144 results about "Event (computing)" patented technology

Techniques for fast recovery and/or balancing of connections to a clustered computing system provide management of such connections by determining a number of connections to load balance across nodes and by triggering creation of such connections. In one aspect, a notification of an event regarding the clustered computing system is received by a connection pool manager, a pool of connections to the system is identified based on the notification, and one or more connections from the pool are processed in response to the event. According to an embodiment, the notification comprises the identities of the service, database, server instance and machine that correspond to the event.

The invention provides an event element extraction method and device, computing equipment and a storage medium, and the event element extraction method comprises the steps: obtaining an input text, and determining a relation feature vector of each word in the input text; Obtaining argument of each word in the input text through a semantic role labeling model based on the relation feature vector ofeach word in the input text; Obtaining entity words contained in the input file and types and position information of the entity words through a named entity recognition method; Determining an eventelement type needing to be extracted according to the event type of the input text, and performing element alignment on the words corresponding to the arguments and the entity words based on the typesof the event elements needing to be extracted, the arguments and the types and position information of the entity words, and determining names of the types of the event elements and the correspondingentity words in the input text.

An architecture that supports the instrumentation of software to generate structured information about its operation. A library of methods and data structure definitions is provided to a developer of a piece of software. The developer includes calls to the methods in order to signal the fact that a given event has occurred. The developer may also cause the program to provide information descriptive of the event by populating data structures defined in the library. The library methods may also contribute to the population of these data structures. In a distributed computing environment in which tasks are performed through a series of calls to remote computers, “per-task” tracing may be performed by sending trace instructions to the remote computers along with the remote calls.

The invention discloses a monitoring method and device of a JAVA application system in running. The JAVA application system monitoring method mainly comprises the steps of: describing a monitored class or method and a monitor control index through a configuration file; (2) modifying starting parameters of an application program, and loading Agent when a JVM (Java Virtual Machine) is started; (3) reading the configuration file by the Agent, and registering an event to be noticed according to a monitoring requirement; (4) obtaining a notice by the Agent when the application program runs and a specified class is loaded; (5) modifying a bytecode of a corresponding class by the Agent, and adding a logic required in monitoring; (6) initializing relevant index variable by the Agent; (7) automatically executing the monitoring logic when the monitored method is called, and obtaining the original data of the relevant index; and (8) computing the value of the relevant index by the Agent according to the description of the configuration file. By applying the JAVA application system monitoring method disclosed by the invention, the ability of an IT (Information Technology) operation and maintenance staff for diagnosing, analyzing, positioning and solving faults of an IT system can be improved remarkably.

Certain example embodiments relate to a monitoring system for monitoring the operation of distributed computing components. The monitoring system includes a registry for storing descriptions of the computing components and at least one associated service-level agreement (SLA) specifying at least one performance requirement; a compiler for generating at least one first and second continuous query based on the information stored in the registry; and a complex event processing (CEP) engine for executing the at least one first continuous query on input events indicating actions performed by the computing components and corresponding performance information, and for producing at least one output event indicating a violation of at least one SLA. The CEP engine also executes the at least one second continuous query on input events indicating a violation of at least one SLA, and produces at least one output event indicating a relationship between at least two SLA violations.

In some examples, a server may receive a set of events from individual computing devices of a plurality of computing devices. For example, the server may receive first data identifying a first set of events that occurred on a first computing device and receive second data identifying a second set of events that occurred on a second computing device. The server may determine an event rate at which events are being received based at least in part on: the first set of events, the second set of events, and a time interval. The server may perform an analysis of at least the first set of events and the second set of events, and create, based on the analysis, a policy to reduce the event rate. The server may provide the policy to at least the first computing device and the second computing device.

A system for remediating computing-related events by taking into account the past performance of remediation processes and the current run-time environment in which the remedy will be deployed. Robotic Process Automation is implemented to identify computing-related events requiring automation and to record actions that are taken to remediate the events. Robotic scripts (bots) are created based on the recorded actions and are implemented in a learning-mode, in which run-time conditions and level of performance are recorded, such that, run-time conditions and performance are determinative of which bot or combination of bots are implemented for subsequent occurrence of computing-related events. Additionally, remedial process associated with the bot(s) may be executed in a simulated environment prior to the production run-time computing environment to validate the bot and insure the likelihood of effective performance of the remedial process in the run-time production environment.

An efficient and adaptive middleware infrastructure called the Event Heap system dynamically coordinates application interactions and communications in a ubiquitous computing environment, e.g., an interactive workspace, having heterogeneous software applications running on various machines and devices across different platforms. Applications exchange events via the Event Heap. Each event is characterized by a set of unordered, named fields. Events are routed by matching certain attributes in the fields. The source and target versions of each field are automatically set when an event is posted or used as a template. The Event Heap system implements a unique combination of features, both intrinsic to tuplespaces and specific to the Event Heap, including content based addressing, support for routing patterns, standard routing fields, limited data persistence, query persistence/registration, transparent communication, self-description, flexible typing, logical/physical centralization, portable client API, at most once per source first-in-first-out ordering, and modular restartability.

The present invention provides for real-time (or near real-time) processing of computing events that are triggered by a threshold level being met by data detected at Internet-of-Things devices and, in response to meeting the threshold, communicating an event processing request to a real-time event-mediating channel. The real-time event-mediating channel is capable of processing such events in real-time or near real-time by storing event commitment records in a distributed blockchain network that authenticates a user associated with an event and authorizes an event facilitating entity to access a resource depository associated with the event.

An event log can comprise, not only entries associated with components instantiated since a most recent power on of a computing device, but also entries of components instantiated prior to that power on, such as components that were instantiated, and represent, a state of the computing device prior to hibernation that has now been resumed. Upon hibernation, the current values of the Platform Configuration Registers (PCRs) of a Trusted Platform Module (trusted execution environment), as well as a quote of those current values, and a current value of a monotonic counter of the trusted execution environment can be logged. The monotonic counter can be incremented at each power on to track successive generations of the computing device and to guard against an intervening, not-logged generation. A subsequent parsing of the event log can verify the prior generational entries with reference to the PCR values in the log that are associated with those generations.

A system and method for nexting is presented. The method comprises computing an expected event, observing a new event, when the expected event matches the new event, processing the new event and performing action in accordance with given concepts, when the expected event does not match the new event and the new event can be explained based on the given concepts, processing the new event and performing action in accordance with the given concepts, and when the expected event does not match the new event and the new event cannot be explained based on the given concepts, employing learning mechanism and performing action decided on by the learning mechanism. In one aspect, the method comprises generating new concepts using reasoning or learning. In one aspect, the method comprises converting sensed numerical data into events of interest via the application of learned functions operating on the numerical data.

The invention discloses a text-based event pushing method and device, electronic equipment and a storage medium, and relates to the technical field of knowledge graphs, deep learning, natural languageprocessing and cloud computing. According to the specific implementation scheme, the method comprises the steps: obtaining text content of the target event type, performing word segmentation processing on the text content; obtaining a word sequence containing a plurality of words; inputting the word vectors of the words in the word sequence into a sequence labeling model corresponding to the target event type to mark event attributes for all words in the word sequence; according to the marked event attributes of the words in the word sequence, generating the description information of the target event type, pushing the description information to the clients paying attention to the target event type so as to be displayed on the clients. The description information of the target event typecan be automatically generated and displayed on the clients, and the efficiency and comprehensiveness of obtaining the related information of the concerned event by the user are improved.

A method to detect anomalous behavior in an execution environment. A set of system events captured from a monitored computing system are received. Using the received system events, a model is then trained using machine learning. The model is trained to automatically extract one or more features for the received set of system events, wherein a system event feature is determined by a semantic analysis and represents a semantic relationship between or among a grouping of system events that are observed to co-occur in an observation sample. An observation sample is associated with an operating scenario that has occurred in the execution environment. Once trained, and using the features, the model is used to detect anomalous behavior. As an optimization, prior to training, the set of system events are pre-processed into a reduced set of system events. The modeler may comprise a component of a malware detection system.

A computer system and a method are provided that reduce the amount of time and computing resources that are required to perform a hardware table walk (HWTW) in the event that a translation lookaside buffer (TLB) miss occurs. If a TLB miss occurs when performing a stage 2 (S2) HWTW to find the PA at which a stage 1 (S1) page table is stored, the MMU uses the IPA to predict the corresponding PA, thereby avoiding the need to perform any of the S2 table lookups. This greatly reduces the number of lookups that need to be performed when performing these types of HWTW read transactions, which greatly reduces processing overhead and performance penalties associated with performing these types of transactions.

A system for automating data processing is presented. The system comprises an end-user programming module that is integrated with an underlying file system and that maps an event of a computing system to at least one automatic action that is defined by an end user. The system also includes an event handler that responds to events and causes the at least one automatic action to be performed. Methods of using the system are also provided.

Systems and methods for process models to determine systems behavior and vulnerabilities are provided. In one embodiment, a method comprises collecting event logs from monitoring systems communicatively coupled to a computing device, each event log indicating an event occurring at a given time at a given activity within a process, measuring transition times between activities of the process from the event logs, calculating, from the measured transition times, a capacity of an activity of the activities, inferring behavior and vulnerabilities of the process based on one or more of the measured transition times and the capacity, and generating natural language output indicating the inferred behavior and vulnerabilities of the process. Further, simulations of the process are performed with statistical data regarding the event logs as input. In this way, aspects of a process such as an operational process in need of attention or vulnerable to external attacks may be rapidly identified and actions for resolution may be automatically recommended.

Techniques for efficient program deobfuscation through system application program interface (API) instrumentation are disclosed. In some embodiments, a system/process/computer program product for efficient program deobfuscation through system API instrumentation includes monitoring changes in memory after a system call event during execution of a malware sample in a computing environment; and generating a signature based on an analysis of the monitored changes in memory after the system call event during execution of the malware sample in the computing environment.

Method and system for managing asynchronous event notifications (AENs) including comparing an AEN sequence number at a shared memory location with an AEN sequence number at a local memory location controlled by a application; acquiring an AEN from the shared memory, if the sequence number of the AEN in the local memory is different from the sequence number of the AEN in shared memory; determining if a version number of the AEN is current; and generating an AEN if the version number is not current, wherein the generated AEN allows other applications to update AEN version numbers. The system includes firmware code executed in an adapter; an adapter driver executed on a host computing system stores the AENs in a memory buffer; and a plurality of applications that use a shared memory where AENs and a version number associated with the AENs are stored.

A computing device's settings, specifically audio or video settings are adjusted based on a status and/or location of an event participant carrying the device. An event coordination service or an application on the computing device may match the participant's status and location to event location information. Upon matching either status or location, the computing device's settings may be modified to prevent audio feedback by any audio equipment at the event location or similar video interference.