Abstract: Approaches for composing the display of a virtualized web browser. Upon a host module, executing in a host operating system, of a virtualized web browser being instructed to display a new web page, policy data is consulted to determine if one or more trigger conditions are satisfied. Upon determining that at least one of the one or more trigger conditions is satisfied, the virtualized web browser, transparently to a user, retrieving and rendering the new web page in a location different than where the previous web page was retrieved and rendered by the virtualized web browser. After the new web page has been retrieved and rendered at the location specified by the policy data, the host module displays the new web page. The policy data may operate to specify the behavior of individual tabs of the virtualized web browser.

Abstract: This invention discloses systems and methods for detecting vulnerabilities in IT assets by utilizing crowdsourcing techniques. A corpus containing vulnerability data of IT assets with known vulnerabilities is established. Vulnerability data in the corpus comprises security aspects or attributes related to the IT assets. The security aspects of an IT asset constitute its attack surface which is represented as a feature vector in a feature space. A determination is made as to how similar/close a target asset whose unknown vulnerabilities are to be detected, is to the rest of the IT assets in the corpus. This determination is made based on a measure of similarity/distance between the respective feature vectors in the feature space. Based on the review of similarity results by a community of researchers/experts, a determination of unknown vulnerabilities in the target system is made.

Abstract: System and methods are disclosed for remote management of mobile satellite antenna modules having an antenna subsystem module (ASM). An ASM periodically transmits a check-in message and metrics data to a server. The server analyzes the check-in message and metrics data to determine a state of operation of the antenna, and determine one or more management commands to improve the performance of the ASM. Information in the metrics data received from each ASM can be queried and processed using machine learning to determine correlation between attributes of the ASMs and performance of the ASMs.

Abstract: A method is described for providing one or more patches to a client device. The method may comprise determining manifest file version information of a manifest file that is used by the client device; detecting an indication that one or more patches have been missed, a patch comprising information for updating at least part of information in the manifest file; requesting one or more missed patches on the basis of the manifest file version information (and the version information of the manifest file that the client would obtain after having applied the last missed patch—if available); and, receiving the one or more missed patches for updating the information in the manifest file.

Abstract: A device can receive, from a node of a set of nodes, a dynamic host configuration protocol (DHCP) discovery request. The device can determine a DHCP offer based on metadata associated with the node. The device can transmit, to the node, pre-boot execution environment (PXE) instructions, which can cause the node to load a minimal operating system image and execute a node installation service. The device can receive, from the node installation service, a request for information associated with a node type. The device can provide the information associated with the node type to the node, causing the node to generate configuration data relating to the node type. The device can receive, from the node, a request for a full operating system image, which can be provided to the node and can support one or more capabilities included in the configuration data.

Abstract: Systems and methods for dynamic filtering of content stream manifests are provided. Rules may be stored in memory of a proxy server regarding a plurality of different manifest inconsistencies. Each rule may associate a different manifest inconsistency with one or more indicators and a corresponding solution. One or more segments of a content stream may be provided between a content delivery network server and a client device. Such segments may be monitored by the proxy server, which may act as an intermediary between the content delivery network server and the client device. The proxy server may detect when a manifest of the monitored content stream exhibits one of the manifest inconsistencies based on the presence of the associated indicators. The solution corresponding to the exhibited manifest inconsistency may be identified based on the stored rule associated with the detected indicators.

Abstract: The present invention provides a virtualization system at least comprising a first device (101) having a first operating system (202) and a first display screen. The virtualization system also at least comprises a second display screen (105), which is separate from the first device, but which is connectable to the first device (101), for example by cable (104a) or wireless (104b) connection. The first device has a virtualization application (103) operable as a guest operating system (203) of the first operating system (202) acting as a host operating system. The guest operating system (203) is a desktop operating system or a desktop-optimized operating system. The virtualization application (103) is launched upon connection of the second display screen (105) to the first device (101) for display of the guest operating system (203) on the second display screen (105). The system may optionally further comprise one or more peripheral components, such as a keyboard (106) and/or a mouse (107), for example.

Abstract: A device may receive a request to configure an environment for a target enterprise resource planning (ERP) system. The device may identify a system image of an ERP package. The device may provide, to other devices that are to support the environment, the system image and installation information to cause the other devices to use the system image to host the ERP package. The device may establish paths that permit data transmission between the target ERP system and a source ERP system. The device may identify development-operations (Dev-Ops) and test tools to be configured within the environment. The device may provision, using the one or more paths, the environment with the set of Dev-Ops and test tools. The device may provide instructions to the other devices to cause the other devices to deploy the environment of the target ERP system and to permit user devices to access the environment.

Abstract: A method and apparatus of installing an operating system are provided. According to an example of the method, a server reads an image file of an operating system from a system providing device, wherein the image file comprises address information corresponding to an automatic response script file, and the automatic response script file is not stored at a position corresponding to the address information. The server receives the automatic response script file provided by the system providing device in response to that the reading by the server advances to the position corresponding to the address information. The server installs the operating system by using the automatic response script file.

Abstract: A chip set for a terminal comprises at least one secure processor, in which a one-time programmable memory is integrated. At least one terminal serial number of the terminal is stored in the chip set. Information for securing the terminal serial number against tampering is stored in the one-time programmable memory.

Abstract: Data structures are stored in an endpoint data store. Each data structure represents an endpoint having one or more components, each component having one or more arbitrary properties. Multiple groups of endpoints are identified by name and defined by group criteria expressed in terms of the one or more arbitrary properties of the one or more components of the endpoints that are members of the group. For each group, the group criteria of the group is stored in a data store in association with the name of the group. Packages and releases may be targeted to endpoints in various manners.

Abstract: Computing environments are scalably generated and provisioned based on metadata associated with separately defined containers of groups of sandboxes. Each container of a group of sandboxes is its own digital construct and is wrapped with metadata that defines the nature and aspects of the grouping, including enumerating individual members of a team, factors or attributes of assignments, and the like. The metadata, therefore, identifies the sandboxes to generate and, within those sandboxes, the computing environments to generate and how such computing environments are to be provisioned. In variable team settings quantities and identities of individuals can be unknown and can dynamically change. Administrators provide team definitions without rosters, or with rosters that comprise only previously registered individuals.

Abstract: Computing environments can be scalably generated and provisioned based on one or more team definitions and definitions of one or more projects assigned to a particular team. Digital constructs can be generated to represent the teams and the projects assigned to such teams, and such digital constructs can comprise metadata identifying sandboxes to generate and, within those sandboxes, computing environments to generate and how such computing environments are to be provisioned. The sandboxes can be generated in parallel and the computing environments can be provisioned in parallel, or staggered based on individual user access. Assignment of consumption limitations can be individually adjusted from default values, and monitoring of such consumption limitations can be performed on an aggregated basis.

Abstract: An approach for parsing and streaming contents of archive files is disclosed. In one embodiment, a client script executed by a web browser parses an archive file based on its archival format, without loading the entire archive file into memory. For example, the client may read only header fields of files inside a TAR format archive file to identify the files therein and their locations, while skipping contents of those files. Having identified files inside the archive file and their locations, the client further reads and processes files that are small enough to be handled by the web browser, while streaming to appropriate endpoints contents of other files such as those that are too large to be handled by the web browser. Such streaming may include slicing large files into sections the web browser can handle and attaching the sections to HTTP requests that are sent to appropriate endpoints.

Abstract: Approaches for device refresh determinations utilizing cognitive, machine learning, and predictive techniques are provided. A computer-implemented method includes: obtaining, by a computer device, structured data associated with at least one user device; obtaining, by the computer device, unstructured data associated with the at least one user device; classifying, by the computer device, the unstructured data into categories; determining, by the computer device, a device health score for the at least one user device based on the structured data and the classified unstructured data; and generating, by the computer device, a user interface that displays the device health score.

Abstract: An electronic device includes a secure element in which at least one application package is installed and a processor for communicating with the secure element. The secure element further stores a list with which a part or all of identification information of the at least one application package is registered. The processor controls the secure element such that an application package indicated by the identification information registered with the list is uninstalled, in response to a specified event. Various other embodiments recognized from the specification are also possible.

Abstract: Methods, systems, and computer-readable media storing instructions are described for receiving an Enterprise Quality Management (EQM) communication from a first computer system on the computer network, the EQM communication being transmitted in a first data format and being configured to pass EQM data between the first computer system and a second computer system on the computer network, determining whether the EQM communication is in a data format interpretable by the second computer system, transforming the EQM communication into a second data format interpretable by the second computer system based at least in part on a determination that the EQM communication is not in a data format interpretable by the second computer system, and transmitting the transformed EQM communication to the second computer system.

Abstract: An electronic device and method are disclosed herein. The electronic device includes a communication module, a display, a memory and a processor which implements the method. The method includes receiving access point (AP) information from at least one AP through the communication module, generating an AP list including an AP communicatively connectable with the electronic device based on the received AP information, storing the AP list in the memory, identifying a state of the electronic device, determining an arrangement criterion for arranging a display order of Aps included in the AP list based on state information about the electronic device, and controlling the display to arrange the AP list according to the determined arrangement criterion.

Abstract: Methods, apparatuses, systems, and non-transitory computer readable storage media for generating solution data for autonomous vehicles to negotiate problem situations have been disclosed. The disclosed technology generates state data associated with a vehicle using sensor data received from the vehicle and from external objects within a vicinity of the vehicle. The state data includes any of a location of the vehicle, a destination of the vehicle, an operational status of the vehicle, and information associated with a vehicle environment. In response to determining that the state data satisfies a state criterion, a determination of solution profile data that matches the state data is made on the basis of a comparison of the state data to the solution profile data. Solution data is generated using the matching solution profile data to transmit the solution data to the vehicle for execution.

Abstract: A source control system is used for the distributed incremental updating of trays that include all of the dependencies needed for an application to execute within a computing environment. An application of a first version of a tray is executed on a server responsive to the first version of the tray being retrieved from a source control system. Tray management software of the first version of the tray receives a request to update the tray to a second version. The tray management software requests a changeset including file differences between the first and second versions of the tray from the source control system. Responsive to a determination by the tray management software that there are no pending requests preventing an update, the tray is updated from the first version to the second version by updating files in the tray according to the changeset.

Abstract: A system for providing multiple restore points on a virtual machine includes maintaining a record of a plurality of restore points of virtual machines. Upon receiving a request from a user to access a plurality of restore points of a virtual machine, the system can mount a plurality of backup disks onto a target virtual machine and then notify the user.

Abstract: A method of generating a user interface for presentation to a user. The method comprises executing a first application computer program to provide a user interface, executing agent computer program code to interrogate and modify said user interface during execution of said first application computer program, and presenting said modified user interface. The first application computer program may be run on a server, while the modified user interface may be presented to a user at a client connected to said server.

Abstract: Systems and methods are provided for provisioning a hosted computing environment in accordance with customer requirements relating to a service. In some embodiments, a computer-implemented method is provided. The method includes generating a graphical interface on a computing device and receiving input corresponding to an indication of one or more requirements, wherein the input is received using the graphical interface, and wherein the one or more requirements correspond to a hosted computing environment. The method further comprises converting each indication of the one or more requirements into one or more entries of a provisioning template, wherein the provisioning template includes multiple entries, and wherein the provisioning template is associated with the hosted computing environment. The method further comprises providing the provisioning template to a provisioning program to provision the hosted computing environment.

Abstract: Methods and apparatus for version aliasing mechanisms and cumulative upgrades for software lifecycle management are disclosed. An example method includes cumulating, by executing an instruction with a processor, a plurality of software updates identified in a first manifest file with a plurality of software updates identified in a second manifest file, the second manifest file corresponding to a version older than a version corresponding to the first manifest file; and flagging the cumulative manifest files as cumulative, the cumulative manifest file containing a plurality of software updates that update the old version to the new version.

Abstract: An image sensor capable of performing satisfactory distortion aberration correction on an imaging result, regardless of a combination of a lens module and an imaging module being used, is provided. A main body module of an image sensor acquires form information of each module from an imaging module and a lens module which are mounted thereon, acquires size information indicating a number of pixels and/or a pixel size of an imaging element within the imaging module and distortion aberration characteristic information indicating distortion aberration characteristics of an optical system within the lens module from a predetermined device on the basis of the acquired form information, and performs distortion aberration correction using the acquired information.

Abstract: Certain embodiments provide a computer-executed method for generating a future sales estimate for an item. The method includes programmatically accessing, from a dataset via a network device, an inventory residence time period of an item. The method also includes programmatically accessing, from the dataset via the network device, prior performance data associated with the item. The method also includes programmatically executing an inventory valuation engine to generate a future sales estimate for the item based on the inventory residence time period and the prior performance data. The method further includes executing a notification generation engine to adjust a notification policy defining a frequency or other characteristic of electronic marketing communications indicating the item transmitted to consumer devices based on the future sales estimate.

Abstract: The technology described in this document can be embodied in a method that includes receiving at a second device a request for data sharing from a first device, and receiving a first file package associated with an application installed on the first device, and the file package includes a first portion of information usable for installation of the application on the second device. The method also includes processing the first file package to obtain the first portion of information usable for installing the application on the second device, providing authentication information for downloading a second file package to a remote computer device different from the first device, and installing the application on the second device using the first portion of information and the second portion of information.

Abstract: The present disclosure relates to a system and method for evaluating source code. The system generates training data from a plurality of defect records that identify developers who fixed defects. The system recommends developers for repairing defects in software features using a machine learning algorithm configured using elements from the defect records and the code related to the defect records.

Abstract: An event processing method includes storing in a storage unit, upon receipt of a control message representing information indicating a type of an event to be an execution condition for a plug-in and information regarding the plug-in, in association with each other, the information indicating the type of the event specified from the received control message and the plug-in, in association with each other. The method also includes executing the plug-in upon receipt of an event message representing the information indicating the type of the event. The plug-in being stored in the storage unit in association with the information indicating the type of the event specified from the received event message.

Abstract: A protection application detects and remediates malicious files on a client. The protection application trains models using known samples of static clean files, and the models characterize features of the clean files. A model may be selected based on metadata obtained from a target file. By processing features of the clean files and features of the target file, the model may generate an anomaly score indicating a level of dissimilarity between the target file and the sample. The protection application compares the anomaly score to one or more threshold scores to classify the target file. Additionally, the target file may be provided to a security server to check against a whitelist or blacklist for classification. Responsive to a classification as malicious, the protection application remediates the target file on the client.

Abstract: The present disclosure provides methods, apparatuses, terminals, servers, and systems for container generation. One exemplary method for container generation includes: generating a first container according to an image, in which the image and the first container both include a service firmware; and acquiring a software package of a first service variable program from a server, and installing the first service variable program into the first container according to the software package, in which the first service variable program provides an application service for a user based on the service firmware.

Abstract: The present disclosure relates a method and device for displaying an application interface.

Abstract: Methods and systems are provided for preventing the installation of malicious applications using system-level messages. One example method generally includes intercepting a request sent via an operating system of the computing device; determining the request is to access an application in a remote application repository; obtaining information associated with the application from the request; transmitting, over a network, the information to a security server; and receiving, over the network, a security recommendation for the application from the security server.

Abstract: In response to an I/O request, a processor reconstructs a file system request by laying out a disk image, performing type-specific introspection on the disk image including determining disk image type and using a file system specific process for a particular type of file system located in the disk image for analyzing the disk image structure.

Abstract: In an approach for dynamically determining a suitable SME for a particular critical situation, a processor receives an initial problem statement. A processor constructs a collaboration channel associated with the initial problem statement. A processor identifies an SME based on a rating that associates the SME with the initial problem statement. A processor sends an invitation to the SME to join the collaboration channel.

Abstract: A computerized system and method for generating an application structure for an application in a computerized organization having a plurality of components. An implementation includes generating the application structure for the application by including, in the application structure, applicative components and connections between applicative components identified using a first entry point. In an implementation, the identification of the applicative components and the connections between applicative components includes applying a first set of patterns against a first component associated with the first entry point to identify a first applicative component of the applicative components and a first connection of the connections, the first connection including a second entry point. The applicative components and the connections between applicative components can be recursively identified.

Abstract: The present disclosure relates to the field of computer technology, and in particular to a method and device for executing a file of a third-party Application (APP) preinstalled in a terminal. The method includes that: before a first boot-up of the terminal is performed, compiling a byte-code file of the third-party APP preinstalled in the terminal using a compiling device to acquire a machine-code file; upon a request to run the third-party APP, extracting a machine-code file of the third-party APP from a data partition of the terminal; and executing the machine-code file to respond to the request to run the third-party APP.

Abstract: Techniques are described for standardizing configuration levels across a plurality of software deployments. In one embodiment, a standardization management system generates, based on a plurality of software deployments that have different source components, an end state definition that identifies a recommended standard set of source components for the plurality of software deployments. Based on the end state definition that identifies the recommended standard set of source components for the plurality of software deployments, the standardization management system generates an image that includes the standard set of source components for the plurality of software deployments. The image may be used to update software deployments that are part of the plurality of software deployments and do not include the standard set of source components.

Abstract: Systems, apparatuses, and methods disclosed provide for wirelessly updating engine control unit (ECU) configuration. The method includes determining parameters to be changed on an engine control unit of an equipment, generating a write package including the parameters to be changed, and transmitting the write package to the equipment over the air through a cloud connected application system.

Abstract: Embodiments of the present invention provide a method, system and computer program product for melding mediation and adaptation modules of a service component architecture (SCA) system. A method for melding mediation and adaptation modules of an SCA system can include selecting each of a mediation module and an adaptation module in an integrated development tool executing in memory by a processor of a computer and loading respectively different descriptor files for each of the mediation module and the adaptation module. The method further can include combining descriptors from the different descriptor files into a single descriptor file for a melded module. Finally, the method can include modifying names and wiring descriptors in the single descriptor file for the melded module to account for a combination of the mediation component and the adaptation component in the melded component.

Abstract: A management agent operates transparently in the background on each endpoint computing device that needs to be managed. The agent sets up a sandboxed environment on the endpoint computing device on which it is operating in order to capture applications that have been installed on the endpoint device. The application capture is performed after the applications have been installed on the endpoint device and therefore does not require installing the application on any dedicated staging machine, nor any recording of the pre-installation state. The application capture process involves running the application from an isolated sandboxed environment on the computing device in order to identify all necessary components of the application by monitoring accesses by the application to components located outside of the sandbox. The identified components can then be packaged together and managed as individual application packages.

Abstract: Methods and systems for optimization of layering of a container image are presented. A modification factor is determined, based on modification events, for each one of multiple software elements. A container image layering structure is determined, based at least in part on the modification factors of the software elements, where the container image layering structure defines a layering order for two or more container sub-images that form the container image, and the layering order determines an order with which container sub-image from the container sub-images are to be executed to form the entire container image, and the container image layering structure further defines for each one of the container sub-images a respective subset of one or more software elements from the plurality of software elements. The container image is deployed based on the container image layering structure to be used for generation of containers in a cloud processing system.

Abstract: In accordance with disclosed embodiments, there are provided systems, methods, and apparatuses for implementing a stateless, deterministic scheduler and work discovery system with interruption recovery.

Abstract: Techniques to update a web application are described. A method includes receiving an application update request for a requested web application from a service worker web application executing in a web browser on a client device, the application update request comprising a cached version indicator for a local cached copy of the requested web application on the client device; determining whether an updated requested web application is available based on the cached version indicator. When the cached version indicator is less than a current version indicator, an archived copy of the previous version of the requested web application indicated by the cached version indicator and a current copy of the current version of the requested web application are retrieved, and a delta update is generated based on the archived copy and current copy. The delta update is sent to the service worker web application. Other embodiments are described and claimed.

Abstract: Web portal software presents a GUI for installing and updating software applications on a computer. A method of using the GUI includes steps of: (a) specifying the configuration of an end user computer, (b) selecting on the GUI a software application program, (c) downloading a software package containing said selected software application program and arranged for the specified configuration, and (d) installing the software program by executing the software package. If the selected software package is not available for the specified configuration, step (c) is preceded by (e) the supplier creating a software package arranged for installing the software program on a computer having the specified configuration. The specified configuration may comprise an operating system type, a processor type, software application programs already installed on the end user computer, and/or a required dynamic link library, a registry entry, and a required parameter name in computer files.

Abstract: A storage system in one embodiment comprises a plurality of storage devices and a storage controller. The storage system is configured to operate as a source storage system in a replication process in which participation of a target storage system is simulated. In conjunction with the replication process, the source storage system is configured to monitor outbound replication messages, and responsive to a given one of the replication messages being designated for transmission over a particular communication link of a predetermined type, to generate a simulated response from the target storage system to the given replication message based at least in part on one or more simulation parameters specified for the replication process. The source storage system then processes the simulated response as if it were an actual response from the target storage system. The particular communication link of a predetermined type illustratively comprises a pseudo IP link.

Abstract: A method and system include identifying a virtual asset creation template associated with virtual assets to be verified. A test virtual asset is generated using the virtual asset creation template and deployed in a testing environment. The test virtual asset is then analyzed in the testing environment to identify any vulnerabilities. If a vulnerability is identified in the designated test virtual asset, a remedy to the vulnerability is applied to the virtual asset creation template which is used to create a virtual asset in a production environment. The method and system further include monitoring the production environment virtual asset for potential security threats, with a virtual asset agent, and determining a severity of identified security threats. and potentially creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset as a result.

Abstract: A method for identifying bundled software and an apparatus therefor. The method comprises: detecting a user interface for software installation; acquiring text information on the user interface; determining whether bundled software exists; and, based upon the determination, extracting the name and amount of bundled software from the text information and prompting the name and the amount of the bundled software. The embodiments may identify bundled software before installing software and avoid starting the bundled software process, having the effect of anti-bundling on the bundled software in advance. By extracting the name of the bundled software, acquiring the amount of bundled software, and prompting the name and amount of the bundled software, a user is able to determine whether to install the bundled software according to his or her requirements, thereby improving the autonomous right of selection of the user in the process of installing software.

Abstract: Methods, systems, computer program products, and articles of manufacture for performing a query are described. Context information for formulating a query is obtained. The query is performed to identify a first card based on the context information, the query being performed by comparing the context information and an attribute of the first card, the attribute defining context of the first card. The identification of the first card that satisfies the query is provided.

Abstract: The disclosed computer-implemented method for recovery of computing environments via a replication solution may include (1) dynamically maintaining a replica of data associated with a protected computing device via a data replication device, (2) obtaining, from a preboot execution environment (PXE) server, a PXE that includes a bootable replication environment for the protected computing device, (3) directing the protected computing device to boot using the bootable replication environment, (4) exposing at least one data storage device associated with the protected computing device to the data replication device via a secure data connection, and (5) replicating the replica of data associated with the protected computing device to the data storage device associated with the protected computing device via the bootable replication environment and the secure data connection. Various other methods, systems, and computer-readable media are also disclosed.