Abstract: A computer device performs operations for managing registry access, including monitoring a user process on the computer device and, in response, establishing a set of registry access rules relevant to the user process. Each registry operation requested by the user process is evaluated and, in response, an appropriate action determined. Such action suitably includes at least one of: blocking the registry operation in relation to a particular key in a registry of the operating system, and enabling access to a particular key in the registry of the operating system to perform the requested registry operation. In particular, the operations may be performed using a registry filter driver in a kernel mode of an operating system of the computer device.

Abstract: An efficient control technology for non-volatile memory. In a controller, a host bridge controller and a master computing unit are coupled to a system memory via an interconnect bus, and then coupled to a non-volatile memory interface controller. In response to a read command issued by a host, the non-volatile memory interface controller temporarily stores data read from a non-volatile memory to the system memory and, accordingly, asserts a flag in the system memory. Through a first channel provided by the interconnect bus, the host bridge controller confirms that the flag is asserted to correctly read the data from system memory and returns the data to the host. The master computing unit reads the system memory through a second channel provided by the interconnect bus, without being delayed by the status checking of the flag.

Abstract: A monitoring method based on Internet of things (IoT), a fog computing terminal and an Internet of things system are provided. The fog computing terminal downloads an application package from a cloud server, downloads a general model from the cloud server through the application package, sets one or more IoT devices to a device group to receive a plurality of sensing data from the device group, and executes an incremental learning based on the sensing data and the general model to obtain an incrementally learning model for controlling the device group by the incrementally learning model.

Abstract: A mobile app is in a form of a package file. A structural feature digest is generated from contents of a manifest part, bytecode part, and resource part of the package file. A mobile device receives an unknown mobile app, generates a structural feature digest of the unknown mobile app, and sends the structural feature digests to a backend system over a computer network. In the backend system, the structural feature digest of the unknown mobile app is compared to structural feature digests of known malicious mobile apps. The unknown mobile app is detected to be malicious when its structural feature digest is similar to that of a known malicious mobile app.

Abstract: A data processing system includes a first data terminal, a second data terminal, and a data computing node, where the data computing node is separately in communication connection with the first data terminal and the second data terminal. The data computing node is provided with at least one data computing logic. A method for processing data at the data processing system includes: receiving, by the data computing node, a data computing call application sent by the second data terminal, where the data computing call application includes a query index for target service event data, obtaining the target service event data from the first data terminal based on the query index, running a data computing logic corresponding to the data computing call application, and performing data computing based on the target service event data to obtain a computing result, and sending the computing result to the second data terminal.

Abstract: Systems herein allow an administrator to efficiently enroll computing devices into a mobile device management system, even when those computing devices are offline and not connected to the system. A management server can include a console that allows the administrator to enroll an offline computing device by selecting an offline enrollment option on a registration record. This option can cause the management server to create a device record, indicating the computing device is enrolled. The management server can also create and save a provisioning file onto a storage device, such as a USB drive. Assets, such as graphics and applications, specified by the device record are also saved onto the storage device. The storage device can be physically connected to the computing device, at which point the provisioning file guides automatic installation of the assets and implementation of device settings and compliance rules specified by the device record.

Abstract: An information handling system includes a processor configured to store a first module of a software application, the first module of the software application selected based on customer journey information pertaining to usage of the software application. The processor begins execution of the first module prior to receipt of a second module of the software application, the second module selected based on the customer journey information.

Abstract: A computer-implemented method for securing software installation through deep graph learning includes extracting a new software installation graph (SIG) corresponding to a new software installation based on installation data associated with the new software installation, using at least two node embedding models to generate a first vector representation by embedding the nodes of the new SIG and inferring any embeddings for out-of-vocabulary (OOV) words corresponding to unseen pathnames, utilizing a deep graph autoencoder to reconstruct nodes of the new SIG from latent vector representations encoded by the graph LSTM, wherein reconstruction losses resulting from a difference of a second vector representation generated by the deep graph autoencoder and the first vector representation represent anomaly scores for each node, and performing anomaly detection by comparing an overall anomaly score of the anomaly scores to a threshold of normal software installation.

Abstract: A system and method for supplying on-premise hyper-converged systems uses a cloud service to receive orders for the on-premise hyper-converged systems from customers and to request a system integrator to procure hardware components of the on-premise hyper-converged systems and to assemble hardware components to produce assembled systems. Software components are remotely installed and configured in the assembled systems from the cloud service using bring-up appliances in virtual private clouds created for the on-premise hyper-converged systems to deploy software-defined data centers (SDDCs) in the on-premise hyper-converged systems. The resulting on-premise hyper-converged systems with the deployed SDDCs can then used by the customers.

Abstract: Provided are techniques for using binaries of container images as operating system commands. Metadata describing one or more binaries for a container image is received, where each of the one or more binaries has an associated operating system command. The one or more binaries are integrated with the container image by placing the one or more binaries into the container image. Each operating system command is injected into an operating system by adding each operating system command to a command file accessed by the operating system. In response to receiving an operating system command associated with a binary of the one or more binaries, the container image is pulled using the metadata, the container image is executed with the one or more binaries, and a result is returned.

Abstract: Disclosed herein is a technique for downgrading applications to placeholder applications in order to free up storage space in a user device. Based on a variety of heuristics, a number of installed applications are identified as candidates for a downgrade. The downgrading of the identified applications involves creating a placeholder application for each of the identified applications. The identified applications are temporarily deleted while keeping the user data associated with the applications intact and the placeholder applications are installed.

Abstract: A system and method for information technology (IT) migration includes determining a relationship among objects to be migrated such that the relationship includes a set of objects having at least one of a common feature or dependency between the objects in the set. The objects are grouped into a plurality of migration waves such that cross-wave relationships are minimized among the plurality of migration waves. The objects are migrated wave by wave.

Abstract: An example method for filesystem pass-through on lightweight virtual machine containers includes executing a container on a host, and creating a file system overlay in a local file system storage located on the host. The example method further includes copying files and directories into the file system overlay from a shared file system until the file system overlay is fully populated. The file system overlay is fully populated when all the files and directories from the shared file system are copied into the file system overlay. Once fully populated, completion is marked which indicates the file system overlay is fully populated, where marking the completion prevents accessing a read-only base image within the shared file system.

Abstract: A system update device 10 includes a first procedure generation unit 12 which generates a reverse execution procedure, which is a procedure including multiple reverse operations generated on the basis of a part of the update procedure that does not include operations for which a reverse operation cannot be generated, wherein said multiple reverse operations are arranged in a reverse order of the predetermined order; a planning unit 13 which plans an operation procedure for transitioning, from an arbitrary state during execution of the update procedure to the current state, the state of a state element which corresponds to a part of the update procedure that includes operations for which a reverse operation cannot be generated; and a second procedure generation unit 14 which generates a rollback procedure by combining the generated reverse execution procedure and the planned procedure.

Abstract: In accordance with disclosed embodiments, there are provided systems, methods, and apparatuses for implementing a scalable scheduler with heterogeneous resource allocation of large competing workloads types using Quality of Service (QoS) requirements.

Abstract: A new approach to virtual desktop infrastructure management is described. In one example, a master virtual machine is configured to form a master image. The master virtual machine and master image are also modified to incorporate a service that performs an enrollment call to an endpoint manager associated with a virtual desktop infrastructure. One or more virtual machines are instantiated using the master image. When one of the virtual machines is booted and a user logs on, the service is invoked or executed and performs the enrollment call. The enrollment call leads to the enrollment of the virtual machine with the endpoint manager. During and after enrollment, the endpoint manager can configure the virtual machine based on one or more management policies. The management policies can be tailored in various cases, such as depending upon the credentials used to log on to the virtual machine.

Abstract: A unified installer reduces system down time attributable to product installation, by eliminating redundant activities. An engine receives a request to install a first software product and a second software product. The engine references respective seed files of the first and second products to confirm their membership in a same family, and also to confirm compatibility between the product versions. The engine first performs a logical merger to create a merged seed file identifying components (e.g., deployment units, prerequisites, properties, features) that are duplicated between the products. Next, the engine performs a second, physical merger of the products to create a unified installer which avoids redundant components. The unified installer is passed by the engine to the installation procedure, which installs the components only once, thereby promoting efficiency and reducing system down time incurred by product installation.

Abstract: A method and system for code package. A dataset is generated according to a code package. The code package includes an image file associated with a container for a tenant. The dataset includes general information related to security aspects of the image file. The image file includes two or more image layers. Generating the dataset according to the code package includes: exporting an image layer from the image file; and obtaining a configuration file of the exported image layer as the dataset. In response to the vulnerability having been identified, the image file is updated with a patch that fixes the identified vulnerability. The patch includes a new image layer added to the two or more image layers in the updated image file.

Abstract: Methods, systems, and computer program products for parameter management between programs with different addressing modes are described. A request may be received from a first program with a first addressing mode in a first runtime environment for calling a second program with a second addressing mode different from the first addressing mode, where at least one parameter included in the request is for calling the second program. A parameter area may be allocated in the first runtime environment for the at least one parameter. The at least one parameter may be stored in the allocated parameter area. The second program may be invoked based at least in part on the at least one parameter in the allocated parameter area. In this manner, parameter(s) may be communicated between the first program and the second program in an easy and effective way.

Abstract: Described embodiments provide systems and methods for running virtual machines based by probing installation media. A media probe executing on one or more processors may identify an installation media for configuring a virtual machine on a type of operating system. The media probe may detect the type of operating system from the installation media. A virtualization manager executing on the one or more processors may determine a virtualization mode for configuration of the virtual machine based on the type of operating system detected from the installation media. The virtualization manager may create the virtual machine in accordance with the virtualization mode determined based on the type of operating system.

Abstract: Implementations described and claimed herein provide systems and methods for intelligent node type selection in a telecommunications network. In one implementation, a customer set is obtained for a communications node in the telecommunications network. The customer set includes an existing customer set and a new customer set. A set of customer events is generated for a node type of the communications node using a simulator. The set of customer events is generated by simulating the customer set over time through a discrete event simulation. An impact of the customer events is modeled for the node type of the communications node. The node type is identified from a plurality of node types for a telecommunications build based on the impact of the customer events for the node type.

Abstract: An apparatus includes a memory and a hardware processor. The memory stores a plurality of conversion rules. The processor receives a first log from a server. The first log indicates that the server attempted to install a software patch. The processor converts, based on the plurality of conversion rules, the first log into a different format to produce a second log and extracts a plurality of words from the second log. The processor also determines, based on the extracted words, that the software patch install failed and determines, based on the extracted words, a cause for the software patch install failure. The processor further determines a series of steps to remedy the cause and perform the series of steps to remedy the cause.

Abstract: A custom file system in a containerized software architecture facilitates the instantiation of application containers. Each container is composed of one or more application image layers. An application container instance includes read-only application image layer data shared among application container instances associated with the same application container. An application container instance may also include read/write application container instance data that is specific to the application container instance.

Abstract: In accordance with disclosed embodiments, there are provided systems, methods, and apparatuses for implementing a stateless, deterministic scheduler and work discovery system with interruption recovery.

Abstract: Implementations described and claimed herein provide systems and methods for intelligent node type selection in a telecommunications network. In one implementation, a customer set is obtained for a communications node in the telecommunications network. The customer set includes an existing customer set and a new customer set. A set of customer events is generated for a node type of the communications node using a simulator. The set of customer events is generated by simulating the customer set over time through a discrete event simulation. An impact of the customer events is modeled for the node type of the communications node. The node type is identified from a plurality of node types for a telecommunications build based on the impact of the customer events for the node type.

Abstract: Methods for remotely configuring application software on a user device are described. The application software defines at least one operating parameter having a set of pre-defined values which change the way the application interacts with the operating system. The operating parameter can be configured remotely and pushed to the user device where it is enforced by the application. Methods for providing information of the operating parameter to a remote device and for updating the configuration of an application are also described.

Abstract: Described embodiments provide systems and methods for streaming a virtual disk. A first virtual hard disk (VHDX) file can be converted into a read-only VHDX file on a hypervisor. A second VHDX file can be created as a snapshot of the read-only VHDX file on the hypervisor. Partition globally unique identifiers (GUIDs) of the second VHDX file can be updated to be different from those of the read-only VHDX file. A provisioning services server executing on the hypervisor can stream the second VHDX file as a virtual disk over a virtual network established by the hypervisor, by booting the second VHDX file over the virtual network.

Abstract: Various embodiments of the present invention are directed to a communications apparatus and associated methods configured for managing user identification queries. The communication apparatus is configured to receive a user identification query comprising a requesting user identifier and a target user identifier, compare the target user identifier to a user status cache associated with the requesting user identifier to determine a known status, an unknown status, or a pending status, and cause rendering of a known user identification interface or a limited user identification interface. In some embodiments, the communication apparatus is configured to transmit a client device hold instruction in response to determining the pending status for the target user identifier with respective to a given requesting user identifier. Various embodiments discussed herein mediate and resolve voluminous user identification queries through a specially configured group-based caching service and associated system architecture.

Abstract: A computer implemented method is disclosed including producing, with at least one of a computing device, an augmented reality computing device, a virtual reality computing device and a mixed reality computing device, multiple sources of data files provided in individual formats to overlay within a real-world environment, combining the multiple sources of data files into a unified data format that provides for each individual data format of the multiple sources of data files to run independently and with at least one of a spatial anchor and a temporal anchor to provide for a three-dimensional (“3D”) arrangement of the plurality of data, storing in at least one memory device the multiple sources and the at least one spatial anchor and temporal anchor, receiving, through a user interface of a viewing device, query relating to a real-world environment and displaying the 3D arrangement of the plurality of data in the viewing area of the viewing display in spatial relationship with the real-world environment as vie

Abstract: An approach is provided in which the approach receives a set of unchangeable product documentation corresponding to a product that is unalterable by a user. The approach converts a set of user content received from the user into a format compatible with the set of unchangeable product documentation, and integrates the formatted set of user content with the set of unchangeable product documentation into a user interface. The approach displays the user interface on a display.

Abstract: Various embodiments disclosed herein provide for displaying an alert and options when deleting a file associated with a sequence. A system is disclosed herein that can comprise receiving a request to delete a selected file stored in a first folder; determining that the selected file is part of a group of files associated with a sequence; displaying the group of files associated with the sequence using a first portion of a display device; generating a selectable image to display via a second portion of the display device, wherein the selectable image comprises at least a first selectable option to delete the group of files, a second selectable option to delete the selected file, and a third selectable option to select some files of the group of files to delete; and deleting at least one file of the group of files.

Abstract: In one embodiment, a method provides a first orchestration service instance for managing a set of containers operating on a controller node where the controller node controls a set of physical nodes. The method also provides a set of second orchestration service instances for managing a set of first services operating in the set of containers where a second orchestration service instance in a container manages a respective first service in the container. The set of physical nodes include a set of third orchestration service instances for managing a set of second services operating on the set of physical nodes. The first orchestration instance, the set of second orchestration service instances, and the set of third orchestration service instances communicate through a shared communication service that maintains a global state of the controller node, the set of containers, and the set of physical nodes.

Abstract: A licensing system and related methods are described utilizing aspects of distributed ledger technologies to facilitate trusted and verifiable licensing transactions for creative works. A client device can include an asset editing tool for incorporating an asset selected from a plurality of licensable assets into a new creative work. The selected asset can be downloaded for incorporation into the new creative work. The new creative work incorporating the selected asset can be analyzed to determine an amount that the selected asset contributed to the new creative work, or an amount that the new creative work is attributable to the selected asset.

Abstract: A machine learning-based recommendation system is provided for root cause analysis of service issues. An illustrative method of a machine learning system comprises extracting features from service issue investigation log sets corresponding to previously considered service issues; generating representations for the service issue investigation log sets based on the corresponding extracted features; and storing the representations in a knowledge base.

Abstract: One or more computer processors receive a patch request containing a testing requirement for a target platform. The one or more computer processors create a plurality of clusters containing a plurality of previously patched platforms associated with the target platform. The one or more computer processors calculate a similarity index of previously patched platforms and the target platform utilizing the created plurality of clusters, wherein the similarity index represents a similarity between the target platform and the plurality of patched platforms. The one or more computer processors adjust the testing requirement utilizing one or more similar platforms that are determined by the calculated similarity index and associated testing requirements. The one or more computer processors execute the requested patch utilizing the adjusted testing requirement.

Abstract: A memory stores a catalog of applications and a catalog of trusted sources. A processor detects that a first user attempted to install an application, determines that a source of the application is in the catalog of trusted sources, scans the application to determine that the application does not contain a virus, and determines that there is a first license that allows the first user to install the application. The processor also stores the application into a repository and adds the application to the catalog of applications. The processor receives a request from a second user to install the application, determines that the application is in the catalog of applications, and determines that there is a second license that allows the second user to install the application. The processor further retrieves the application from the repository and initiates installation of the application on a device of the second user.

Abstract: Techniques for user-assisted plug-in application recipe (PIAR) execution are disclosed. During execution of a PIAR, a PIAR management application applies one or more data values for a plug-in application field to a machine learning model, to obtain: (a) a candidate mapping between one or more sub-values discovered within the data value(s) and another field accepted by an action of another plug-in application, the data value(s) being of a data type different from a reported data type of the other field, and (b) a confidence metric associated with the candidate mapping, based at least in part on whether the sub-value(s) fit(s) one or more stored formats mapped to the other data type. Based on a determination that the confidence metric does not satisfy a threshold confidence criterion, the PIAR management application obtains user input affirming or rejecting the candidate mapping, and applies the user input to execution of the PIAR.

Abstract: In general, techniques are described for creating a flexible services-based pipeline for firewall filter processing. A network device may be configured to perform the techniques. In one example, a method includes receiving, by a network device, data defining a plurality of firewall filter processing services, the data defining an order in which to apply services of the plurality of firewall filter processing services to firewall filters; configuring, by the network device and based on the received data, an execution engine pipeline to include the plurality of firewall filter processing services in the defined order; prior to programming a received firewall filter to hardware of the network device for filtering network traffic, processing the firewall filter by the execution engine pipeline to produce a processed firewall filter; and programming, by the network device, the processed firewall filter to the hardware for filtering the network traffic.

Abstract: A set of program instructions, when executed by a computer of an information-processing device, causes the computer to perform: detecting; and registering. The detecting detects, after first print queue information is registered, second print queue information being registered. The first print queue information includes a first print queue name, a first print setting, and a first port ID. The first print queue name is based on a printer name acquired via a plug-and-play process for a printer connected to a first port. The second print queue information includes a second print queue name, a second print setting, and a second port ID. The second print queue name is based on the printer name and different from the first print queue name. The registering registers, in response to the detecting, third print queue information including the printer name, the first print setting, and the second port ID.

Abstract: Portable or ambulatory infusion devices and systems capable of remotely updating an ambulatory fluid delivery device include safety protocols that verify the status of the ambulatory fluid delivery device before and after a field update of software. Methods of accomplishing the same field update of software are also described.

Abstract: Disclosed herein are methods, systems, and processes for centralized containerized deployment of network traffic sensors to network sensor hosts for deep packet inspection (DPI) that supports various other cybersecurity operations. A network sensor package containing a pre-configured network sensor container is received by a network sensor host from a network sensor deployment server. Installation of the network sensor package on the network sensor host causes execution of the network sensor container that further causes deployment of an on-premise network sensor along with a network sensor management system, a DPI system, and an intrusion detection/prevention (IDS/IPS) system. The configurable on-premise network sensor is deployed on multiple operating system distributions of the network sensor host and generates actionable network metadata using DPI techniques for optimized log search and management and improved intrusion detection and response (IDR) operations.

Abstract: Determining security vulnerabilities of smart home devices.

Abstract: Systems and methods for privacy-preserving enablement of connections within organizations are disclosed. In one embodiment, a method may include (1) receiving, at a server comprising a computer processor, an identification of a target to contact from a requester in an organization; (2) the computer processor identifying, in a connection database, at least one user within the organization having a connection with the target; (3) the computer processor communicating anonymized information representing the at least one user having the connection and a relationship-strength score for the connection; (4) the computer processor communicating a request for introduction assistance to the at least one user; (5) the computer processor receiving acceptance of the request for introductory assistance from the at least one user; and (6) the computer processor identifying the at least one that accepted the request to the requester.

Abstract: Event metadata may be received at an audit function of an orchestration system for an infrastructure change event associated with an infrastructure change to an enterprise infrastructure of an enterprise. A blockchain instance of a particular decentralized secure ledger is requested from a decentralized secure ledger service via the audit function. A user identifier of a user that is responsible for the infrastructure change event is provided to the decentralized secure ledger service by the audit function. In response to the decentralized secure ledger service authenticating the user identifier, the event metadata for the infrastructure change event is sent to the blockchain instance for storage with the decentralized secure ledger service by the audit function.

Abstract: An artificial intelligence (“AI”) engine having multiple independent processes on one or more computing platforms is disclosed, where the one or more computing platforms are located on premises of an organization such that i) the one or more computing platforms are configurable for one or more users in the organization having at least administrative rights on the one or more computing platforms in order to configure hardware components thereof to execute and load the multiple independent processes of the AI engine; ii) the one or more users of the organization are able to physically access the one or more computing platforms; and iii) the hardware components of the one or more computing platforms are connected to each other through a Local Area Network (LAN), and the LAN is configurable such that the one or more users in the organization have a right to control an operation of the LAN.

Abstract: Systems and methods for provided for detecting compatible modules for replacing anomalous elements in computing systems. The described technique includes receiving system parameters specifying functionality of a first computing system, and querying a state model using the received system parameters to detect an anomaly within the first computing system. In response to detecting an anomaly in the first computing system based on the state model, the system determines a recovery method based on a recovery-method model and information about the detected anomaly, and selecting, from a tool database, a third-party, system-compatible tool configured to implement the determined recovery method.

Abstract: System and computer-implemented method dynamically deploying serverless functions in a cloud architecture utilize a code execution service to receive a request to trigger execution of a serverless function and to determine deployment status information for a previous serverless function version based on the request. The deployment status information is then used to generate a code execution service command for the code execution service to deploy the serverless function.

Abstract: A communication apparatus is disclosed, which comprises a base station module and an access point module for providing wireless connectivity to a communication network to at least one mobile communication device; an interface for coupling the base station module and the access point module for performing at least one of: a channel restriction operation; a power restriction operation; an intelligent uplink scheduling operation; a carrier frequency reselection operation; and a traffic steering operation; whereby alleviating an interference arising due to coexistence of the base station module and the access point module.

Abstract: Some embodiments provide a first computer system that receives a specification of a target computing device through an integrated development environment (IDE) operating on the first computer system. The first computer system further receives input referencing an application programming interface (API) call through the IDE operating on the first computer system. In response to the input, the first computer system also sends a second computing system a request for data associated with resource consumption during execution of the API call by a set of source devices. The set of source devices each has the same specification as the target computing device. The first computer system further receives the data associated with the resource consumption during execution of the API call by the set of source devices. The first computer system also presents the data through the IDE.

Abstract: Methods and systems for modifying software programs are disclosed. For instance, an example method for modifying a software program may include extracting, from a configuration program file, a future list of one or more future active entries relating to a future version of the software program and a future list of one or more future ghost entries relating to the future version of the software program, comparing the future lists of future active and ghost entries to current lists of current active entries and current ghost entries of a current version of the software program. Then, at least one upgrade or at least one downgrade of the current version of the software program is performed in response the comparison of the current and future lists.