Abstract: A method for providing security recommendations is described. In one embodiment, the method may include identifying a set of monitored customers. In some cases, each monitored customer may include one or more computing devices. The method may include identifying a first computing device of a monitored customer for evaluation, selecting a potential security product to install on the first computing device, and quantifying the ability of the monitored customer to detect or prevent malware incidents based at least in part on the selected potential security product.

Abstract: A method for generating an application recommendation includes receiving a signal from an electronic device indicating that uninstallation of a first application has been initiated by a user on the electronic device, obtaining contextual information of the application, the contextual information including data indicating when the application was installed and frequency of use of the application, obtaining utilization data, the utilization data including data indicating applications that have been installed on the electronic device, determining a plurality of applications that are similar to the first application; generating a first predictive model using the contextual information and the utilization data, the first predictive model being configured to predict a likelihood of uninstallation of an application; and automatically recommending, at the time of uninstallation of the application, one or more of the plurality of applications, the recommending being based at least in part on the first predictive model

Abstract: A system that incorporates teachings of the subject disclosure may include, for example, obtaining a group of facial objects detected from an image captured by a camera coupled with a media device where the facial objects correspond to a plurality of users, determining authentication information for each of the plurality of users based on the facial objects, and providing the authentication information to a group of content service systems for enabling the media device to access aggregated media services from the group of content service systems. Other embodiments are disclosed.

Abstract: Examples of techniques for detecting harmful applications prior to installation on a user device are disclosed. In one example implementation according to aspects of the present disclosure, a computer-implemented method includes: analyzing, by a processing device, a plurality of reviews for each version of a plurality of versions of an application to determine, based on each of the plurality of reviews, whether each version of the plurality of versions is harmful; and responsive to determining that a particular version of the plurality of versions is harmful, preventing a user from installing the particular version.

Abstract: Embodiments of the present invention provide methods, program products, and systems for determining an amount of usable storage in a backup environment. Embodiments of the present invention can be used to receive system information pertaining to a storage backup environment. Embodiments of the present invention can calculate a compression ratio of the storage on a backup server and a backup ratio between an amount of data on a client computer system and an amount of data on the backup server and calculate an average amount of storage consumed on the backup server. Embodiments of the present invention can determine an existing backup capacity for the storage backup environment by identifying an amount representing the actual capacity of data capable of being stored on the backup server and reducing the amount representing the actual capacity according to the calculated average amount of storage consumed on the backup server.

Abstract: Methods, systems, and computer-readable media storing instructions are described for implementing bidirectional exchange of quality data using a common protocol. An exemplary method comprises generating, at a first party computer system, a connection request communication including data relating to a project and sending the connection request communication to a second party computer system. The method further comprises receiving, from the second party computer system, a registration change communication comprising the data relating to the project, sending a record communication including a quality object associated with the project to the second party computer system, and sending an update communication updating information in the quality object, the update communication being one of a state changing communication or a non-state changing communication.

Abstract: A virtual application packaged for a specific executing environment may be executed on a processing device having an executing environment different from the specific executing environment. A reference, included in extracted installer metadata, to one or more key paths of a hierarchically-structured data store may be modified according to a set of rules related to the executing environment detected in the processing device. The modified extracted installer metadata may be provided to an installer for installing the virtual application. During execution of the virtual application, a request to read, write, or modify the hierarchically-structured data store may be intercepted and changed, such that a first key path included in the request may be mapped to a second key path, based on the detected executing environment. Similarly, a response to the request, which may include the second key path, may be intercepted and modified, to the first key path.

Abstract: The operating system of a computer maintains an extension catalog that stores data relating extensions with information about the contracts the extensions support. Extensions are registered in this catalog according to the contract they implement. The extension catalog can be queried to identify extensions that support a given contract. An extension can be selected from among the results from a query, and the selected extension can be activated. When activated, the extension is set up by the operating system as an independent process from, and with context from, the application for which it is an extension. Information about the extension is provided to the application to enable the extension and the application to communicate according to the supported contract.

Abstract: A mobile terminal and a preinstalled application management method for a mobile terminal, where storage space of the mobile terminal includes at least one directory, and an installation package of at least one preinstalled application is stored in the at least one directory. The method includes starting the mobile terminal; scanning the at least one directory; and installing the installation package of the at least one preinstalled application in the at least one directory to generate a preinstalled application having user-level permission. Using the method and the mobile terminal, a preinstalled application can be uninstalled.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for managing operation of telecommunications devices. In one aspect, a method includes actions of executing a container program that lacks scripts that manage operation of telecommunications devices that interact with a cloud platform, monitoring messages generated by the telecommunications, filtering the messages to select a subset of messages that trigger execution of the scripts by the container program, identifying, for each selected message in the subset of messages and from an index of available scripts, a particular script that is executed in response to receipt of the selected message, merging each particular script with the container program to create a management program that manages operation of the telecommunications devices based on the subset of messages, and managing operation of the telecommunications devices with the management program.

Abstract: An electronic device and a method are provided. The electronic device includes a communication unit configured to transmit and receive data; and a controller configured to, when a state of the electronic device that satisfies a condition for termination of a running application is detected while the application is in progress, control discovery of at least one external electronic device and transmit data of the running application to at least one electronic device selected from the discovered external electronic devices through the communication unit with an instruction for the at least one selected electronic device to process the data of the running application.

Abstract: Described embodiments provide ways to optimize application minimal sets based on the behavior of users. Described embodiments further provide ways to produce a minimal set that is optimized based on various attributes regarding the target endpoint onto which the minimal set is to be deployed, such as the target endpoint's operating system, applications installed on the target endpoint, hardware on the target endpoint, or profile information regarding the target endpoint's user. Also, described embodiments provide ways to prioritize the order of deployment when multiple minimal sets for various applications are downloaded to a target endpoint.

Abstract: Disclosed are various examples for the silent upgrade of software and its dependencies on a client device. A client device can identify that a new version of the client application is available that upgrades a current version of the client application to the new version and download an installation package file for the new version of the client application. A unique identifier for the client application can be identified and used to search a registry of an operating system installed on the client device to locate information associated with the current version of the client application, such as a file path for the current version of the client application. The installation package file can be modified using information associated with the file path and a silent upgrade of the client application can be performed where the current version of the client application is upgraded with the new version of the client application without user interaction.

Abstract: A method of generating a user interface for presentation to a user. The method comprises executing a first application computer program to provide a user interface, executing agent computer program code to interrogate and modify said user interface during execution of said first application computer program, and presenting said modified user interface. The first application computer program may be run on a server, while the modified user interface may be presented to a user at a client connected to said server.

Abstract: Method for queueing packets, each packet of the packets including timing information representing a remaining time until a deadline associated with delivery at its destination; the system including N queues, each queue thereof being configured for buffering at least one packet, the N queues having a cyclic order; the method including keeping track of a pointer, initially pointing to a queue of the N queues; afterwards, repeatedly incrementing the pointer over the N queues, according to the cyclic order, after each passing of a scheduling interval S; enqueueing each packet of the packets in a queue of the N queues, that queue differing from the queue to which the pointer is pointing, based on the packet's timing information and taking into account the cyclic order; and dequeueing enqueued packets from the N queues, while prioritizing dequeueing from the queue to which the pointer is pointing.

Abstract: Methods, systems, and apparatuses manage rolling out of updates in a network-accessible server infrastructure which operates a plurality of instances of a supporting service. The supporting service is comprised by a plurality of service portions. The instances of the supporting service each include of the service portions. The instances of the supporting service are partitioned into a plurality of slices. Each instance is partitioned to include one or more of the slices, and each slice of an instance includes one or more of the service portions. A software update is deployed to the instances by applying the software update to the slices in a sequence such that the software update is applied to a same slice in parallel across the instances containing that same slice before being applied to a next slice, and waiting a wait time before applying the software domain to a next slice in the sequencing.

Abstract: A method includes creating a macro plan for a test project, creating a micro plan for the test project, wherein the micro plan and the macro plan are based on at least one common parameter, and reconciling the macro plan and the micro plan by identifying deviations between the macro plan and the micro plan based on the at least one common parameter.

Abstract: This disclosure provides an apparatus and method for deployment assurance checks for monitoring industrial control systems and other systems. A method includes identifying, by a risk manager system, a plurality of connected devices that are vulnerable to cyber-security risks. The method includes determining devices to be monitored from the plurality of connected devices. The method includes evaluating system resource usage, by the risk manager system, on each device to be monitored. The method includes providing recommendations to a user as to whether or not the user should proceed with the monitoring, based on the evaluation.

Abstract: The present disclosure relates to a system and method for predicting errors in a software code base. The system generates an element set from a plurality of defect records that identify the developer who originated the defect, the code revisions related to the defect, and a classification of the defect. The system predicts the probability and type of defects in software using a machine learning algorithm configured using elements from the defect records and the code related to the defect records.

Abstract: In one embodiment, a system for migrating virtual machines in a virtualization environment includes a plurality of host machines implementing the virtualization environment and a migration controller. Each of the host machines includes a hypervisor, one or more user virtual machines (UVMs) and a virtual machine controller. The system further implements a virtual disk comprising a plurality of storage devices, the virtual disk being accessible by the virtual machine controllers, which conduct I/O transactions with the virtual disk. The migration controller determines a segment size and, for each host machine, determines a number of required segments for the UVMs running on the host machine. The controller computes a number of reserved segments based on a total number of host machines and a largest one of the numbers of required segments. The reserved segments are then assigned among the plurality of host machines.

Abstract: In example implementations, when a management program deploys new virtual machines, the management program may identify candidate virtual machines for replacement, score the possibilities of replacement and relate the new virtual machines to candidate virtual machines if it determines the probability of replacement is high. The management program may also migrate virtual machines and storage volumes used by the virtual machines to other physical servers and storage arrays by related pairs of virtual machines. The management program may also inherit management policies from existing virtual machines being replaced and leverage them to manage new virtual machines, which replace the existing virtual machines.

Abstract: Disclosed are a method and a device for identifying a virus APK. The method comprises: presetting a virus database comprising virus characteristic codes; detecting that a designated file in a target Android installation package APK contains at least one of the virus characteristic codes; and determining that the target Android installation package APK is a virus APK. In the application, the virus APK and a variation thereof can be rapidly, accurately and effectively identified, thereby improving the security of an APK application.

Abstract: During development of an application storing monitoring tools within the source code of the application. During deployment, extracting all monitoring rules from the source code of the application; obtaining information to complete the monitoring rules and customize the monitoring rules to the application which is to be monitored; discarding duplicate monitoring rules; and sending the monitoring rules to a target monitoring tool for configuration of monitoring rules within the application.

Abstract: Methods and apparatus are disclosed to generate a security assertion document associated with a container image, and to use the security assertion document to determine whether a container image is suitable for use to assemble a corresponding container for execution in a host environment. In an example method, the generated security assertion document includes a security assertion resulting from an assessed policy rule. In the example method, the security assertion document is separate from the container image such that the generation of the security assertion document does not alter the container image itself. In an example method, the contents of the security assertion document may be analyzed and/or verified in relation to the associated container image in connection with determining whether or not to use the container image to assemble a corresponding container for execution in the example host environment.

Abstract: A control device comprising a processor and a memory. The memory contains computer readable instructions that, when executed by the processor, cause the processor to retrieve from a memory a queue containing a plurality of sets of instructions, each set of instructions corresponding to parameters for forming a unit of packaging material, cause a packaging machine to create a plurality of packaging units according to the parameters, receive user input corresponding to a rewind queue functionality, and rewind the queue to cause the packaging machine to rerun a portion of the queue and create some of the plurality of the packaging units during the rerun.

Abstract: A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.

Abstract: Examples provide for automatically provisioning hosts in a cloud environment. A cloud daemon generates a cloud host-state configuration, for a given cloud instance of a host, stored on a cloud metadata service prior to first boot of the given cloud instance of the host. A first boot of a plurality of cloud instances of hosts is performed using a stateless, master boot image lacking host-specific configuration data. On completion of the first boot of a given cloud instance of a host, the cloud host-state configuration is installed on the master boot image to generate a self-configured boot image including host-specific configuration data for the given cloud instance of the host. A second boot is performed on the given cloud instance of the host by executing the self-configured boot image to automatically provision the given cloud instance of the host in the cloud environment.

Abstract: A system and method for forwarding an application user interface from a first computing platform to a second computing platform. The application user interface is generated using source content. The application user interface is encoded into two or more encoded content streams where the two or more encoded content streams contain source content representable as the application user interface and composition metadata associated with the application user interface. The two or more encoded content stream are sent to the second computing platform. The two or more encoded content streams may be received at the second computing platform where the two or more encoded content streams contain information decodable and reproducible as the application user interface.

Abstract: Software parses an app update schedule with a parsing utility to obtain a current app version number of an app and determines that the deployed app version number is older than the current app version number. The software conducts a dependency analysis of the current version of the app using a scanning utility that outputs a hierarchical tree diagram of dependent code modules. The hierarchical tree diagram identifies a name and a code version number for each dependent code module. The software uses the name and code number for each dependent code module to obtain all code version numbers for the dependent code module from the code database and determines whether at least one code version number for a dependent code module is later than the code version number for the dependent code module in the hierarchical tree diagram. Then the software creates an updated app using newer source code.

Abstract: Some embodiments of the present invention monitor and track usage patterns of various applications (apps) distributed among multiple mobile devices owned by a user. The data gathered during monitoring is stored in a mobile app usage repository. If the user considers installing a new app, a cognitive app analysis engine compares features and functionality of the new app against the usage patterns in the repository, to formulate recommendations as to which mobile device(s) the app should be installed on. The analysis engine provides its recommendations to the user, and may additionally perform automated installation of the app on the recommended device(s).

Abstract: A device for controlling the interior lighting of a motor vehicle comprises at least one lighting module capable of emitting a light beam in the passenger compartment, and means for detecting a plurality of gestures of an occupant of the vehicle forming a determined sequence triggering the control of the interior lighting module.

Abstract: An information processing apparatus includes an operating system on which a plurality of device drivers with different structures are installable, and is configured to: update a device driver that has been installed with a device driver to be updated when identifiers of the device driver that has been installed and the device driver to be updated are different; install the device driver to be updated when the identifiers of the drivers are identical and pieces of model information of the drivers are different; and display a message for inquiring a user of whether or not to update the device driver that has been installed with the device driver to be updated when the identifiers of the drivers are identical and the pieces of model information of the drivers are identical.

Abstract: A method and computer system for data storage in a network including receiving, from a user device, a target data to be stored, determining an application associated with the target data in the user device, obtaining a storage pattern generated by monitoring a historical data, the storage pattern indicating storage characteristics of the historical data, the historical data being associated with the application, and controlling a storage of the target data in a network based on the storage pattern.

Abstract: Utilizing several passes of a token among the operating system level virtualization applications (OSLVAs) running on each of an ordered list of nodes selectively upgrade user applications in specific containers after determining that each OSVLA hosting a container to be upgraded is live. A failed liveness check can cause a revision to the list of nodes. Post-upgrade health checks of each application, and a list-wide notification of a completed upgrade of the application instances, can follow a successful upgrade. A roll back of the upgrade across all nodes can follow an unsuccessful upgrade.

Abstract: Systems and methods are disclosed for speedily upgrading (e.g., via service packs) components of a storage management system, such as media agents and data agents, which may number in the thousands. The disclosed methods and systems provide a lightweight and flexible approach. Executable files such as service packs are deployed to a network-shared file system and are served on demand to each targeted host computing device to launch a data agent and/or media agent component. New service packs (e.g., upgrades) are installed on another shared drive and the connection thereto is refreshed by each targeted storage management component to begin executing the new version on demand. The resultant overall upgrade process across the storage management system may be substantially shortened, and the network burden greatly reduced.

Abstract: An administrator provisions a virtual disk in a remote storage platform and defines policies for that virtual disk. A virtual machine writes to and reads from the storage platform using any storage protocol. Virtual disk data within a failed storage pool is migrated to different storage pools while still respecting the policies of each virtual disk. Snapshot and revert commands are given for a virtual disk at a particular point in time and overhead is minimal. A virtual disk is cloned utilizing snapshot information and no data need be copied. Any number of Zookeeper clusters are executing in a coordinated fashion within the storage platform, thus increasing overall throughput. A timestamp is generated that guarantees a monotonically increasing counter, even upon a crash of a virtual machine. Any virtual disk has a “hybrid cloud aware” policy in which one replica of the virtual disk is stored in a public cloud.

Abstract: Control systems and methods for cache coherency are provided. One control method includes steps of transmitting a link-connect request to a second electrical device when the first electrical device is coupled to the second electrical device by a cache coherency (CC) interface by a first electrical device, establishing a link between the first electrical device and second electrical device according to the link-connect request by the CC interface, and operating a first operating system of the first electrical device by a second processing unit of the second electrical device after establishing the link.

Abstract: Managing the execution of a computer software application by duplicating a primary instance of a computer software application during its execution in a primary execution context to create multiple duplicate instances of the computer software application in corresponding duplicate execution contexts, and effecting a selection of a different candidate subset of predefined elements for each of the duplicate instances.

Abstract: Multiple devices having different architecture or platforms may be supported by the same application store. The related devices are used to synchronize the state of each device in a group, such as all the devices owned or used by a particular user. The devices themselves are used as separate payload delivery systems that are capable of sharing software, such as new or updated applications and operating systems, among the different types of devices in the group. A software payload may be created by a server that contains software for more than one device's architecture. They payload may include segments targeted for different platforms or architectures. Once the payload is loaded on one device, that device can then send the payload to the other devices within the group. Each device that receives the payload uses the appropriate software segment for its particular architecture or platform.

Abstract: An example computer-implemented method includes receiving, via a processor, an application to be tested, a set of intrusive monitoring capabilities, and a set of external monitoring capabilities. The method includes executing, via the processor, the application in a clean environment to generate unmonitored application behavior. The method includes executing, via the processor, the application with intrusive monitoring based on two randomly generated seeds to generate trigger events and external monitoring to detect changes of application behavior in response to the intrusive monitoring. The method includes computing, via the processor, a correlation measure between the trigger events and the detected changes in the application behavior. The method includes modifying, via the processor, the application in response to detecting the application is evasive based on the correlation measure.

Abstract: A computer implemented method of processing data containing information about relationships between contacts and a community of contact owners is provided, which includes the steps of: collecting data having contact information, contact owner information and one or more values related to the strength of a relationship between the contact and the contact owner; evaluating the strength of the relationship based on the one or more values; and storing the collected data and evaluated strength in a computer database.

Abstract: In a virtualized computer system operable in more than two hierarchical privilege levels, components of a hypervisor, which include a virtual machine kernel and virtual machine monitors (VMMs), are assigned to different privilege levels. The virtual machine kernel operates at a low privilege level to be able to exploit certain features provided by the low privilege level, and the VMMs operate at a high privilege level to support execution of virtual machines. Upon determining that a context switch from the virtual machine kernel to a VMM is to be performed, the computer system exits the low privilege level, and enters the high privilege level to execute a trampoline that supports context switches to VMMs, such as state changes, and then the VMM. The trampoline is deactivated after execution control is switched to the VMM.

Abstract: A method, executed by a computer, includes receiving, for a cluster, a request to create a new container host, wherein the cluster comprises a plurality of container hosts having a corresponding plurality of local repositories, creating the new container host, selecting an image for the new container host according to one or more host preferences, wherein the image is stored in an image location, and copying the image from the image location to the local repository of the new container host. A computer system and computer program product corresponding to the above method are also disclosed herein.

Abstract: Technical solutions are described for securely deploying a shrouded virtual server. An example method includes sending, by a host manager, authentication information of a hosting system to a client device in response to a request from the client device. The \method also includes receiving a request to deploy a virtual server using a shrouded mode. The method also includes deploying a preconfigured hypervisor on the hosting system, where the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor. The method also includes deploying, by the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor. The method also includes sending, by the host manager, an identifier of the virtual server for receipt by the client device.

Abstract: A control device comprising a processor and a memory. The memory contains computer readable instructions that, when executed by the processor, cause the processor to retrieve from a memory a queue containing a plurality of sets of instructions, each set of instructions corresponding to parameters for forming a unit of packaging material, cause a packaging machine to create a plurality of packaging units according to the parameters, receive user input corresponding to a rewind queue functionality, and rewind the queue to cause the packaging machine to rerun a portion of the queue and create some of the plurality of the packaging units during the rerun.

Abstract: A system and method for information technology (IT) migration includes determining a relationship among objects to be migrated such that the relationship includes a set of objects having at least one of a common feature or dependency between the objects in the set. The objects are grouped into a plurality of migration waves such that cross-wave relationships are minimized among the plurality of migration waves. The objects are migrated wave by wave.

Abstract: A system and methods for dynamically creating spreadsheet workbooks at runtime on a computing device from a set of pre-defined spreadsheet modules. Each spreadsheet module has an associated interface definition, allowing users more easily to combine multiple modules into more complex spreadsheet applications. Interfaces are defined using a Spreadsheet Interface Definition Language (SIDL) which enables spreadsheet models to be defined independent of their implementation. Modules can be either pre-constructed as spreadsheet workbooks, or dynamically created at run time from module definitions.

Abstract: In an example embodiment, a delivery unit comprises a plurality of objects. The delivery unit is encapsulated within a transport container for delivery to an entity for installation. As new versions of the objects are created by modifying the source code, the modified versions of objects are included in the delivery unit along with unmodified versions of the remaining objects of the delivery unit. The modified versions of the objects are marked for installation, while the unmodified versions are not marked for installation. Upon installation, the objects marked for installation are extracted from the delivery unit while the objects not marked for installation are discarded. The extracted objects are then installed, thus updating any previous versions of the objects, while unmodified objects are not installed. In one representative embodiment, objects are procedures of a database system, which may be organized hierarchically into folders.

Abstract: Extension patterns are deployed to core deployment patterns stored in a first software repository. An event relating to registration of a component is detected. In response to detecting the event, a tool registry can be queried to identify one or more extension deployment patterns for use with one or more core deployment patterns. Based upon the query, one or more extension deployment components can be retrieved from a second software repository. The one or more extension deployment components can be deployed on top of one or more instances of the one or more core deployment patterns.

Abstract: A method, system, and/or computer program product provide a custom virtual appliance. One or more processors generate a description file of a custom virtual appliance based on a user requirement. The processor(s) acquire configuration metadata of the custom virtual appliance from the description file. The processor(s) create a list of candidate virtual appliances based on the configuration metadata. The processor(s) acquire a disk size of the custom virtual appliance based on configuration metadata. The processor(s), for a specific virtual appliance in the list: acquire a disk size of the specific virtual appliance; and determine, based on the disk size conversion information, whether the specific virtual appliance is required to convert a disk size of the custom virtual appliance. In response to determining that a candidate virtual appliance from the list is required to convert the virtual disk, the processor(s) construct the candidate virtual appliance as the custom virtual appliance.