Abstract: Systems, methods, and techniques utilize reinforcement learning to efficiently schedule a sequence of jobs for execution by one or more processing threads. A first sequence of execution jobs associated with rendering a target frame of a sequence of frames is received. One or more reward metrics related to rendering the target frame are selected. A modified sequence of execution jobs for rendering the target frame is generated, such as by reordering the first sequence of execution jobs. The modified sequence is evaluated with respect to the selected reward metric(s); and rendering the target frame is initiated based at least in part on the evaluating of the modified sequence with respect to the one or more selected reward metric(s).

Abstract: This application discusses identifying data processing timeouts in live risk analysis systems. A service provider, such as an electronic transaction processor, may provide a production computing environment that includes a risk analysis system having one or more risk models, which may be machine-learning based. These risk models may be utilized in order to determine whether incoming data processing requests are fraudulent. To test these risk models using production data traffic, an audit computing environment made of a set of machines that do not service production computing environment requests, but that utilize databases and data connections as are used by the production systems. The audit computing environment may thus mirror the risk models and functionality of the production computing environment without the drawbacks of a typical fully separate testing environment.

Abstract: The present invention relates to a method and apparatus for generating difference between old and new versions of data (software data) for updating software, and in more detail, when updating software programs and their related data in client devices like autonomous vehicles and smartphones, an update management server generates the difference by comparing old and new versions of the software data, and provides the generated difference to client devices, thereby provided is a method and apparatus for making software update simple and fast.

Abstract: A system and method for CI/CT/CD, which is continuous integration/continuous testing/continuous delivery, in which testing is fully integrated to the needs of rapid code development and delivery. The system is determining test coverage of a plurality of tests, comprising a code builder for providing code, a code tester for testing the code with said plurality of tests, and a code test analyzer for analyzing results of said plurality of tests to determine coverage of said code by said plurality of tests.

Abstract: In general, this disclosure describes an IoT access control exchange for IoT devices. Verifiable credentials can be generated and used to grant access to IoT devices definitively identified using a Decentralized Identifier (DID). DIDs for IoT devices are registered by the IoT exchange hub acting as an Identity Hub. An organization interested in obtaining data from a collection of devices, the IoT Access Customer, contacts the IoT device owner agent via their mutual agents and obtains a verifiable credential with a request for access. The access request is submitted to the IoT exchange hub. The IoT exchange hub either enforces the access request itself if the devices do not have enough resources or submits the verifiable credential with the access request to the devices for them to enforce access. The IoT access customer agent, IoT device owner agent, and IoT exchange hub similarly identify themselves and prove authentication using DIDs.

Abstract: One or more processors compile user preference and activity information associated with a mobile device operated by the user. The installation of a first application (app) on the mobile device operated by the user is confirmed. Responsive to detecting availability of an update to the first application, and confirmation accepting installation of the update, dynamically embedding a message within a new feature included in the update of the first application. A message is selected from one or more available messages to dynamically embed within the new feature included in the update of the first application, based on profile and activity information collected about the first user, and responsive to receiving a confirmation to receive the update of the first application, the message selected from the one or more available messages, is presented to the user, embedded within the new feature of the update to the first application.

Abstract: An example of a first computing device may include firmware, a controller, and a processor. The processor may be to generate a trust state message, to be sent to the controller, indicating the firmware of the first computing device is operating a trusted environment and utilize the firmware to validate an update within the trusted environment. The controller may be to assert, responsive to receiving the trust state message, a trust state signal to a second computing device indicating the firmware of the first computing device is operating the trusted environment The assertion of the trust state signal may be to enable the second computing device to install the validated update.

Abstract: This technology relates to transferring state information between processes or active software programs in a computing environment where a new instance of a process or software program may receive such state information even after an original or old instance of the process or software program that owned the state information has terminated either naturally or unnaturally.

Abstract: An example operation may include one or more of receiving a software update at a transport, performing a first validation of the software update in a first environment, wherein the first environment includes a least amount of potential interactions, and performing a further validation of the software update when the first validation is successful, in a further environment, wherein the further environment includes an amount of potential interactions greater than the first environment.

Abstract: Example embodiments facilitate prioritizing the recycling of computing resources, e.g., server-side computing systems and accompanying resources (e.g., non-volatile memory, accompanying firmware, data, etc.) leased by customers in a cloud-based computing environment, whereby computing resources (e.g., non-volatile memory) to be forensically analyzed/inspected, sanitized ,and/or updated are prioritized for recycling based on estimates of when the computing resources are most likely to require recycling, e.g., via background sanitizing and updating. Computing resources that are likely to be recycled first are given priority over computing resources that are more likely to be recycled later. By prioritizing the recycling of computing resources according to embodiments discussed herein, other cloud-based computing resources that are used to implement computing resource recycling can be efficiently allocated and preserved.

Abstract: An apparatus comprises a processing device configured to detect that a given software upgrade is available for a given computing device, to identify other computing devices on which the given software upgrade has been installed that exhibit at least a threshold level of similarity to the given computing device, and to determine whether any issues were encountered on the other computing devices as a result of the given software upgrade. The processing device is also configured to generate a recommendation as to whether to initiate download of the given software upgrade on the given computing device based at least in part on whether any issues were encountered on the other computing devices as a result of the given software upgrade, and to initiate download of the given software upgrade on the given computing device based at least in part on the generated recommendation.

Abstract: Technology for causing a computer system to: receive a migration plan for migration of computer data and/or computer software, generate containerized migration file(s) according to the migration plan; copy the containerized migration file(s) into a set of container(s) so that the migration plan can be implemented using a container from the set of containers; and migrate computer data and/or computer software between a source computer sub-system and a target computer sub-system using a container from the set of containers to implement the migration plan.

Abstract: A method for securely updating a control unit. The control unit includes a host configured to execute an update program and at least one application program, a memory, which contains the programs and data, and a hardware security module (HSM) which is configured to block and to unblock a write access to the memory. The method includes starting the host and the HSM; blocking the write access by the HSM; starting the update program; determining by the update program whether a request of a caller to carry out an update is present; if a request is present, checking an authorization of the caller by the HSM to carry out an update, the authorization of the caller being confirmed by a confirmation unit differing from the control unit; and if the caller is authorized, unblocking the write access and rewriting at least a portion of the memory by the update program.

Abstract: The present disclosure provides a method and apparatus for maintaining computer software of a supervisory control unit (SCU) of an industrial control system (ICS) configured to control equipment of a facility. The method includes capturing status information for the SCU and equipment that indicates at least performance of the SCU and the equipment, and connectivity of the SCU with the equipment. The method includes patching the computer software automatically to update, change, fix, or improve the computer software. The method includes capturing corresponding status information for the SCU and equipment and performing an audit of the ICS after the patch in which the status information and the corresponding status information are compared to identify any deviations in the performance or the connectivity of the equipment resulting from the patch. The method includes generating an audit report of the ICS that indicates any of the deviations that satisfy a reporting threshold.

Abstract: The present application is directed towards systems and methods for identifying and grouping code objects into functional areas with boundaries crossed by entry points. An analysis agent may select a first functional area of a source installation of an application to be transformed to a target installation of the application from a plurality of functional areas of the source installation, each functional area comprising a plurality of associated code objects; and identify a first subset of the plurality of associated code objects of the first functional area having associations only to other code objects of the first functional area, and a second subset of the plurality of associated code objects of the first functional area having associations to code objects in additional functional areas, the second subset comprising entry points of the first functional area.

Abstract: Techniques are disclosed for updating a trusted software and another software, which may include receiving a software update package that comprises a trusted updated software component, a trusted updated software booting metadata, another updated software component, and another updated software booting metadata. The trusted updated software component may belong to an updated version of the trusted software, and the trusted software may have a certain trust level. The other updated software component may belong to an updated version of the other software, and the other software may have a trust level that is lower than the certain trust level. At least a part of the trusted updated software booting metadata may comprise retrieval information for retrieving, during a booting process, at least a portion of the other software booting metadata.

Abstract: Dynamically overriding a function based on a capability set. A computer system reads a portion of an executable image file. The portion includes a first memory address corresponding to a first callee function implementation. The first memory address was inserted into the portion by a compiler toolchain. Based on extensible metadata included in the executable image file, and based on a capability set that is specific to the computer system, the computer system determines a second memory address corresponding to a second callee function implementation. Before execution of the portion, the computer system modifies the portion to replace the first memory address with the second memory address.

Abstract: According to one embodiment, a memory system includes a nonvolatile memory, and a controller. The controller controls the nonvolatile memory. The nonvolatile memory includes a first area where specific software is capable of being stored, and a second area where the specific software is stored. The second area has higher reliability than the first area. The controller causes the specific software to be stored in the first area when receiving a command specifying the specific software, and executes loading of the specific software stored in the first area at startup of the controller.

Abstract: A uniform and unified firmware in-field upgrade capability for the optics modules may ensure compatibility, security and code quality, and scalability. In some examples, an intermediate representation, which includes vendor firmware upgrade operations and control logic, may be defined, received, and parsed. Read/write operations may be communicated to optical module(s) based on the control logic. In some examples, a unified optics module firmware in-field upgrade framework, which has multiple defined software layers, may ensure a uniform and unified approach to managing optics module(s) from different vendors and used by different projects.

Abstract: An illustrative method includes a data protection system detecting a data corruption event that impacts data stored within a storage element of a storage system, identifying one or more attributes associated with the storage element, and determining, based on the one or more attributes associated with the storage element, a recovery plan for the storage element, the recovery plan specifying one or more operations configured to recover the data stored within the storage element from the data corruption event.

Abstract: Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.

Abstract: System and method for safe over-the-air (OTA) update of electronic control units in vehicles are provided. The method includes checking whether a vehicle condition allows firmware update of an electronic control unit in a vehicle. If the vehicle condition allows the firmware update, the method includes causing a telematics device to complete the firmware update for the electronic control unit.

Abstract: There is provided a control chip including a microcontroller unit (MCU), a bus arbiter, a first bus, a second bus, a void hardware, a cache controller, a flash controller and a flash memory, wherein the flash memory is recorded with a firmware. When the MCU does not receive an update instruction, the bus arbiter reads, according to a function command of the MCU, a function return value associated with the function command from the flash memory via the first bus, the cache controller and the flash controller. When the MCU receives the update instruction, the bus arbiter updates the firmware in the flash memory via the second bus and the flash controller, and the void hardware actively replies a void return value associated with the function command to the MCU to replace the function return value.

Abstract: Systems and methods for deploying enterprise software updates are provided. At a server storing applications and a record of client devices is provided. Each application includes a corresponding group identifier indicating a group associated with an application and a corresponding version identifier indicating a version of the application. The record includes the deployment identifier for each application in the plurality of applications installed on each device. A first application having a first group identifier and a first version identifier, and a second application having the first group identifier and a second version identifier is installed in each respective device. An update for the first application is received at the server, which includes modifying the version identifier of the first application. The update for the first application is communicated to each device.

Abstract: A method and apparatus are disclosed for performing authenticated firmware updates of a fog or IoT device, which happens concurrent with a field update of a component coupled to the device, such as a battery.

Abstract: A software package comprising a plurality of software objects and package metadata is accessed and used to provide a graphical user interface including a first area in which details about the software objects are displayed and a second area where a user can select a location path, in an analytic cloud tenant on which the package is to be imported. A selection is made of the location path for at least one resource object. The system determines if the package metadata is of a type that includes information about a parent resource object but not descendant resource objects and not ancestor resource objects other than the parent resource object, for each resource object in the plurality of software objects, and if so, recursively identifies a parent object for each resource object in the plurality of software objects. The ancestor hierarchy from the recursively identified parent object(s) is reversed and inverted.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may read configuration information that indicates utilization of a custom information handling system firmware IHSFW image by an information handling system (IHS); provide the custom IHSFW image and a signature of the custom IHSFW image to a processor of the IHS; decrypt the signature of the custom IHSFW image to obtain a hash value of the custom IHSFW image; determine a test hash value of the custom IHSFW image; determine if the hash value matches the test hash value; if the hash value matches the test hash value, boot a custom IHSFW from the custom IHSFW image; and if the hash value does not match the test hash value, boot another IHSFW from another IHSFW image stored by a non-volatile memory medium of the IHS.

Abstract: Aspects of the disclosure relate to Layer 1/Layer 2-centric inter-cell mobility systems and determining timing advance groups (TAGs) within such systems. User equipment (UE) are configured to report one or more grouping of cells to a radio access network (RAN), where the cells for each group have similar propagation delays and/or signal quality. Each reported group can be assigned to a TAG identifier (ID) by the RAN. The RAN may utilize the TAG IDs to time division multiplex uplink and/or downlink transmissions based on the TAG IDs.

Abstract: Methods, systems, and devices for providing computer implemented services using managed systems are disclosed. To provide the computer implemented services, the managed systems may need to operate in a predetermined manner conducive to, for example, execution of applications that provide the computer implemented services. Similarly, the managed system may need access to certain hardware resources (e.g., and also software resources such as drivers, firmware, etc.) to provide the desired computer implemented services. To improve the likelihood of the computer implemented services being provided, the managed systems may be managed using a subscription based model. The subscription model may utilize a highly accessible service to obtain information regarding desired capabilities (e.g.

Abstract: Automatic application of software patches to software associated with container images based upon image relationships in a dependency tree. The computing device determines whether software associated with a base container image requires software patches. The computing device accesses dependency trees maintaining image relationships between the base container image and dependent container images. The computing device determines based upon the accessed one or more dependency trees whether the base container image has dependent container images derived from the base container image. The computing device applies software patches to the software associated with the base container image. The computing device rebuilds the base container image with the applied software patches. The computing device then rebuilds the dependent container images dependent upon the rebuilt base container image.

Abstract: Aspects include applying a patch to a first instance of software code and verifying that the first instance of the software code with the patch applied is operating as expected. The verifying includes sending a request to the first instance of the software code and sending the request to a second instance of the software code where the patch was previously applied. The verifying also includes comparing a first result received from the first instance of the software code in response to the request and a second result received from the second instance of the software code in response to the request. The verifying further includes determining that the first instance of the software code with the patch applied is operating as expected based on the first result being within a similarity threshold of the second result.

Abstract: A computing system includes a database and a discovery application that initiates discovery of software applications within a managed network by probing the computing devices for applications in stalled thereon. The discovery application executes discovery patterns in an attempt to classify a discovered application and determines that the discovered application is unclassified after executing the discovery patterns. In response to determining that the discovered application is unclassified, the discovery application (i) generates a configuration item representing the discovered application without classification and (ii) selects a characteristic file containing attributes of the discovered application. The discovery application provides the characteristic file to a machine learning (ML) classifier trained using a plurality of characteristic files.

Abstract: Firmware updates for, e.g., thin client devices may be achieved in a seamless, non-disruptive manner using a two-stage firmware loader, including a base loader pre-installed on the device and a caching loader downloaded, by the base loader, from a firmware server and thereafter responsible for downloading and updating other firmware application packages.

Abstract: Disclosed are systems and methods for centralized monitoring of connected devices within a network. The system includes multiple dashboard graphical user interfaces (“Dashboards”) that aggregate multiple monitoring platforms into a single interface. The Dashboards display a wide variety of critical system network monitoring metrics. The Dashboards are generated utilizing network monitoring data and metrics received from a virtual service engine platform deployed within a monitored network. The virtual service engine platform itself incorporates a multitude of monitoring software platforms and applications that capture a wide range of useful network monitoring metrics and data from the digital resources that comprise a monitored information technology network.

Abstract: A system is disclosed for coordinating multiple software component deployments, upgrades, or migrations simultaneously or individually across a multiple-location/cloud platform. The system includes an application gateway router that routes incoming API requests based on an identifier in headers of the request that is associated with a swimlane construct, the swimlane containing multiple software components. By associating a swimlane's possible destinations with a timestamp or time range indicating when they are in effect, all of the components in the swimlane can be simultaneously upgraded or migrated by changing the API endpoint to which requests will be forwarded, with zero downtime. This solution is technology-, platform-, and cloud-agnostic and can be extended and applied to any organization using software.

Abstract: Some embodiments may provide systems, methods and computer program code to facilitate a secure remote transaction and may include detecting an event identifying initiation of a checkout process involving a transaction between a consumer and a merchant, identifying a secure remote commerce system to use in facilitating the transaction, the secure remote commerce system storing a consumer profile including information identifying at least a first payment card of the consumer. In some embodiments, a checkout user interface displayed to the consumer is modified based on information from the consumer profile to display information associated with the at least one payment card. A checkout request from the consumer and a payload is obtained from the secure remote commerce system including information identifying the at least first payment card, the merchant and transaction details. The payload is used to complete a transaction authorization request with a payment network.

Abstract: A specific on-board device, that is any one of a plurality of on-board devices, is configured to acquire the versions of software included in other on-board devices when the power source of a vehicle is turned on. The specific on-board device determines whether or not the versions of the software of all the on-board devices that constitute a vehicle control system are consistent, by comparing the version of the software of the specific on-board device and the versions of the software acquired from the other on-board devices with first consistency information prestored.

Abstract: A software update device is provided with an update control unit that that performs a software update using a new software version supplied over a network. If a software update is to be performed for a first electronic control device and a second electronic control device that operates in cooperation with the first electronic control device, the update control unit performs the software update for the first electronic control device such that the first electronic control device after the software update has been performed is capable of selectively executing the operation logic of a first new software version and the operation logic of a first old software version.

Abstract: A system, method, and computer-readable medium are disclosed for implementing metadata. Metadata that describes content/resources related to products/services of a business is identified. Monitoring is performed as to products/services of a business. Gaps in existing metadata is determined based on the monitoring. Dynamic updates through edge optimized application program interface sets are performed on the existing metadata based on the determined gaps.

Abstract: Container image building using shared resources is disclosed. A first instruction file that contains a first plurality of instruction keywords is read. Based on the first plurality of instruction keywords, a first plurality of files from a shared location is copied to a first consolidated location. Based on the first plurality of instruction keywords, a first container command file that references at least some of the first plurality of files on the first consolidated location is generated, the first container command file including commands that comply with a container builder syntax.

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.

Abstract: An apparatus of a user equipment (UE) comprises a memory to store a Unified Radio Application and to store one or more configuration parameters for the Unified Radio Application, and one or more baseband processors to receive a radio application update from a remote server, and to update the Unified Radio Application via a Multiradio Interface (MURI) “updateRadioApps” operation with the received radio application update. One or more of the configuration parameters are maintained in the memory after the update.

Abstract: Disclosed herein are systems and method for preventing malware reoccurrence when restoring a computing device using a backup image. In one exemplary aspect, a method may identify, from a plurality of backup images for a computing device, a backup image that was created most recently before the computing device was compromised. The method may mount the backup image as a disk and scanning the disk for malicious software. The method may disable all ports and services on the computing device to prevent unauthorized network connections and service launches. The method may restore data to the computing device from the mounted disk. The method may update software on the computing device and applying latest patches, and reopen the ports and restart the services on the computing device subsequent to updating the software and applying the latest patches.

Abstract: The present disclosure describes a technique for honoring virtual machine placement constraints established on a first host implemented on a virtualized computing environment by receiving a request to migrate one or more virtual machines from the first host to a second host and without violating the virtual machine placement constraints, identifying an architecture of the first host, provisioning a second host with an architecture compatible with that of the first host, adding the second host to the cluster of hosts, and migrating the one or more virtual machines from the first host to the second host.

Abstract: A system and method are provided for executing a dynamic routing service. The method includes i) subscribing to ingress a first topic for a current task in a process workflow and ii) receiving a data object for the current task. The method also includes iii) querying a first service to determine a next workflow task, the next workflow task having been translated by the first service from a workflow graph to a file and data interchange format. The method also includes iv) updating the data object, v) routing the updated data object to a second topic by a message broker using the data interchange format, and vi) subscribing to ingress the second topic for a next task in the process workflow and repeating ii) to v) while the process workflow is being executed.

Abstract: In an approach, a processor, in response to detecting a new customer resource (CR) file: requests, the computing environment to deploy a plurality of function deployment components in the computing environment, where: the CR file indicates information of a plurality of functions of an application; the plurality of function deployment components request the computing environment to deploy a plurality of function components in the computing environment; and the plurality of function components execute the plurality of functions of the application; determines that each of the plurality of function components has been deployed in the computing environment; and in response to determining that each of the plurality of function components has been deployed in the computing environment, requests the computing environment to delete each of the plurality of deployed function deployment components.

Abstract: A server includes an interface configured to receive a new software content; a processor, configured to responsive to receiving the new software content, create a new rollout associated with the new software content, and identify a plurality of vehicles eligible to receive the new software content, responsive to detecting a first vehicle of the plurality of vehicles being yet to receive an existing software content associated with an existing rollout, generate a combined software content including both the new and existing software content, and associate the first vehicle with the combined software content.

Abstract: A method and a system for automating security updates in a multi-tiered architecture of a system environment. The method includes receiving a software update note relating to a multi-tiered architecture system environment and determining a patch in the software update note is initially compatible with the system environment. The method also includes predicting, by a patch acceptance machine learning model, the patch is patchable within the system environment and predicting, by an installation machine learning model, an installation patch time for the patch on the system environment. The method also includes installing the patch at the installation patch time on the system environment, and validating the patch installation using a validation machine learning model.

Abstract: This application discloses a method for upgrading an energy storage system, and an energy management system. The method includes: obtaining a to-be-upgraded file of the energy storage system; controlling the energy storage system to disconnect from high voltage when a current operating status of the energy storage system allows a program upgrade; detecting status of high voltage connection of the energy storage system; receiving a notification sent by a battery management system in the energy storage system indicating completion of disconnecting the energy storage system from the high voltage; and sending the to-be-upgraded file to the battery management system to perform the program upgrade according to the to-be-upgraded file.

Abstract: Container images are managed in a clustered container host system with a shared storage device. Hosts of the system each include a virtualization software layer that supports execution of virtual machines (VMs), one or more of which are pod VMs that have implemented therein a container engine that supports execution of containers within the respective pod VM. A method of deploying containers includes determining, from pod objects published by a master device of the system and accessible by all hosts of the system, that a new pod VM is to be created, creating the new pod VM, and spinning up one or more containers in the new pod VM using images of containers previously spun up in another pod VM, wherein the images of the containers previously spun up in the other pod VM are stored in the storage device.