Abstract: Disclosed in some examples is an enterprise software management system (ESMS) that manages procurement, deployment, security, and maintenance of software in large enterprises. The ESMS may include one or more of a software tracking component, a software component storage component, a licensing repository component, a software vulnerabilities detection component, and a software risk management component. The ESMS governs and manages software applications and components to reduce legal, security, and other risks to the enterprise environment. The ESMS solves the technical problem of tracking and managing software and components using the technical solution of a tracking framework that utilizes interconnected systems that document, track, and ensure compliance with enterprise software goals.

Abstract: An information processing apparatus is communicable with a web server to provide a web page, and obtains a certificate of the web server, verifies the certificate, and controls, in a case that verification of the certificate is successful, to establish secure communication with the web server and display a first screen which represents first information received from the web server via the secure communication. In a case the verification of the certificate is not successful, unsecure communication with the web server is established, and a second screen which is different from the first screen is displayed and represents second information received from the web server via the unsecure communication.

Abstract: Deriving a container from a package set is disclosed. Package set metadata that identifies a plurality of packages to be included in a container image based on a package set is accessed. A container configuration file referencing the plurality of packages is generated based at least in part on the package set metadata. The container configuration file includes one or more commands complying with a container builder syntax that are implementable by a container builder to generate a container image including the plurality of packages. The container configuration file is stored in a memory of a computer system.

Abstract: A platform creating a third-party secure testing region for security experts to build and test proof-of-concepts thereby allowing the security expert or security team to report and retest the cybersecurity vulnerability and relay said vulnerability to the product team who can remediate the problem. The platform of the present invention also allows for automatic retesting of the vulnerability as soon as remediation is finished. Further, the present invention may optionally include an automatic proof-of-concept generator or automatic threat detector.

Abstract: A processing system and a method for updating firmware online, the processing system executes following steps of: an electronic device sending a download request to a firmware security update server end; the firmware security update server end searching for a new version firmware information; if having the new version firmware information, the firmware security update server end decrypting an encrypted new version firmware file into a new version firmware file, and encrypting the new version firmware file with a unique feature to generate an exclusive encrypted new version firmware file, and generating a load point path information; and the electronic device receiving the load point path information, linking to the firmware security update server end and downloading the exclusive encrypted new version firmware file, and the electronic device decrypting the exclusive encrypted new version firmware file with the unique feature to obtain the new version firmware file.

Abstract: In one or more embodiments, a first information handling system may: receive a chained cryptographic hash value determined by a trusted platform module (TPM) of a second information handling system; receive multiple patch identities associated with multiple updated firmware installed on multiple components of the second information handling system; receive an event log associated with output of the TPM as the TPM determined the chained cryptographic hash value; retrieve multiple layered endorsements respectively associated with the multiple patch identities; determine multiple hash values from multiple signatures stored in the multiple layered endorsements; compare the chained cryptographic hash value with the event log; compare multiple event information with the multiple hash values; and determine that the second information handling system has booted into a trusted state based at least on comparing the chained cryptographic hash value with the event log and comparing the multiple event information with the

Abstract: A client device for identifying unsupported capabilities. A client device detects unsupported capabilities and notifies a service provider or device manufacturer of the unsupported capabilities. The service provider notifies the client device of support for the unsupported capabilities including possible upgrades that may be provided to the client device.

Abstract: A software update gateway for updating a software of an IoT (Internet of Things) device.

Abstract: An update control apparatus includes: a first acquiring unit configured to acquire information based on a unique value of a moving-body control unit; a second acquiring unit configured to acquire version information of a program for performing control by the moving-body control unit from a first storage region of a storage apparatus provided in the moving-body control unit; a third acquiring unit configured to acquire, on a basis of the version information acquired by the second acquiring unit, a newer version of the program for performing the control by the moving-body control unit; a writing unit configured to write the new version of the program acquired by the third acquiring unit to a second storage region provided in the storage apparatus; and an instruction unit configured to output an instruction to cause the moving-body control unit to control in accordance with the program stored in the second storage region.

Abstract: Described are systems and methods for client side enrichment and transform via dynamic logic for analytics across various platforms for improved performance, features, and uses. Analytics data collected in client applications is transformed and enriched before being sent to the downstream pipeline using native code and logic bundled into the core application code. The additional logic specific to manipulation of analytics may be unbundled from client-side application code and still be executed on on-device to achieve the same result. The logic may be written in a single language, such as JavaScript, and run across all clients including web browser and mobile operating systems.

Abstract: Systems, methods, and computer-readable media are disclosed for smart infrastructure data transfer. An example system is provided with a processor and a memory storing computer-executable instructions that are executed by the processor. The processor sends, over a network, a first software image to a first smart device of a system of smart devices to update a first group of smart devices of the system; and performs a discovery process to identify a second group of smart devices of the system. The second group of smart devices being based on a number or type of smart devices accessible on the system. The processor also creates a second software image including a software update for the second group of smart devices; and sends, over the network, the second software image to the first smart device to update the second group of smart devices.

Abstract: A display updating system and a display are provided. The display updating system includes a display and an electronic device. The display includes a display panel, a USB hub, and a display control circuit. The USB hub is configured to receive a plurality of display program codes through a USB interface. The display control circuit is configured to receive the display program codes from the USB hub and store the display program codes. The electronic device is connected to the display through the USB interface and includes a memory, a USB driver circuit, and a calculation circuit. The memory is configured to store the display program codes. The USB driver circuit is connected to the USB hub of the display through the USB interface. The calculation circuit is configured to control the USB driver circuit to transmit the display program codes through the USB interface.

Abstract: A system, method, and computer-readable medium for proving feedback on database instructions, identifying, for example, existing patterns and providing suggested replacement instructions. This may have the effect of improving the efficiency of instructions used to create and/or manipulate databases. According to some aspects, these and other benefits may be achieved by parsing received instructions into an organizational structure, traversing the organizational structure for known patterns, and suggesting replacement patterns. In implementation, this may be effected by receiving one or more sets of known patterns and corresponding replacement patterns, parsing received instructions, comparing the known patterns with the parsed instructions, and providing suggested replacement patterns based on one or more known patterns matching the parsed instructions. A benefit of may include reducing Cartesian products during the merging of tables.

Abstract: In some implementations, a system may receive, from a software repository, a difference file indicating changes, to software code, that was submitted to the software repository. The system may parse the difference file to determine files, associated with the software code, affected by the changes and to determine content associated with the changes. The system may apply rules, from a rule dictionary, based on comparing identifiers, associated with the files, with identifiers included in the rules and based on comparing the content, associated with the changes, with content included in the rules. The system may generate software review checklist items based on applying the rules and output the software review checklist items for display. The system may receive, based on input from a user, confirmation of the changes and commit the changes to the software repository based on the confirmation.

Abstract: Systems and methods for providing updates to an electronic device are provided. Upon receiving an update statement, indicating availability of an update to an application on an electronic device, a determination is made as to whether an update notification threshold has been met at the electronic device based upon the indication of availability of the update to the application. When the update notification threshold has been met at the electronic device, a graphical indication of the availability of the update to the application is provided. However, when the update notification threshold has not been met, the graphical indication of the availability of the update to the application is not provided.

Abstract: In a method for managing an upgrade of a virtualization infrastructure component, a plurality of metadata manifests corresponding to a plurality of software upgrade bundles is received, a software upgrade bundle for upgrading a virtualization infrastructure component from a source version to a target version, a metadata manifest comprising a listing of applications comprised within a corresponding software upgrade bundle and installation instructions for the applications comprised within the corresponding software upgrade bundle for upgrading the virtualization infrastructure component from a particular source version to a particular target version.

Abstract: A method, computer program product, and computing system for defining, a plurality of dependency groups for one or more objects of an application, wherein at least two dependency groups of the plurality of dependency groups include one or more common objects. One or more injectors associated with the one or more common objects may be identified. A first dependency group with at least one common object of the one or more common objects may be processed. For each common object of the first dependency group, a reference to an injector associated with the respective common object from a different dependency group may be generated for deferred processing of the respective common object.

Abstract: A system includes a processor configured to detect a vehicle key-off. The processor is also configured to delete from a primary memory (“internal memory”) of an electronic control unit an existing software version for which a new software version update exists in a secondary memory of the ECU. The processor is further configured to load the new software version from the secondary memory (“external memory”) into the primary memory and upon detection of a failure during the load, delete the new software version from the primary memory and reload the existing software version from the secondary memory.

Abstract: The present disclosure provides a method and apparatus for maintaining computer software of a supervisory control unit (SCU) of an industrial control system (ICS) configured to control equipment of a facility. The method includes capturing status information for the SCU and equipment that indicates at least performance of the SCU and the equipment, and connectivity of the SCU with the equipment. The method includes patching the computer software automatically to update, change, fix, or improve the computer software. The method includes capturing corresponding status information for the SCU and equipment and performing an audit of the ICS after the patch in which the status information and the corresponding status information are compared to identify any deviations in the performance or the connectivity of the equipment resulting from the patch. The method includes generating an audit report of the ICS that indicates any of the deviations that satisfy a reporting threshold.

Abstract: A storage device with improved security performance is provided. The storage device comprises a first non-volatile memory storing a firmware image, a second non-volatile memory storing an emergency image, and a storage controller controlling the first and second non-volatile memories, wherein the storage controller checks an integrity of the firmware image received from the first non-volatile memory, loads and executes the emergency image from the second non-volatile memory when the integrity check of the firmware image fails, receives a recover image from an external device based on the emergency image, and provides the recover image to the first non-volatile memory.

Abstract: Embodiments of the present disclosure provide techniques for using an inverted index in a pipelined search query. A field searchable data store is provided that comprises a plurality of event records, each event record comprising a time-stamped portion of raw machine data. Responsive to the reciept of an incoming search query, the search engine accesses an inverted index, wherein each entry in the inverted index comprises at least one field name, a corresponding at least one field value and a reference value associated with each field name and value pair that identifies a location in the data store where an associated event record is stored. Once the inverted index is accessed, it can be used to identify and search a subset of the plurality of event records, wherein the subset comprises one or more event records with corresponding reference values in the inverted index.

Abstract: Examples include updating firmware for a persistent memory module in a computing system during runtime. Examples include copying a new version of persistent memory module firmware into an available area of random-access memory (RAM) in the persistent memory module, and transferring processing of a current version of persistent memory module firmware to the new version of persistent memory module firmware during runtime of the computing system, without a reset of the computing system and without quiesce of access to persistent memory media in the persistent memory module, while continuing to perform critical event handling by the current version of persistent memory module firmware.

Abstract: An information processing apparatus includes a processor configured to perform processing of acquiring firmware that includes three or more binaries including a first program, a second program, and a third program and in which a download program is provided in the first program and the programs are started up in order from the first program, verifying the subsequent program by starting up the programs in order from the first program, verifying the subsequent program by the program in which the download program is not provided, and recording an error flag in a non-volatile memory area in a case where an error occurs, and recovering the error by executing the download program in a case where the error flag is recorded in the non-volatile memory area at a time of restart.

Abstract: Embodiments of the present disclosure provide techniques for performing searches of event records by leveraging reference values in an inverted index. A method of searching comprises accessing a query associated with a first set of event records in a field searchable data store, each event record comprising a time-stamped portion of raw machine data. The method further comprises evaluating the query and generating results for the query by accessing an inverted index, wherein each entry in the inverted index comprises at least one field, a corresponding at least one field value and a reference value that identifies a location in the field searchable data store where an associated event record is stored. The method further comprises performing a search to filter out a second set of event records and retrieving the second set of event records from the field searchable data store using reference values in the inverted index.

Abstract: A device receives a first message indicating that a base station transmitted content relating to vehicle operation to a telemetry device associated with a first vehicle. The device processes the content to affect driving behavior of the first vehicle. The device generates a second message that includes a link to the content. The device sends the second message to a remote device, associated with a second vehicle. The device, by sending the second message to the remote device, causes the remote device to download the content via the link and send the second message to a neighbor device, associated with a third vehicle, which causes the neighbor device to download the content via the link. By downloading the content, the remote device and the neighbor device process the content to affect driving behavior of the second vehicle and the third vehicle.

Abstract: Application developers can request to have their applications registered for use with a content delivery platform. The operator of the content delivery platform establishes perimeters defining geographic areas, and maintains records reserving particular areas for delivery of content associated with particular sponsors. Registered applications running on mobile devices can request content from the content delivery platform. Based at least in part on the request, the content delivery platform can identify a target location, which may be the location of the mobile device, or some other location indicated in the request. A mobile device can be provided content based on the relationship of the target location to the geographic areas, so that a registered application running on a mobile device with a target location contained within a geographic area assigned to a particular sponsor will receive content related to that sponsor.

Abstract: A center configured to communicate with an OTA master configured to control software update for an electronic control unit mounted on a vehicle includes one or more processors. The one or more processors are configured to store security information in which regions are associated with security levels required for the software update, receive, from the vehicle, position information indicating a position of the vehicle, and generate a distribution package applied encryption at a security level associated with the region where the vehicle is located based on the security information and the position information.

Abstract: An apparatus and a method of updating cluster software use a universal serial bus (USB) terminal. The method includes connecting a USB memory to a USB socket of the USB terminal, determining whether a cluster software update file is present in the USB memory, by a head unit, when there is the cluster software update file, changing a USB host to a cluster, and receiving data for update from the USB memory and updating the software of the cluster, by the cluster.

Abstract: A center, configured to communicate with an OTA master configured to control software updating of an electronic control unit via a first network, includes a processor. The electronic control unit is installed in a vehicle. The processor is configured to store vehicle management information including key information used for authenticating the vehicle, receive an authentication signal from the vehicle via the first network. The authentication signal is signed using a unique key imparted to predetermined equipment installed in the vehicle. The processor is configured to perform authentication of the vehicle based on the vehicle management information and the authentication signal, and when the processor receives the key information from the vehicle, rewrites the vehicle management information stored by the processor based on the key information.

Abstract: A quality score for a computer application release is determined using a first number of unique users who have launched the computer application release on user devices and a second number of unique users who have encountered at least once an abnormal termination with the computer application release on user devices. Additionally or optionally, an application quality score can be computed for a computer application based on quality scores of computer application releases that represent different versions of the computer application. Additionally or optionally, a weighted application quality score can be computed for a computer application by further taking into consideration the average application quality score and popularity of a plurality of computer applications.

Abstract: A home appliance includes a cabinet, a user interface provided on the cabinet, the user interface comprising one or more light emitting diodes and at least one input button, a wireless communication module configured to receive wireless transmissions, and a controller provided within the cabinet. The controller is configured for receiving a request for a system update via the wireless communication module, displaying a predetermined sequence on the user interface via the one or more light emitting diodes indicating that the request for the system update is available, receiving a confirmation via a user input to the user interface to initiate the system update, and instructing the wireless communication module to obtain the system update.

Abstract: A data processing method includes: generating a service serial number for a target service according to a preset naming rule; obtaining service data of the target service; obtaining a target data table from a plurality of pre-configured data tables, according to the service serial number; and storing the service data to the target data table.

Abstract: A device management system includes an automatic updater that automatically generates an automatic F/W update task in accordance with an automatic F/W update plan which is a setting for automatically generating the automatic F/W update task as a task for updating firmware of an image forming apparatus. The automatic F/W update plan includes specifying of firmware for update and a mode in which the update is fully executed on all electronic apparatuses of a target of the software update. The automatic updater automatically generates the automatic F/W update task in accordance with the automatic F/W update plan at a specific timing in a repeat manner.

Abstract: The present disclosure provides a software upgrade system, which is applicable to at least one autonomous mobile robot installed with software in a data distribution service domain. The at least one autonomous mobile robot publishes a version information about the software to the version synchronization topic and receives other version information from the version synchronization topic. Also, the at least one autonomous mobile robot subscribes to a version synchronization topic, and takes the software of the at least one autonomous mobile robot itself as the latest version by a software update procedure to upload to a software update topic, or downloads the latest version of the software from the software update topic and installs it. The present disclosure provides a software upgrade method and a non-transitory recording medium.

Abstract: Various methods, apparatuses/systems, and media for automatically deploying an SDN are disclosed. A processor implements a declarative model for an SDN deployment and receives, in the declarative model, service order data from a user corresponding to the SDN deployment. The service order data includes high-level declarative statement data specifying a desired end-state of the SDN deployment. The processor translates the high-level declarative statement data into a low-level specification data that includes data corresponding to a topology and how the SDN should be deployed; creates a run-time topology model based on the low-level specification data; determines whether the service order is valid or not by comparing the low-level specification data against predefined policies and infrastructure constraints data corresponding to execution of the SDN deployment; and automatically executes deployment of the SDN based on a determination that the service order is valid in response to the run-time topology model.

Abstract: Systems, methods, and devices facilitate synchronization of content between instances of data records. Servers may be configured to generate a data record comprising a dynamic synchronization data object, receive an input associated with the data record, and determine a plurality of synchronization parameters including a plurality of expansion parameters and a plurality of permission parameters associated with the dynamic synchronization data object. The servers may be configured to determine a plurality of update parameters based on the synchronization parameters, the update parameters identifying if a modification included in the input should be applied to contents of the dynamic synchronization data object. The servers may also be configured to update the data record and the contents of the dynamic synchronization data object based, at least in part, on the determined update parameters, the updating including pushing the updated contents to at least one of the plurality of target data records.

Abstract: Techniques are disclosed that pertain to deploying immutable instances of a system. A computer system may maintain an active generation value that indicates an immutable instance of a database system that is permitted to write data to a database. The computer system may deploy a first immutable instance of the database system and update the active generation value to permit the first immutable instance to write data to the database. The computer system may receive a request to deploy a second immutable instance of the database system that includes an update not found in the first immutable instance. The computer system may deploy the second immutable instance and update the active generation value to cause the first immutable instance to cease writing data to the database and to permit the second immutable instance to write data to the database.

Abstract: The present disclosure relates to a firmware updating method using a low-power wireless network, and more specifically, to a firmware updating method using a low-power wireless network, which is designed to upgrade a firmware installed on a terminal installed in a vehicle, such as a navigation system, by using a low-power wireless network.

Abstract: Systems and methods for routing requests to a plurality of server clusters are disclosed, especially in a workflow management context. A first server cluster handles requests concerning a first software version and a second server cluster responds to requests concerning a second version of that same software. Upon receiving a request to change default routing of requests, a configuration of a gateway router is updated and subsequent requests concerning the first software are routed to the second server cluster while subsequent request concerning the second software remain routed to the first server cluster. A first graphical user interface (GUI) is provided to be used in defining a series of steps in a workflow and to creating a secondary GUI that will be used when performing the series of steps. Tools for automation and data extraction during the workflow are provided and workflow state is tracked until completion of the workflow.

Abstract: A system and method for an eSync update agent is provided. The update agent can communicate with an eSync client, which receives software updates from an external server and transmits the software updates to the update agent. In turn, the update agent may use its programming to determine one or more aspects of the software update, such as when or whether to perform the software update on its associated electronic device and whether to rollback the update in response to a failure performing the software update on its associated electronic device. The update agent may also be tasked with performing one or both of data gathering from or device control of its associated electronic device. The various functions, including software updating, data gathering and device control, may be programmable and activatable, thereby tailoring the functions performed by the update agent to the lifecycle needs of its associated electronic device.

Abstract: Systems and methods for deploying software updates in hybrid workspace environments are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: consolidate an Operating System (OS) and Basic Input/Output System (BIOS) inventory with a plurality of workspace inventories; resolve dependencies among a plurality of updates based upon the consolidated inventories to identify an order of deployment; and deploy the plurality of updates in the order of deployment.

Abstract: Systems and procedures are provided for validating an IHS (Information Handling System) as operating using only factory-provisioned firmware. During factory provisioning of the IHS, a signed inventory certificate is uploaded to the IHS that includes an inventory identifying firmware for use in the operation of the IHS. Upon delivery and initialization of the IHS, the inventory certificate is retrieved by a pre-boot validation process. An inventory of firmware used by hardware components of the IHS is then collected. The validation process compares the collected inventory of firmware against the inventory of factory-provisioned firmware from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware. A validation failure is signaled when the comparison indicates that a hardware component is not operating using the factory-provisioned firmware specified in the inventory certificate.

Abstract: An information handling system may include a processor and first non-transitory computer-readable media communicatively coupled to the processor and having stored thereon a basic input/output system (BIOS) core comprising BIOS core firmware sufficient to execute features of a BIOS of the information handling system to a particular portion of BIOS execution and an extension agent. The extension agent may be configured to identify and enumerate a firmware volume of a second non-transitory computer-readable media communicatively coupled to the processor and having stored thereon a BIOS extension comprising BIOS extension firmware for executing completion of BIOS execution from the particular portion of BIOS execution and in response to unavailability of the firmware volume of the second non-transitory computer-readable media, failover to and recover the BIOS extension from extended firmware information stored on a networked storage resource communicatively coupled to the information handling system.

Abstract: Prior to an update of an operating system of a computing device, a configuration operation is performed with respect to a particular processor of the computing device, such that the particular processor is indicated to the operating system as being in an offline state while an application runs at the particular processor. The operating system is then updated. The update comprises a time interval in which the operating system is unavailable and the application performs one or more computations at the particular processor. After the update, the application is restarted.

Abstract: A merged infrastructure for manufacturing and lifecycle management of both hardware and software is disclosed. In various embodiments, a library comprising a superset of device drivers is stored, the superset including for each of a plurality of supported systems a corresponding set of device drivers for devices comprising that supported system. A context in which a processor is deployed is determined, the context being associated with a specific corresponding one of the plurality of supported systems. The library is used to provision based on the determined context at least a subset of devices accessible by the processor in the context in which the processor is deployed.

Abstract: The embodiments described herein describe technologies for Module management, including Module creation and Module deployment to a target device in an operation phase of a manufacturing lifecycle of the target device in a cryptographic manager (CM) environment. One implementation includes a Root Authority (RA) device that receives a first command to create a Module and executes a Module Template to generate the Module in response to the first command. The RA device receives a second command to create a deployment authorization message. The Module and the deployment authorization message are deployed to an Appliance device. A set of instructions of the Module, when permitted by the deployment authorization message and executed by the Appliance device, results in a secure construction of a sequence of operations to securely provision a data asset to the target device.

Abstract: Edge application deployment in a network is provided. The network includes a plurality of edge sites with edge computing infrastructure. Edge application deployment is performed, including deploying a pseudo application instance (pApp) of the edge application at each edge site of a first group of edge sites of the plurality of edge sites, and deploying a real application instance (rApp) of the edge application at each edge site of a second group of one or more edge sites of the plurality of edge sites. The pApp is a lightweight, application-specific instance of the rApp with less application functionality than the rApp. Further, the first group of edge sites is larger than the second group, and a user device interaction with the edge application is through a selected pApp of the first group of edge sites to an rApp of the second group.

Abstract: The disclosed embodiments relate to securely booting firmware images. In one embodiment, a method is disclosed comprising receiving, by a memory device, a firmware update; validating, by the memory device, a signature associated with the firmware update; copying, by the memory device, an existing firmware image to an archive location, the archive location storing a plurality of firmware images sorted by version identifiers; booting, by the memory device, and executing the firmware update; and replacing, by the memory device, the firmware update with the existing firmware image stored in the archive location upon detecting an error while booting the firmware update.

Abstract: A recommendation system can be configured to provide tailored software update relevance information for deployed software. The recommendation engine can obtain running state information for a current version of software running on a device, as well as build data for each of the current version of the software and a new version of the software. The recommendation engine can obtain software version difference information based on the build data and determine, based on at least the software version difference information and the running state information, a number of functions in the current version of software that are directly impacted by the new version. The recommendation engine can cause relevance information derived from this determination to be displayed on a computing device, and/or the recommendation engine can automatically cause an update to the new version of the software to be applied or rejected based on the determination.

Abstract: A system and method for automatic, rapid, and auditable updates of digital contracts allows participants to make agreed upon changes to a digital contract that is auditable and fast, so as to improve security, as well as reduce maintenance and operations costs of the management and execution of digital contracts.