245 results about "Operating system kernel" patented technology

The invention discloses an intelligent resource scheduling method and system based on task characteristics and system state perception, and relates to an operating system kernel optimization technology. According to the method, resource demand types, importance labels and time sensitivity of tasks are captured in real time through an eBPF technology, system bottlenecks are recognized by combining / proc and sysfs file system data, a dynamic scheduling strategy is generated by adopting an improved Q-Learning model, and resource allocation is executed through a schemed * function and a cgroup v2 interface. The problems that a traditional scheduler is poor in self-adaptive capacity and resources are mismatched are solved, the actually-measured resource utilization rate is increased to 85%-92%, and the key task delay standard reaching rate gt is achieved; the method is suitable for edge computing, cloud servers and other high-concurrency scenes.

The invention relates to a multi-master election method and device based on an OpenHarmony soft bus, and the method comprises the steps: constructing six efficiency indexes according to the networking characteristics of the soft bus; operating system kernel state extraction: increasing a subsystem in an operating system layer, expanding system capability, obtaining index data of each device in a network in real time, storing the index data in a distributed database, and extracting required data from the distributed database by a multi-main election component to calculate and lift the device; performing analytic hierarchy process index weight construction and election formula derivation: establishing an efficiency index score system through an analytic hierarchy process, and calculating the weight of each index at the level to which the index belongs; and after the weights are determined, performing corresponding fuzzy judgment on each index by using a fuzzy comprehensive judgment method from the bottom-layer index, and finally obtaining a judgment score. According to the invention, the problem that the traditional open-source soft bus solves the problem that the single-center networking survivability of the traditional soft bus is insufficient is solved.

The invention provides an automatic test generation platform and method for an operating system kernel derived function. The method comprises the following steps: (1) intelligent symbol extraction and analysis; (2) generating an LLM-driven test code; (3) performing automatic compiling and virtualization testing; and (4) intelligent error diagnosis and repair. According to the method, the test coverage degree is greatly improved, through the multi-level symbol context extraction technology, single function information is extracted, the dependency relationship of related functions in the same element is analyzed, a function call graph and data flow analysis are constructed, rich context information is provided for LLM, and the problem that traditional manual test case writing is incomplete in coverage is solved.

The invention discloses a trusted execution environment construction method, system, equipment and medium for electric power intelligent equipment, and relates to the technical field of electric power intelligent equipment monitoring, and the method comprises the following steps: carrying out Hash measurement on a to-be-detected area in an operating system kernel, carrying out comparison based on a preset reference value, and monitoring the consistency of kernel static data and codes; performing list management and integrity verification on the system kernel module, and identifying illegal loading, unloading or tampering behaviors; monitoring a kernel module event, sensing the change of the life cycle of the module and dynamically triggering a verification mechanism; performing Hash verification on an execution file of the specified user space process, and identifying process-level illegal replacement or injection behaviors; and updating the trusted measurement database based on a detection result, and executing log recording, alarming and blocking strategy response. The method does not depend on a chip, a virtualization platform or hardware extension, realizes security monitoring only through a software means, and is suitable for an embedded terminal with limited resources.

The invention discloses a kernel probe generation method and device, computer equipment and a storage medium, and relates to the technical field of operating system kernel monitoring, and the kernel probe generation method comprises the steps of obtaining a target metadata file corresponding to a current operating system kernel in response to a kernel probe generation request; determining a target declarative strategy file; and determining a target program logic file corresponding to the target declarative strategy file, and generating a probe code according to the target program logic file and the target metadata file to obtain a kernel probe program. The probe program source code adaptive to the current kernel version can be dynamically generated in combination with the target metadata file and the target declarative strategy file, kernel probe development logic and underlying kernel knowledge can be decoupled through the source code generation function, and developers do not need to deeply understand kernel internal data structures and version differences; the development threshold is lower, a specific operating system or probe type is supported, and a universal Linux kernel and multiple probe types are also supported.

The invention discloses a self-adaptive CPU (central processing unit) priority scheduling method based on near-end strategy optimization, which comprises the following steps of: firstly, establishing a task scheduling model in a simulation environment, performing matrix processing on a current task queue state and a task characteristic into an environment state for input, and extracting a task sequence time sequence characteristic by introducing a gating circulation unit; and respectively outputting task priority strategy distribution and state value estimation by using a dual-network architecture of PPO. In the training process, a course learning mechanism is adopted to gradually transit from a short task load scene to a complex mixed load. During operation, the trained scheduling agent is deployed to an operating system kernel scheduler, the priority of each task is output in real time according to the current state, and a rapid scheduling decision is realized by means of a priority heap. Through a multi-target reward function, the intelligent agent is guided to optimize the system throughput, the task average response time and the hunger prevention index at the same time, and extreme unfair scheduling is avoided. Experiments show that the method shows relatively high performance, stability and robustness in heterogeneous task, high concurrency and long-tail load scenes, and the system resource utilization rate and the user experience are effectively improved.

The invention discloses a trusted startup design method of a server, and belongs to the technical field of information security and trusted computing, after the server is powered up, a trusted root CPU core is started preferentially, a trusted startup program is operated, and a security environment is initialized; integrity measurement and verification are conducted on the BIOS, and after verification is passed, other CPU cores are released, and the BIOS is operated; the service CPU core loads a bootstrap program GRUB and submits the bootstrap program GRUB to the trusted root CPU core for verification; then loading an operating system kernel image and executing hash measurement, and calculating a path entropy value in combination with control flow information in a kernel initialization stage; performing segmentation comparison on the memory image and the disk mirror image, and calculating a mapping consistency coefficient; if the verification is passed, continuing to start the operating system; according to the method, the tampered component in the system startup chain can be effectively prevented from being loaded and operated, and the startup safety and the overall credibility of the server are enhanced.

The invention discloses an eBPF-based non-intrusive application runtime protection method and system, and the method comprises the steps: firstly collecting BTF information of a target operating system, generating an eBPF kernel program adaptive to a local kernel version according to the BTF information, and loading the eBPF kernel program to an LSM control point of an operating system kernel; generating legal behavior description configuration according to known operation information of the protected application, and distributing the legal behavior description configuration to a corresponding storage mechanism of an eBPF Map in a kernel; when a protected application initiates a system call, an eBPF kernel program mounted on a corresponding LSM control point intercepts and queries legal behavior description configuration in an eBPF Map, if the system call is matched with the legal behavior description configuration, execution is allowed, and if the system call is not matched with the legal behavior description configuration, the call is blocked, so that the application is effectively protected during running, and the method has the non-invasive characteristic. Application codes are prevented from being modified; the kernel is adapted based on BTF information, so that the program stability and compatibility are guaranteed; illegal calling is effectively prevented through a legal behavior description mechanism, and a reliable environment is provided for application running.

The invention relates to the field of system optimization, and discloses a Linux-based domestic operating system kernel cutting optimization system, which comprises a hardware baseline identification module used for acquiring a processor architecture, peripheral and bus topology, storage and network resources and firmware capability of target equipment and generating hardware baseline description; the scene portrait construction module is used for statically and dynamically observing a target application and acquiring operation portrait data including system calling, driving access and interruption events to form a scene portrait; a dependency analysis module; a multi-target constraint solving module; configuring a synthesis and construction module; and a verification and difference feedback module. According to the method, portrait analysis is carried out on calling of a target application, driving access and interruption events, a trigger threshold value is set, dependency solving is executed in a high touch module range, scene-driven cutting decision is achieved, the dependency closure calculation range is made to be consistent with an actual operation behavior, redundancy and invalid dependency are reduced, and cutting precision and kernel construction efficiency are improved.

The invention belongs to the technical field of computer man-machine interaction and automatic control, and particularly relates to an RPA mouse and keyboard control method and system for a Wayland desktop. The method comprises the following steps: S1, creating and registering a virtual input device supporting mouse and keyboard functions in a user space by accessing a virtual input device interface provided by an operating system kernel; s2, current activity display output is detected, and screen resolution information is obtained; s3, the server program monitors a preset local Unix domain socket path for receiving a control instruction from the client; s4, the client sends a control request to the local Unix domain socket path in a structured format, and the server receives and analyzes the control request; s5, the server side maps the analyzed control request into a corresponding kernel input event sequence according to the operation type; meanwhile, by writing event data into the virtual input device, an input event is injected into the system so as to simulate a control operation on the graphic desktop.

The present invention provides an operating system kernel fuzz testing method, device and equipment, which relate to the field of kernel fuzz testing technology. By obtaining the initial input and splitting the initial input to generate an input set; performing fuzz testing on the input set and obtaining the fuzz testing results; storing the fuzz testing results in a key component inference file to generate a key component inference table; generating a seed selection strategy in the seed library in combination with the key component inference table to guide seed mutation selection. By identifying and utilizing the key components in the system call sequence, the coverage of the fuzz test is improved. A correspondence between the key components in the system call sequence and the corresponding path basic blocks is established to better explore potential security vulnerabilities. According to the selection of mutation points, different mutation strategies are executed to effectively improve the existing fuzz testing method and improve the efficiency and quality of vulnerability mining.

The invention discloses a method for improving data acquisition / writing stability, and relates to the technical field of industrial control systems. The method comprises the following steps: firstly, deploying a real-time operating system kernel on general computing hardware, and carrying out real-time transformation on a hardware interface driving program of the real-time operating system kernel so as to lay a deterministic response foundation; secondly, real-time adaptation is carried out on an engine when the container runs, so that the engine has the capability of calling a kernel real-time interface; meanwhile, a non-real-time data acquisition / write-in program is packaged in a standard container mirror image. And finally, through the adapted container runtime engine, creating and running the container instances on the real-time kernel, thereby ensuring the deterministic execution of key real-time tasks on a unified hardware platform, and flexibly deploying non-real-time tasks through a containerization technology to achieve the comprehensive target of efficient utilization of resources and performance isolation.

The invention relates to the technical field of computers, and belongs to a BIOS (Basic Input / Output System) and BMC (Baseboard Management Controller)-based GPU (Graphics Processing Unit) resource intelligent dynamic optimization method and system. A four-layer collaborative architecture of a firmware layer (BIOS), a management controller layer (BMC), a system layer (operating system kernel) and a hardware layer (GPU equipment) is adopted, and the architecture is a cross-layer closed-loop optimization architecture. An optimization decision function is decoupled from an operating system kernel and is deployed in an independent hardware management unit, namely a baseboard management controller (BMC). The system collects GPU operation data in real time through an operation system kernel space and sends the GPU operation data to a BMC; an intelligent optimization engine deployed in the BMC analyzes and calculates the data to generate an optimal GPU resource scheduling strategy; the strategy is returned to an operating system kernel and finally executed by a hardware layer, and intelligent dynamic optimization of GPU resources is achieved through cross-level interaction. Therefore, a continuous intelligent closed-loop optimization link of'deployment-data acquisition-intelligent decision-making-strategy execution 'is formed.

The invention provides a PCIE (Peripheral Component Interface Express) power consumption testing device, relates to the field of power consumption testing, and can break a barrier between hardware power consumption data and a software system log and innovatively utilize an operating system kernel event tracking system as a unified data fusion platform. A power consumption sampling point collected by external hardware in real time serves as a self-defined event and is injected into a kernel event tracking session in real time, so that the power consumption sampling point and a kernel state change event captured by a system coexist under the same high-precision timestamp, and a unified tracking event stream which is perfectly aligned in time is generated. On the basis, the PCIE abnormal mode is further automatically identified from mass tracking data. Through the deep learning model, the local time sequence characteristics of the power consumption sequence are coded, then the mode evolution rule of the full time domain is further captured, finally, the abnormal state of the PCIE link is accurately and automatically judged, and then the diagnosis efficiency and accuracy of the power consumption problem are improved.

The invention provides an improved scheme of a fuzzy testing system of a Linux operating system. According to the scheme, fuzzy testing is guided by integrating device attributes, driving attributes and topological relations among devices. Specifically, a new syzlang description is generated by deeply analyzing a Linux kernel source code, so that a test case can introduce modification operation of equipment and drive attributes. Meanwhile, according to the scheme, the depth and the breadth of the fuzzy test are improved based on the corresponding relation between the equipment attribute file and the equipment file, so that the behavior of the kernel driver is more effectively explored. In addition, according to the scheme, concurrent testing is guided through the topological relation between the devices, testing cases related to device attributes and drive attributes are increased, the testing efficiency is further improved, the coverage rate of fuzzy testing is increased, and finally the testing process can reveal vulnerabilities caused by memory errors of a kernel of the Linux operating system in different states.

The invention discloses a resource management method and device for an operating system kernel, equipment, a medium and a product, and relates to the technical field of resource management.The resource management method includes the steps that a computing power pool and a memory pool are integrated into a unified initialized resource pool, resource scheduling is achieved through resource allocation primitives, cross coordination among multiple modules is avoided, and coordination efficiency is improved; resource allocation, isolation and recovery are executed through independent primitives, so that the stability of resource adjustment is guaranteed; resource isolation primitives are executed through a hardware isolation mechanism, resource access between different tasks can be blocked from the physical level, and the security isolation effect is guaranteed; the whole resource management process is completed in the kernel mode of the operating system through the native primitive, and a user mode component does not need to be called to participate in scheduling or management, so that the switching overhead of the user mode and the kernel mode and the central processing unit resources occupied by the user mode component during operation are avoided, and the overall consumption is reduced.

The invention discloses a task difference-oriented congestion control scheduling method and system based on deep reinforcement learning. The method comprises the following steps: carrying out network topology configuration; generating an application layer task flow; performing network protocol stack operation configuration; a customized congestion control module is realized; carrying out data acquisition; performing reward construction; reinforcement learning training is carried out; an action space is designed according to the scheduling strategy difference of different task flows, and the congestion window is adjusted and mapped into an action set according to the focus of attention of each task on the performance index, so that the intelligent agent can output the corresponding scheduling strategy according to the task flow difference, and the task difference-oriented adaptive congestion control is realized. The method has high configurability and real mappability, and the designed modules can truly correspond to related network functions in a Linux kernel. A data structure and processing logic collected in the system are also realized based on a real operating system kernel, so that the method has relatively strong practical feasibility.

The invention relates to the technical field of computer security, in particular to an operating system kernel security protection system based on hardware virtualization, which comprises a hardware virtualization module, a kernel isolation module, a security monitoring module and a data protection module. And the system security is obviously improved. Traditional software protection depends on authority management and access control mechanisms of an operating system and is easily subjected to bypassing attacks of malicious programs, for example, protection is broken through by modifying a system call table, utilizing memory vulnerabilities and the like. According to the system, privilege level isolation of hardware virtualization is utilized, a kernel runs in an independent virtual machine with the highest privilege level, a user application program runs in a virtual machine with the low privilege level, and hardware directly prevents unauthorized access of the application program, so that direct attack of malicious codes of an application layer to the kernel is eradicated fundamentally.

The invention discloses a semantic perception kernel fuzzy test method and device based on a large language model, and the method achieves the structural and context-related semantic analysis of a system call sequence in a variation stage through the introduction of the large language model with the language understanding and code modeling capabilities. And a variation strategy with logic consistency and attack potential is dynamically generated, so that the effectiveness and diversity of fuzzy test input are greatly improved. Specifically, semantic modeling and structured understanding are performed on a system call sequence by using a large language model, a variation strategy instruction with context relevance and execution reasonability is generated, and fuzzy test path exploration is continuously optimized through a dynamic feedback mechanism. The defects of a traditional fuzzy test method in variation efficiency, coverage depth and complex state adaptation are effectively overcome, and a more intelligent, self-adaptive and efficient vulnerability detection and security guarantee solution is provided for an operating system kernel.

The invention relates to the technical field of computer networks, and discloses a DPDK-based high-speed data isolation method, which comprises the following steps of: S1, directly taking over a data packet transceiving function of a network card through a DPDK driver, bypassing a kernel protocol stack of an operating system, and establishing a user mode data channel; s2, based on a multi-core CPU architecture, distributing the received data packets to independent processing cores according to a preset rule, and binding each processing core to an exclusive memory pool to realize physical-level data isolation; and S3, directly transmitting the isolated data to a target application module through a zero copy technology in the user mode, and verifying the data integrity in real time through a hardware verification module. According to the method, the network card is directly taken over through the DPDK driver, the user state data channel is established, an operating system kernel protocol stack is bypassed, the zero copy technology is combined, data does not need to be copied in the whole process from receiving, processing to transmission, the end-to-end delay is reduced to 50 microseconds or below, and the method is suitable for a high throughput scene.

User process to directly access a file in a file system. A user process first opens a file in the file system for access. In the process of opening the file, a file handle for the file is returned to the user process by an operating system kernel. The user process then makes a read request to a special function unit for one or more blocks of the file in the file system using the file handle. In response, the special function unit, which is coupled to the processor, bypasses the operating system kernel and returns the requested data directly to the user process. A write by the user process may be refused by the computer system or allowed on a selective basis based on a flag in a file system inode corresponding to the block.

The invention provides a memory error processing method, system and device, a storage medium and a program product, an operating system kernel comprises a hardware error source driver, a first driver and a second driver, and the second driver is used for processing a memory error processing task of an extended memory area. The first driver is used for processing a memory error processing task of a standard memory area and distributing a memory error processing task of an extended memory area to a second driver, and the method comprises the following steps: acquiring a memory error processing task of a target page distributed by a hardware error source driver; memory errors exist in the target page; and if the target page is the memory page of the extended memory area, calling the second driver to carry out error processing on the target page. According to the method, the reliability of error processing is improved.

The present invention discloses a secure and trusted startup method and system for power terminals, belonging to the technical field of network security protection for power terminals. The method includes: controlling the MCU to power on and start the power terminal; loading the operating system kernel through U-Boot; loading key components through the operating system kernel; loading the application program with the key component, and completing the startup of the power terminal. The present invention implements trusted verification of the terminal startup process, effectively preventing malicious code attacks and theft or tampering of key information during the terminal startup process.

The present invention provides a database security control method, apparatus, electronic device, and storage medium, including: sending database operation and maintenance instructions through a database operation and maintenance tool, and after the database soft switch performs security control on the database operation and maintenance instructions, forwarding them to the database; the database soft switch uses a similarity cycle analysis algorithm to simulate the database, enabling the database to perform session keep-alive communication with the database operation and maintenance tool; calling the operating system kernel, and using a multi-threaded mechanism and a fast read-write data cache queue to perform network traffic collection and analysis. In view of the problem that various database tools need to be customized and developed for database operation and maintenance control, the present invention realizes the centralized control of database operation and maintenance through the database soft switch, without the need to transform the database tools. At the same time, it solves the problem of maintaining the keep-alive of the database tools during the waiting period for the approval of the vault triggered by the instructions, and calls the operating system kernel, uses multi-threading and a fast read-write data cache queue to improve the traffic processing ability, ensuring the operation and maintenance efficiency.

The application provides an operating system kernel export function automatic test generation platform and method, comprising the following steps: (1) intelligent symbol extraction and analysis; (2) LLM driven test code generation; (3) automatic compilation and virtualization test; (4) intelligent error diagnosis and repair. The application greatly improves test coverage. Through multi-level symbol context extraction technology, not only single function information is extracted, but also the dependency relationship of related functions in the same element is analyzed and a function call graph and data flow analysis are constructed, rich context information is provided for LLM, and the problem of incomplete coverage of traditional manual test case writing is solved.

The application discloses a RISCV application program dynamic analysis method and device based on hardware virtualization, which comprises: an operating system kernel running on a reverse RISCV, obtaining process kernel data structure; simulating a RISCV CPU based on a hardware simulator, and constructing a basic process list of the operating system; using an sptbr register and the process kernel data structure to obtain characteristic information of a new process; screening the characteristic information according to the basic process list to obtain a target process; performing API detection and instruction analysis based on process information and dynamic running process information of the target process to obtain a dynamic analysis result. The application can completely and transparently monitor the whole process of program running on a RISCV CPU, and provides configurable efficient process information acquisition, API calling information acquisition and instruction execution information acquisition; the monitoring process does not depend on a system interface, transparent process monitoring can be realized, and the running process of the monitored target is not affected.

The invention provides an operating system kernel adaptive page granularity dynamic management method and a related device, and relates to the technical field of computer operating system memory management. Monitoring the utilization rate of a physical memory in real time through a kernel recovery thread, and generating a trigger signal when detecting that an idle memory is lower than a preset threshold value; scanning a to-be-recycled large page according to the trigger signal and executing a large page splitting operation; counting page access frequency in real time through a hardware counter, and judging whether a preset merging condition is met or not according to the page access frequency; if yes, executing an active merging operation; atomizing and updating a page frame descriptor, a partner system and page table mapping; the TLB cache is refreshed, and the hit rate is improved to complete efficiency gain closed loop. The system performance and compatibility are improved while the memory utilization rate is guaranteed.

The application relates to a basic input / output system customization method and device, and the method comprises the following steps: based on an open source computer operating system kernel and a basic input / output system shell environment, generating a flash read / write tool associated with a flash EPROM; based on the flash read / write tool, writing basic input / output system customization information into the flash EPROM; obtaining the basic input / output system customization information of the flash EPROM, and realizing basic input / output system customization based on the basic input / output system customization information. The method can realize the requirement of basic input / output system customization, improve the compatibility of basic input / output system code, effectively improve production efficiency, simplify operation process, and optimize the production mode of customized products.

The application discloses a flash memory partition identification multi-hardware automatic adaptation method and system, relates to the technical field of embedded system starting, and steps are as follows: presetting hardware type information identification and data check information at the device end, and writing the information into a predefined partition according to a preset format; storing a device tree binary file into a resource image according to a uniform rule; after power-on of the device, a bootloader mounts the predefined partition, automatically matches and extracts the hardware type information identification and check information and checks; if the check is passed, corresponding device trees are parsed, matched and loaded, if the check is not passed or there is no matching file, a preset default device tree is loaded; and the device trees are transmitted to an operating system kernel to complete initialization. The application solves the problems of device tree dynamic selection difficulty, many firmwares in traditional schemes and high operation and maintenance costs in the scene without physical hardware identification signals. The application achieves the goal of no additional hardware and one set of firmware compatible with multiple hardware versions, improves reliability and expandability, and reduces production and operation and maintenance costs.

The present invention discloses an unmanned vehicle data distribution method based on fast data path processing. Based on the fast data path processing module, packets are captured before they are received in the operating system kernel space; packets belonging to data distribution are verified through the fast data path processing module and forwarded from the kernel state to the user state; the program compiled by the fast data path processing module is loaded into the operating system kernel and mounted on a specified network interface; the user memory mapping mechanism of the fast data path processing module is utilized to create memory in the user state for data transmission between the kernel state program and the user state program; application programs are deployed in the user space, and data exchange is performed with the fast data path program in the kernel space through user memory mapping to receive and process packets; the communication process specified by the data distribution service protocol is processed in the user space.