50results about How to "Reduce performance overhead" patented technology

The invention aims to provide an efficient memory allocation and recovery method for an Android device, and relates to the technical field of memory processing, the method comprises the following steps: step 1: obtaining running data of the Android device, and calculating a memory state entropy based on the running data; calculating a memory fragment risk degree in combination with the priority matrix and the operation data; 2, calculating a memory allocation dynamic threshold according to the memory fragmentation risk degree; calculating a self-adaptive memory compression rate; step 3, using a self-adaptive memory compression rate to compress memory data which is not used by the Android device at present; the page number of the activity process is lower than the set minimum page threshold value; 4, if the memory fragmentation risk degree exceeds a set fragmentation threshold value, the Android device executes memory fragmentation; and averagely distributing the residual memory capacity to all the active processes. According to the invention, accurate allocation and efficient recovery of memory resources are realized.

The invention belongs to the technical field of cloud computing, and discloses a lightweight multi-domain hyper-fusion platform construction method compatible with heterogeneous hardware resources, which adopts a lightweight hyper-fusion platform architecture compatible with the heterogeneous hardware resources, converts physical resources into virtual resources on a virtual machine based on a KVM (Kernel-based Virtual Machine), shields the difference of underlying hardware, and improves the performance of the platform. According to the method, heterogeneous storage resources are integrated based on Ceph, and storage devices of different manufacturers are integrated into a unified storage pool through a distributed storage technology without being limited by types of bottom hardware devices. Through the SDN technology, the OpenStack network service can decouple a network control plane and hardware, and unified management of different network devices is realized. Through a virtualization technology and an automatic management tool, a simplified elastic expansion solution is provided, and changes of resource demands are easily coped with.

The present invention provides a data encryption storage method based on the national secret algorithm, which belongs to the field of data security. The present invention includes four parts: the issuance of the agreed key, the generation of the master key, the generation of the data key, and the data encryption; the key management service is the key life cycle management center, which is responsible for the centralized management of the key. The key cannot be obtained from the outside, and the data key can be derived from the master key for use; the encryption and decryption of the data is realized locally by securely transmitting the data key. The risk of data storage is reduced and the security of the encryption key is improved.

The invention discloses a compiling method for compiling a C language source code into an RISC-V assembly code. The method comprises the following steps: acquiring a C language source code; performing lexical analysis on the C language source code to generate a mark flow; performing syntactic analysis on the mark flow, and constructing an abstract syntax tree; performing semantic analysis on the abstract syntax tree to generate a target abstract syntax tree; constructing a runtime environment of the RISC-V assembly code; generating an intermediate code and a control flow diagram corresponding to the intermediate code according to a rule in the runtime environment and the target abstract syntax tree; generating a target code by using the intermediate code and the control flow diagram corresponding to the intermediate code; according to the technical scheme, the intermediate representation more adaptive to RISC-V custom instruction mapping can be generated, so that the execution efficiency of assembly codes is improved; and meanwhile, by designing a lightweight runtime environment, the performance overhead is further reduced.

The invention provides a virtual object control method and device, electronic equipment and a readable storage medium, and the method comprises the steps: providing a game scene corresponding to a game match in response to a match start instruction, and the game scene comprises a first game role and a second game role which respectively play a first game identity; in response to the situation that the first game role in the game scene is corrupted by the second game role, the first game role is controlled to be converted into the second game identity from the first game identity, so that the first game role continues the current game with the second game identity. Therefore, the data processing amount of the server can be reduced, and the performance overhead of the game server can be reduced. Meanwhile, for the player controlling the first game role which is corrupted, the player cannot quit the current game immediately after being corrupted, the chance that the player continuously participates in the current game to corrupt the second game role to pick up falling materials can be obtained again, and the game experience of the player is further improved.

The embodiment of the invention provides a memory leak detection method and device, equipment and a storage medium, and relates to the technical field of operating systems and performance tuning. The method comprises the following steps: monitoring memory allocation and release operation of a process by adopting a probe program; collecting memory use information of a stack of the process on memory allocation and release operation; through a collaborative caching mechanism of a kernel mode and a user mode, sharing memory use information to the user mode, and analyzing the memory use information in the user mode to obtain a comprehensive hotspot score representing a memory occupation growth trend of a stack; and determining whether the stack has memory leak according to the comprehensive hotspot score. Based on the method, whether the memory leaks or not can be accurately detected under the condition of low performance overhead.

The present application discloses a rendering method, device, electronic device and readable storage medium, the method comprising: receiving a terrain prosthesis generated according to real terrain, and generating the material and texture of the terrain prosthesis, wherein the terrain prosthesis is a static grid; dividing the scene to be rendered into near-view terrain and far-view terrain according to the position information of the target virtual character in the scene to be rendered; generating a level model according to the real terrain corresponding to the near-view terrain; merging the level model with the terrain prosthesis to achieve the rendering of the scene to be rendered. The present application uses less memory, reduces the frequency of IO, and achieves a balance between effect and performance overhead while ensuring far-view effect and terrain effect; for players, based on the different performance of players' mobile devices, the memory and performance overhead are reduced as much as possible while ensuring a relatively ideal effect, which greatly improves the gaming experience.

The invention relates to a self-adaptive management method and system for a database plan cache, and the method comprises the steps: firstly judging whether the plan cache is hit or not after a database receives an SQL statement, and triggering a hard analysis generation plan and caching the plan when the plan cache is not hit; if the cache is hit, further judging whether a corresponding multi-execution plan exists or not; and when only a single execution plan exists, analyzing the relationship between the number distribution of execution tuples and the number of execution times by adopting an execution efficiency algorithm to dynamically judge whether the data is inclined. And when a plurality of execution plans exist, entering a multi-plan cache management stage, selecting the execution plans according to a matching result of the current binding variable predicate selection rate and the cache plan historical selection rate, and generating and caching a new plan when the matching fails. According to the method, the data skew is accurately identified by executing the efficiency algorithm, intelligent matching and multiplexing of plans are realized by means of a multi-plan cache management mechanism, and the overall performance of the database in a data skew scene is improved.

This invention discloses a fuzz testing method based on program termination points, comprising: inserting breakpoint instructions at the entry point of each basic block of the module under test; constructing a set of mutation seed files based on an initial seed file set, and providing each mutation seed in the set to the program under test for testing; loading an auxiliary tracing module in the debugger, recording the sequence of basic blocks executed by the program under test through a breakpoint tracing mechanism, and determining the termination basic block; triggering potential vulnerabilities in the program under test through continuous testing; simultaneously optimizing the seed mutation strategy based on coverage; during test execution, when the program under test triggers a debugging exception or a crash signal by executing a breakpoint instruction, the debugger pauses the execution of the program under test and resumes the original instructions; after the breakpoint handling is completed, the execution of the program under test is resumed, allowing it to continue running until the next breakpoint is encountered or execution ends; the test is completed when the test process reaches the preset termination conditions, and a test report is generated.

The embodiment of the invention provides a debugging method and device, electronic equipment, a storage medium and a computer program product, the debugging method is applied to a processor, the debugging method comprises the steps that an insertion enable signal is acquired, and the insertion enable signal is used for indicating an instruction fetching position of the processor; under the condition that the insertion enable signal is the first enable signal, taking out an original instruction from a target buffer area of the processor, and executing the original instruction; wherein the first enable signal represents that the processor fetches an instruction from a target buffer area, and the target buffer area is used for storing an original instruction at a target address where the breakpoint instruction is inserted.

A method comprises detecting execution of a fork() operation in a cryptographic computing system that generates a parent process and a child process, assigning a parent kernel data structure to the parent process and a child kernel data structure to the child process, detecting, in the child process, a write operation comprising write data and a cryptographic target address, and in response to the write operation blocking access to a corresponding page in the parent process, allocating a new physical page in memory for the child process, encrypting the write data with a cryptographic key unique to the child process, and filling the new physical page in memory with magic marker data.

The application relates to a data packet processing method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: obtaining a storage unit identifier from an idle address index, storing a data packet in a storage unit corresponding to the storage unit identifier in a data buffer, recording a channel identifier of the data packet, and storing the storage unit identifier in a channel index corresponding to each target sending channel according to the channel identifier; obtaining the storage unit identifier from the channel index corresponding to a current sending channel, reading the data packet from the corresponding storage unit according to the storage unit identifier and sending the data packet through the current sending channel, deleting the current sending channel from the channel identifier, and recycling the corresponding storage unit identifier to the idle address index when the target sending channel does not exist in the channel identifier. The method can improve the buffer utilization rate in the multi-channel data packet forwarding process and avoid storage space waste.

The invention relates to an image processing method and device, a medium and electronic equipment, belongs to the technical field of computers, and can realize regional color change at low cost. The image processing method comprises the steps that a to-be-processed image is received, and the to-be-processed image comprises a target area of which the color needs to be changed; converting an original color channel sequence of the to-be-processed image into a target color channel sequence to obtain a first intermediate image; an image processing model is adopted to carry out stylization processing on an area, corresponding to the target area, in the first intermediate image, a second intermediate image is obtained, and the color of the area, corresponding to the target area, in the second intermediate image is different from the color corresponding to the target color channel sequence; the color channel sequence of the second intermediate image is restored to the original color channel sequence, a target image is obtained, and the color of an area corresponding to the target area in the target image is different from the color of the target area in the to-be-processed image.

The invention discloses a high-modulus grid surface reduction optimization method and application thereof in cruise ship decoration engineering modeling, a point cloud grid high modulus is obtained through three-dimensional laser scanning reverse modeling, surface reduction is implemented through an edge folding algorithm based on geometric errors, the algorithm execution efficiency is high, and the method is suitable for large-scale popularization and application. The number of grids is greatly reduced while details are reserved, and the polygonal broken line feeling of the grids in the visual effect after surface reduction is effectively solved through unique grouping rendering. In addition, a parameter setting and grouping rendering method of three-dimensional laser scanning reverse modeling on the cruise ship is combined, and a set of model high-quality and light-weight solution is provided for cruise ship decoration engineering modeling based on high-modulus grid reduction optimization.

The application discloses a service request processing method and device, electronic equipment and a storage medium. The method creates an independent counting unit for each time window, and destroys the counting unit associated with the target time window if the life cycle of the time window ends. In this way, the service requests of a preset type in each time window can be counted independently, and only the number of service requests of the preset type needs to be accumulated, without performing the complex and error-prone deduction operation in the conventional technology. On the one hand, since the data deduction operation is saved, the implementation complexity and performance overhead of the system are reduced, and the stability and reliability of the system are enhanced. On the other hand, in a high-concurrency environment, the system only needs to process the number accumulation process of the service requests of the preset type, reduces the competition for resources of the data accumulation and data deduction processes, and improves the accuracy of the counting result and the system state determination.

This invention belongs to the field of computer security technology and relates to a container isolation and hardening method and system based on restricted eBPF technology. The method mainly includes: constructing an eBPF program capable of hardening container security isolation; attaching the eBPF program to kernel hook points; triggering the eBPF program and executing corresponding security protection logic when the kernel executes a critical point on a specific path; constructing a two-level eBPF function permission restriction model based on eBPF program granularity and eBPF helper function granularity; and using this two-level eBPF function permission restriction model to restrict the eBPF functions of the container, enabling the secure use of eBPF technology in container isolation and hardening scenarios. This invention improves the security of container environment isolation while ensuring that eBPF technology itself is not maliciously exploited, making eBPF technology more adaptable to container environments and enhancing its flexibility and security at the container level.

The invention relates to the field of data processing, and discloses a risk management method and device for incremental codes and a storage medium. The method comprises the following steps: receiving code change information, and filtering the code change information to obtain an analysis source file; according to the abstract syntax tree, performing syntax analysis processing on the analysis source file to obtain an incremental code list; performing collection instrumentation processing on the target code to obtain a target instrumentation code; based on a preset JaCoCo tool, collecting incremental code coverage data of the target instrumentation code to obtain collected original data; performing cleaning association processing on the collected original data to generate structured coverage rate data; according to a preset detection threshold value, performing threshold value analysis on the structured coverage rate data to generate a risk result; based on the risk result, a management action is performed on the target code. In the embodiment of the invention, fine analysis of the coverage rate of the incremental code in the target code is realized, the performance overhead is reduced, and the risk management of the target code is improved.

The present application belongs to the technical field of integrated circuit design, and particularly relates to a hardware security speculation execution unit and method based on value prediction and early verification. In order to solve the problem that the existing security speculation mechanism leads to a significant decline in the instruction level parallelism of a processor, the hardware security speculation execution unit is tightly coupled in the out-of-order processor pipeline, and comprises a speculative value prediction module, data-independent speculation conversion and execution logic, and multi-stage early verification logic. The present application generates a predicted value completely irrelevant to the physical address of an operand through value prediction, converts an unsafe memory access instruction into a data-independent speculative memory access operation, and forwards data to wake up subsequent dependent instructions. At the same time, a traceless cache read request without changing any micro-architecture state and a conflict-free shared cache detection transaction with a timeout silence mechanism are used for early verification. The present application absolutely prevents speculation execution attacks, deeply restores system performance, and avoids bus congestion and deadlock risks.

This invention discloses a method for defending against cached covert communication on an ARM platform based on noise loading injection. Due to the expanding attack surface of TEEs and the vulnerabilities of TrustZone technology in microarchitectural isolation, cached covert communication has become possible. This invention adds a defense mechanism against cached covert communication based on TrustZone technology, designing a cached covert communication defense architecture based on noise loading injection. Based on this architecture, a dynamic monitoring mechanism, a strategy optimization mechanism, and a noise injection mechanism are proposed. The dynamic monitoring mechanism monitors system security and system performance. The strategy optimization mechanism generates the optimal noise injection strategy and calculates the noise injection frequency and intensity in real time. The noise injection mechanism loads data to resist cached covert communication. This defense method improves the security of the original architecture and achieves low performance overhead, balancing system security and performance.

The application discloses a real-time unified threat detection response method and system based on VPP, equipment and medium, mainly relates to the technical field of threat detection response, to solve the problem that the existing scheme has large performance overhead, cannot block threats in real time, and cannot fuse multiple detection engines. Including: adding firewalld node, APP node, security node; establishing a mapping table of rules between the rule feature library and the multi-mode matching database; the firewalld node obtains the session structure corresponding to the message; the message is transmitted to the APP node as message information, and the application protocol type is added to the session structure; the security node uses the threat detection engine corresponding to the rule in the multi-mode matching database to detect the threat of the protocol analysis content, obtains the execution action; the protocol analysis content and the execution action are stored in the session structure corresponding to the message.

This invention discloses a privacy data management method and computing gateway based on a serverless architecture, relating to the field of computer technology. One specific implementation of the method includes: receiving a service request sent by an upstream computing service application; determining a target lifecycle rule corresponding to the service request based on the identifier of the target computing service application in the service request; routing the service request with the target lifecycle rule added to it to the target computing service application, so that the target computing service application stores the target privacy data from the service request in memory; and controlling the visibility of the target privacy data to the computing logic of the target computing service application when the data in memory satisfies the target lifecycle rule. This implementation controls the visibility of privacy data based on the memory where the privacy data resides, which can reduce performance overhead, avoid key security issues, and has high management efficiency.

The invention provides a method and device for adding a watermark in an image, a storage medium and a program product, and relates to the technical field of image processing, the method comprises the following steps: if it is detected that a screen image of a cloud computer is changed, performing target detection in the changed screen image; if the target is detected, acquiring watermark information to be added; and adding the watermark information into the changed screen image. In the embodiment of the invention, under the condition of detecting that the screen image of the cloud computer is changed, if the target is detected in the changed screen image, the watermark is added, otherwise, the watermark is not added, so that the problems of performance overhead and user experience interference caused by the fact that the watermark always takes effect in a user session once the watermark is started are avoided, and the user experience is improved. Dynamic adding of watermarks is achieved, performance overhead is reduced, and user experience is improved.

The invention relates to the technical field of network security, in particular to an eBPF-based access control method and device and electronic equipment, and is used for improving the efficiency and accuracy of IP black and white list access control. The method comprises the following steps: receiving target network feature information of a to-be-detected network data packet; according to a preset access control rule, performing matching query on the target network feature information through an eBPF program to obtain a matching result of the to-be-detected network data packet; the access control rule is predefined by the user space and transmitted to the kernel space; the access control rule comprises at least one of the following rules: a blacklist rule used for defining a first network feature information set forbidden to access, and a white list rule used for defining a second network feature information set allowed to access; the matching result represents a matching relationship between the network feature information and the access control rule; and performing corresponding access control on the to-be-detected network data packet through the eBPF program according to a matching result.

The application discloses a memory management method and electronic equipment, and relates to the technical field of system security. The method comprises the following steps: obtaining a kernel native heap memory allocation function and a heap memory release function; obtaining a vulnerability object allocation function; monitoring the kernel heap memory allocation function and the vulnerability object allocation function through dynamic extension of a kernel program, collecting memory pre-allocation data according to a monitoring result, and performing a write operation on the memory; comparing double-boundary memory write operation parameters with the memory pre-allocation data, and detecting heap overflow of the memory write operation according to a comparison result; and in response to a detection result of the heap overflow of the memory write operation being failed, releasing an original memory application through the heap memory release function, and reallocating the memory application through a dynamic cache pool algorithm. The application can block privilege escalation and kernel crash caused by memory heap overflow in real time, solve the problems of memory fragmentation and defense lag, and significantly improve the continuous guarantee capability of a key business scenario.

The invention relates to the technical field of software testing, and discloses a code coverage rate determination method and device, a storage medium and a program product. The method comprises the steps that a to-be-executed target program is obtained, and the target program comprises a plurality of methods; pre-compiled statistical codes are inserted into all the methods of the target program, and behavior data of all the methods in the execution process are collected through the statistical codes; and processing the behavior data to obtain code coverage rates of different dimensions. By implementing the technical scheme of the invention, the behavior data of each method in the target program can be collected and processed to obtain code coverage rates of different dimensions, so that the comprehensiveness and effectiveness of software testing are improved.

The application discloses a binary program dynamic analysis method based on a process hollowing technology, utilizes a system kernel module to further expand the ability of a traditional binary dynamic plug-in tool when performing fine-grained analysis, constructs a brand-new fine-grained analysis environment in a new hollowing process by combining a code decoupling analysis thought, can reduce the influence on the execution of a target program, improves the application range and analysis reliability of binary analysis, and can reuse the function of an application layer dynamic plug-in tool. The application utilizes the operating system characteristics to realize more flexible and efficient analysis function, gives a hollowing process environment and an analysis task construction method, and can realize fine-grained data flow analysis on special binary programs such as a vulnerability exploitation program and a countermeasure malicious program. The application method can effectively improve the application range of binary program automatic analysis, simplifies the complexity of analysis memory management, and improves the performance and stability of dynamic analysis on binary codes.

The invention relates to a file management method, device and system and a storage medium. The method comprises the steps that when an operation request of a client for a target file is received, metadata management operation matched with the operation request is executed in an embedded database of a file management system through a metadata manager of the file management system, and metadata of the target file is obtained; the metadata comprises a data reference identifier; analyzing the data reference identifier to obtain a data storage position; the data storage position is used for indicating a storage position of the target file in a target data storage rear end, and the target data storage rear end is one of a plurality of data storage rear ends butted with a storage abstraction layer of the file management system; and executing a file management operation matched with the operation request on the target file based on the data storage position in the target data storage rear end through a storage abstraction layer of the file management system. According to the scheme provided by the invention, the problems of function redundancy and hierarchical redundancy in the related technology can be solved.