186 results about "Operating system kernel" patented technology

The invention discloses an intelligent resource scheduling method and system based on task characteristics and system state perception, and relates to an operating system kernel optimization technology. According to the method, resource demand types, importance labels and time sensitivity of tasks are captured in real time through an eBPF technology, system bottlenecks are recognized by combining / proc and sysfs file system data, a dynamic scheduling strategy is generated by adopting an improved Q-Learning model, and resource allocation is executed through a schemed * function and a cgroup v2 interface. The problems that a traditional scheduler is poor in self-adaptive capacity and resources are mismatched are solved, the actually-measured resource utilization rate is increased to 85%-92%, and the key task delay standard reaching rate gt is achieved; the method is suitable for edge computing, cloud servers and other high-concurrency scenes.

The invention provides an automatic test generation platform and method for an operating system kernel derived function. The method comprises the following steps: (1) intelligent symbol extraction and analysis; (2) generating an LLM-driven test code; (3) performing automatic compiling and virtualization testing; and (4) intelligent error diagnosis and repair. According to the method, the test coverage degree is greatly improved, through the multi-level symbol context extraction technology, single function information is extracted, the dependency relationship of related functions in the same element is analyzed, a function call graph and data flow analysis are constructed, rich context information is provided for LLM, and the problem that traditional manual test case writing is incomplete in coverage is solved.

The invention discloses a trusted execution environment construction method, system, equipment and medium for electric power intelligent equipment, and relates to the technical field of electric power intelligent equipment monitoring, and the method comprises the following steps: carrying out Hash measurement on a to-be-detected area in an operating system kernel, carrying out comparison based on a preset reference value, and monitoring the consistency of kernel static data and codes; performing list management and integrity verification on the system kernel module, and identifying illegal loading, unloading or tampering behaviors; monitoring a kernel module event, sensing the change of the life cycle of the module and dynamically triggering a verification mechanism; performing Hash verification on an execution file of the specified user space process, and identifying process-level illegal replacement or injection behaviors; and updating the trusted measurement database based on a detection result, and executing log recording, alarming and blocking strategy response. The method does not depend on a chip, a virtualization platform or hardware extension, realizes security monitoring only through a software means, and is suitable for an embedded terminal with limited resources.

The invention discloses a kernel probe generation method and device, computer equipment and a storage medium, and relates to the technical field of operating system kernel monitoring, and the kernel probe generation method comprises the steps of obtaining a target metadata file corresponding to a current operating system kernel in response to a kernel probe generation request; determining a target declarative strategy file; and determining a target program logic file corresponding to the target declarative strategy file, and generating a probe code according to the target program logic file and the target metadata file to obtain a kernel probe program. The probe program source code adaptive to the current kernel version can be dynamically generated in combination with the target metadata file and the target declarative strategy file, kernel probe development logic and underlying kernel knowledge can be decoupled through the source code generation function, and developers do not need to deeply understand kernel internal data structures and version differences; the development threshold is lower, a specific operating system or probe type is supported, and a universal Linux kernel and multiple probe types are also supported.

The invention discloses a self-adaptive CPU (central processing unit) priority scheduling method based on near-end strategy optimization, which comprises the following steps of: firstly, establishing a task scheduling model in a simulation environment, performing matrix processing on a current task queue state and a task characteristic into an environment state for input, and extracting a task sequence time sequence characteristic by introducing a gating circulation unit; and respectively outputting task priority strategy distribution and state value estimation by using a dual-network architecture of PPO. In the training process, a course learning mechanism is adopted to gradually transit from a short task load scene to a complex mixed load. During operation, the trained scheduling agent is deployed to an operating system kernel scheduler, the priority of each task is output in real time according to the current state, and a rapid scheduling decision is realized by means of a priority heap. Through a multi-target reward function, the intelligent agent is guided to optimize the system throughput, the task average response time and the hunger prevention index at the same time, and extreme unfair scheduling is avoided. Experiments show that the method shows relatively high performance, stability and robustness in heterogeneous task, high concurrency and long-tail load scenes, and the system resource utilization rate and the user experience are effectively improved.

The invention discloses an eBPF-based non-intrusive application runtime protection method and system, and the method comprises the steps: firstly collecting BTF information of a target operating system, generating an eBPF kernel program adaptive to a local kernel version according to the BTF information, and loading the eBPF kernel program to an LSM control point of an operating system kernel; generating legal behavior description configuration according to known operation information of the protected application, and distributing the legal behavior description configuration to a corresponding storage mechanism of an eBPF Map in a kernel; when a protected application initiates a system call, an eBPF kernel program mounted on a corresponding LSM control point intercepts and queries legal behavior description configuration in an eBPF Map, if the system call is matched with the legal behavior description configuration, execution is allowed, and if the system call is not matched with the legal behavior description configuration, the call is blocked, so that the application is effectively protected during running, and the method has the non-invasive characteristic. Application codes are prevented from being modified; the kernel is adapted based on BTF information, so that the program stability and compatibility are guaranteed; illegal calling is effectively prevented through a legal behavior description mechanism, and a reliable environment is provided for application running.

The invention relates to the field of system optimization, and discloses a Linux-based domestic operating system kernel cutting optimization system, which comprises a hardware baseline identification module used for acquiring a processor architecture, peripheral and bus topology, storage and network resources and firmware capability of target equipment and generating hardware baseline description; the scene portrait construction module is used for statically and dynamically observing a target application and acquiring operation portrait data including system calling, driving access and interruption events to form a scene portrait; a dependency analysis module; a multi-target constraint solving module; configuring a synthesis and construction module; and a verification and difference feedback module. According to the method, portrait analysis is carried out on calling of a target application, driving access and interruption events, a trigger threshold value is set, dependency solving is executed in a high touch module range, scene-driven cutting decision is achieved, the dependency closure calculation range is made to be consistent with an actual operation behavior, redundancy and invalid dependency are reduced, and cutting precision and kernel construction efficiency are improved.

The invention belongs to the technical field of computer man-machine interaction and automatic control, and particularly relates to an RPA mouse and keyboard control method and system for a Wayland desktop. The method comprises the following steps: S1, creating and registering a virtual input device supporting mouse and keyboard functions in a user space by accessing a virtual input device interface provided by an operating system kernel; s2, current activity display output is detected, and screen resolution information is obtained; s3, the server program monitors a preset local Unix domain socket path for receiving a control instruction from the client; s4, the client sends a control request to the local Unix domain socket path in a structured format, and the server receives and analyzes the control request; s5, the server side maps the analyzed control request into a corresponding kernel input event sequence according to the operation type; meanwhile, by writing event data into the virtual input device, an input event is injected into the system so as to simulate a control operation on the graphic desktop.

The invention discloses a method for improving data acquisition / writing stability, and relates to the technical field of industrial control systems. The method comprises the following steps: firstly, deploying a real-time operating system kernel on general computing hardware, and carrying out real-time transformation on a hardware interface driving program of the real-time operating system kernel so as to lay a deterministic response foundation; secondly, real-time adaptation is carried out on an engine when the container runs, so that the engine has the capability of calling a kernel real-time interface; meanwhile, a non-real-time data acquisition / write-in program is packaged in a standard container mirror image. And finally, through the adapted container runtime engine, creating and running the container instances on the real-time kernel, thereby ensuring the deterministic execution of key real-time tasks on a unified hardware platform, and flexibly deploying non-real-time tasks through a containerization technology to achieve the comprehensive target of efficient utilization of resources and performance isolation.

The invention relates to the technical field of computers, and belongs to a BIOS (Basic Input / Output System) and BMC (Baseboard Management Controller)-based GPU (Graphics Processing Unit) resource intelligent dynamic optimization method and system. A four-layer collaborative architecture of a firmware layer (BIOS), a management controller layer (BMC), a system layer (operating system kernel) and a hardware layer (GPU equipment) is adopted, and the architecture is a cross-layer closed-loop optimization architecture. An optimization decision function is decoupled from an operating system kernel and is deployed in an independent hardware management unit, namely a baseboard management controller (BMC). The system collects GPU operation data in real time through an operation system kernel space and sends the GPU operation data to a BMC; an intelligent optimization engine deployed in the BMC analyzes and calculates the data to generate an optimal GPU resource scheduling strategy; the strategy is returned to an operating system kernel and finally executed by a hardware layer, and intelligent dynamic optimization of GPU resources is achieved through cross-level interaction. Therefore, a continuous intelligent closed-loop optimization link of'deployment-data acquisition-intelligent decision-making-strategy execution 'is formed.

The invention discloses a resource management method and device for an operating system kernel, equipment, a medium and a product, and relates to the technical field of resource management.The resource management method includes the steps that a computing power pool and a memory pool are integrated into a unified initialized resource pool, resource scheduling is achieved through resource allocation primitives, cross coordination among multiple modules is avoided, and coordination efficiency is improved; resource allocation, isolation and recovery are executed through independent primitives, so that the stability of resource adjustment is guaranteed; resource isolation primitives are executed through a hardware isolation mechanism, resource access between different tasks can be blocked from the physical level, and the security isolation effect is guaranteed; the whole resource management process is completed in the kernel mode of the operating system through the native primitive, and a user mode component does not need to be called to participate in scheduling or management, so that the switching overhead of the user mode and the kernel mode and the central processing unit resources occupied by the user mode component during operation are avoided, and the overall consumption is reduced.

The invention discloses a task difference-oriented congestion control scheduling method and system based on deep reinforcement learning. The method comprises the following steps: carrying out network topology configuration; generating an application layer task flow; performing network protocol stack operation configuration; a customized congestion control module is realized; carrying out data acquisition; performing reward construction; reinforcement learning training is carried out; an action space is designed according to the scheduling strategy difference of different task flows, and the congestion window is adjusted and mapped into an action set according to the focus of attention of each task on the performance index, so that the intelligent agent can output the corresponding scheduling strategy according to the task flow difference, and the task difference-oriented adaptive congestion control is realized. The method has high configurability and real mappability, and the designed modules can truly correspond to related network functions in a Linux kernel. A data structure and processing logic collected in the system are also realized based on a real operating system kernel, so that the method has relatively strong practical feasibility.

The invention discloses a semantic perception kernel fuzzy test method and device based on a large language model, and the method achieves the structural and context-related semantic analysis of a system call sequence in a variation stage through the introduction of the large language model with the language understanding and code modeling capabilities. And a variation strategy with logic consistency and attack potential is dynamically generated, so that the effectiveness and diversity of fuzzy test input are greatly improved. Specifically, semantic modeling and structured understanding are performed on a system call sequence by using a large language model, a variation strategy instruction with context relevance and execution reasonability is generated, and fuzzy test path exploration is continuously optimized through a dynamic feedback mechanism. The defects of a traditional fuzzy test method in variation efficiency, coverage depth and complex state adaptation are effectively overcome, and a more intelligent, self-adaptive and efficient vulnerability detection and security guarantee solution is provided for an operating system kernel.

User process to directly access a file in a file system. A user process first opens a file in the file system for access. In the process of opening the file, a file handle for the file is returned to the user process by an operating system kernel. The user process then makes a read request to a special function unit for one or more blocks of the file in the file system using the file handle. In response, the special function unit, which is coupled to the processor, bypasses the operating system kernel and returns the requested data directly to the user process. A write by the user process may be refused by the computer system or allowed on a selective basis based on a flag in a file system inode corresponding to the block.

The invention provides a memory error processing method, system and device, a storage medium and a program product, an operating system kernel comprises a hardware error source driver, a first driver and a second driver, and the second driver is used for processing a memory error processing task of an extended memory area. The first driver is used for processing a memory error processing task of a standard memory area and distributing a memory error processing task of an extended memory area to a second driver, and the method comprises the following steps: acquiring a memory error processing task of a target page distributed by a hardware error source driver; memory errors exist in the target page; and if the target page is the memory page of the extended memory area, calling the second driver to carry out error processing on the target page. According to the method, the reliability of error processing is improved.

The application provides an operating system kernel export function automatic test generation platform and method, comprising the following steps: (1) intelligent symbol extraction and analysis; (2) LLM driven test code generation; (3) automatic compilation and virtualization test; (4) intelligent error diagnosis and repair. The application greatly improves test coverage. Through multi-level symbol context extraction technology, not only single function information is extracted, but also the dependency relationship of related functions in the same element is analyzed and a function call graph and data flow analysis are constructed, rich context information is provided for LLM, and the problem of incomplete coverage of traditional manual test case writing is solved.

The application discloses a RISCV application program dynamic analysis method and device based on hardware virtualization, which comprises: an operating system kernel running on a reverse RISCV, obtaining process kernel data structure; simulating a RISCV CPU based on a hardware simulator, and constructing a basic process list of the operating system; using an sptbr register and the process kernel data structure to obtain characteristic information of a new process; screening the characteristic information according to the basic process list to obtain a target process; performing API detection and instruction analysis based on process information and dynamic running process information of the target process to obtain a dynamic analysis result. The application can completely and transparently monitor the whole process of program running on a RISCV CPU, and provides configurable efficient process information acquisition, API calling information acquisition and instruction execution information acquisition; the monitoring process does not depend on a system interface, transparent process monitoring can be realized, and the running process of the monitored target is not affected.

The invention provides an operating system kernel adaptive page granularity dynamic management method and a related device, and relates to the technical field of computer operating system memory management. Monitoring the utilization rate of a physical memory in real time through a kernel recovery thread, and generating a trigger signal when detecting that an idle memory is lower than a preset threshold value; scanning a to-be-recycled large page according to the trigger signal and executing a large page splitting operation; counting page access frequency in real time through a hardware counter, and judging whether a preset merging condition is met or not according to the page access frequency; if yes, executing an active merging operation; atomizing and updating a page frame descriptor, a partner system and page table mapping; the TLB cache is refreshed, and the hit rate is improved to complete efficiency gain closed loop. The system performance and compatibility are improved while the memory utilization rate is guaranteed.

The application relates to a basic input / output system customization method and device, and the method comprises the following steps: based on an open source computer operating system kernel and a basic input / output system shell environment, generating a flash read / write tool associated with a flash EPROM; based on the flash read / write tool, writing basic input / output system customization information into the flash EPROM; obtaining the basic input / output system customization information of the flash EPROM, and realizing basic input / output system customization based on the basic input / output system customization information. The method can realize the requirement of basic input / output system customization, improve the compatibility of basic input / output system code, effectively improve production efficiency, simplify operation process, and optimize the production mode of customized products.

The application discloses a flash memory partition identification multi-hardware automatic adaptation method and system, relates to the technical field of embedded system starting, and steps are as follows: presetting hardware type information identification and data check information at the device end, and writing the information into a predefined partition according to a preset format; storing a device tree binary file into a resource image according to a uniform rule; after power-on of the device, a bootloader mounts the predefined partition, automatically matches and extracts the hardware type information identification and check information and checks; if the check is passed, corresponding device trees are parsed, matched and loaded, if the check is not passed or there is no matching file, a preset default device tree is loaded; and the device trees are transmitted to an operating system kernel to complete initialization. The application solves the problems of device tree dynamic selection difficulty, many firmwares in traditional schemes and high operation and maintenance costs in the scene without physical hardware identification signals. The application achieves the goal of no additional hardware and one set of firmware compatible with multiple hardware versions, improves reliability and expandability, and reduces production and operation and maintenance costs.

The embodiment of the invention provides a test method and device for an operating system kernel based on a Rust language, and the method comprises the steps: obtaining a source code of the operating system kernel based on the Rust language, compiling the source code into an intermediate representation, and generating a function call graph among functions contained in the operating system kernel according to the intermediate representation; determining a target position corresponding to a preset potential anomaly in the intermediate representation and a target variable corresponding to the potential anomaly in the target position through a preset recognition rule; performing backward tracking analysis on the target variable according to the function call graph and the target position, and determining a system call interface associated with the target position in an operating system kernel and a call variable associated with the target variable in the system call interface; and according to the system call interface and the call variable, generating a test case for the operating system kernel.

This invention relates to a method for cross-version binary compatibility of Linux kernel modules, belonging to the field of computer operating system kernels. It includes the following steps: During the compilation phase, the compiler identifies specific keywords (__kabi_reloc_member, __kabi_check_member, __kabi_sizeof) and records instruction offsets, type identifiers, member variable name offsets, and relocation types, generating a .kabi_relocs segment. During the loading phase, the loader parses the .kabi_relocs segment, combines it with module BTF and kernel BTF information, and dynamically repairs instructions based on the relocation type. This invention achieves "compile once, run anywhere" binary compatibility for kernel modules, with the repair operation completed at load time, having no impact on runtime performance.

The invention discloses a thread scheduling method, device and equipment based on an RISC-V framework. The method is applied to the electronic equipment based on the RISC-V architecture, an operating system kernel of the electronic equipment runs in a supervision mode of the RISC-V architecture, a user program of the electronic equipment runs in a user mode of the RISC-V architecture, and the method comprises the steps that the user program is analyzed, and a user mode stack, a kernel mode stack and a thread control block are created according to an analysis result; writing the entry address of the user program in the analysis result into an abnormal program counter in a supervision mode; and executing the supervision mode exception return instruction, switching the processor of the electronic equipment from the supervision mode to the user mode, jumping to the entry address of the user program, and starting to execute the user mode thread. The thread scheduling method based on the RISC-V architecture provided by the invention can be high in safety.

The invention discloses a method for dynamically adjusting the CPU utilization rate of OTA software. According to the method, a cpulimit control module is added into all threads occupying more CPU resources in an OTAAPP process, operations such as file reading and writing, decryption and hash verification are subjected to block processing, and cpulimit control is implemented in the block processing. The occupancy rate is calculated by obtaining the system time and the process CPU use time, and whether the thread is dormant or not is determined after the occupancy rate is compared with the limit value, so that the CPU use rate is dynamically adjusted. The scheme does not need extra process collaboration, does not depend on an operating system kernel version, can be automatically adjusted according to system resource conditions, realizes non-inductive OTA upgrading, improves user experience, and is suitable for various scenes such as vehicle-mounted equipment and mobile terminals.

Embodiments of the present application provide a method, device and computer readable storage device for identifying user behavior based on multi-source logs. The method comprises sending an instruction to query kernel logs to an operating system; if query failure information fed back by the operating system is received, determining that the operating system has a shield, obtaining type and version information of the operating system; determining an opening command of the shield according to the type and version information of the operating system; based on the opening command, controlling the operating system to open the shield, in response to a message representing that the shield is removed fed back by the operating system, sending an instruction to query kernel logs of the operating system to the operating system again, and obtaining the kernel logs; obtaining change logs of the operating system, and determining operation behavior of a user based on the change logs and the kernel logs. In this way, accurate identification of user behavior is achieved.

The invention discloses a VR system multi-modal feedback synchronous driving method based on time sequence calibration, and relates to the technical field of multi-modal feedback synchroniss.The method comprises the steps that when a user interaction event is detected, the event is captured, and an initial timestamp is recorded; based on the timestamp, task scheduling and resource pre-allocation are carried out through a quantum heuristic scheduling algorithm; predicting a dynamic delay compensation value of each mode by using a neural symbol AI model; calculating the accurate triggering time fed back by each mode according to the compensation value; executing high-priority parallel instruction scheduling at the calculated time point; the driving hardware outputs feedback and collects actual execution time to optimize subsequent scheduling, synchronous driving is achieved in an operating system kernel layer, dynamic delay prediction and compensation are combined, the problem of timing sequence misalignment caused by hardware heterogeneous delay and software scheduling uncertainty of multi-mode feedback is solved, synchronous control of microsecond-level precision is achieved, and the service life of the system is prolonged. And the immersion and robustness of the VR system are improved.

The invention belongs to the field of kernel vulnerability analysis of operating systems, and particularly relates to a kernel memory vulnerability cause diagnosis method based on causal chain analysis. The method comprises the steps of restoring a data dependency graph and a function call tree in a vulnerability triggering process from instruction-level tracking data in the vulnerability triggering process, and restoring a kernel execution state and kernel behavior semantics in combination with function modeling; analyzing the kernel execution state, and identifying an abnormal execution behavior in the kernel memory vulnerability in combination with the abnormal model of the kernel memory vulnerability; based on causal chain analysis of dynamic programming, causes of vulnerabilities are analyzed and obtained in a series of kernel execution abnormal behaviors. According to the method, the kernel execution state and behavior semantics are restored, the kernel abnormal behavior state is identified, and the causal chain of the abnormal behavior is analyzed, so that the cause of the kernel memory vulnerability can be effectively diagnosed, and the subsequent vulnerability repair work is promoted.

The invention provides a thread running method, a multi-core processor, computing equipment and a computing equipment cluster, and belongs to the technical field of computers. In the method, operation modes of processor cores of the multi-core processor comprise a user mode and a user exclusive mode; when a first processor core executes a first task through a first user thread in a user mode, if the first user thread executes first mode switching in the first task, the first processor core enters a user exclusive mode; the processor core can run the user thread in the user exclusive mode and has the execution authority for the instruction used for controlling the state of the processor core in the operating system kernel, so that the first processor core can freely enter the waiting state in the user exclusive mode and continue to execute the first task after being awakened; the method does not need to switch back to the user mode, and does not need to switch the mode when the processor needs to enter the waiting state next time, thereby improving the efficiency of inter-core communication between user threads, and reducing the power consumption of the processor.

The electronic device includes a storage unit and a processor. The storage unit stores the operating system kernel partition of the operating system. The processor is used to: verify whether the tested portion of the operating system kernel partition is secure; if the tested portion of the operating system kernel partition is secure, start the application layer of the operating system; verify whether the remaining portions of the operating system kernel partition are secure; and if the remaining portions of the operating system kernel partition are insecure, issue a warning message. Compared to performing a security check on all partitions of the operating system before starting the application layer of the operating system, the secure boot method of this invention can reduce boot time while ensuring boot security.

The application discloses a kind of server's trusted startup design method, belong to information security and trusted computing technical field, server is powered on, and trusted root CPU core is started preferentially, and runs trusted startup program and initializes security environment;BIOS is carried out integrity measurement and verification, and other CPU core is released and runs BIOS after verification passes;By business CPU core loading boot program GRUB, and submitting trusted root CPU core for verification;Subsequently, operating system kernel image is loaded and hash measurement is executed, while combining the control flow information of kernel initialization phase to calculate path entropy value;Then memory image and disk image are segmented and compared, and mapping consistency coefficient is calculated;If verification passes, continue to start operating system;The application can effectively prevent tampered components in system startup chain from being loaded and running, and enhance the startup security and overall trustworthiness of server.