparing the one or more entities to one or more subscriptions, the one or more subscriptions being specific to a user, for each entity associated with a subscription, providing a notification in a set of notifications, and providing a sub-set of notifications for display to the user.

Abstract: Disclosed are systems and methods for emulating execution of a file. An image of a file is formed, which is comprised of instructions read from the file. An analysis module detects at least one known set of instructions in a portion read from the file, and inserts a break point into a position in the generated image of the file corresponding to a start of the detected set of instructions. An emulation module emulates execution of the file by emulating execution of instructions from the generated image of the file and adding corresponding records to an emulation log associated with the emulated execution of the at least one known set of instructions.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for computing weights for source code alerts. One of the methods includes generating a respective sample of alerts for each feature of a plurality of features. One or more feature values are computed for alerts having a same respective attribute value for each feature of a plurality of features. An importance distribution that maps each feature value to a respective measure of importance for an alert having the feature value is used to compute a respective feature score for the feature using one or more feature values computed the alert. A respective weight is computed for each alert by combining the plurality of feature scores computed for the alert.

Abstract: A method for detecting digital content misuse can include clustering, by a digital content delivery system, a set of data points into a set of digital content usage clusters, each data point from the set of data points representing a unique user account from a set of user accounts maintained by the digital content delivery system, and each data point from the set of data points having been determined based on usage signal data describing digital content usage associated with the unique user account represented by the data point; determining, based on the set of digital content usage clusters, that a first data point from the set of data points is an outlier; and in response to determining that the first data point from the set of data points is an outlier, executing a remedial action with respect to a user account represented by the first data point.

Abstract: A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files, and patterns within this event graph can be used to detect the presence of malware on the endpoint. The underlying recording process may be dynamically adjusted in order to vary the amount and location of recording as the security state of the endpoint changes over time.

Abstract: A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files, and patterns within this event graph can be used to detect the presence of malware on the endpoint. The underlying recording process may be dynamically adjusted in order to vary the amount and location of recording as the security state of the endpoint changes over time.

Abstract: An improved development and deployment environment and processes for developing and deploying object-oriented web-based scan-task enabled applications, wherein web-based scan-task enabled client computers use scan task specifications and task decoders to retrieve and decode a scan tasks encapsulated on each web page requested and received from a web server supported by an application server and database server, and then perform specified actions, including the display of web controls, required by the scan task script contained within the decoded scan task, corresponding to the served web page.

Abstract: A context of one or more interactions is determined. Base objects are transformed into interpreted objects by interpreting the base objects based on evaluation of the context, and by resolving references of the base objects relative to domain model types and concepts, each of the base objects modeled using a same declarative modeling language, the same declarative modeling language enabling transitions between the interpreted objects, at least one of the interpreted objects including at least one post-condition providing hooks for transition policies which allow the at least one of the interpreted objects to be logically chained in a non-linear process. Transitioning between at least two of the interpreted objects by chaining the at least two interpreted objects based on a particular post-condition of a particular interpreted object to create at least a portion of a particular non-linear process. At least a portion of the particular non-linear process is executed.

Abstract: An example method may include classifying a plurality of atomic pieces of historic feedback to create an association between the plurality of atomic pieces of historic feedback and a plurality of atomic pieces of historic code associated with the plurality of atomic pieces of historic feedback; storing the plurality of atomic pieces of historic feedback and the plurality of atomic pieces of historic code to a data store; comparing the plurality of atomic pieces of historic feedback to group similar kinds of feedback; receiving a request for code review of new code; comparing the new code to the plurality of atomic pieces of historic code to measure similarities between the new code and the plurality of pieces of historic code to identify similar code from the plurality of atomic pieces of historic code; and providing feedback on the new code based on feedback associated with the similar code.

Abstract: Systems, methods, and computer-readable media are disclosed for smart code scanning, analysis and reporting. The systems, methods, and computer-readable media described herein may reduce the computational load on the scanner service and improve user experiences. In an example method described herein, a scanning service may receive code for analysis, the code being associated with a first project identifier. The scanner service may scan the code to identify one or more potential issues associated with the code. In turn, the scanner service may provide a list comprising, at least, one or more potential issues for display at a user device. The scanner service may then receive data indicative of a first potential issue being a false positive based on, at least in part, user input.

Abstract: Embodiments of the present invention provide a method, system and computer program product for configurably recommending a software application update. In an embodiment of the invention, a method for configurably recommending a software application update is provided. The method includes receiving an update for a software application along with a set of ratings for the update. The method also includes comparing in memory of a computer the set of ratings with a pre-stored threshold. Finally, the method includes prompting in the computer to apply the update to the software application responsive to the set of ratings meeting the pre-stored threshold.

Abstract: A configuration for a security analysis tool is received from a user. The configuration includes two or more configuration items. Each configuration item is a parameter in the configuration of the security analysis tool that has a plurality of possible values. A correlation between the two or more configuration items is determined. The correlation is based on one or more pre-determined empirical correlations.

Abstract: A method includes formatting for display, on a visual screen, an image comprising a coordinate system and a plurality of data points within the coordinate system, wherein the plurality of data points define historical performance data for a computer system. The method further includes receiving a user input defining a distinguishable area within the coordinate system and an action associated with the distinguishable area. The method additionally includes generating a formula representing the distinguishable area.

Abstract: A scalable enterprise platform for automated functional and integration regression testing is provided. Embodiments of the disclosed system facilitate the testing of any number of different software systems in development, even where the systems have unique dataset formats. Embodiments of the present invention provide a common method to generate logging and results reports across the platform, thereby providing simpler results analysis. Embodiments may also standardize the query set and facilitate the capability to analyze large results sets. Furthermore, embodiments of the disclosed system may combine the original data to the validated data to allow testers to analyze the testing results. In addition, embodiments of the present invention supports secured separation of testing domains. In at least one embodiment, the system includes a centralized user interface system that provides users with different domains to securely access one or more testing domains.

Abstract: A software integration testing tool includes drivers for different software testing tools to test a system under test, and an application program interface for a test management tool. The software integration testing tool determines configuration parameters for the software testing tools and the test management tool. Based on the configuration parameters, the drivers can be executed to extract test results from the software testing tools and call the application program interface to integrate the test results with the test management tool.

Abstract: Systems and methods for identifying similarities in program binaries, including extracting program binary features from one or more input program binaries to generate corresponding hybrid features. The hybrid features include a reference feature, a resource feature, an abstract control flow feature, and a structural feature. Combinations of a plurality of pairs of binaries are generated from the extracted hybrid features, and a similarity score is determined for each of the pairs of binaries. A hybrid difference score is generated based on the similarity score for each of the binaries combined with input hybrid feature parameters. A likelihood of malware in the input program is identified based on the hybrid difference score.

Abstract: A method may comprise determining, by executing a first model having first configuration parameters, a first result associated with the first model. The method may comprise determining, by executing a second model having second configuration parameters, a second result associated with the second model. The method may comprise determining, based on the first result, the second result, and equivalency criteria, that the second model is not functionally equivalent to the first model. The equivalency criteria may indicate that the second model is functionally equivalent to the first model when a difference between the second result and the first result satisfies a threshold. The method may comprise modifying a configuration parameter, of the second configuration parameters, to cause the second model to improve toward functional equivalence with the first model.

Abstract: Systems and methods are provided herein for establishing a protection framework for a component. Identified assets of a component requiring protection from a potential attack are received. A list of assets is generated based on the identified assets. A protection framework is configured to include at least one defensive pattern to protect the list of assets against the potential attack. The protection framework is executed to establish a hardened boundary between the component and an attack surface of the component.

Abstract: In one embodiment, a field programmable gate array (FPGA) includes: programmable logic to perform at least one function for a processor coupled to the FPGA; a performance monitor circuit including a set of performance monitors to be programmably associated with a first kernel to execute on the FPGA; and a monitor circuit to receive kernel registration information of the first kernel from the processor and program a first set of performance monitors for association with the first kernel based on the kernel registration information. Other embodiments are described and claimed.

Abstract: A method and system for optimizing a software-project build process are disclosed. A build-optimization system identifies build-dependency relationships between modules of a software project. Each dependency relationship specifies that a build agent cannot begin building a first module until a second module has been completely built. The system receives historical data from which the system forecasts durations of time required to build each module and durations of time required to prepare each build agent to begin building modules. The system determines an earliest possible starting time for each module build, determines how many agents must be available at each moment of time in order to concurrently build all modules capable of being built concurrently, and creates an optimal build schedule that specifies a latest time when each agent can be provisioned such that a build agent is available as soon as each module becomes available to be built.

Abstract: Privacy violation detection of a mobile application program is disclosed. Regular histories of the mobile application are mined. A call-graph representation of the mobile application program can be created and sequences of events of interest according to the platform specification of the mobile application can be collected. A plurality of learnable features are extracted from the regular histories. The plurality of learnable features are combined into a single feature vector which is fed into a machine-learning-based classification algorithm. Whether the mobile application program includes one or more permissions for accessing unauthorized privacy data of a mobile application user is determined based on a machine learning classification of the single feature vector. The collected sequences can be reduced into a plurality of feature vectors which can include at least one of a happens-before feature and a multiplicity of occurrences feature.

Abstract: Methods systems for detecting of matching content in code files are provided. The method involves generating clusters of code files based on a degree of matching characters contained in each of the code files. A first cluster of code files is identified based on the code files having 100% matching hash codes and at least one second cluster is generated based on a character count generated for the code files that are not part of the first cluster and having a degree of match equal to or greater than a pre-determined percentage match. Such identified first cluster and at least one second cluster of code files are reported to have matching content based on the associated degree of match.

Abstract: Techniques for identifying a build commit that caused a test failure are provided. A build which includes a failed test may be identified. For each commit in the build a weighting factor may be calculated for files that have been previously associated with the failed test. The weighting factor may be based on the number of times the file has been associated with the failed test and the total number of tests. A weighting factor may also be calculated for files that have not been previously associated with the failed test based on the number of times the file appears with other files that are associated with the failed test. The weighting factors may be added to create a score for the commit. The scores for the commits in the build may be ordered. The higher the score, the more likely the commit was the cause of the failed test.

Abstract: Disclosed aspects relate to debugging a set of code components of an application program. A set of defect data which indicates a set of defects may be collected with respect to an application program. The set of defect data may be derived from a set of post-compilation users of the application program. A set of test case data which indicates a set of user interface features of the application program may be collected with respect to the application program. The set of test case data may be derived from a set of development tests of the application program. Using both the set of defect data and the set of test case data, a set of fragility data for the set of code components of the application program may be determined. Based on the set of fragility data, the set of code components of the application program may be debugged.

Abstract: Disclosed aspects relate to debugging a set of code components of an application program. A set of defect data which indicates a set of defects may be collected with respect to an application program. The set of defect data may be derived from a set of post-compilation users of the application program. A set of test case data which indicates a set of user interface features of the application program may be collected with respect to the application program. The set of test case data may be derived from a set of development tests of the application program. Using both the set of defect data and the set of test case data, a set of fragility data for the set of code components of the application program may be determined. Based on the set of fragility data, the set of code components of the application program may be debugged.

Abstract: Extensions to a debugger are identified in a debugger database which is read automatically when the debugger loads. The debugger watches for trigger events in its execution environment and optionally for load conditions in a debuggee program's internal state. If a trigger event occurs and a load condition is met, then the debugger automatically loads an extension for use. Some extensions provide debugging routines that are specifically designed to support debugging of applications which use a specific programming model.

Abstract: A method and system for improving software object definition is provided. The method includes receiving a software object from a hardware and software connector device and parsing top level hierarchal software structures of the software object. The top level hierarchal software structures are mapped to specified software element properties and in response a container memory structure is identified. A search process for the container memory structure is executed and based on the results software building block code is executed thereby modifying the first container memory structure resulting in an improved operation of the hardware and software connector device and the hardware framework system.

Abstract: Embodiments of the present invention provide a method, system, and computer program product for qualifying changes to an instruction set in source code. In an embodiment of the invention, a method for quantifying changes to an instruction set in source code can be provided. The method can include receiving text in a code editor as an edit to source code of a computer program querying a data store of code change costs with at least a portion of the edit. The method additionally can include retrieving in response to the query a code change cost associated with the edit. Finally, the method can include displaying in the code editor the retrieved code change cost.

Abstract: A system and method for performing regression testing on source code provides a data sample to one or more candidate instances executing a candidate version of source code for a code base and provides the data sample to plurality of baseline instances executing a baseline version of the source code. The baseline version of the source code and the candidate version of the source code differ. The regression testing system and method obtains candidate outputs from the one or more candidate instances and obtains baseline outputs from the plurality of baseline instances based on the provided data sample. One or more faults in the candidate version of the source code can be determined by comparing the candidate outputs the baseline outputs. A filter for excluding one or more data fields from the comparison can be generated based on a comparison between baseline outputs from one of the plurality of baseline instances and baseline outputs from another of the plurality of baseline instances.

Abstract: A code coverage tool applies predefined rules applicable to user input to determine a test scenario from predefined test cases to best achieve a code coverage goal. For example, the code coverage goal may specify a target percentage of code coverage for areas, functions, conditions, or statement of interest to the user. The user input may select built-in rules or user supplied rules, and the user input may specify areas or functions that are mapped to the test cases. The built-in rules prioritize selected test cases for execution at run time to provide code coverage maximization with minimum utilization of resources. The user input may also specify a type of coverage, a test case priority, and a test case type.

Abstract: Embodiments are directed towards mobile application development in a cloud-based architecture. Mobile applications may be designed to communicate with a cloud platform over a network. Mobile application developers may be enabled to submit cloud code to cloud platforms for use by mobile applications. If cloud code is provided to a cloud platform, the cloud platform may perform one or more actions to authenticate the cloud code, such as, ensuring that that the user providing the cloud code is authorized to provide the cloud code. If the cloud code is authenticated the cloud platform may perform one or more actions to validate the cloud code. If validated, the cloud code may be activated for use by mobile applications and/or mobile application developers. Activation of the cloud code may include associating the cloud code with one or more function calls and/or with one or more trigger points.

Abstract: Techniques for debugging of hosted computer programs are described herein. Execution of a set of instances of a computer program may be hosted by a service on behalf of a developer. The developer may indicate one or more error conditions and an amount of program instances to be monitored for the error conditions. The error conditions may include breakpoints, processing conditions, memory conditions, network packet conditions, and others. A subset of the program instances may be monitored for an error conditions. An error condition may then be detected at a first program instance. A notification of the occurrence of the error condition may be provided to the developer along with information for connecting to the first program instance. The developer may connect to and debug the first program instance, and may also access information such as a memory dump, performance logs, network packet information, and more.

Abstract: Cloud Connected automated testing (CCAT) provides a low-cost, high-throughput, automated multi-thread testing platform for testing application with multiple test cases in a variety of operating environments. The platform may be hosted on cloud infrastructure. Unlike other test automation platforms, inputs to CCAT are based on human readable formats, such as keyword entries in a spreadsheet. CCAT thereby reduces the need for testers to understand highly specialized and difficult to use coding languages such as Java or Python.