119 results about "Event count" patented technology

A network security system can have a plurality of distributed software agents configured to collect security events from network devices. In one embodiment, the agents are configured to aggregate the security events. In one embodiment of the present invention, an agent includes a device interface to receive a security event from a network device, a plurality of aggregation profiles, and an agent aggregate module to select one of the plurality of aggregation profiles, and increment an event count of an aggregate event representing the received security event using the selected aggregation profile.

An apparatus, method, and system are described herein for providing programmable control of performance/event counters. An event counter is programmable to track different events, as well as to be checkpointed when speculative code regions are encountered. So when a speculative code region is aborted, the event counter is able to be restored to it pre-speculation value. Moreover, the difference between a cumulative event count of committed and uncommitted execution and the committed execution, represents an event count/contribution for uncommitted execution. From information on the uncommitted execution, hardware/software may be tuned to enhance future execution to avoid wasted execution cycles.

A method of performance counting within a multi-threaded processor. The method includes counting events within the processor to provide an event count, and attributing the event count to events occurring within a thread of the processor or to events occurring globally within the processor.

A computer implemented sales prediction system collects data relating to events of visitors showing an interest in a client company from plural data sources, an organization module which organizes collected data into different event types and separates the collected event counts in each event type between non-recent events and recent events occurring within a predetermined time period, a first processing module which periodically calculates weighting for each event type based on recent events and non-recent events for the event type compared to totals for other selected event types, a second processing module which periodically calculates sales prediction scores for each visitor and companies with which visitors are associated based on the accumulated event data and weighting, and a reporting and data extract module which is configured to detect variation in sales prediction scores over time to identify spikes which can predict upcoming sales and to provide predicted sales information and leads to the client company.

A system comprising a measurement device and a handheld device is disclosed, the system adapted to withstand, detect, record, and display heat cycle event counts. The measurement device comprises a sensor for measuring and a heat cycle detection unit. The heat cycle detection unit comprises a temperature or pressure responsive element, a detection module, data interface, and data memory. The handheld device comprises a screen, a button, a communication circuit, and a processing system. The communication circuit is configured to communicate with the measurement device and a computing device and the processing system is configured to receive non-measurement information from the measurement device, display the received information on the screen, and cycle the received information displayed on the screen based on an actuation of the button, wherein the handheld device is used to display a heat sterilization cycle count of the measurement device.

Systems and methods implement queues that perform write operations in a re-circulating sequential manner. The nature of the queue systems of the present invention allow writes to the queue to occur independently of read operations therefrom. A current event counter is updated by the queue logic to keep track of a count value that corresponds to the total number of data events written to the queue. Preferably, the current event counter is capable of counting an amount greater than the total number of addressable storage locations of the queue. A write pointer may be derived from the count value stored in the event counter from which a select addressable storage location of the queue can be determined for queuing each new data event. Read operations from the queue may be performed according to any prescribed manner, including random access thereto. Moreover, read operations can be performed in a first manner when no overflow is detected, and in a second manner in response to overflow.

A collection of techniques allow for the detection of covert malware that attempts to hide its existence on a system by leveraging both trusted hardware event counters and the particular memory addresses (as well as the sequences of such addresses) of the instructions that are generating the suspected malicious activity. By monitoring the address distribution's specific patterns over time, one can build a behavioral model (i.e., “fingerprint”) of a particular process—and later attempt to match suspected malicious processes to the stored behavioral models. Whenever the actual measured behavior of a suspected malicious process fails to match said stored behavioral models, the system or system administrator may attempt to perform rehabilitative actions on the computer system to locate and remove the malware hiding on the system.

A method and mechanism for monitoring events in a processing system. A performance monitoring mechanism includes is configured to store a count of events in an event counter. Periodically, the count stored in the event counter is updated to a new count. If the new count equals a predetermined value, an indication that the count equals the predetermined value is conveyed. If the new count does not equal the predetermined value, but is within a given epsilon of the predetermined value and the occurrence of a corresponding event is detected, an indication that the count equals the predetermined value is conveyed. The mechanism is further configured to suppress event counts which correspond to mis-speculations.

A system and method detecting fissile material. According to one embodiment, a detector includes an array of active pixel sensors wherein each active pixel sensor operable to integrate a charge generated by radiation that is incident upon the active pixel sensor by using a charge-sensing element during an integration phase. Then, a voltage signal is generated that is based upon the integrated charge intensity during a readout phase. After reading out the voltage signal during the readout phase, the active pixel sensor is reset ready to integrate again. The integration phase is typically set to a time interval that is optimal for detecting radiation from fissile material, and the system is typically able to count individual events occurring in an integration period, and to digitally sum these event counts to measure rate of radiation events.

A method and apparatus for anomaly detection in a data stream are disclosed. In one embodiment, the present method detects an anomalous condition in a data stream, by calculating at least one expected base event count for at least one event in the data stream for a time interval, obtaining an actual event count for the at least one event in the data stream, applying at least one shrinkage factor to the at least one expected base event count to obtain at least one actual estimated event count and detecting the anomalous condition in accordance with the actual event count and the at least one actual estimated event count.

An apparatus and method of synchronizing instruction execution in the apparatus with external events. The apparatus may be a processor or microprocessor capable of executing a function specific wait state that is dependant upon a type specified by an instruction field. The processor includes an event counter that maintains an event occurrence count, an instruction parser that strips the instruction type and event count from instructions and passes the stripped information to a comparator. The comparator compares the stripped information against an event count. The instruction types include: a relative type indicating execution at some event occurrence subsequent to the present cycle; a direct type indicating an absolute event occurrence count for execution; and a event range indicating a range of event occurrences wherein execution is valid.

A partitioned ticket lock may control access to a shared resource, and may include a single ticket value field and multiple grant value fields. Each grant value may be the sole occupant of a respective cache line, an event count or sequencer instance, or a sub-lock. The number of grant values may be configurable and/or adaptable during runtime. To acquire the lock, a thread may obtain a value from the ticket value field using a fetch-and-increment type operation, and generate an identifier of a particular grant value field by applying a mathematical or logical function to the obtained ticket value. The thread may be granted the lock when the value of that grant value field matches the obtained ticket value. Releasing the lock may include computing a new ticket value, generating an identifier of another grant value field, and storing the new ticket value in the other grant value field.

A performance monitoring device has an interrupt detection unit that detects generation of an interrupt process to be executed by a processor in accordance with TLB entry invalidation executed in an operating system. A counter value acquisition unit acquires a counter value of a predetermined event counted by the processor when the interrupt process is detected by the interrupt detection unit. A process information acquisition unit acquires identification information for identifying a process executed on the processor from the operating system immediately before the interrupt process is detected by the interrupt detection unit. An associating unit associates the counter value acquired by the counter value acquisition unit during the interrupt process with the identification information acquired by the process information acquisition unit immediately before the interrupt process.

The invention relates to a grading processing method and a grading processing system for a security event. The method comprises the following steps: obtaining a security event generated by a security system in real time and storing the security event after analysis, wherein source address information and destination address information are contained in the security event; when set processing time arrives, counting an estimated value of damage degree according to a security grade, the frequency, an address distribution parameter and a configured operation parameter of each security event and confirming the damage grade of the security event according to the obtained estimated value; and processing the security event according to the damage grade of each security event and a mode which corresponds to the damage grade. The grading processing system comprises a security event obtaining device, a security event counting device, a security event estimating device, a security event processing device and a storage device which are connected in sequence. The invention can grade the damage degree of a great number of security events and process the security events in time according to a plurality of objective factors.

A method and apparatus for loop detection for improved branch prediction accuracy. In one embodiment, the method may comprise executing a branch instruction, updating a plurality of event counts corresponding to the branch instruction in response to its executing, determining a loop behavior status corresponding to the branch instruction in response to the event count updating, and promoting the branch instruction to a loop branch prediction type in response to the determination of loop behavior status.

The invention relates to a system and method for generating a detector position map for an array of detectors. The detector position map comprises a map which converts measured position coordinates from a detection event to the detector in the array which detected the detection event. The method comprises the steps of illuminating an array of detectors with a source of radiation to generate a histogram, the histogram comprising an event count as a function of two dimensions, the two dimensions corresponding to a face of the array of detectors, wherein the histogram comprises a plurality of first peaks; modifying the histogram to comprise a plurality of second peaks, wherein the second peaks have a greater degree of isolation from each other than the first peaks; and for each detector, determining a region on the detector position map which corresponds to the detector, each region being based on a position of one of the second peaks.

The present disclosure provides a method, computer program product, and system for compensating for event counts for a thread occurring during targeted states on the thread. In example embodiments, the state is a spin loop state and instructions completed during the spin loop are eliminated from a performance report and are presented in the absence of the spin loop. In another embodiment, the event counts are interrupt counts eliminated during the spin loop.

A method is disclosed for operating a counting digital X-ray image detector. Each pixel element and/or each pixel cluster is embodied as switchable between a first counting mode and a second counting mode that is different from the first. An at least first count of the number and/or energy of the events in an at least first time interval is performed for each pixel element or each pixel cluster in the first counting mode. An evaluation of the at least first count of the number and/or energy of the events is performed in an evaluation unit of the X-ray image detector. A switchover to the second counting mode is performed as a function of the number and/or energy of the events, and a second count of the number and/or energy of events counted within an at least second time interval is performed in the chosen second counting mode.