Abstract: Systems, devices, and methods are disclosed to send a signal to deploy a software patch at a compute device, to identify, based on a dependency map, a set of system components on the compute device that are likely to be impacted by the software patch, to monitor a set of parameters for a set of applications on the compute device that interact with a set of system components, to compare values for the set of parameters to one or more predefined criteria and to determine a compatibility classification for the software patch. Systems, devices, and methods are disclosed to update the dependency map based on the compatibility classification to define an updated dependency map, and based on the updated dependency map send a signal to deploy the software patch at a set of compute devices.

Abstract: Robustness of a machine learning model can be characterized by receiving a file with a known, first classification by the machine learning model. Thereafter, a selection is made as to which of a plurality of perturbation algorithms to use to modify the file. The perturbation algorithm is selected as to provide a shortest sequence of actions to cause the machine learning model to provide a desired classification. Subsequently, the received file is iteratively modified using the selected perturbation algorithm and inputting the corresponding modified file into the machine learning model until the machine learning model outputs a known, second classification. Related apparatus, systems, techniques and articles are also described.

Abstract: The present disclosure relates generally to systems and methods for providing sets of compatible firmware versions (e.g., cross-compatibility solution) for flashing (e.g., programming or re-programming) different devices of a network of devices (e.g., an industrial automation system) when using a flashing application. Providing the compatible firmware versions of such network of devices may facilitate flashing the devices with compatible firmware, based on a topology of the network of devices, to prevent functional errors in the network of devices. The present systems and methods may also be applicable to determining and providing cross-compatibility solution between different firmware, as well as software, used by different devices of a network of devices.

Abstract: A distributed database may comprise a plurality of nodes maintaining a collection of data items indexed by key values. Upon receiving a request to store a data item, a node of the database may be selected based on the node's suitability for storing the data item. The distributed database may generate a key to identify the data item, such that the generated key identifies the data item and comprises information indicative of the selected node. The distributed database may provide the generated key to an application programming interface client in response to the request.

Abstract: Disclosed is an electronic device comprising processor connected to a memory. The memory is configured to store a control application, a preferences file and an operating system image for executing a second operating system. The processor is configured to execute the control application in a first operating system. The processor is configured to determine whether preferences of the operating system image satisfy a defined condition in the control application The processor is also configured to change the preferences of the operating system image by using the preferences file when the preferences of the operating system image do not satisfy the defined condition. The processor is further configured to copy, to the operating system image, a package file for allowing the control application to control an operation of the second operating system.

Abstract: Artificial intelligence (“AI”) apparatus and methods are provided for hardening security of software applications. Under the conventional approaches, additional manual investment implementing security policies does not yield proportional increases in combating cyber security threats. Using manual approaches, it is increasingly difficult to consistently apply multiple policies covering different software applications or versions. This results in increased risk and technical debt. Over time, these undesirable consequences exacerbate the likelihood of inadvertently introducing an adverse policy omission or change. As the scale of software application deployed across and organization increases, it becomes even more difficult to ensure that security policies tracked and consistently applied. This may result in ineffective, contradictory or duplicative configuration requirements.

Abstract: Extensions to a source software application are migrated to a target. Template records are constructed containing corresponding sets of attributes for source and target applications. Analysis of a source extension yields source extension attributes. A matching template record is used to map the source extension attributes to corresponding target extension attributes. A proposal for a migrated target extension is formulated, simulated in a sandbox, and committed to the target application. Client interaction supports selection or approval of application versions, proposals, or simulation output. Template records, constructed without knowledge of specific extensions implemented on a particular application instance, are provided to the source application environment, enabling remaining migration operations to be performed locally in source and target environments, maintaining data privacy. Examples are provided for a front-end software application in a database environment.

Abstract: Techniques described herein relate to a method for managing applications. The method may include obtaining, by a binding manager associated with a first CSP, a first API call from a first application; the binding manager identifies a first CSP API associated with the first CSP; identifies a second CSP API associated with the first API call; make a first determination that the second CSP API does not match the first CSP API; and in response to the first determination: translates the first API call into a format associated with the first CSP API to obtain a translated API call; initiates performance of the translated API call; obtains a first CSP API call return object in first CSP API format; translates the first CSP API call return object to obtain a translated CSP API call return object; and provides the translated CSP API call return object to the first application.

Abstract: A distributed building management system for controlling a building control device of a building includes a virtual controller that is hosted on a computing device and an edge controller that is associated with the building control device. The virtual controller includes a virtual container or a virtual machine that has control logic that generates control commands for controlling the building control device. The edge controller includes control logic that is configured to at least selectively provide closed loop control of one or more functions of the building control device. The edge controller is in operative communication with the virtual controller and is configured to receive and execute the control commands generated by the virtual controller.

Abstract: Non-transitory computer readable media are encoded with instructions which, when executed by one or more processors of a central computing system, cause the central computing system to connect with multiple service domains and determine that at least one service domain of the multiple service domains is eligible for upgrade. The instructions further cause the central computing system to store an upgrade package for the at least one service domain at a storage service separate from the central computing system and communicate access credentials to the storage service to the at least one service domain. The central computing system receives a communication from the at least one service domain indicative of upgrade status responsive to the at least one service domain having accessed the upgrade package at the storage service and updates a state management database based on the communication.

Abstract: Embodiments of systems and computer implemented methods are disclosed to automatically restore operating system (OS) application software to an information handling systems (IHS) when the OS application software is removed from a computer readable storage device of the IHS. The disclosed embodiments control the version of the OS application software being deployed to an IHS when deploying the software from the boot firmware. For example, the disclosed embodiments utilize a version identifier to specify which version of the OS application software should be restored, a Content Deliver Network (CDN) server to store multiple versions of the OS application software, and a registration web server to map a device identifier corresponding to the IHS and the version identifier corresponding to the specified version of the OS application software to a universal resource locator (URL) link identifying where the specified version of the OS application software is stored within the CDN server.

Abstract: Methods and systems may be configured to verify proper installation of Internet Protocol (IP) connectable building automation devices by installers at remote sites. The installers may be a crowdsourced installers. A service provider may engage an installer to install one or more IP connectable building automation devices. To ensure verification that the one or more IP connectable building automation devices are installed properly, parameters or values based on data from installed IP connectable building automation devices may be provided to or determined by a blockchain network. The blockchain network may compare the parameters or values to thresholds and automatically provide an indication as to whether the parameters or values meet or exceed the thresholds (e.g., verification criteria).

Abstract: A method for deploying an application at a cluster of cloud nodes comprises receiving a component defining the deployment of the application at the cluster of cloud nodes, the component recursively defining a first graph of other components. A component has a mapping from an interface of the component to an interface of any component referenced in the component. The method comprises compiling the received component into instructions for input to an orchestrator of the cluster of cloud nodes; and sending the instructions to the orchestrator to trigger deployment of the application.

Abstract: A service processing method and a terminal, where the terminal obtains identification information of a to-be-processed service, and sends a retrieval request message to a server after determining that no function corresponding to the identification information of the to-be-processed service exists in an application program installed on the terminal. The terminal receives a target function from the server, and invokes the target function to process the to-be-processed service. The terminal sends the retrieval request message to the server only after determining that no corresponding function exists such that the terminal does not need to obtain a web application from the server each time. In addition, the terminal receives the target function from the server such that traffic and a download time are effectively reduced.

Abstract: Performing upgrades may include: receiving a package including upgrade types each identifying a different upgrade subcomponent of the package; receiving a metadata file describing the package; receiving selection information identifying one or more of the upgrade types of the metadata file, wherein the one or more upgrade types identified by the selection information denote one or more corresponding upgrade subcomponents of the package to be upgraded; and performing first processing that upgrades a system in accordance with the metadata file and the selection information. The metadata file may identify an order for installing upgrade subcomponents, which upgrade subcomponents may be installed in parallel, and dependencies between different upgrade subcomponents. Modules of a system may implement a multi-phase state machine. During installation of an upgrade subcomponent, the multiple phases may be completed in a specified order where code of the modules implementing each phase may be invoked.

Abstract: An information processing apparatus includes a memory and a processor configured to allow software to be installed onto the information processing apparatus even if a requirement is determined to be unsatisfied and to provide presentation so as to indicate that the software that has been installed is unavailable. The requirement is defined to run after installation the software to be installed.

Abstract: A computerized method of managing a computer remote session operation, comprising providing a server for hosting application execution; configuring a number of predefined user accounts with low security permissions on said server, where said user accounts are not tied to any specific real user; Whenever a remote user requests to start a remote session, finding an available user account not currently in use on said computer, allocating it for the remote session and marking it as unavailable for subsequent session requests; Generating a one-time password for said user account; Communicating the assigned user account identifier and temporary password to client component on the user's side, either directly or through an intermediate broker; causing the client component to connect to the server using said user account identifier and temporary password; and, upon termination of the remote session, deleting the assigned user account's data and marking it as available again.

Abstract: An example software patch difference device includes a processor to: receive current software version indicators of software installed at monitored devices; generate, using a cryptographic function, respective identifiers of the current software version indicators for the monitored devices; retrieve, from storage, respective previous identifiers of previous software version indicators of the software installed at the monitored devices, the respective previous identifiers generated using the cryptographic function; compare, for the current software version indicators, a respective identifier with a respective previous identifier; when a difference is determined therebetween for a given device: replace, at the storage, respective previous software version indicators for the given device with respective current software version indicators; and transmit, to an analytics device, a respective software change indicator of the given device, to trigger the analytics device to generate a report indicating statistics fo

Abstract: Automatic updating of an application executing on an application server is disclosed. A remote agent receives, from a request processor, an indication that a request for service has been received, the request for service being directed toward an application executing on an application server. The remote agent receives, from a local agent associated with a development environment, a file associated with the application. The remote agent updates the application to utilize the file and informs the request processor that the application may receive the request for service.

Abstract: Implementations described herein relate to methods, systems, and computer-readable media for automated computer configuration. In some implementations, a method includes providing a configuration tool on a computer. The method further includes accessing a configuration file that includes configuration settings, wherein the configuration file is a plain text file. The method further includes selecting particular settings for the computer from the configuration settings based at least in part on the configuration file and identification information of the computer. The method further includes automatically configuring the computer with particular software that is identified based on the particular settings.

Abstract: A method of remediating system services relies on a first dependency graph with super nodes, to each of which a set of system services are assigned, and second dependency graphs, each of which represents dependencies among the system services that are in one of the sets. The method includes the steps of: comparing an actual configuration state of the system services to a desired configuration state of the system services to identify configurations that are in drift; identifying system services corresponding to the configurations that are in drift; determining an order of updating configurations of the identified system services using the first and second dependency graphs; and applying the desired configurations of the identified system services in the order determined, wherein after the configurations of an identified system service are updated, the system service executes with the updated configurations.

Abstract: The present disclosure relates generally to systems and methods for providing sets of compatible firmware versions (e.g., cross-compatibility solution) for flashing (e.g., programming or re-programming) different devices of a network of devices (e.g., an industrial automation system) when using a flashing application. Providing the compatible firmware versions of such network of devices may facilitate flashing the devices with compatible firmware, based on a topology of the network of devices, to prevent functional errors in the network of devices. The present systems and methods may also be applicable to determining and providing cross-compatibility solution between different firmware, as well as software, used by different devices of a network of devices.

Abstract: A System Solution automatically generates a set of Native and Non-Native Application Clients which include updating functionality capable of generating update commands to instruct the System Solution to generate an updated set of Native and Non-Native Application Clients. Using the generated Application Clients, an employee of a Business Entity coupled with the System Solution instructs the System Solution to create a new updated set of Native and Non-Native Application Clients that are automatically downloaded to devices used by the customers of the Business Entity. The System Solution also automatically generates an Update Command Dictionary which, when downloaded to a Manager Client Device, allows an employee of the Business Entity to use a General Third Party Application, such as a SMS, email, or messaging application commonly available on a mobile device, to generate update commands to instruct the System Solution to generate an updated set of Native and Non-Native Application Clients.

Abstract: Techniques are provided for identifying dependencies among multiple software entities. One exemplary method comprises scanning source code and/or configuration information of a given software entity to extract connection information for connections made by the given software entity with other software entities, wherein at least one connection made by the given software entity is an asynchronous connection that employs asynchronous messaging using an intermediate message broker; resolving at least one uniform resource identifier in the extracted connection information to obtain a corresponding network address; analyzing the source code associated with the asynchronous connection to determine whether the given software entity is a producer or a consumer associated with the asynchronous connection; and generating a dependency graph identifying a plurality of the other software entities that depend on the given software entity.

Abstract: Techniques are disclosed for analyzing documents to detect web components and the web frameworks in the documents. In at least one embodiment, a network analysis system is provided to passively detect web frameworks of documents. The network analysis system can render a document using a document object model to identify objects in the document that are defined as web components. A hash function may be applied to each of the objects to generate a hash signature for the object. Files defining web frameworks can be downloaded from a repository system. Each file may corresponding to a web component. A hash function is applied content in each file to generate a hash signature. The hash signatures of each file may be compared to the hash signatures of the objects in the document to identify a web component for each object. A web framework can be identified based on the web components.

Abstract: Methods, systems, and computer program products for assisting dependency migration are provided herein. A computer-implemented method includes determining differences between a first version of a dependency used by a software application and each of a plurality of upgrade candidates, the plurality of upgrade candidates comprising at least one of: (i) one or more newer versions of the dependency and (ii) a substitute dependency; identifying, based on the determined differences for a given one of the upgrade candidates, one or more sections of code of the software application that need to be patched in order to be compatible with the given upgrade candidate; and generating a modified version of the software application for the given upgrade candidate that comprises one or more patches for at least a portion of the identified one or more sections of code.

Abstract: A system and method for generating regular expressions to identify vendors to enable improved financial data transfer from a first computer system to a second computer system is provided.

Abstract: An information processing apparatus includes a processor and a storage device. The storage device stores software including plural element programs to be executed by the processor. At least one of the plural element programs causes the processor to execute a specific process in the case where a different element program is being updated. The specific process includes handling a situation in which the different element program is being updated.

Abstract: Systems and methods for creating application runtime environments or application environments that can be downloaded and integrated into the computing environment of a computing device are disclosed. One embodiment of the invention includes a computing device on which an operating system is installed that creates a computing environment, an Application Platform application, where the Application Platform application is at least partially natively implemented and creates an application runtime environment when executed by the computing device, and a cross-platform application, where the cross-platform application is configured to be executed within the application runtime environment and is not natively executable by the computing device. In addition, the Application Platform application is configured to integrate the cross-platform application into the computing environment of the computing device by providing at least one launch point for the cross-platform application within the computing environment.

Abstract: Methods and systems may be configured to verify proper installation of Internet Protocol (IP) connectable building automation devices by installers at remote sites. The installers may be a crowdsourced installers. A service provider may engage an installer to install one or more IP connectable building automation devices. To ensure verification that the one or more IP connectable building automation devices are installed properly, parameters or values based on data from installed IP connectable building automation devices may be provided to or determined by a blockchain network. The blockchain network may compare the parameters or values to thresholds and automatically provide an indication as to whether the parameters or values meet or exceed the thresholds (e.g., verification criteria).

Abstract: Storage management techniques involve: generating, based on a first file created at a first time, a first package including first file information, information regarding a physical location of the first file and a first block associated with the first file; generating an upgrade package from a second package based on the first package, the second package based on a second file created at a second time prior to the first time, the second package including second file information, information regarding a physical location of the second file and a second block associated with the second file; and transmitting the upgrade package to an HCI system node for upgrade. The techniques may also include upgrading the node based on the upgrade package and the second block. Accordingly, installation time is saved, the normal operation of the node is ensured and the influence over other nodes is reduced.

Abstract: In non-limiting examples of the present disclosure, systems, methods and devices for exposing computing service skills are presented. A task intent associated with a natural language input may be identified. A plurality of add-in matching language models may be applied to the natural language input, wherein each add-in matching language model corresponds to a computing service skill. A score for each of the computing service skills may be generated. Each of the computing service skills may be ranked. A selectable option to execute an add-in associated with a top ranked computing service skill may be caused to be displayed. An indication that a selection of the option has been made may be received. The add-in associated with the top ranked computing service skill may be executed.

Abstract: A method and system for populating a software catalogue in software applications which monitor the presence of software products on a plurality of computers. The proposed method aims at populating a software catalogue with a limited manual intervention of an administrator. The present invention reduces the cost of producing and maintaining a comprehensive knowledge base (the catalogue) which contains definitions of software products and the related signature. Information about software products and their related signature is obtained through a process using some special files (e.g. XML files) which contains information and/or pointers to other products.

Abstract: An information handling system may include a processor and a memory communicatively coupled to the processor. The information handling system may be configured to: receive, for each of a plurality of target information handling systems, information regarding software to be burned to the respective target information handling system; receive, for each of the target information handling systems, information regarding testing time; based on a statistical analysis of the information regarding the testing time, determine a predicted burn time for each target information handling system; and based on the respective predicted burn times, determine a desired order in which the target information handling systems are to be burned with the software.

Abstract: A system for application monitoring includes an interface to receive an indication regarding an application. The system includes a processor to determine whether the application is compliant based at least in part on a set of policy rules, and in the event that the application is compliant, provide an indication that the application is compliant.

Abstract: A novel and useful system and method of time traveling source code debugging including several advanced capabilities that significantly improve the source code debugging process. Upon hitting a breakpoint or opening a dump file, the debugger travels to the future which can be altered by a user by modifying code on the fly (live coding) and receiving immediate feedback to validate bug fixes. Visual annotations including values of variables and expressions are provided as a heads up display effectively flattening time and space. A pivoting capability allows a user to switch the execution context of the code at any time. Point in time links that store the state of the debugging session can be created and activated. An asynchronous collaboration and messaging system enables multiple participants to share a debugging session. An optional redaction capability is also provided for obscuring or replacing sensitive private information.

Abstract: Systems and methods are provided for coordinating the deployment of frontend assets to defined user groups. Individual groups of users may be assigned to a track comprising a set of frontend assets. Each set of frontend assets may comprise each of the individual components required to generate an entire frontend for an application. In some embodiments, different versions of a single component may be assigned within different tracks. As such, one set of users may be provided a first version of an application and a second set of users may be provided a second version of that application. By associating a new or updated version of a component to a given track, a new or updated version of a component not yet ready for widespread deployment may be provided to only a limited number of users.

Abstract: Novel tools and techniques might provide for implementing remote application access, and, in some cases, by instantiating an application or service close to the intended recipient or user of the application or service, from a networking perspective. A network might provide connectivity between a first computer and a second computer. A file (comprising an application and data) might be transmitted, over the network, from the first computer. A node in the network, which might be on a path between the first and second computers, might determine that the file contains the application and the data, and, based on such determination, might capture the file (before the second computer can receive it). An instance of the application might be instantiated on a compute surface in the network as a service for the second computer, such that the compute surface can operate on the data with the instance of the application.

Abstract: Systems and methods for discovery of and planning migration for computing nodes are provided. At least one collector node is deployed at a source location network to discover data associated with computing nodes of a source infrastructure. The data is transmitted to a staging API. A migration processing API receives the discovered data from the staging API after satisfying an access control measure and writes the discovered data to a migration database. A migration planning API analyzes the discovered data written to the migration database by applying a criticality algorithm to determine a criticality parameter associated with each of the computing nodes. The criticality parameter identifies a potential impact that each computing node has to migration. The migration planning API automatically groups the computing nodes into migration pods, prioritizes the migration pods based on the criticality parameters, and generates a plan for migrating the migration pods to a target infrastructure.

Abstract: The present disclosure relates to related methods, systems, and media containing instructions for detecting security risks related to a software component deployable in a container-based runtime environment. The method comprises receiving a trigger, the trigger indicating that a layer of a container within the container-based runtime environment is to be checked for security risks. A check layer of the container is identified that is to be checked for security risks. A determination is made that a check for security risks has not been previously performed for the check layer according to a check criterion, and responsive to this determination, a determination is made that a security analysis indicates a security risk. Responsive to this determination, a remedial action may be initiated.

Abstract: A system for performing software updates for building devices of a building includes a thermostat associated with one of multiple zones of the building and a controller. The controller includes a processing circuit configured to store thermostat software in a memory device of the processing circuit, the stored software being software for the thermostat and determine, by communicating with the thermostat, whether thermostat software run on the thermostat is newer or older than the thermostat software stored in the memory device. The processing circuit is configured to update the thermostat software run on the thermostat with the thermostat software stored in the memory device in response to a determination that the thermostat software run on the thermostat is older than the thermostat software stored in the memory device and operate building equipment to control an environmental condition of the building.

Abstract: Techniques are described herein that are capable of dynamically installing plugin(s) for application(s). An agent plugin is caused to run in a deployment of a specified application (e.g., across multiple machines in a cloud environment or “on premises”). The specified application is packaged to include the agent plugin. The agent plugin is used to install designated plugin(s) dynamically based on configuration information regarding the specified application. The configuration information indicates that the designated plugin(s) are to be installed in response to the specified application being deployed.

Abstract: Systems and methods are provided for obtaining one or more source code files that correspond to a software program. At least one first software package that is separately executable from the software program is obtained, the first software package including one or more source code files. At least one first callable library for the first software package and at least one first invocation mechanism for calling the first callable library are generated. A composite software program that is capable of invoking at least the software program and the first callable library for the first software package using the first invocation mechanism is generated.

Abstract: Automated evaluation and reporting of microservice regulatory compliance during development and operation are provided. The method includes parsing, by a natural language parser, the set of regulations for which microservice compliance is to be evaluated, and generating an ontology including attributes, rules and policies obtained from parsing the set of regulations. A rules engine is created according to the ontology. The rules engine includes compliance rules, and an application program interface (API) that allows responses to compliance queries derived from one or more of the compliance rules. The rules engine receives responses to the compliance queries, with the microservice being instrumented with a message queue invocation as one or more annotations to facilitate processing the compliance queries. The rules engine generates a regulation-compliance report for the microservice based on the received responses to the compliance queries.

Abstract: An architecture for a server build is provided. The architecture may include a plurality of execution stages which may be divided into a plurality of steps. Each of the execution stages may be implemented on a server to complete a server build request. The architecture may further include an execution stage selector configured to identify, within a plurality of servers, a server that may have an availability to execute the request. The selector may be further configured to execute the request on the available server and record the order of each of the plurality of steps within each of the plurality of execution stages being executed on the server. In response to a failure, the selector may be configured to pause execution, determine a failed step within the execution stage, analyze the prior executed steps, and determine any prior executed steps that the failed step may depend from.

Abstract: The method includes identifying, by one or more computer processors, a first container with first software stack and a valid multipath configuration, wherein the first software stack is a first path of the valid multipath configuration. The method further includes creating, by one or more computer processors, a second container, wherein the second container has the same rules as the first container. The method further includes creating, by one or more computer processes, a second software stack in the second container, wherein the software stack is a redundant software stack of the first software stack. The method further includes creating, by one or more computer processors, a second path from the first container to the second software stack, wherein the second path bypasses the first software stack.

Abstract: An embodiment may involve receiving a request to install or upgrade a performance analytics dashboard of a graphical user interface displayed on a client device. The performance analytics dashboard may define a data visualization related to a particular key performance indicator. A data model may represent configuration and operational characteristics of computing devices disposed within a managed network. The configuration and operational characteristics may include key performance indicators. The embodiment may also involve determining that installing or upgrading the performance analytics dashboard requires updating data within the data model. The embodiment may also involve receiving, by way of the graphical user interface, permission to update the data within the data model. The embodiment may also involve updating the data within the data model then installing or upgrading the performance analytics dashboard.

Abstract: A disclosed system generates a baseline configuration manifest indicative of a known good state of a plurality of information handling modules. Configuration update information indicating updates to the modules and dependencies between or among the information handling modules is received. The information handling system may then be updated in accordance with the configuration update information. The baseline configuration manifest may include a plurality of module manifests corresponding to the plurality of information handling modules and updating the information handling system may include updating the one or more information handling modules in a sequence determined by update sequence information. The configuration update information may include one or more update payloads corresponding to one or more of the information handling modules. In such cases, updating the information handling system may include providing each of update payload to its corresponding information handling module.

Abstract: Embodiments of an invention for monitoring the operation of a processor are disclosed. In one embodiment, a system includes a processor and a hardware agent external to the processor. The processor includes virtualization logic to provide for the processor to operate in a root mode and in a non-root mode. The hardware agent is to verify operation of the processor in the non-root mode based on tracing information to be collected by a software agent to be executed by the processor in the root mode.

Abstract: In order to maximize the availability of a television receiver/decoder housing, the invention enables the download of updates while said housing is being used. In order to do so, when the housing detects that an update is available, the housing allocates itself a portion of the acquisition resources of the update in order to store this update in a housing storage memory. Once the download is complete, the user can either activate the update or carry on using a former version of the housing application, the user thus being able to select a microcode version which is activated by default on switching on the receiver/decoder housing.