Abstract: A method and system for scheduling a plurality of concurrent job sequences with constraints of precedence and mutual exclusion is described. In particular, a scheduler for a system performing biological analyzes on clinical samples including non-preemptible jobs which must use a set of resources (machines) and having constraints on release times and execution times is described. The scheduling method uses on-purpose algorithmic solution that extracts the core of DBM data structures and Floyd-Warshall algorithm from the engine of a full-fledged Model Checking tool and tailors it to the specific requirements of the case.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for automatically classifying static analysis rules as being anomalous or not. One of the methods includes receiving alerts generated by a particular static analysis rule for a plurality of different software projects analyzed by a static analysis system. For each project, a respective alert proportion metric value is computed. Each of the plurality of different software projects is classified according to the alert proportion metric values as being one non-outlier projects or outlier projects. If more than a threshold number of projects were classified as being outlier projects for the particular static analysis rule, the particular static analysis rule is classified as an anomalous static analysis rule.

Abstract: Disclosed are apparatus and methods for updating binary images. A computing device can determine transfers for updating a binary source image to become a binary target image. A transfer can include a source memory reference for the source image and a target memory reference for the target image. The computing device can determine a graph based on ordering dependencies between the transfers. The graph can include vertices for the transfers with edges between vertices. The computing device can generate an edge from a first vertex for a first transfer to a second vertex for a second transfer, with the first transfer to be performed before the second transfer. The computing device can break any cycles present in the graph to obtain an acyclic graph. The computing device can order the transfers based on the acyclic graph and send the ordered transfers in an update package for the source image.

Abstract: This disclosure relates to the analysis of a program based on source code where the source code comprises a call to a function associated with a function implementation. A processor determines, based on a summary that over-approximates the function, an assignment of an input variable and an output variable of the function call to reach a predefined state. The processor then determines, based on the implementation of the function whether the assignment of the input variable results in the assignment of the output variable. If it does not, the processor determines a narrowed summary for the function such that the narrowed summary over-approximates the function and excludes the assignment of the input variable and the output variable. Finally, the processor stores the narrowed summary on a datastore. Inlining of function code and unfolding of loops is avoided and parallel processing of multiple functions is possible.

Abstract: According to some embodiments, a system includes a communication device operative to communicate with a user to obtain the one or more requirements associated with a specification model for a semantic module; a semantic module to receive the one or more requirements, store the one or more requirements and transform the one or more requirements into a semantic model; a specification module to receive the semantic model, store the semantic model, translate the semantic model and generate a specification model; a memory for storing program instructions; at least one specification model platform processor, coupled to the memory, and in communication with the specification module and the semantic module and operative to execute program instructions to: transform the one or more requirements into a semantic model by executing the semantic module; translate the semantic model into a graphical model by executing the specification module; and modify the graphical model by executing the specification module to generate

Abstract: Software configuration management for a software system under development includes receiving a change to the software system under development from a first user, determining a merit score for the first user, wherein the merit score is calculated according to success of prior changes received from the first user, and comparing, using a processor, the merit score for the first user with a merit threshold for the software system under development. The change is accepted for inclusion in a build of the software system under development responsive to determining that the merit score for the first user complies with the merit threshold.

Abstract: Methods, systems, apparatuses, and computer program products are provided for the “bucketing” or categorizing of software failures occurring during software test, and/or during other procedures. Software failure information is received. The software failure information is parsed to generate a raw matrix of software terms, software failures, and an indication of a number of times each software term was found in each software failure. An importance is determined of each software term of the raw matrix with respect to the software failures of the raw matrix to generate a weighted matrix. A failure space is generated based on the determined importance that indicates each software term-software failure pair of the matrix as a vector. A set of clusters representing the vectors in the failure space is determined. Software failures may be automatically assigned to clusters of the set to be “bucketed” or categorized for ease of subsequent analysis.

Abstract: The present invention relates to a method (50) for controlling an integrated circuit (20) comprising a microprocessor, in which the integrated circuit (20) is configured to execute by default a general program, said integrated circuit being controlled by activation of a mode of operation of the integrated circuit, called “bootstrap mode”, in which said integrated circuit (20) executes a program for loading a specific program to be executed. The method (50) comprises: i) a step (51) of sending at least one bootstrap mode activation message to a test module (200) of the integrated circuit (20) via a test bus (310), ii) a step (52) of activating the bootstrap mode of the integrated circuit (20), executed by the test module (200) of the integrated circuit (20), and iii) a step (53) of loading the specific program via a communication bus (320) different from the test bus (310). The present invention also relates to an integrated circuit (20) and a computer (30) including such an integrated circuit (20).

Abstract: A method and system are provided for aspect scoping in a modularity runtime. The method includes declaring a set of aspects of a bundle as public aspects in a first aspect configuration file, and filtering the aspect configuration files imported by a bundle to the files from bundles on which the importing bundle has a dependency. The method includes declaring a set of aspects of a bundle as private aspects in a second aspect configuration file. At weaving of aspects at a bundle, the weaving includes: any aspects defined as private aspects; any aspects defined as public aspects; any imported aspects; and any first configuration files from exporting bundles are declared.

Abstract: A tool, method and device for configuring a device such as a building automation device for use in a automation system is disclosed. The method includes defining a configuration file related to the functionality of the device, such that the configuration file identifies one or more standardized components stored in communication with the device, transferring the configuration file to a dynamic configurator tool operable within the device, initializing the device according to the dynamic configurator tool and the configuration file, such that the dynamic configurator tool retrieves the one or more standardized components identified by the configuration file, generating an executable file for the device based on the one or more standardized components identified by the configuration file, and operating the device utilizing the generated executable file.

Abstract: In an image forming device which is capable of executing an application program, a plurality of interface providing units are arranged each providing the application program with an interface which enables the application program to use a function of the image forming device. A selecting unit selects at least one of the plurality of interface providing units as an object of use for the application program based on a result of comparison of information stored in a storage device and indicating an execution environment of each of the plurality of interface providing units with information stored in the storage device and indicating an execution environment of the image forming device.

Abstract: A method for automatically mitigating vulnerabilities in a source code of an application is provided in the present invention. The method includes the following steps. First, the source code is complied, and a path graph is built according to the compiled source code. The path graph includes a plurality of paths traversing from sources to sinks, and each of the paths includes a plurality of nodes. Then, at least one tainted path is identified by enabling a plurality of vulnerability rules. Each of the at least one tainted path corresponds to a vulnerability, and each of the at least one vulnerability corresponds to a sanitization method. Then, the at least one vulnerability is determined if it is mitigable. If the at least one vulnerability is mitigable, the at least one vulnerability is mitigated automatically. Furthermore, the method may be implemented as a system and a computer program product.

Abstract: This embodiment relates to software verification and in particular to automatic generation of Modified Condition/Decision Coverage (MC/DC) tests scenarios. A system and method for reducing Modified Condition/Decision coverage (MC/DC) test scenarios is described along with selection of test data automatically for an input Boolean expression. An MC/DC test case engine generates optimal test case for a Boolean expression using an algorithm. The optimal minimal number of MC/DC cases generated to for satisfy the MC/DC condition for ‘n’ number of inputs may be ‘n+1’. The MC/DC test engine supports Boolean expression with Arithmetic and Comparison operators. The MC/DC test engine supports Boolean expression with no limitation on number of input variables.

Abstract: A method is provided to prioritize testing of computer program code comprising: determining first test coverages of items within a first source code version for multiple tests; storing in a non-transitory storage device, a first history that indicates the determined first test coverages of the items within the first source code version; identifying occurrences of the items within a second source code version; determining first weights associated with tests, wherein a respective weight associated with a respective test is indicative of a respective number of respective items within the second source code version that are covered by the respective associated test according to the first history; and prioritizing the multiple respective tests based at least in part upon the determined first weights.

Abstract: Techniques for validating hierarchically structured data according to a collected hierarchical object rule set. The validation techniques account for any open content in the hierarchical object and any downscoped rules in the hierarchical object rule set. In addition, the validation techniques can be applied to efficiently identify rules in the hierarchical object rule set that fail during validation and the nodes of the hierarchical object that cause those rules to fail.

Abstract: The disclosed embodiments provide a system that encapsulates and manages diagnostic information. During operation, the system detects an event that generates diagnostic information, and stores this diagnostic information in a format that preserves semantic information associated with the event. The system also determines an output context (e.g., the intended target environment) for the diagnostic information, and then uses the preserved semantic information to output the diagnostic information in a context-sensitive format suited for the output context. Note that outputting customized diagnostic information that is adapted to a specific target environment facilitates improving the quality of diagnostic information presented to a user.

Abstract: A fine-grained behavior model matching based method and system for effective feature location in large legacy systems. A feature behavior analyzer extracts internal behaviors of a feature under requesting based on NLP techniques or writing rules of the feature specification and generates a feature behavior model. A method uses multiple information sources associated with each method under analyzing to generate an expressive behavior signature for each method. The method integrates control flow information of each method and the signature information of its callees, and generates a CFG-based behavior model. A feature location identifier identifies and ranks the feature-related code locations based on a similarity between the feature behavior and the code behavior models.

Abstract: Expression-based hierarchical validation is disclosed, including: receiving an indication to configure validation for an application page element; in response to the indication, causing to be displayed a validation configuration user interface to receive validation configuration for the application page element; receiving validation configuration for the application page element that includes a validation expression provided via the validation configuration user interface; and generating, based at least in part on the validation expression, code to be executed at a runtime to validate runtime data associated with an instance of the page element.

Abstract: A method of generating test payloads for a target system includes receiving a plurality of reference programs, each reference program modelling at least one aspect of the target system, building a specification for each received reference program, each specification defining illegal states for the respective reference program, analyzing each specification to determine one or more entry constraints that would generate an illegal state from a specific input, and synthesizing one or more payloads from the determined entry constraints.

Abstract: A data source is identified that includes transaction data describing a set of transactions involving a particular software component and each transaction in the set of transactions includes a request and a corresponding response to the request. In some aspects, a modification to the data source is detected and the service model is caused to be generated based on detecting the modification. The service model is to model responses of the particular software component to requests in transactions based at least in part on the transaction data. A virtual service is caused to be generated based on the service model. The resulting virtual service can be configured to receive requests and generate virtual responses to the requests based on the service model to simulate responses of the particular software component.

Abstract: Techniques for identifying tamper-resistant characteristics for kernel data structures are disclosed herein. A set of kernel data structures is received, the set based on an operating system kernel. A plurality of virtual machines are instantiated based on the operating system kernel, each virtual machine of the plurality of virtual machine instances based on one or more modifications to one or more values to the virtual machine, the modifications based on the kernel data structures. Those modifications which cause virtual machine failures indicate which kernel data structures may be tamper-resistant.

Abstract: A method for code analysis comprising steps of inputting program code to an analyzer, assigning an objective quality measure to components of the analyzed code; and displaying graphically the objective quality measures.

Abstract: A non-transitory computer-readable storage medium may comprise instructions for managing a server template stored thereon. When executed by at least one processor, the instructions may be configured to cause at least one computing system to at least convert the server template to a corresponding virtual machine, manage the corresponding virtual machine, and convert the corresponding virtual machine back into a template format.

Abstract: A security platform employs a variety techniques and mechanisms to detect security related anomalies and threats in a computer network environment. The security platform is “big data” driven and employs machine learning to perform security analytics. The security platform performs user/entity behavioral analytics (UEBA) to detect the security related anomalies and threats, regardless of whether such anomalies/threats were previously known. The security platform can include both real-time and batch paths/modes for detecting anomalies and threats. By visually presenting analytical results scored with risk ratings and supporting evidence, the security platform enables network security administrators to respond to a detected anomaly or threat, and to take action promptly.

Abstract: In one embodiment, data indicative of the size of an intermediate data set generated by a first resource device is received at a computing device. The intermediate data set is associated with a virtual machine to process the intermediate data set. A virtual machine configuration is determined based on the size of the intermediate data set. A second resource device is selected to execute the virtual machine based on the virtual machine configuration and on an available bandwidth between the first and second resource devices. The virtual machine is then assigned to the second resource device to process the intermediate data set.

Abstract: A system and methods are disclosed for detecting inconsistent instances of a system table in a virtualized computer system. In accordance with one embodiment, a processing device decompiles a first binary representing a first instance of a system table, to obtain a first string of symbols. The processing device also decompiles a second binary representing a second instance of the system table that is associated with guest firmware of a first virtual machine, to obtain a second string of symbols. When there is a difference between the first string of symbols and the second string of symbols and the difference is unrelated to a compiler version and a temporary variable name, a signal indicating an inconsistency between the first instance and the second instance is generated.

Abstract: Systems and methods for validating operation of a compiler are disclosed. One method includes receiving a definition of language syntax at an automated source code generator, and generating program code at the automated source code generator, the program code represented in source code including constructed self-validating code and syntactically-correct automatically generated code. The method also includes providing the source code to the compiler to be compiled into object code. Based on execution of the self-validating code as object code in a computing system, a computing system executing the object code outputs an indication of the correctness of compilation of the program code.

Abstract: Systems and methods for managing multiple versions of applications executing on servers in a server pool are provided. A first server executing a first version of an application loads session data associated with a second, different version of the application. An error is detected based on the difference between the first version and the second version. A second server executing the second version of the application is selected by the first server in a server pool comprising one or more servers. The first server transmits a hypertext transfer protocol proxy request to the selected second server, which successfully processes the session data and handles the request without error.

Abstract: A method for electronic commerce management is provided. The method includes sending a request to the test server to be assigned a session identifier, the session identifier being associated with an assigned content version and receive the session identifier from the test server. The method further includes generating web page data to send to the client program, the web page data including (1) computer code which upon execution will cause the client program to retrieve the assigned content version of the static content from the test server using the session identifier, and (2) dynamic web page content based on one or more dynamic content factors and send the web page data to the client program.

Abstract: Embodiments of the invention relate to implementing run-time instrumentation indirect sampling by instruction operation code. An aspect of the invention includes a method for implementing run-time instrumentation indirect sampling by instruction operation code. The method includes reading sample-point instruction operation codes from a sample-point instruction array, and comparing, by a processor, the sample-point instruction operation codes to an operation code of an instruction from an instruction stream executing on the processor. The method also includes recognizing a sample point upon execution of the instruction with the operation code matching one of the sample-point instruction operation codes. The run-time instrumentation information is obtained from the sample point. The method further includes storing the run-time instrumentation information in a run-time instrumentation program buffer as a reporting group.

Abstract: To provide access to USB devices coupled to a client computing device for a user of virtual machine executing on a server, the server, in some examples, may be configured to pack USB request blocks into IP data packets and transmit the IP data packets over a network. Responsive to receiving the IP data packets, the client computing device may extract the USB request blocks from the IP data packets and provide the access to the USB devices for the virtual machine user.

Abstract: A compare instruction of an instruction set architecture (ISA), when executed tests one or more operands for an instruction defined condition. The result of the test is stored as an operand, with leading zeros, in a general register of the ISA. The general register is identified (explicitly or implicitly) by the compare instruction. Thus, the result of the test can be manipulated by standard register operations of the computer system. In a superscalar processor, no special “condition code” renaming is required, as the standard register renaming takes care of out-of-order processing of the conditions.

Abstract: The present disclosure provides methods, systems, and apparatuses for testing software. The method may comprise associating a plurality of controls on a software application screen with testing actions to be performed on the controls, thereby creating a plurality of test steps, and then generating a test component comprised of the plurality of test steps. The method may then comprise comparing the generated test component to a second test component that is associated with a previous version of the software application screen, and displaying, on a user interface, a graphical representation of one or more differences between the generated test component and the second test component.

Abstract: A compare instruction of an instruction set architecture (ISA), when executed tests one or more operands for an instruction defined condition. The result of the test is stored as an operand, with leading zeros, in a general register of the ISA. The general register is identified (explicitly or implicitly) by the compare instruction. Thus, the result of the test can be manipulated by standard register operations of the computer system. In a superscalar processor, no special “condition code” renaming is required, as the standard register renaming takes care of out-of-order processing of the conditions.

Abstract: Arrangements described herein relate to adopting an existing automation script to a new framework. A first version of an automation script configured to execute in a first framework, and expected unit test results for the automation script, are received. A second version of the automation script is created from the first version of the automation script. The second version of the automation script is configured to execute in at least a second framework. The first version of the automation script is executed in the first framework to run a first version of a unit test and the second version of the automation script is executed in the second framework to run a second version of the unit test. Results generated by execution of the first and second versions of the automation script are analyzed to validate the second version of the automation script.

Abstract: A computing resource is loaded with the code or data, and an audited record of the loaded code or data is generated. Furthermore, a configuration integrity is generated based on the record of the loaded code or data. The configuration integrity verifier is sent to a requestor for verification of the code or data, the configuration integrity verifier being usable as a trusted verification of the loaded code or data.

Abstract: Embodiments of the invention relate to transforming a program-event-recording event into a run-time instrumentation event. An aspect of the invention includes a method for transforming a program-event-recording event into a run-time instrumentation event. The method includes enabling run-time instrumentation for collecting instrumentation information of an instruction stream executing on a processor. The method also includes detecting, by the processor, a program-event-recording (PER) event, the PER event associated with the instruction stream executing on the processor. The method further includes writing a PER event record to a collection buffer as a run-time instrumentation event based on detecting the PER event, the PER event record identifying the PER event.

Abstract: A method of determining an operational attribute of a server executed on a first execution platform and providing a service, the method comprising: performing a measurement indicative of an operational attribute of the server, wherein the measurement is performed by a platform observer system executed on said first execution platform; communicating a result of said measurement to an external observer system; wherein the communicating comprises protecting secrecy of the communicated result; verifying, by the external observer system, that the received measurement result is indicative of a measurement performed on said server.

Abstract: A method of verifying software may include receiving a portion of a software program that includes multiple functions. The method may also include clustering the functions into two or more clusters of functions and generating a symbolic driver for each of the clusters of functions such that multiple symbolic drivers are generated. The clusters of functions may be symbolically executed using the symbolic drivers to generate concrete test cases for the functions in the clusters. In response to the coverage of the symbolic execution of the clusters of functions being less than a particular coverage or a number of the concrete test cases being more than a particular number of concrete test cases, the method may include re-clustering the functions.

Abstract: Arrangements described herein relate to adopting an existing automation script to a new framework. A first version of an automation script configured to execute in a first framework, and expected unit test results for the automation script, are received. A second version of the automation script is created from the first version of the automation script. The second version of the automation script is configured to execute in at least a second framework. The first version of the automation script is executed in the first framework to run a first version of a unit test and the second version of the automation script is executed in the second framework to run a second version of the unit test. Results generated by execution of the first and second versions of the automation script are analyzed to validate the second version of the automation script.

Abstract: In an example embodiment, static code analysis is performed by designating a first portion of the computer code as base line code. A check run is then performed on the base line code, resulting in one or more findings, with each finding identifying a flaw in the base line code discovered by the check run. The one or more findings may then be designated as a base line. Then a subsequent check run on a modified version of the computer code is performed, resulting in one or more subsequent findings. The one or more findings of the base line are then subtracted from the one or more subsequent findings, resulting in a modified version of the one or more subsequent findings. The modified version of the one or more subsequent findings may then be displayed on a display.

Abstract: A test system for providing automatic testing of an application on a plurality of devices, the system including an input/output device for communicating with the plurality of devices, a processor and a memory that stores instructions which cause the processor to install an application on a device, monitor the device as it performs a series of steps, and record the results of the series of steps in a log.

Abstract: Systems and methods are provided for malware scanning and detection in a computing system. In one exemplary embodiment, the method includes launching, in a computing device of the computing system, a virtual machine, and launching, in the virtual machine of the computing device, an internet browser. The method also includes requesting, by the internet browser, data from a web page, and performing, using one or more analysis tools, analysis on the web page. In the method, performing analysis on the web page includes performing monitoring and recording of system application programming interface (API) calls, and creating software objects associated with the web page. The method also includes performing antivirus scanning of the software objects, de-obfuscating JavaScript associated with the software objects, and correlating data associated with the performed analysis to determine if the web page is a malicious web page.

Abstract: According to one embodiment of the present invention, a method for analyzing test results is provided. The method for analyzing test results may include a computer, determining a first snapshot from a first set of snapshots, wherein the first snapshot is associated with a first set of data. The method may further include the computer determining a second snapshot from a second set of snapshots, wherein the second snapshot is substantially similar to the first snapshot, and wherein the second snapshot is associated with a second set of data. The method may further include the computer associating the first set of data and the second set of data with a third snapshot, responsive to determining that the second snapshot is substantially similar to the first snapshot, wherein the third snapshot is substantially similar to the first snapshot.

Abstract: Various techniques for adaptively varying audio feedback data on an electronic device are provided. In one embodiment, an audio user interface implementing certain aspects of the present disclosure may devolve or evolve the verbosity of audio feedback in response to user interface events based at least partially upon the verbosity level of audio feedback provided during previous occurrences of the user interface event. In another embodiment, an audio user interface may be configured to vary the verbosity of audio feedback associated with a navigable list of items based at least partially upon the speed at which a user navigates the list. In a further embodiment, an audio user interface may be configured to vary audio feedback verbosity based upon the contextual importance of a user interface event. Electronic devices implementing the present techniques provide an improved user experience with regard to audio user interfaces.

Abstract: A method is provided in one example embodiment that includes rebasing a module in a virtual partition to load at a fixed address and storing a hash of a page of memory associated with the fixed address. An external handler may receive a notification associated with an event affecting the page. An internal agent within the virtual partition can execute a task and return results based on the task to the external handler, and a policy action may be taken based on the results returned by the internal agent. In some embodiments, a code portion and a data portion of the page can be identified and only a hash of the code portion is stored.

Abstract: Various tools for use in connection with software projects that may contain open-source software code therein. The tools may include systems and methods for improving results regarding scans of the software projects based on insight data obtained from at least one user's analysis of the results of a previous scan. The systems and methods may also include an application-specific collaboration tool.

Abstract: Metadata associated with at least one field defined in a user interface is identified. The metadata associated with the field defined in the user interface is processed to identify at least one characteristic of the field defined in the user interface. Based on the characteristic(s), a test string is generated for use as an input into the field defined in the user interface to perform validation on the field.

Abstract: Immediately upon identifying a potential breach to a file system, a read-only snapshot of one or more file sets of data stored on a storage volume of the file system is created, and one or more file system protection commands are invoked that restrict access to the snapshot of the file set. Generating the snapshot and restricting access to the snapshot data may include immediately opening an administrative shell for the file-system in response to identifying a potential breach, and executing administrative shell commands that invoke creation of snapshot and limit access of the snapshot data to an administrator or super user.

Abstract: A computing device configured for replacing a target method in intermediate language code is described. The computing device includes a processor. The computing device also includes memory in electronic communication with the processor. The computing device further includes instructions stored in the memory. The instructions are executable to import a hook method and hook type into a caller method module. The instructions are also executable to replace, in intermediate language code, any call to the target method in a caller method body with a call to the hook method. The instructions are further executable to compile the intermediate language code to assembly language code. The instructions are additionally executable to call the hook method in place of the target method.