38 results about "Software assets" patented technology

The invention discloses an embedded system integration test case multiplexing method and system, and the method is characterized in that the multiplexing of a test case is carried out based on the existing software assets: firstly, based on the existing software requirements and the test case, an existing requirement-test case tracking chain is constructed; performing demand change analysis on the new demand activity graph information; performing change influence range analysis based on a change analysis result in combination with a demand-test case tracking chain, and determining a test case reuse and generation scheme; and finally, executing the test case multiplexing and generating scheme. According to the method, the tracking relation between existing requirements and test case assets is established, meanwhile, the execution cost of downstream test tasks caused by requirement change is reduced through multiplexing, and the test efficiency of integration testing is improved.

The invention discloses a cross-platform software component lightweight migration method, which comprises the following steps of: establishing a standardized storage system, and uniformly storing software assets to be migrated, including components, pages generated by the components, modules formed by the pages and applications formed by the modules, as XML (Extensible Markup Language) files; the cross-platform migration adaptation engine comprises a platform information analysis module, an XML (Extensible Markup Language) file analysis module, a difference analysis module, an automatic adaptation conversion module and a manual intervention module; executing a software asset migration process by utilizing a cross-platform migration adaptation engine; and finally, uniformly storing the successfully migrated software asset target XML file and the source platform XML file into a software asset library for management. By the adoption of the cross-platform software component lightweight migration method, cross-platform rapid and efficient migration of software assets is achieved, the asset reuse rate is increased, customization and standardization requirements are balanced, flexible deployment and secondary development are supported, and the problem of existing low-code platform migration is solved.

The invention belongs to the technical field of aviation airborne system design, and provides a helicopter airborne system-oriented novel software architecture and a construction method thereof, and the architecture comprises a hardware abstraction layer, a framework resource layer, an intelligent platform service layer and an application software layer from bottom to top. And the hardware abstraction layer realizes decoupling of hardware and basic software of an operating system. The framework resource layer supports operation of a hybrid key operating system, supports and isolates tasks and application programs with different key levels, software bases and computing power requirements, and provides basic computing communication resources and AI computing power resources. The intelligent platform service layer comprises middleware, a servitization function unit and a servitization management unit, and the servitization function unit comprises atomic services and enhanced services. And the application layer interacts with the intelligent platform service layer and is decoupled from a bottom software and hardware environment. The framework is suitable for unmanned / manned helicopters, and generalization of platform support and maximum reuse of software assets are achieved.

The invention relates to the field of software component analysis, and particularly discloses a scanning platform based on software component analysis, which comprises a knowledge base service unit, a detection engine service unit, a business platform management service unit and a data persistence service unit. An enterprise can be assisted to identify vulnerability risks and compliance risks in an open source component, analyze levels of the risks and track and position known vulnerabilities; repair suggestions can be provided for existing risks, and software is prevented from getting online with diseases. An enterprise is assisted to collect and manage software asset information, and enterprise-level, department-level and project-level software asset distribution visualization is realized; and whether the component dependency relationship or the vulnerability propagation chain can be clearly checked through the platform, so that the risk checking time cost of developers and security personnel is reduced, and the development process is accelerated.

A method comprising performing, by at least one processor, operations including: sending a query including an identifier for an asset; receiving a data structure for the asset, wherein the data structure includes a determined relationship between the asset and other hardware and software assets; rendering the data structure into a format for display; and displaying the rendered data structure.

The invention discloses a software supply chain security management method and system, and relates to the technical field of network security. Identifying open source components, vulnerabilities and license information in the software assets through a software component analysis engine, verifying the availability of the vulnerabilities in an isolation sandbox, and generating a dynamic report; analyzing license compliance based on a legal knowledge graph, generating a risk disposal instruction in combination with a vulnerability verification result, and pushing the risk disposal instruction to a DevOps platform or a work order system for execution; and meanwhile, multi-source intelligence is fused through a federated learning engine, 0day vulnerability risks are predicted, and assets are associated to push hierarchical prompts. According to the method, dynamic risk management and control of the full life cycle of the software supply chain are realized, the problems of detection blind areas, static evaluation, weak compliance and the like in traditional management are solved, the safety and management efficiency of the supply chain are remarkably improved, and the method is suitable for key industries such as finance and electric power.

The invention discloses a software asset identification method, device and equipment and a storage medium, and relates to the technical field of computers, and the method comprises the following steps: identifying first software directly relied on by local closed source software of a server; analyzing a configuration file of the first software to identify second software which the closed source software indirectly depends on; and locally constructing a local dependency relationship graph between the closed source software and the first software and between the closed source software and the second software, and supplementing the local dependency relationship graph based on the software dependency relationship graph of the cloud to obtain a global dependency relationship graph between the closed source software and all local software. According to the scheme, all local software of the server can be accurately and comprehensively identified, and the dependency relationship between the software is further determined.

The invention belongs to the technical field of campus management, and particularly relates to a smart campus software asset operation and maintenance management system, which comprises an asset management module, a use monitoring module, a cost control module, an automatic operation and maintenance module, a hierarchical authority management module, a data storage encryption module, a cloud service integration module, an educational resource sharing cooperation module and a risk management module. Through the modular architecture design, the school can flexibly select the required function module according to the self demand, the complexity increase caused by function redundancy is avoided, the SaaS mode or the cloud-based service is adopted, the difficulty and cost of local deployment are reduced, the requirement for IT support strength is reduced, a concise and visual operation interface is designed, and the user experience is improved. Even people lacking professional technical backgrounds can operate the device smoothly.

Aspects of the subject technology relate to systems, methods, and computer-readable media for identifying vulnerable software associated with an enterprise. A database of software assets associated with an enterprise can be maintained via a software asset management (SAM) system. A vulnerable software asset can be identified and a descriptor of the vulnerable software asset can be obtained. The descriptor can be mapped to a portion of the database of software assets. A likelihood that the vulnerable software asset is associated with the enterprise can be determined based on the mapping.

A method comprising performing, by at least one processor, operations including: sending a query including an identifier for an asset; receiving a data structure for the asset, wherein the data structure includes a determined relationship between the asset and other hardware and software assets; rendering the data structure into a format for display; and displaying the rendered data structure.

The invention discloses a software asset management method, device and equipment and a storage medium, and relates to the field of software management.The method comprises the steps that an operation sequence of a user in a software asset management system is captured in real time, and the operation sequence is analyzed to construct an operation behavior time sequence characteristic graph; matching the software assets uploaded to the software asset management system by the user with the rules in the rule base to obtain a rule matching result; and generating a software asset compliance report according to the operation behavior time sequence characteristic spectrum and a rule matching result. According to the scheme provided by the invention, the efficiency of software asset compliance management is improved.

The invention discloses an industrial internet high-risk software identification system and method, and particularly relates to the technical field of industrial internet security, and the system comprises an industrial software genetic map automatic construction module, a dynamic risk assessment module for service context perception, and a map-associated accurate disposal strategy recommendation module. A unique digital identity label is generated for software assets through a multi-dimensional feature collection and fusion technology, and accurate recognition is achieved; the real security risk of the software assets is dynamically quantified according to the vulnerability severity, the business criticality and the network exposure surface; and based on the asset relation graph and game analysis, generating and recommending an optimal disposal strategy with the minimum influence on the business for the high-risk software. The problems that in the prior art, industrial software identification is not accurate, risk assessment is separated from service context, and disposal measures are lack of intelligent decision support are solved, automatic closed-loop management from identification, assessment to disposal is achieved, and the safety protection capacity of the industrial internet is remarkably improved.

Systems and methods for Configuration Management Database (CMDB) based application segmentation include obtaining transactional data for a plurality of users of an enterprise, wherein the transactional data relates to usage of a plurality of applications by the plurality of users; obtaining Configuration Management Database (CMDB) data of the enterprise, wherein the CMDB data includes information about hardware and software assets of the enterprise; matching application information within the transactional data and the CMDB data; and generating one or more application segments based on the matching.

The application discloses an industrial internet high-risk software identification system and method, and particularly relates to the technical field of industrial internet security, and comprises an industrial software gene map automatic construction module, a business context-aware dynamic risk assessment module and a map-associated precise disposal strategy recommendation module; through multi-dimensional feature acquisition and fusion technology, a unique digital identity is generated for software assets, precise identification is realized; the real security risk of software assets is dynamically quantified by comprehensively considering vulnerability severity, business criticality and network exposure; based on asset relationship map and game analysis, the optimal disposal strategy with the least impact on business is generated and recommended for high-risk software. The application solves the problems of inaccurate industrial software identification, risk assessment out of business context and lack of intelligent decision support for disposal measures in the prior art, realizes automatic closed-loop management from identification, evaluation to disposal, and significantly improves the security protection capability of the industrial internet.

Techniques are described for assessing the health of one or more applications. For example, this disclosure describes a computing device configured to obtain information associated with one or more software assets, wherein the information associated with one or more software assets comprises information associated with a lifecycle of the one or more software assets. The computing device is also configured to compute, based on at least a portion of the information associated with the one or more software assets, a health score that indicates a security risk of the one or more software assets. The computing device is further configured to perform an action based on the health score.

The application discloses an embedded system integration test case reuse method and system, which is essentially based on existing software assets to reuse test cases: firstly, based on existing software requirements and test cases, a tracking chain between the existing requirements and test cases is constructed; next, requirement change analysis is performed on new requirement activity diagram information; based on the change analysis result, combined with the requirement-test case tracking chain, change influence range analysis is performed to establish a test case reuse and generation scheme; finally, the test case reuse and generation scheme is executed. The method not only establishes the tracking relationship of the existing requirements and test case assets, but also reduces the execution cost of the downstream test task caused by the requirement change through reuse, and improves the test efficiency of the integration test.

A serialization processing and retrieval method for spaceflight control software table data belongs to the technical field of aerospace, and comprises the following steps: reading spaceflight control software table data, and representing table elements with placeholders; according to the table data after data cleaning, constructing an LLM input, backfilling the LLM output to a corresponding placeholder, and storing the backfilled table data into a knowledge base; constructing a data set according to the preprocessed table data, and continuing pre-training the LLM on the basis of the data set; and generating a large model retrieval framework according to offline deployment retrieval enhancement of the knowledge base. According to the method, table data in software documents are extracted, large model reasoning is utilized to obtain fusion with original text data to train a field large model, and a retrieval enhancement technology is utilized to improve understanding and application of the large model to table knowledge; and the understanding of software developers on software asset contents borne in a table form in the field of spaceflight embedded control software is improved.

A method includes performing, by at least one processor, the following: sending a query including an asset identifier; receiving a data structure of the asset, the data structure including a determined relationship between the asset and other hardware and software assets; rendering the data structure into a format capable of being displayed; and displaying the rendered data structure.

The invention belongs to the technical field of software engineering, and particularly relates to a software security management platform which comprises an asset management agent, a threat retrieval agent and a threat analysis agent which are constructed based on a large model. The threat retrieval agent is used for capturing latest threat intelligence and vulnerability intelligence and generating a security risk list according to the threat intelligence and the vulnerability intelligence; the security risk list comprises software names and associated threat and vulnerability information; the asset management agent is used for retrieving asset attribute information corresponding to the software in a software asset database according to the software name in the security risk list so as to generate an asset attribute list; and the threat analysis agent is used for associating the security risk list with the asset attribute list, analyzing the security risk of each software managed by the platform, and generating a corresponding threat report.

Efficient use of past software assets is enabled in software development, and the efficiency of software development is improved. This document analysis device includes a group classification section configured to determine requirement elements included in a first document as a target for analysis and classify the requirement elements into a plurality of groups; a topic extraction section configured to extract, as topics, terms related to the requirement elements classified into the plurality of groups; a topic difference extraction section configured to compare topics included in groups of an already analyzed second document that is different from the first document with the topics included in the groups of the first document and to detect differences between the topics;contained in the groups of the second document and the topics contained in the groups of the first document, and an analysis result output section configured to output an analysis result indicating a result of the analysis including the differences to the outside.,

The invention relates to the technical field of data security maintenance, in particular to a software asset scanning method and device applied to a CMDB (Configuration Management Database) and related equipment, and is applied to first network equipment in a local area network, and the first network equipment is deployed with a CMDB. Determining a plurality of open software ports in the local area network; sequentially sending a plurality of pieces of request information following different network protocols to each software port in the plurality of software ports until response information is received; according to the response information, determining actual attribute information of a target software asset corresponding to the software port sending the response information; and storing the actual attribute information to the CMDB. The technical problems that an existing software asset scanning method applied to CMDB is low in accuracy, time-consuming and labor-consuming and has potential risks can be solved.

The application discloses a software architecture evolution recommendation system based on a knowledge graph and an implementation method thereof, and the system comprises a bottom hardware resource support layer which is used for supporting the persistent storage of software asset data and the high-performance calculation of graph topology through physical computing resources and high-speed communication link support, and the bottom hardware resource support layer comprises a high-density computing cluster, a distributed storage array and a high-speed network switching matrix. All the technical features of the application jointly constitute an organic whole, and aim to solve the software architecture evolution problem under the driving of complex education business.

An apparatus is provided for protecting the privacy of shared objects and helping to prevent the loss of these software assets by loading the shared objects into the user memory of a trusted execution environment. The shared objects have encrypted segments and metadata. A decryption request is sent to the trusted execution environment, and the encrypted segments are decrypted based on the metadata and a predetermined platform key to produce a decrypted segment. The decrypted segment is written to the shared object. A request to lock the shared object is sent, locking or setting the memory occupied by the shared object to execution-only. The locking of the memory region occupied by the decrypted shared object maps the memory region to be unreadable and unwritable by all applications executing at a first privilege level and by the operating system kernel executing at a second privilege level.

Embodiments create application-aware software asset inventories for software assets deployed upon computer networks associated with organizations. An example embodiment extracts configuration information pertaining to an application installed on a workload deployed upon a network. In turn, an application topology file is constructed from the extracted configuration information. The constructed application topology file serves as an application-aware software asset inventory wherein information pertaining to identities, locations, and configurations of such software assets is organized and stored.

The invention discloses a software asset reuse method and system, and relates to the technical field of data processing, and the method comprises the steps: receiving the demand information of software assets of a target project input by a user, and extracting the attribute characteristics of the demand information; retrieving and matching candidate assets in a pre-constructed software asset library through a preset similarity matching algorithm based on the attribute features; performing compatibility verification on the matched candidate assets, if the verification is passed, outputting the candidate assets and deploying the candidate assets to a user target environment, and if the verification fails, generating an adaptive adjustment scheme; and performing parameter optimization and code adaptation on the candidate assets according to the adaptation adjustment scheme, forming deployable reused assets, and deploying the reused assets to a user target environment. The method has the advantages of accurate software asset analysis, dynamic compatibility verification and adaptive optimization.

1. Name of the Design Product: Graphic User Interface of Application Component Solution for Electronic Devices. 2. Use of the Design Product: An electronic device. 3. Design Key Points of the Design Product: Lies in the interface content of the graphic user interface in the electronic device. 4. Picture or Photo Most Illustrating the Design Key Points: Design 1 Interface Variation State Diagram 1. 5. Design 1 is designated as the basic design. 6. Use of the Graphic User Interface: Used to implement functions such as solution introduction, popular project display, etc. 7. Explanation of the Variation States of the Graphic User Interface: The main view of Design 1 is the home page interface; after clicking the "Software Assets" button at the top of the home page interface, Design 1 Interface Variation State Diagram 1 is displayed; sliding down Design 1 Interface Variation State Diagram 1, Design 1 Interface Variation State Diagrams 2 to 3 are displayed in sequence; sliding down the main view of Design 2, Design 2 Interface Variation State Diagrams 1 to 2 are displayed in sequence. 8. Other Circumstances Requiring Explanation: Other Explanation: "XXX" in the interface diagrams all represent text and / or numbers and / or letters and / or symbol content, and the gray box areas in the interface are all inserted content screens. There is a QR code in each white box at the lower left corner of Design 1 Interface Variation State Diagram 3 and Design 2 Interface Variation State Diagram 2.

The invention discloses a software change processing method and device, computer equipment and a storage medium, belongs to the technical field of software engineering, and is applied to a software delivery scene. According to the method, the software change event is continuously monitored, fine analysis and structured processing on the change log are combined, and under the support of the unified software asset dependency relationship graph, accurate topology analysis on the change influence range is realized, so that upstream and downstream software assets involved in the change can be accurately identified, and the change accuracy is improved. And automatically matching a most suitable change processing strategy based on the influence range, and driving a corresponding change processing executor to carry out targeted processing on the change content. By means of the technical means, on-demand and granularity-based processing of software change is achieved, unnecessary construction and deployment operations are reduced, the overall execution time of software change processing is shortened, consumption of computing resources and network resources is reduced, and therefore the efficiency, stability and safety of the software delivery process are overall improved.

The invention provides a software asset analysis method and device, electronic equipment, a medium and a program product, and can be applied to the technical field of big data and the technical field of artificial intelligence. The method comprises the steps of obtaining a target event; determining at least one target analysis dimension and a corresponding affected data range based on the target event and preset event rule information; according to the affected data range, incremental updating is conducted on a dynamic topological graph, an updated topological graph is obtained, and the dynamic topological graph represents the relation between software assets and corresponding associated entities; performing incremental aggregation calculation on the reference software asset analysis result of the target analysis dimension based on the updated topological graph to obtain an updated software asset analysis result; and generating a software asset analysis result for target software based on the updated software asset analysis result.

The invention discloses a software asset management method and device, equipment, a medium and a product, and relates to the technical field of big data, and the method comprises the steps: determining an initial service link asset of a to-be-monitored application; processing the at least one piece of service data to obtain intermediate service link assets of the to-be-monitored application, intermediate service data in the intermediate service link assets being in one-to-one correspondence with the initial service data; processing the at least one piece of intermediate service data by using a preset data processing rule to obtain target service link assets of the to-be-monitored application, the number of target service data in the target service link assets being not greater than the number of the intermediate service data; and when an information change instruction of the to-be-monitored application is received, determining asset fluctuation information of the to-be-monitored application based on the information change instruction and the target service link asset. The asset fluctuation information of the to-be-monitored application can be efficiently, visually and automatically determined, the asset management cost is reduced, and the asset management efficiency and quality are improved.

Embodiments of the subject technology relate to systems, methods, and computer-readable media for just-in-time signature loading to selectively load a specific cryptographic signature needed to authenticate a software asset being loaded / executed during a runtime of an application associated with the software asset. The systems and techniques described herein can selectively load specific cryptographic signatures as needed during runtime, rather than loading all cryptographic signatures associated with the application during runtime, including any cryptographic signatures that may not be needed to run a particular instance or portion of the application (such as the cryptographic signatures of any software assets that are not used / loaded with the application and may not need to be authenticated).