Abstract: A computing device for backing up virtual machine data includes a persistent storage and a backup initiator. The persistent storage stores virtual machine priority groupings and backup policies associated with the virtual machine priority groupings. The backup initiator obtains write rates of virtual machines; divides the virtual machines into priority groups based on the obtained write rates; updates the virtual machine priority groupings based on the priority groups; and performs a backup of the virtual machine data based on the backup policies using the updated virtual machine priority groupings.

Abstract: A computer implemented method comprising operating a software container, the software container including a blockchain subsystem and a blockchain ledger, generating a blockchain entry by executing a hashing function on a current state of the software container and a last entry in the blockchain ledger, updating the blockchain ledger with the generated blockchain entry, and transmitting the generated blockchain entry to one or more connected software containers.

Abstract: A computing device is provided, including a non-volatile storage device and a processor configured to execute a distributed version control system. The processor may, via the distributed version control system, receive a pull request to apply a first set of one or more source code files to a project database. In response to receiving the pull request, the processor may identify a second set of one or more source code files based at least in part on a recommendation ruleset including one or more association rules identified for a plurality of training pull requests applied to a training project database. The recommendation ruleset may be determined based at least in part on a respective last iteration of each training pull request. The processor may output a source code file recommendation notification including an indication of each source code file of the second set.

Abstract: Drivers in different functional paths can use different types of identifiers for the same hardware device, such that the drivers may not be able to natively coordinate their actions related to the hardware device due to incompatible identifier types. However, a driver at a file system layer of one functional path can obtain a volume Physical Device Object (PDO) identifier at a volume layer and find a disk PDO identifier at a disk layer that is associated with the same device number. The driver can also find a parent device instance identifier from the disk PDO identifier, and use the parent device instance identifier as a plug-and-play (PnP) identifier for the hardware device during communications with a second driver in a PnP functional path.

Abstract: The present application provides a method for authenticating an application that requests access to a memory, comprising: acquiring an authentication request provided by the application; acquiring a characteristic instruction provided by the application in response to the authentication request; acquiring an instruction pointer corresponding to the characteristic instruction; acquiring from the memory characteristic information of the application which is pre-stored in the memory based on the instruction pointer; and comparing the acquired characteristic information with authentication information corresponding to the application, so as to determine whether the authentication of the application is successful.

Abstract: A method, an information handling system (IHS) and a detection system for detecting runtime tampering of unified extensible firmware interface (UEFI) images in an IHS. The method includes retrieving, via a board management controller (BMC) from a first memory device, a first UEFI driver associated with a first component of the IHS. The method also includes generating a first hash of the first UEFI driver and retrieving, from a second memory device, a second hash associated with an initial first UEFI driver of the first component of the IHS. The method further includes determining if the first hash and the second hash match, and in response to the first hash and the second hash not matching, generating an error message that indicates detection of runtime tampering with the first UEFI driver and storing the error message to an error log.

Abstract: Systems, methods, and devices for using a domain-specific programming language to remotely and dynamically program deployed forwarding plane components. A controlling server may establish a communication link to the remote network component, and receive a capabilities data model from the remote network component via the communication link. The controlling server may use the information included in the received capabilities data model to generate a tailored code segment, and send the tailored code segment to the remote network component via the communication link. The remote network component may receive, compile, install and execute the tailored code segment to modify its operation and/or to modify the functionality of the network.

Abstract: First and second types of weighted values are assigned to graph edges of a directed acyclic graph representing versions of a software product. The first type of weighted values indicate a degree of stability associated with upgrading the product. The second type of weighted values indicate an estimated time for the upgrading. A first upgrade path through the graph is generated using the first type of weighted values and corresponds to a first upgrade plan that minimizes risks associated with the upgrade. A second upgrade path through the graph is generated using the second type of weighted values and corresponds to a second upgrade plan that minimizes the estimated upgrade time. An upgrade package is created for one of the first or second upgrade plans. The upgrade package includes the desired version, intermediate versions, and a sequence indicating an order in which the intermediate versions should be installed.

Abstract: In an information processing apparatus, an execution unit executes a first program and a second program. While the information processing apparatus acts as a slave that performs a program update process in response to instructions from a different information processing apparatus, an update control unit updates the first program to a first updated program as a program to be executed. While the information processing apparatus acts as a master that controls the program update process, the update control unit updates the second program to a second updated program as a program to be executed, and notifies a management apparatus of a progress state of the program update process according to the first program or first updated program.

Abstract: A patch-upgrade-based file processing method includes receiving a file access request, where the file access request includes storage path information, determining whether the storage path information exists in an association relationship between original file path information and patch upgrade file path information when the storage path information indicates a first partition, querying the association relationship to obtain patch upgrade file path information corresponding to the storage path information when the storage path information exists in the association relationship between the original file path information and the patch upgrade file path information, and obtaining, from a target partition indicated by the patch upgrade file path information, a patch upgrade file matching the patch upgrade file path information.

Abstract: Systems and techniques for deploying resources within a computing infrastructure are herein disclosed as comprising, in an implementation, executing a first deployment agent to perform a first deployment action, the first deployment agent configured to deploy a first resource to a first device; changing a deployment state of the first deployment agent responsive to performing the first deployment action; and executing a second deployment agent to perform a second deployment action, the second deployment agent configured to deploy a second resource to a second device. The second deployment agent performs the second deployment action in response to a change in a deployment state of an arbitrary deployment agent not explicitly identified within the second deployment agent. A deployment plan configured to cause the execution of the first and second deployment agents includes an identification of the first deployment agent as the arbitrary deployment agent.

Abstract: Systems, apparatuses and methods may provide technology for securing untrusted code using memory protection keys and control flow integrity, by applying a memory protection key to one or more memory regions, enforcing control flow integrity with respect to the one or more memory regions, and executing untrusted code in an isolated region of the one or more memory regions.

Abstract: Some examples described herein may involve receiving, via a wireless transmission, a firmware code update that is to be installed in a main memory of the electronic device, determining that the firmware code update is not successfully received; determining, based on determining that the firmware code update is not successfully received, that a secondary memory, of the electronic device, includes a firmware image; and installing the backup firmware image, from the secondary memory, in the main memory to provide the set of functionalities to the electronic device.

Abstract: An electronic device and an operating method therefore are provided. The electronic device includes two or more memories, a platform controller, a first switch circuit and an auxiliary controller. The two or more memories store basic input output systems respectively. The first switch circuit is coupled between the platform controller and the two or more memories. The auxiliary controller obtains a status of the platform controller. The auxiliary controller generates a first selection signal to the first switch circuit based on the status of the platform controller, and the platform controller is selectively connected to one of the two or more memories based on the first selection signal by the first switch circuit.

Abstract: In an embodiment, a system includes a processor coupled with a data store, the at least one processor configured to: receive a client product version number from a client device; identify a differential bundle based on a difference between the client product version number and a current product version number, wherein the differential bundle comprises a set of bytewise differences between an executable client product binary file associated with the client product version number and a executable current product binary file associated with the current product version number; determine whether the differential bundle is available in the data store; retrieve the differential bundle from the data store in response to determining that the differential bundle is available in the data store; produce the differential bundle in response to determining that the differential bundle is not available in the data store; and send the differential bundle to the client device.

Abstract: A number of licenses for play of a video game may be modified or adjusted based on real-world events. Game areas for play of the video game may also change based on real-world events.

Abstract: A system includes a first storage, a second storage, and a vehicle electronic control unit (ECU). The ECU is programmed to download a software update received from a server to the first storage, at keyoff, attempt a reboot of the ECU before vehicle shutdown, and confirm the first storage as being active for booting instead of the second storage, responsive to the vehicle ECU successfully booting to the first storage.

Abstract: An image forming apparatus to which an application program for extending functions of the image forming apparatus is installed, the image forming apparatus includes an operation unit, at least one processor, when the processor executes instructions, which acts as an update unit configured to, in accordance with reception of an instruction for updating a login application, update the login application, the login application being an application program for authenticating a user who logs in to the image forming apparatus, and a control unit configured to, in accordance with the update unit performing processing for updating the login application, limit operations on the operation unit.

Abstract: Performing a non-disruptive upgrade of data in a storage system that includes a plurality of storage devices and a storage controller, including: creating new data in a new data format, wherein the new data includes a reference to old data in an old data format, wherein system software in the storage system can utilize data in the new data format and the old data format; determining that a portion of the volume has changed; and responsive to determining that the portion of the volume has changed, updating the new data to include a reference to old data associated with a portion of the volume that precedes the changed portion of the volume, new data associated with the changed portion of the volume, and a reference to old data associated with a portion of the volume that follows the changed portion of the volume.

Abstract: Systems and methods are provided for providing continuous configuration deployment. A configuration definition object may be obtained from a remote datastore. The obtained configuration definition object may be stored in a local datastore. The configuration definition object may be obtained and stored in advance of a scheduled maintenance. The configuration definition object may be obtained in response to the configuration definition object being committed to the remote datastore. The configuration definition object may be used to generate different configuration objects. A configuration object may be generated from the configuration definition object and one or more system characteristics. A service request may be received, and the configuration object may be executed to perform a configuration of a computing system.

Abstract: A method and a device for modifying a Lucene index file are disclosed. After acquiring a target field to be modified, an old term to be modified under the target field and a new term for replacing the old term, every segment in an index folder may be firstly traversed to generate corresponding information of the new term according to corresponding information of the old term and generate a new index file of the segment based on information under other fields of the segment and corresponding information of the new term and corresponding information of other terms under the target field of the segment. Then a corresponding original index file in the index folder is replaced with the new index file, thereby achieving the modification of a specific term under a certain field in the Lucene index file.

Abstract: A system may include a shared storage data store containing a first version of entities with original content and a local tenant storage data store to contain information associated with a tenant's application server. A database interface agent may enter a copy-on-access mode and maintain materialization and modification flags. The agent may then initiate an upgrade process during which the first version of the entities are utilized by the application server. The agent may then enter a copy-on-write mode and delete, from the local tenant storage data store, entities having flags that indicate the table was migrated but did not receive customer data. The structure of the remaining entities may then be updated in view of the structure of the second version of the entities. Finally, the content of the entities may be updated in view of the content of the second version of entitles and previously received customer data.

Abstract: The present disclosure generally relates to using a dual-boot process where existing storage device firmware remains intact while the new firmware is downloaded to a non-volatile location on a fast non-volatile memory drive.

Abstract: Disclosed are various examples for an architecture to distribute Win32 applications. In one example, a specification of a Win32 application and deployment options are received. A specification of target client devices is also received. Respective management agents executed in individual target client devices are directed to install the Win32 application according to the deployment options. Status information from the respective management agents indicating installation success or failure is received. A report is generated based at least in part on the status information.

Abstract: A computing system for generating allowed lists of applications for machines is provided. The system, for each machine, identifies a set of executed applications that were executed by that machine. The system then clusters the machines based on similarity between the sets of executed applications so that machines with similar sets are in the same cluster. The system then, for each cluster of machines, creates an allowed list of applications for the cluster that includes the applications in the sets of executed applications of the machines of the cluster. An allowed list for a cluster indicates that only applications in the allowed list are allowed to be executed by a machine in the cluster. The system then distributes the allowed list for a cluster to the machines of that cluster so that the machines execute only applications in the allowed list for their cluster.

Abstract: A method for updating firmware within an industrial automation environment comprising a plurality of industrial components is provided. The method includes providing an industrial system firmware update menu from an update server to a user through a web interface within an application running on a user device, and receiving one or more selections of the industrial system firmware update menu from the user through the web interface. The method also includes processing the one or more selections of the industrial system firmware update menu to determine required firmware update files and a firmware update schedule, and transferring the required firmware update files to the industrial components in an order specified by the firmware update schedule.

Abstract: A system and method for modifying a compiled software application to implement additional software code to enhance the functionality of a software application. The system and method comprises receiving a software application binary 601, metadata 602, and modification options 603, analyzing the received components, modifying the software application binary based on the analysis, and returning the modified software application binary 610.

Abstract: Methods and devices for selecting an application for download for use with hardware on a computer device may include receiving, from a remote application store, application metadata that includes at least one hardware constraint for an application in response to an application request for installation of the application. The methods and devices may include evaluating the application metadata to determine whether the at least one hardware constraint is satisfied on the computer device. The methods and devices may include installing the application when the at least one hardware constraint is satisfied on the computer device.

Abstract: Methods, systems, and apparatuses manage rolling out of updates in a network-accessible server infrastructure which operates a plurality of instances of a supporting service. The supporting service is comprised by a plurality of service portions. The instances of the supporting service each include of the service portions. The instances of the supporting service are partitioned into a plurality of slices. Each instance is partitioned to include one or more of the slices, and each slice of an instance includes one or more of the service portions. A software update is deployed to the instances by applying the software update to the slices in a sequence such that the software update is applied to a same slice in parallel across the instances containing that same slice before being applied to a next slice, and waiting a wait time before applying the software domain to a next slice in the sequencing.

Abstract: The present application is directed towards systems and methods for cluster-based code analysis and transformation. Cluster-based analysis may group code objects based on their similarity across functional areas, such as where a code object is cloned in multiple areas (e.g. sort functions that are duplicated across areas, or reports or tables that are identical). In some implementations, objects may be grouped into clusters by type, or based on reading from or writing to a common table. In some implementations, clustering at different layers may be possible.

Abstract: A gateway connected to a bus used for communication by a plurality of ECUs provided on-board a vehicle is provided with: an external communication unit that receives, from a server external to the vehicle, firmware update information that includes updated firmware for one ECU from among the plurality of ECUs; an ECU information acquiring unit that acquires system configuration information indicating the type of each of the plurality of ECUs connected to the bus; and a FW update processing unit that performs a controlling operation to update firmware of the relevant ECU based on the updated firmware, after an operation verification of the updated firmware is performed using an ECU of each type indicated by the system configuration information.

Abstract: Systems, methods, and non-transitory computer-readable media can perform verification of a currently stored BMC firmware on a remote access-enabled server based on a BMC security key. It can be determined that the currently stored BMC firmware cannot be verified based on the BMC security key. A replacement BMC firmware can be received over a network connection based on the determination that the currently stored BMC firmware cannot be verified. The currently stored BMC firmware can be replaced with the replacement BMC firmware.

Abstract: In a provider network, a developer console generates web pages defining a developer portal for transmission to web browsers. An application architecture modeling service analyzes developer interactions with services executing on the provider network to allow the developer to create an application. From the developer interactions (e.g., API calls, click stream data), the application architecture modeling service dynamically determines a model of the architecture of the application and updates the model as the developer continues to further interact with the developer services. The web pages generated by the developer console are encoded to contain graphical images of the application's model including hyperlinks.

Abstract: A system for ensuring update package authenticity includes an update package transaction ledger and a repository. Change managers are configured to maintain the update package transaction ledger, create a transaction block using metadata of an update, and determine a package value based on the transaction ledger and on the update. The change managers also incorporate the package value and the update into a package, and upload the package to the repository. A client obtains the package from the repository, obtains the transaction block from the update package transaction ledger, determines a calculated value based on the transaction block and on the update, and compares the calculated value and the package value. The update is installed when the calculated value and the package value match.

Abstract: Embodiments of the present systems and methods may provide the capability to reduce service unavailability, client disruption, network traffic and processing load due to state synchronization. For example, a computer-implemented method for controlling operation of a plurality of server computer systems may comprise determining an order in which the plurality of server computer systems is to be restarted and restarting each of the plurality of server computer systems sequentially according to the determined order, wherein a leader of the server computer systems receives and handles write requests for the plurality of server computer systems, and wherein the leader server computer system is restarted last.

Abstract: Disclosed is a broadcast signal transmitting method. A broadcast signal transmitting method according to an embodiment of the present invention may comprise: generating low level signaling (LLS) information; processing the LLS information into IP packets; generating link layer packets by link layer processing the IP packets; and generating a broadcast signal by physical layer processing the link layer packets.

Abstract: Various embodiments of systems and methods to provide split installation of a software product are described herein. In one aspect, a request for split installation of a software product is received. A pre-installation document corresponding to installation of the software product in a first phase of the split installation is generated and stored when at least one other applications continue to run. The pre-installation document includes installation information of the software product. Further, one or more deployment units are cached for installation of the software product based on the installation information. The software product is installed by installing the one or more deployment units based on the pre-installation document in a second phase of the split installation.

Abstract: A method for Intel platform detection of parameters in a flash ROM, relating to the technical field of servers: before OPMENU and OPTYPE registers are locked in a PEI state, storing the data in an SFDP table in a HOB, and then storing the data in a memory of an EfiACPIMemoryNVS type in a DXE stage; the data can be acquired by means of invoking driving on the application layer; the acquisition of various flash ROM parameters is more convenient, facilitating checking whether the parameters are the same as those written in the program; product performance and product stability are increased, and the occurrence of bugs is reduced.

Abstract: A blockchain of transactions may be referenced for various purposes and may be later accessed by interested parties for ledger verification. One example operation may comprise one or more of identifying an updated software build, creating a hash based on the updated software build, storing the hash of the updated software build in a blockchain, and storing a binary representation of the updated software build in a distributed hash table (DHT).

Abstract: An operating system of a computing device is configured to monitor for occurrence of an event. In response to determining that the event has occurred, data associated with the event is obtained from the computing device. An address associated with an account of the computing device is determined, and the data associated with the event is sent to the address.

Abstract: Described is a method and system for the secure management and verification of prescriptions allowing patients, doctors and dispensers to access prescriptions as directed by patients. An example method may include generating a code vector including a series of authentication codes, storing at least one of the authentication codes on a peripheral device, maintaining an indication of a next expected authentication code from the code vector, allowing prescription creation by a user when the peripheral device is detected and determined to be an authorized device, and that the authentication code provided from the peripheral device matches the next expected authentication code, storing a prescription associated with a patient having a patient PIN, wherein the prescription is provided by the user, generating a plurality of refill verification codes associated with the prescription, and authorizing dispensing responsive to receipt of one of the plurality of refill verification codes and the patient PIN.

Abstract: A server with a double-firmware storage space and a firmware update method therefor are provided. The server includes a baseboard management controller (BMC) with a control module and an update module, a selection circuit, a first storage circuit, and a second storage circuit. The control module executes a first firmware program from the first storage circuit. The update module stores a second firmware program in the second storage circuit according to a firmware update instruction when the control module executes the first firmware program. The BMC resets after the second firmware program is stored in the second storage circuit. After the BMC is reset, the control module obtains the second firmware program from the second storage circuit and executes the second firmware program.

Abstract: An apparatus for facilitating an update process of a software program is disclosed. The apparatus comprises a logic processing module arranged to maintain a connection with a network device, receive information for updating a software program from the network device, perform an updating of the software program based on the received information, and process one or more user requests. The apparatus further comprises an interface module arranged to receive a user request, store the received user request when the updating of the software program by the logic processing module is in progress, store the received user request, and after the updating of the software program completes, provide the stored user request to the logic processing module for processing.

Abstract: A methodology for creating and using information identifying what and how software and/or firmware modules are used in computer systems, called functional exploitation data. The functional exploitation data can be used to identify what modules should be updated and how updates should be implemented. The functional exploitation data can also be used to identify other computer systems as candidates for updates based on similarity to computer systems that have reported problems, and propose implementing similar updates on the candidates. Functional exploitation data can also be used to identify under-utilized modules for enhancements or greater advocacy. The functional exploitation data can be implemented in the form of a concatenated string.

Abstract: A name of a submitted application is obtained. A determination is made that the name of the submitted application is same as a name of an existing application. In response to determining that the name of the submitted application is same as the name of the existing application: a predetermined disable command is triggered, where the predetermined disable command invokes an end function for each node in the existing application; for each particular node in the existing application, a particular process occupied by the particular node in the existing application is recycled when receiving execution completion information from the existing application; and a predetermined start command is triggered when the recycling is completed, where the predetermined start command starts a process for each node in the submitted application.

Abstract: Various embodiments include methods and devices for implementing external paging and swapping for dynamic modules on a computing device. Embodiments may include assigning static virtual addresses to a base image and dynamic modules of a static image of firmware of the computing device from a virtual address space for the static image, decompose static image into the base image and the dynamic modules, load the base image to an execution memory during a boot time from first partition of a storage memory, reserve a swap pool in the execution memory during the boot time, and load a dynamic module of the dynamic modules to the swap pool from a second partition of storage memory during a run time.

Abstract: A system to reduce strain on server farm computing resources by over-riding “off-peak” patching schedules in response to performance failures occurring on a server farm. Embodiments disclosed herein determine a patching schedule for causing builds of patches to be sequentially installed on server farms during an off-peak usage time-range. Responsive to a performance failure occurring on the server farm, embodiments disclosed herein identify a particular patch that is designed to resolve the performance failure. Then, the patching schedule is over-ridden to expedite an out-of-sequence installation of whichever build is first to include the particular patch. Because resolution of the performance failure is expedited, the impact of the performance failure on the computing resources of the server farm is reduced as compared to existing server farm patching systems.

Abstract: The presently claimed invention relates to a system and method for organizing data replicated in a target data repository. The method of the presently claimed invention may receive data from a primary data store for replication in the target data repository. The method may then determine that the received data should be organized and stored according to one or more priority metrics. The method may then organize the received data according to the one or more priority metrics, and store the received data based on the priority metrics. Higher priority data may be stored faster data storage devices or be stored in smaller files where lower priority data may be stored in slower data storage devices or be stored in larger files.

Abstract: A database includes a run-time database container, which provides an isolated computing environment for a database object deployed therein. The database further includes a public synonym object outside the run-time database container in the database. The public synonym object is associated with the database object deployed inside the run-time database container and provides external access to the database object deployed inside the run-time database container independent of the location of the run-time database container.

Abstract: Technologies for receiving and using alternate firmware files of a computer are described herein. In some examples, firmware files to be used instead of currently used firmware files are stored in a firmware volume, which is stored in a UEFI partition. A flag is set indicating the presence of a firmware volume containing the alternate firmware files. At boot time, if it is determined that the flag has been set, the computer will utilize files stored in the firmware volume stored in the UEFI partition rather than corresponding files in a firmware.