Abstract: Presented herein are systems and methods for managing networked environments. A computer system may provide a user interface for configuring a plurality of groups of servers each hosting a resource for an application. The user interface may include: a first element configured to select, upon interaction, at least one group of servers from the plurality of groups of servers to which to install a patch for the application; a second element configured to identify, upon interaction, a first group of servers of the plurality of groups of servers to which to transfer network traffic associated with the application and communicated with a second group of servers of the plurality of groups of servers; and a third element configured to provide, upon interaction, one or more performance indicators for at least one of a plurality of functions of the application.

Abstract: This disclosure describes, in part, techniques for uploading network applications. For instance, system(s) may initially receive first data representing a first version of a network application and a first manifest that includes information describing the file contents of the first version. The system(s) may then store the first data and the first manifest within one or more databases. After the network application is updated to a second version, the system(s) may receive a second manifest that includes information describing the file contents of the second version of the network application. The system(s) may then use the first manifest and/or the second manifest to identify files that have been modified to create the second version of the network application. The system(s) may then receive second data representing the identified files and then reconstruct the second version of the network application using the first data and the second data.

Abstract: A method of updating firmware of a BMC of a server, the server includes the BMC and a PLD, the method includes: in response to receipt of a firmware update instruction to update the firmware of the BMC, the BMC storing in the PLD a firmware configuration file that contains current settings; the BMC updating the firmware after storing the firmware configuration file in the PLD; the BMC being reset after updating the firmware; and the BMC executing an initializing process that includes sub-steps of reading the firmware configuration file from the PLD and applying the current settings contained in the firmware configuration file to the firmware.

Abstract: The present invention is to identify a hardware version capable of performing a software update and does not store the version information in the hardware in the code, but inputs the version information to the microcontroller through the hardware version identification unit that stores the BMS hardware version information. Also, in order to compensate for the low channel utilization of the microcontroller when one microcontroller is used for software update, it is a device and method for operating in both the application mode and the boot mode.

Abstract: This disclosure describes systems, methods, and devices related to service function chaining in wireless networks. A communications system may include a communication control function to select one or multiple communication service functions associated with establishing service function chaining (SFC) services for telecommunications; a service orchestration and chaining function (SOCF) to establish the SFC services; and a service orchestration exposure function (SOEF) to expose the SFC services to an application function (AF) of the system.

Abstract: Optimizing a user experience during transition to an updated user interface includes using a computer processor to capture a user experience of a user's interaction with a program based on migration of the user interface from a current version of a page layout associated with the user to a new version of the page layout associated with the user. Disparity events experienced by the user while transitioning from the current version of the page layout to the new version of the page layout are analyzed, and a recommendation report of changes to the user interface is generated and sent to a developer associated with the new version of the page layout. An updated page layout reflecting modifications may then be received based on the recommendation report.

Abstract: A specific on-board device, that is any one of a plurality of on-board devices, is configured to acquire the versions of software included in other on-board devices when the power source of a vehicle is turned on. The specific on-board device determines whether or not the versions of the software of all the on-board devices that constitute a vehicle control system are consistent, by comparing the version of the software of the specific on-board device and the versions of the software acquired from the other on-board devices with first consistency information prestored.

Abstract: Disclosed herein are an upgradable electronic device, a server for upgrading the electronic device, and a method for upgrading the electronic device. The electronic device includes: a storage unit storing program data; a communication unit receiving and storing a file for updating the program data from a management server and transmitting update data for updating the program data based on the stored file; and a controller updating the program data in response to the update data, wherein the update data transmitted from the communication unit includes delta data and an instruction, the delta data including only a changed portion of the program data.

Abstract: A vehicle data communication device mounted in a vehicle having a plurality of ECUs. The vehicle data communication device wirelessly communicates data with a center device. The vehicle data communication device comprises: a plurality of communication clients each pairing with a respective one of a plurality of distribution servers included in the center device; a communication information acquisition unit acquiring information of a communication carrier and a region where the center device is located; a client storage unit storing the plurality of communication clients each of which corresponds to the corresponding one of the plurality of distribution servers; and a client selection unit (i) selecting one of the plurality of communication clients that corresponds to the communication carrier and the region that are specified by the information and (ii) activating the selected one of the plurality of communication clients to enable data communication with the corresponding distribution server.

Abstract: Various embodiments of the invention may receive information related to a plurality of application upgrades from an application monitoring agent. Based on the received information, a device emulation will be requested, and an emulation will be performed in response to generate an application upgrade strategy that includes such things as emulated (e.g., predicted) upgrade times. The application upgrade strategy is used to produce a more refined upgrade strategy. The various embodiments refine the upgrade strategy by specifically consider the power consumption and cost for the power that is consumed.

Abstract: A software package is received so that functions within the software package that implement or use cryptographic primitives can be identified. Further, a set of calls with each of the identified functions are determined. A call site analysis is performed based on the set of calls to determine cryptographic algorithm parameters. Thereafter, based on the set of calls and the call site analysis, a cryptography bill of materials (CBOM) detailing cryptographic primitives within the software package is generated. This CBOM can be provided to a consuming application or process. Related apparatus, systems, techniques and articles are also described.

Abstract: A DevSecOps integration system that can analyze a source repository and provide recommendations on security services, along with supported security tools, that can be included as part of the DevOps pipeline. The DevSecOps integration system can automatically fit the selected security tools into the appropriate stage of the pipeline to optimize security protection. In some embodiments, the DevSecOps integration system automatically generates various and multiple CI/CD-specific integrations, scripts, and security code. In one example, the security tools are selected in response to user selection(s), such as an initial input file and code parameters, and automatically identifies where the scripts should be inserted in the development process.

Abstract: A computer system includes a volatile memory and at least one processor. The volatile memory includes a protected storage segment (PSS) configured to store firmware-authentication program code for authenticating firmware of the computer system. The at least one processor is configured to receive a trigger to switch to a given version of the firmware, to obtain, in response to the trigger, a privilege to access the PSS, to authenticate the given version of the firmware by executing the firmware-authentication program code from the PSS, to switch to the given version of the firmware upon successfully authenticating the given version, and to take an alternative action upon failing to authenticate the given version.

Abstract: An operating system, or operating system update, management service uses a shared read-only multi-attach volume of a block-based storage service to distribute operating systems or operating system updates to a set of virtualized computing instances. Also, to store launch specific information, that is specific to a given virtualized computing instance, additional writable volumes are used, wherein a write volume is attached to each of the computing instances of the set. This eliminates the need to provide a full copy of an OS volume to each of the computing instances.

Abstract: The present disclosure provides an electronic device and a method for controlling data updates of the electronic device, the electronic device comprising: a control portion including a storage configured to store data and a controller configured to control data updates in the storage; a power supply portion; a power storage portion configured to be connected with the power supply portion, receive and store electric power of the power supply portion, and supply the electric power to the control portion; and a power supply detection portion configured to detect whether the power supply portion supplies power normally, the storage includes a first storage portion configured to store start-up data for electronic device start-up and a second storage portion configured to store running data for electronic device running after start-up; in the process of updating the start-up data of the first storage portion, if the power supply detection portion detects the power supply portion has a power supply abnormality, the

Abstract: There is provided a mouse chip including a flash chip, a flash controller and a random access memory. The flash chip is embedded with a firmware, which is recorded with a flash driver and user configurations. Each time the mouse chip is powered on, the flash controller reads the flash driver and the user configurations from the firmware to the random access memory for being updated if necessary.

Abstract: Systems and methods in accordance with embodiments of the invention can analyze a variety of software applications, modify the software applications, and/or automatically deploy the software applications to a distributed computing system. Distributed computing systems can provide software applications in a scalable, low cost manner that can be dynamically scaled to demand. Software deployment systems in accordance with embodiments of the invention can automatically process software applications to determine the suitability of the software application to be deployed to a distributed computing system and/or modify the software application for deployment. A variety of machine classifiers can be used to score various aspects of a software application to identify portions of the application for modification and/or suitability for deployment.

Abstract: Systems, methods, and machine-readable media may facilitate one or a combination of the following. A software change operation within a deployment pipeline for testing and deploying a software change to a production computing service may be processed. The software change operation may be identified as corresponding to a software change with the deployment pipeline, where the software change may be identified as being configured to make a pipeline change to a configuration of the deployment pipeline itself. Responsive to the identifying, a regression suite configured to run a plurality of test applications on the deployment pipeline to test the deployment pipeline with respect to the software change may be invoked, and the plurality of test applications may be run with the software change. The running the plurality of test applications may include simulating pipeline runs with a plurality of use cases.

Abstract: Examples are disclosed for upgrading services of a software-based service according to a predefined sequence to account for dependencies between services. An upgrade package that includes a manifest defining an order for upgrading services of the software-based system is retrieved. Each service is upgraded according to the sequence and a status log is modified following each upgrade to include a unified status summary associated with all services being upgraded.

Abstract: An example method of upgrading a host in a cluster under management of a lifecycle manager in a virtualized computing system includes: receiving, from the lifecycle manager at a host in the cluster being upgraded, a desired software specification for a hypervisor of the host; determining, by the host, a list of required software installation bundles (SIBs) to satisfy the desired software specification; identifying a neighboring host in the cluster for the host; downloading, from the neighboring host to the host, at least a portion of the required SIBs; and executing an upgrade of the hypervisor in the host using the required SIBs.

Abstract: A software package is received so that functions within the software package that implement or use cryptographic primitives can be identified. Further, a set of calls with each of the identified functions are determined. A call site analysis is performed based on the set of calls to determine cryptographic algorithm parameters. Thereafter, based on the set of calls and the call site analysis, a cryptography bill of materials (CBOM) detailing cryptographic primitives within the software package is generated. This CBOM can be provided to a consuming application or process. Related apparatus, systems, techniques and articles are also described.

Abstract: A method for managing an application upgrade includes: making a first determination that an urgent fix is received from an application monitoring agent; making, based on the first determination, a second determination that a high priority network slice of a network exists; mapping, based on the second determination, the urgent fix to the high priority network slice; making a third determination that a prerequisite fix is required; mapping the prerequisite fix to the high priority network slice; sending the prerequisite fix and the urgent fix to the reordering engine; reordering at least one fix available in a receiving queue of the reordering engine to prioritize the prerequisite fix and the urgent fix in the receiving queue; sending the prerequisite fix and the urgent fix to a client device upgrade manager; and initiating upgrading of a client device based on the prerequisite fix and the urgent fix.

Abstract: An update management device includes: an acquisition unit configured to acquire, version information of a program of a moving object control unit, and moving object information which is detected information; and a generation unit configured to generate normal range information indicating a normal range of the moving object information, wherein the generation unit is configured to generate, based on the moving object information detected by a moving object whose program of the moving object control unit is a first version, normal range information of the first version, and identify, a moving object whose moving object information detected when the version of the program is the first version is within the normal range of the first version, and use the moving object information detected by the identified moving object when the version of the program is the second version, to generate the normal range information of the second version.

Abstract: A computer device for managing privilege delegation to control creation of processes thereon is described. Creation of a process on a computer device is requested according to first privileges. An agent, cooperating with an operating system of the computer device, intercepts the request. The agent determines whether to create the process according to second privileges, different from the first privileges and if permitted, cause the process to be created accordingly. The agent hooks a query provided by the operating system to identify whether a control service is enabled. The agent enquires of the operating system whether to create the process according to the second privileges whereupon the hooked query is invoked. The agent confirms to the operating system that the control service is enabled, such that checks by the operating system are performed as if the operating system were enabled.

Abstract: A center configured to communicate with an OTA master configured to control software update for an electronic control unit mounted on a vehicle, the center comprising includes one or more processors configured to generate a distribution package including update data of software of a target electronic control unit, first information, and second information. The first information is referenced by an external device connected to the vehicle by wire when the external device updates the software of the target electronic control unit via an in-vehicle network. The second information is referenced by the OTA master wirelessly connected to the center when the OTA master updates the software of the target electronic control unit via the in-vehicle network. The one or more processors are configured to transmit the distribution package to the OTA master based on a request from the OTA master.

Abstract: A storage enclosure connected to a server via an external network and includes a network switch, an expander that is connected to the network switch and that is configured to generate enclosure data that supports a format conforming with SCSI Enclosure Services, and a board management controller (BMC) that is connected to the network switch and the expander. The BMC is configured to translate the enclosure data into enclosure translating data that supports a Redfish® format. The expander is configured to, after generating the enclosure data, transmit the enclosure data through the network switch to the BMC via an internal network. The BMC is configured to translate the enclosure data into the enclosure translating data, and to transmit the enclosure translating data to the network switch. The network switch transmits the enclosure translating data to the server through the external network.

Abstract: The present invention relates to a method, to a computer program containing instructions and to an apparatus for performing a boot process for a system that supports redundant copies of boot images. In a first step, an active copy of the boot images is determined (S1). Then the active copy of the boot images is processed (S2). In response to a successful boot process, another copy of the boot images is then set (S3) as the active copy for a subsequent boot process.

Abstract: Provided is an onboard ECU for controlling an onboard apparatus installed in a vehicle, including a storage unit that stores a control program for controlling the onboard apparatus and an inspection program for performing an operation check of the onboard apparatus or the onboard ECU, and a control unit that executes the control program or the inspection program, the storage unit storing validity information indicating whether the inspection program is valid or invalid being, and the control unit referring to the validity information stored in the storage unit, executing the inspection program if the inspection program is valid, and executing the control program if the inspection program is invalid.

Abstract: Disclosed in some examples is an enterprise software management system (ESMS) that manages procurement, deployment, security, and maintenance of software in large enterprises. The ESMS may include one or more of a software tracking component, a software component storage component, a licensing repository component, a software vulnerabilities detection component, and a software risk management component. The ESMS governs and manages software applications and components to reduce legal, security, and other risks to the enterprise environment. The ESMS solves the technical problem of tracking and managing software and components using the technical solution of a tracking framework that utilizes interconnected systems that document, track, and ensure compliance with enterprise software goals.

Abstract: An information processing apparatus is communicable with a web server to provide a web page, and obtains a certificate of the web server, verifies the certificate, and controls, in a case that verification of the certificate is successful, to establish secure communication with the web server and display a first screen which represents first information received from the web server via the secure communication. In a case the verification of the certificate is not successful, unsecure communication with the web server is established, and a second screen which is different from the first screen is displayed and represents second information received from the web server via the unsecure communication.

Abstract: Deriving a container from a package set is disclosed. Package set metadata that identifies a plurality of packages to be included in a container image based on a package set is accessed. A container configuration file referencing the plurality of packages is generated based at least in part on the package set metadata. The container configuration file includes one or more commands complying with a container builder syntax that are implementable by a container builder to generate a container image including the plurality of packages. The container configuration file is stored in a memory of a computer system.

Abstract: A processing system and a method for updating firmware online, the processing system executes following steps of: an electronic device sending a download request to a firmware security update server end; the firmware security update server end searching for a new version firmware information; if having the new version firmware information, the firmware security update server end decrypting an encrypted new version firmware file into a new version firmware file, and encrypting the new version firmware file with a unique feature to generate an exclusive encrypted new version firmware file, and generating a load point path information; and the electronic device receiving the load point path information, linking to the firmware security update server end and downloading the exclusive encrypted new version firmware file, and the electronic device decrypting the exclusive encrypted new version firmware file with the unique feature to obtain the new version firmware file.

Abstract: A platform creating a third-party secure testing region for security experts to build and test proof-of-concepts thereby allowing the security expert or security team to report and retest the cybersecurity vulnerability and relay said vulnerability to the product team who can remediate the problem. The platform of the present invention also allows for automatic retesting of the vulnerability as soon as remediation is finished. Further, the present invention may optionally include an automatic proof-of-concept generator or automatic threat detector.

Abstract: In one or more embodiments, a first information handling system may: receive a chained cryptographic hash value determined by a trusted platform module (TPM) of a second information handling system; receive multiple patch identities associated with multiple updated firmware installed on multiple components of the second information handling system; receive an event log associated with output of the TPM as the TPM determined the chained cryptographic hash value; retrieve multiple layered endorsements respectively associated with the multiple patch identities; determine multiple hash values from multiple signatures stored in the multiple layered endorsements; compare the chained cryptographic hash value with the event log; compare multiple event information with the multiple hash values; and determine that the second information handling system has booted into a trusted state based at least on comparing the chained cryptographic hash value with the event log and comparing the multiple event information with the

Abstract: A software update gateway for updating a software of an IoT (Internet of Things) device.

Abstract: A client device for identifying unsupported capabilities. A client device detects unsupported capabilities and notifies a service provider or device manufacturer of the unsupported capabilities. The service provider notifies the client device of support for the unsupported capabilities including possible upgrades that may be provided to the client device.

Abstract: Described are systems and methods for client side enrichment and transform via dynamic logic for analytics across various platforms for improved performance, features, and uses. Analytics data collected in client applications is transformed and enriched before being sent to the downstream pipeline using native code and logic bundled into the core application code. The additional logic specific to manipulation of analytics may be unbundled from client-side application code and still be executed on on-device to achieve the same result. The logic may be written in a single language, such as JavaScript, and run across all clients including web browser and mobile operating systems.

Abstract: An update control apparatus includes: a first acquiring unit configured to acquire information based on a unique value of a moving-body control unit; a second acquiring unit configured to acquire version information of a program for performing control by the moving-body control unit from a first storage region of a storage apparatus provided in the moving-body control unit; a third acquiring unit configured to acquire, on a basis of the version information acquired by the second acquiring unit, a newer version of the program for performing the control by the moving-body control unit; a writing unit configured to write the new version of the program acquired by the third acquiring unit to a second storage region provided in the storage apparatus; and an instruction unit configured to output an instruction to cause the moving-body control unit to control in accordance with the program stored in the second storage region.

Abstract: Systems, methods, and computer-readable media are disclosed for smart infrastructure data transfer. An example system is provided with a processor and a memory storing computer-executable instructions that are executed by the processor. The processor sends, over a network, a first software image to a first smart device of a system of smart devices to update a first group of smart devices of the system; and performs a discovery process to identify a second group of smart devices of the system. The second group of smart devices being based on a number or type of smart devices accessible on the system. The processor also creates a second software image including a software update for the second group of smart devices; and sends, over the network, the second software image to the first smart device to update the second group of smart devices.

Abstract: A display updating system and a display are provided. The display updating system includes a display and an electronic device. The display includes a display panel, a USB hub, and a display control circuit. The USB hub is configured to receive a plurality of display program codes through a USB interface. The display control circuit is configured to receive the display program codes from the USB hub and store the display program codes. The electronic device is connected to the display through the USB interface and includes a memory, a USB driver circuit, and a calculation circuit. The memory is configured to store the display program codes. The USB driver circuit is connected to the USB hub of the display through the USB interface. The calculation circuit is configured to control the USB driver circuit to transmit the display program codes through the USB interface.

Abstract: A system, method, and computer-readable medium for proving feedback on database instructions, identifying, for example, existing patterns and providing suggested replacement instructions. This may have the effect of improving the efficiency of instructions used to create and/or manipulate databases. According to some aspects, these and other benefits may be achieved by parsing received instructions into an organizational structure, traversing the organizational structure for known patterns, and suggesting replacement patterns. In implementation, this may be effected by receiving one or more sets of known patterns and corresponding replacement patterns, parsing received instructions, comparing the known patterns with the parsed instructions, and providing suggested replacement patterns based on one or more known patterns matching the parsed instructions. A benefit of may include reducing Cartesian products during the merging of tables.

Abstract: In some implementations, a system may receive, from a software repository, a difference file indicating changes, to software code, that was submitted to the software repository. The system may parse the difference file to determine files, associated with the software code, affected by the changes and to determine content associated with the changes. The system may apply rules, from a rule dictionary, based on comparing identifiers, associated with the files, with identifiers included in the rules and based on comparing the content, associated with the changes, with content included in the rules. The system may generate software review checklist items based on applying the rules and output the software review checklist items for display. The system may receive, based on input from a user, confirmation of the changes and commit the changes to the software repository based on the confirmation.

Abstract: Systems and methods for providing updates to an electronic device are provided. Upon receiving an update statement, indicating availability of an update to an application on an electronic device, a determination is made as to whether an update notification threshold has been met at the electronic device based upon the indication of availability of the update to the application. When the update notification threshold has been met at the electronic device, a graphical indication of the availability of the update to the application is provided. However, when the update notification threshold has not been met, the graphical indication of the availability of the update to the application is not provided.

Abstract: In a method for managing an upgrade of a virtualization infrastructure component, a plurality of metadata manifests corresponding to a plurality of software upgrade bundles is received, a software upgrade bundle for upgrading a virtualization infrastructure component from a source version to a target version, a metadata manifest comprising a listing of applications comprised within a corresponding software upgrade bundle and installation instructions for the applications comprised within the corresponding software upgrade bundle for upgrading the virtualization infrastructure component from a particular source version to a particular target version.

Abstract: A method, computer program product, and computing system for defining, a plurality of dependency groups for one or more objects of an application, wherein at least two dependency groups of the plurality of dependency groups include one or more common objects. One or more injectors associated with the one or more common objects may be identified. A first dependency group with at least one common object of the one or more common objects may be processed. For each common object of the first dependency group, a reference to an injector associated with the respective common object from a different dependency group may be generated for deferred processing of the respective common object.

Abstract: A system includes a processor configured to detect a vehicle key-off. The processor is also configured to delete from a primary memory (“internal memory”) of an electronic control unit an existing software version for which a new software version update exists in a secondary memory of the ECU. The processor is further configured to load the new software version from the secondary memory (“external memory”) into the primary memory and upon detection of a failure during the load, delete the new software version from the primary memory and reload the existing software version from the secondary memory.

Abstract: The present disclosure provides a method and apparatus for maintaining computer software of a supervisory control unit (SCU) of an industrial control system (ICS) configured to control equipment of a facility. The method includes capturing status information for the SCU and equipment that indicates at least performance of the SCU and the equipment, and connectivity of the SCU with the equipment. The method includes patching the computer software automatically to update, change, fix, or improve the computer software. The method includes capturing corresponding status information for the SCU and equipment and performing an audit of the ICS after the patch in which the status information and the corresponding status information are compared to identify any deviations in the performance or the connectivity of the equipment resulting from the patch. The method includes generating an audit report of the ICS that indicates any of the deviations that satisfy a reporting threshold.

Abstract: A storage device with improved security performance is provided. The storage device comprises a first non-volatile memory storing a firmware image, a second non-volatile memory storing an emergency image, and a storage controller controlling the first and second non-volatile memories, wherein the storage controller checks an integrity of the firmware image received from the first non-volatile memory, loads and executes the emergency image from the second non-volatile memory when the integrity check of the firmware image fails, receives a recover image from an external device based on the emergency image, and provides the recover image to the first non-volatile memory.

Abstract: Embodiments of the present disclosure provide techniques for using an inverted index in a pipelined search query. A field searchable data store is provided that comprises a plurality of event records, each event record comprising a time-stamped portion of raw machine data. Responsive to the reciept of an incoming search query, the search engine accesses an inverted index, wherein each entry in the inverted index comprises at least one field name, a corresponding at least one field value and a reference value associated with each field name and value pair that identifies a location in the data store where an associated event record is stored. Once the inverted index is accessed, it can be used to identify and search a subset of the plurality of event records, wherein the subset comprises one or more event records with corresponding reference values in the inverted index.

Abstract: Examples include updating firmware for a persistent memory module in a computing system during runtime. Examples include copying a new version of persistent memory module firmware into an available area of random-access memory (RAM) in the persistent memory module, and transferring processing of a current version of persistent memory module firmware to the new version of persistent memory module firmware during runtime of the computing system, without a reset of the computing system and without quiesce of access to persistent memory media in the persistent memory module, while continuing to perform critical event handling by the current version of persistent memory module firmware.