89 results about "Process identifier" patented technology

The systems and methods disclosed herein monitor application (e.g., artificial intelligence (AI) model) operations using interactions between the application and a kernel. The systems and methods disclosed herein intercept, using a kernel interface, one or more function invocations transmitted from the application (e.g., an AI model without model modification). Event record(s) are generated for one or more functions to define process identifiers, resource interaction types, timestamps, and / or resource identifiers. Observed pattern(s) for the application are identified by comparing current event record(s) with previous record(s), and the identified observed pattern(s) are evaluated against reference pattern(s) to generate score(s). Data packet(s) that indicate observed pattern(s), corresponding score(s), and / or cryptographic digital fingerprint(s) of the one or more functions are generated. The data packet(s) are transmitted to distributed ledgers for immutable storage.

The embodiment of the invention provides a process interception method and device and electronic equipment. The method comprises the following steps: a kernel space receives a process protection list sent by a user space by utilizing a virtual file system interface; wherein the process protection list comprises a process identifier of at least one to-be-protected process; the kernel space obtains a process termination request; wherein the process termination request is used for requesting to terminate a target process, and the target process is a process entity scheduled by an operating system; under the condition that the kernel space determines that the request type of the process termination request is a preset request, determining a matching relationship between the target process and a process protection list based on a target process identifier of the target process; and when the matching relationship indicates that the process identifier of the at least one to-be-protected process in the process protection list comprises the target process identifier, the kernel space intercepts the process termination request. By the adoption of the method, the important process can be effectively prevented from being terminated due to malicious or misoperation, and the safety and stability of the system are improved.

The invention provides a process reset processing method, a processor, a storage medium and a program product, and relates to the technical field of chip design, the method is applied to the processor comprising at least one processing core, and the processing core comprises a gateway module and a process management module. The method comprises the following steps: under the condition that a gateway module receives a first task request from a process management module, based on a process identifier carried by the first task request, determining a latest count value of a counter associated with the process management module, the counter is used for recording the accumulated number of times that the process borne by the process management module is triggered to reset; and in response to determining that the first count value carried by the first task request is inconsistent with the newest count value of the counter, executing an operation related to process reset on the first task request. The method can ensure that a single process can be effectively terminated, and process-level resetting is realized.

The embodiment of the invention discloses a causal relationship tracking method, device and system and electronic equipment. The causal relationship tracking method comprises the steps that an eBPF probe mounted on a specified path of a kernel space detects a first event triggered by a first process, wherein the first event is used for creating a second process; determining whether the first process is a parent process of the second process; under the condition that the first process is not the parent process of the second process, generating a causal relationship identifier of the second process, and establishing a corresponding relationship between the process identifier of the second process and the causal relationship identifier; and under the condition that the first process is the parent process of the second process, obtaining a causal relationship identifier of the first process, and establishing a corresponding relationship between the process identifier of the second process and the causal relationship identifier.

The invention relates to a k8s-based fine-grained monitoring method and system for a shared GPU container, and belongs to the technical field of computers.The method comprises the steps that configuration information of a monitoring module is set and transmitted into a service container in an environment variable form; the method comprises the following steps: deploying a monitoring module on each k8s cluster machine to obtain GPU process information; acquiring local process information of a machine by using a monitoring module to obtain a system-level index; obtaining a k8s container UID through a process identifier PID in the GPU process information, associating the k8s container UID to a k8s container name, calculating occupation information of a plurality of GPU containers, and obtaining a process-level index; and exposing the system-level index and the process-level index to a prometheus system alarm tool and carrying out verification on the system-level index and the process-level index. According to the method and the system provided by the invention, the granularity of GPU resource collection can be improved through two modes of obtaining the GPU resource information in the machine and obtaining the GPU information in the container.

The invention provides a packaging method and system for process communication between hosts of a heterogeneous operating system, and relates to the technical field of heterogeneous host communication.The method comprises the steps that a source host obtains a communication request, containing a target process identifier and communication data, of a source process, and the isomerism of the source host and a target host operating system is recognized; determining a corresponding encapsulation protocol containing a data conversion specification and a process identifier mapping rule; serializing communication data according to specifications, coding a target process identifier into a general process identifier according to rules, combining the target process identifier and the general process identifier into a transmission packet, and sending the transmission packet to a target host through a TCP network; and finally, analyzing the head of the transmission packet at the target host, extracting the general process identifier and the system type information, decoding to obtain a local process identifier and deserialized load area data, and delivering the data to the target process, so that standardized packaging and cross-platform data interaction of process communication between hosts of the heterogeneous operating system can be realized.

Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may receive a downlink communication associated with a hybrid automatic repeat request (HARQ) process identifier. The UE may initiate a timer associated with the HARQ process identifier in accordance with the downlink communication or in accordance with a feedback communication associated with the downlink communication. The UE may transmit an indication of an event associated with the HARQ process identifier in association with an expiration of the timer. Numerous other aspects are described.

The invention relates to the technical field of embedded systems, in particular to a secure access method and device for processor resources, equipment, a medium and a product, and the method comprises the steps: distributing each resource access request to a corresponding target virtual domain according to a matching result of a main equipment process identifier of each resource access request and a corresponding preset mask, injecting the distributed domain identifier into each request to obtain a domain marking request; intercepting and analyzing the domain marking requests to obtain a target address, an operation type and a domain identifier corresponding to each domain marking request; and verifying the operation type of the domain identifier corresponding to each domain marking request on the target address based on preset security policy information, and intercepting the abnormal access request. Therefore, the technical problems of large performance loss, insufficient security isolation granularity and lack of system-level protection in the existing intra-core resource isolation scheme are solved, the real-time performance and security of the system are remarkably improved, and the troubleshooting capability is enhanced.

The application relates to a factory data management method, system, terminal and storage medium, and relates to the field of data management.The method comprises the following steps: receiving an original data stream; performing timestamp alignment processing on the original data stream to obtain a standardized data sequence; extracting a production batch identifier and a process identifier in the standardized data sequence; generating a process sorting sequence corresponding to the production batch identifier based on the process identifier and a process sequence; grouping data items belonging to the same production batch identifier in the standardized data sequence according to the process sequence, and outputting process-level data records corresponding to the production batch identifier; extracting process parameters having a transmission relationship between adjacent processes, and calculating deviation values between the process parameters; when the deviation value exceeds a deviation threshold value, determining a parameter correction amount from a rule library according to a process position and a parameter deviation direction, and correcting the process parameters of an abnormal process node. The application has the effects of improving production operation efficiency and guaranteeing product quality.

The invention provides a ransomware detection method and device based on eBPF and machine learning, and relates to the technical field of information security, the method comprises the following steps: mounting an eBPF program to a key system of a target system for calling, and capturing file operation behavior data such as a process identifier and an operation type in real time through an event-driven mechanism; extracting features based on a preset time window, counting process file operation cumulative times, screening out abnormal operation behaviors through threshold filtering, and constructing context features at the same time; utilizing a support vector machine algorithm to train feature data to generate a classification model, and optimizing kernel function parameters to improve small sample scene classification accuracy; and continuously collecting real-time file operation data through an eBPF program, inputting the real-time file operation data into the model, carrying out dynamic classification, and triggering alarm and blocking when the ransomware is detected. According to the method, the system performance overhead is effectively reduced, the detection real-time performance and accuracy are improved, and the model stability is enhanced.

The reuse of hybrid automatic repeat request (HARQ) process identifiers (IDs) is enabled under controlled conditions. Consequently, certain delays may be reduced, including those delays that may be associated with waiting for a process ID to be released. A user equipment (UE) may initiate new transmissions sooner than would be allowed according to existing mechanisms. The sooner transmissions may be particularly convenient in those situations wherein previous data has been successfully delivered. Network resources may, as a consequence, be use more efficiently in time-sensitive communication scenarios. An adaptable feedback process, from satellite to UE, is also enabled, which provides the satellite with a flexibility to adjust to different latency and resource constraints, thereby improving overall communication robustness. The flexibility is particularly beneficial in NTNs with higher propagation delays.

The application discloses a multi-process index allocation method, device, chip, network interface card, equipment and medium, and the method comprises the following steps: after a first process is started, it is judged whether an index pool exists; if the index pool exists, the first process obtains a process identifier from an index pool management module, creates a state storage unit according to the process identifier, and obtains an index block from the index pool; when a second process obtains an index block from the index pool and there is no unallocated index block in the index pool, the second process identifies online or offline state information of the first process from the state storage unit of the first process; if the first process is in an offline state, the second process obtains an index block allocated to the first process. According to the application, an index resource is stored in a shared memory, and multiple processes obtain indexes in batches through the shared index pool; meanwhile, indexes used by any process can be released and used by other processes, so that efficient allocation of indexes among multiple processes is realized.

The embodiment of the invention provides an operation interception method and device and a readable storage medium, system UI information is obtained, when it is monitored that a target file is read by a first process, a first process identifier of the first process is determined, and whether a first program needs to send out the target file or not is determined in combination with the system UI information and the first process identifier. When it is determined that the first program needs to send out the target file according to the system UI information and the first process identifier, the operation of the first program on the target file is intercepted. By adopting the scheme, the file is identified according to the UI information of the system on the system level and is automatically intercepted, so that the user is prevented from deliberately or accidentally issuing the target file, and the purpose of improving the data security is achieved.

This invention relates to a method and electronic device for obtaining blocking information of an uninterruptible sleep state of a process, belonging to the field of computer technology. The method includes: when a process triggers a lock contention start tracking point due to resource contention, determining the lock type by parsing the lock contention start tracking point parameters; in response to the lock type being a mutex lock, obtaining the lock address by parsing the lock contention start tracking point parameters; clearing the flag bits in the owner member of the kernel lock structure pointed to by the lock address by performing bitwise operations, obtaining a pointer to the process descriptor of the holder; obtaining the process identifier and process name of the mutex lock holder by accessing the pointer to the process descriptor of the holder; and storing the process identifier, process name, and lock address of the mutex lock holder in a task blocking context structure with the process identifier of the mutex lock holder as the key, thereby achieving accurate acquisition of the mutex lock holder information.

Methods and systems for dynamic references for automation rules in collaboration platforms are described. The method may include causing display of a rule builder graphical user interface, including a trigger selection window for candidate trigger components for an automation rule. In response to selecting a trigger component, a first graphical element representing is displayed. A second user input selects a first action component configured to generate an in-process electronic document associated with a document space of existing documents or a parent electronic document. A third user input selects a second action component for the automation rule, with an action component editing window to receive an in-process identifier for the in-process electronic document. A service is generated on the collaboration system that performs an operation in response to an event satisfying a trigger component criteria, the operation corresponding to the first and second action components, and utilizing the in-process identifier.

The invention discloses a resource monitoring method and related equipment, and relates to the technical field of computer monitoring. The method comprises the steps of obtaining a job identifier of a target job in the electronic design automation software and a process identifier of at least one associated process associated with the target job, and establishing a mapping relation table between the target job and the at least one associated process based on the job identifier and the process identifier of the associated process; on the basis of the mapping relation table, monitoring various resource index information corresponding to at least part of the associated processes; and based on the multiple resource index information corresponding to at least part of the associated processes, obtaining resource monitoring information of the target job by establishing an association relationship between the multiple resource index information and the target job. According to the embodiment of the invention, the process-level resource index monitoring of the operation can be effectively realized.

The application relates to the technical field of artificial intelligence chips, and provides a process termination method, an electronic device and a storage medium, the method comprising the following steps: obtaining a target process identifier; setting the state of data of the target process identifier in a target module as invalid, the target module being used for caching at least one of data packets and tasks of each process, and the data in the invalid state being discarded when being output from the target module. According to the method, the electronic device and the storage medium provided by the application, the state of the data of the target process identifier in the target module is only set as invalid, so that the processes in the artificial intelligence chip can be completely terminated in various hardware components, clean, effective, convenient and fast process termination is realized. Moreover, the state setting is not affected by the downstream, the process termination operation is not suspended due to the suspension of the downstream, so that the multiple processes can be parallel, and reliable and deadlock-free process termination can be realized for a single process under the premise of the multiple processes being parallel.

The embodiment of the invention provides an intelligent router and a process starting method, and the method can respond to a starting instruction, start a to-be-started process in parallel, and write a process identifier of the to-be-started process into a process state table. And executing the service code of the process to be started. And when the to-be-started process reaches the target state point, setting a first state mask of the target state point in the process state table, and querying a dependency state point of the target state point in the process state table according to the dependency relationship table. If the process state table is provided with the second state mask depending on the state point, continuing to execute the service code of the to-be-started process; and otherwise, pausing execution of the business code of the to-be-started process so as to execute the business code of the to-be-started process according to the process state table and the second state mask. According to the method, the dependency granularity among the processes is reduced by setting the state points, all the to-be-started tasks can be processed in parallel, and then the process starting efficiency is improved.

This invention discloses a method, device, and medium for memory access management in data processing, relating to the field of data processing technology. The method includes: receiving read / write access requests from a processor and writing them to an access request queue; performing message decomposition and field parsing on the read / write access requests to obtain request feature fields; generating access flow window parameters based on the process identifier in the request feature fields; collecting congestion characterization data around the access request queue and performing congestion determination to obtain a rate limiting control signal; updating the access flow window parameters based on the rate limiting control signal and setting an incomplete request admission threshold, thereby forming a controlled request queue constrained by the incomplete request admission threshold. This invention controls the size of the access request queue through the linkage of congestion determination and the incomplete request admission threshold, achieving controllable access rhythm for concurrent read / write operations, reducing incomplete request backlog and queuing latency fluctuations, and improving overall throughput stability and operational reliability.

The invention relates to the technical field of information security, in particular to a user security login method based on an eBPF technology and related equipment. The method comprises the following steps: a control layer edits a user-defined login strategy through a strategy modification tool to obtain strategy configuration containing a version number; when the system is started, an application program tracks system nodes by loading an eBPF program to obtain an audit log; the observation layer monitors key nodes through multiple modules and collects process identifiers, network addresses and user names; the judgment layer carries out login information and strategy matching through an authentication function return node and a user switching hook function in a pluggable authentication module scene to obtain a rejection or permission mark; and the process loading hook function of the security module framework is combined with the mark of the data layer to execute an interception or release instruction. According to the method, the coverage range can be expanded, the forcing force is stronger, and the security, flexibility and efficiency of access control are integrally improved.

The invention discloses a card returning method and system based on a super SIM card, and the method comprises the steps: responding to a card returning instruction, generating a global process identifier based on the card returning instruction, and creating a state record based on the global process identifier; the state record is initialized, card returning operation is executed based on the global process identifier and the state record, and the card returning operation comprises a plurality of discretized sub-processes; in each time of card returning operation, the execution state of each sub-process is obtained in real time, and a first state record of the current card returning operation is obtained based on the execution state and the updated state record; if the state mark of the first state record does not meet the preset condition, taking the first state record as the state record of the next card returning operation, and executing the next card returning operation based on a preset retry strategy; and completing the card returning operation until the state mark of the first state record of any card returning operation meets a preset condition.

The systems and methods disclosed herein monitor application (e.g., artificial intelligence (AI) model) operations using interactions between the application and a kernel. The systems and methods disclosed herein intercept, using a kernel interface, one or more function invocations transmitted from the application (e.g., an AI model without model modification). Event record(s) are generated for one or more functions to define process identifiers, resource interaction types, timestamps, and / or resource identifiers. Observed pattern(s) for the application are identified by comparing current event record(s) with previous record(s), and the identified observed pattern(s) are evaluated against reference pattern(s) to generate score(s). Data packet(s) that indicate observed pattern(s), corresponding score(s), and / or cryptographic digital fingerprint(s) of the one or more functions are generated. The data packet(s) are transmitted to distributed ledgers for immutable storage.

Embodiments of the present disclosure relate to a permission processing method, apparatus, device and medium, wherein the method comprises: in response to a call request for a preset networking function in a kernel space, obtaining a first process identifier for calling the networking function; calling a query interface of a preset network packet filtering eBPF module to query whether the first process identifier is contained in a preset key-value pair set; if the first process identifier is contained, querying and obtaining a current networking permission value corresponding to the first process identifier in the key-value pair set through the query interface; and if the current networking permission value belongs to a preset first networking permission value, feeding back a networking permission message. In the embodiments of the present disclosure, the networking permission can be managed with process granularity, thereby improving the accuracy of networking permission management.

A method of operating a first device (100) in a wireless communication system is proposed. The method can comprise the steps of: receiving a configured grant from a base station (300); obtaining a first HARQ process identifier (ID) related to a first period of the configured grant; transmitting a first PSSCH to a second device (200) based on a first resource comprised in the first period; obtaining a second HARQ process ID related to a second period of the configured grant; and transmitting a second PSSCH to the second device (200) based on a second resource comprised in the second period.

The invention relates to a method, a system and equipment for checking memory leakage of a big data cluster in a smart park and a medium. The positioning method comprises the following steps: screening abnormal nodes; performing cross validation on the memory occupation condition of the abnormal node through a host monitoring tool and an operating system command to judge whether the abnormal node is a system-level memory anomaly or an application-level memory anomaly; reversely searching a corresponding application identifier according to a process identifier with high memory occupancy on an abnormal node with an abnormal application-level memory; and performing space-time correlation analysis on the application corresponding to the searched application identifier. According to the smart park big data cluster memory leak checking method, system and device and the medium, through multi-source data cross validation and hierarchical progressive analysis, accurate positioning and efficient handling of the memory leak problem are achieved.

The invention relates to the technical field of Linux graphic display systems and window management, in particular to a Wayland window management method and system supporting dynamic display switching. A Wayland window management method supporting dynamic display switching comprises the steps that a window management module is loaded through a plug-in based on Weston, UNIX domain socket communication and two one-way pipelines are established, and all window management operations are sequentially executed in a main thread of a synthesizer; establishing binding with a process identifier and a display name, distinguishing a non-full-screen switching path and a full-screen switching path, and moving a view as required or indicating redrawing according to a target resolution; a background layer, a video layer, an application layer, a top layer and an interface layer are preset, hot plug is monitored, migration and return are carried out according to priorities, screen switching, persistent binding and aliasing presentation during operation are achieved, time delay is reduced, and stability is improved.

The application provides a Bluetooth device dynamic sound field management method, and belongs to the technical field of automobiles. In response to a connection state of a Bluetooth device, an audio field associated with the Bluetooth device is dynamically created. A process identifier of a target application on a target display screen is acquired. An audio mixing rule is generated based on the process identifier. According to the audio mixing rule, an audio stream of the target application is switched to the audio field associated with the Bluetooth device. The application creates an independent audio field for a Bluetooth headset, realizes isolation between different audio streams, ensures that the audio of a specified application can be accurately routed to the Bluetooth device, and does not affect other system sounds.

The invention discloses a process camouflage attack detection method based on a kernel object causal atlas and a graph neural network, and relates to the technical field of network security and deep learning. The invention aims to solve the problem that an existing endpoint detection system seriously depends on process names and static characteristics and is difficult to identify advanced attacks such as sequence imitation and process identity disguise. The method mainly comprises the following steps: firstly, capturing an input / output request packet (IRP) of a file system in real time through a kernel-level filter driver (Minifilter), and extracting multi-dimensional features including a process identifier, an access permission mask, an I / O control code and a file object pointer (File Object Pointer); secondly, providing a causal atlas construction technology based on a file object pointer, aggregating discrete and cross-process I / O (Input / Output) operation into a logically coherent causal chain through a shared kernel object, and forcibly associating a disguised attack fragment with system background noise; and finally, constructing a graph convolutional neural network (GCN) model, performing feature aggregation and convolution calculation on graph nodes by using a time sequence edge and a causal edge, and identifying abnormal nodes of which behavior semantics are not consistent with claimed identities. According to the method, disguising of the process PID and the name can be effectively penetrated, the attack path is precisely restored through the bottom kernel logic, and the detection accuracy and robustness of ransomware, APT attacks and file-free attacks are remarkably improved.

The present application provides a network slice management method, a network management system, and a storage medium. The network slice management method comprises: receiving network slice configuration data from a network element (S110); on the basis of an IGP process identifier of a target network slice configured by a user, screening, from the network slice configuration data, requirement data for deploying the target network slice (S120); and deploying the target network slice on the basis of the requirement data (S130).

The systems and methods disclosed herein monitor application (e.g., artificial intelligence (AI) model) operations using interactions between the application and a kernel. The systems and methods disclosed herein intercept, using a kernel interface, one or more function invocations transmitted from the application (e.g., an AI model without model modification). Event record(s) are generated for one or more functions to define process identifiers, resource interaction types, timestamps, and / or resource identifiers. Observed pattern(s) for the application are identified by comparing current event record(s) with previous record(s), and the identified observed pattern(s) are evaluated against reference pattern(s) to generate score(s). Data packet(s) that indicate observed pattern(s), corresponding score(s), and / or cryptographic digital fingerprint(s) of the one or more functions are generated. The data packet(s) are transmitted to distributed ledgers for immutable storage.