597 results about "Software package" patented technology

The invention discloses an embedded system construction method and device, and the method comprises the steps: loading a configuration file which is a. Config file generated based on configuration parameters selected by a user through a visual configuration interface; when the CONFIGCONANAUTOUPDATE flag bit is detected to be in an activated state, the Conan warehouse data center is accessed, the latest compatible version of each Conan software package dependency item is inquired, and a semantic version constraint analysis algorithm is adopted to update a version identifier in the configuration file into the latest compatible version; generating a description file containing a dependency item list based on the updated configuration file, and generating a dependency lock file through a Hash locking mechanism; and importing the pre-compiled binary package into the construction environment, calling the corresponding pre-compiled binary package according to the version information and the Hash check value in the dependency lock file in the firmware compiling process, and executing hierarchical compiling operation.

A method is disclosed. The method comprises detecting one or more vulnerabilities in a software package, generating a version upgrade recommendation for each of the detected vulnerabilities, generating a version graph including one or more of the version upgrade recommendations and displaying the version graph at a user interface.

A software package is received and unpacked into multiple components comprising plural functions. Each function is lifted from machine code into static single-assignment intermediate representation and tokenized to produce semantics-preserving embeddings. Intermediate-representation data-flow features are extracted, including detection of constant static variables on a stack, stack reaching definitions, uninitialized variables, and intra-procedural aliases. For each component, the embeddings and features are input to a machine-learning model trained on semantic properties derived from a corpus of software packages to generate a software supply chain risk level. Data characterizing the risk level is provided to a consuming application. When the risk level satisfies a remediation criterion, a remediation action is initiated, including generation of a source-code patch recommendation for an identified root-cause function, insertion of a runtime guard into the component, or issuance of a security advisory for distribution to a security operations dashboard.

A vehicle software release management system enables receipt of a vehicle software package and an associated test plan to generate a versioned software artifact set. The vehicle software release management system may initiate a workflow to manage testing, certification, and deployment of the software package based on the versioned software artifact set. The vehicle software release management system may facilitate testing of the vehicle software package, including generating test scripts and configuring the testing environment according to test configurations. The vehicle software release management system may facilitate certification of the vehicle software package according to the versioned software artifact set and manage the deployment / rollback to software package destinations.

An automated identification of vulnerable software components is presented. The objective to find a method for the automatic identification of CVE affected software components through source-code parsing and text analysis. The method shall reduce manual work to a minimum and ensure a high level of data quality. The objective is solved by the computer-implemented method for identifying vulnerable software, comprising: receiving a software package; unpacking source code files for multiple versions of the software package; retrieving an entry for the software package from a vulnerability database; retrieving a patch for the software package; determining changes made by the patch to source code files of the software package; and determining whether the changes were made to a given version of software and reporting the given version of software as vulnerable in response to a determination the changes were absent from the given version of software.

Techniques are disclosed for sending downloadable software packages that may be executed to perform tests of a network device without requiring the network device to update firmware. In one example, the network device obtains a software package comprising instructions for simulating a network instance and stores the software package in a volatile memory of the network device. The network device simulates, based on the instructions, the network instance to obtain data indicative of a performance of the network instance. The network device sends, via a communication channel established with a network management system (NMS) based on the software package, the data indicative of the performance of the network instance. In some examples, the NMS uses the data indicative of the performance of the network instance to identify a root cause of a failure of the network device or a remedial action to be performed upon the network device.

The invention relates to the technical field of embedded system construction, in particular to a software dependency relationship automatic integration method and system based on meta packaging, and the method comprises the steps: S1, creating a meta packaging framework in an embedded construction system, and defining and constructing a stage hook through a Makefile; s2, automatically deploying the pre-compiled software package and the shared dependency library to a target directory of a construction system through a resource injection script; s3, analyzing a metadata file of the pre-compiled software package, extracting dependency relationship information, and generating a global dependency relationship list based on a directed acyclic graph topological sorting algorithm; and S4, inversely writing the global dependency relationship list into the dependency declaration configuration of the meta-packaging by utilizing the dependency aggregation script. By implementing the scheme, the problems of dependency sequence disorder and metadata auditing failure during embedded system integration are solved, the reliability of system integration is improved, the system construction efficiency is optimized, the safety of system construction is enhanced, and the maintainability and expansibility of system construction are improved.

The invention discloses a microemulsion interfacial tension efficient prediction method and system based on active learning and molecular dynamics. According to the method, 217 molecular descriptors corresponding to each molecular structure are calculated by adopting an RDKit software package, and the descriptors are used for representing molecular structure characteristics and serve as input variables of a machine learning model, so that key structure information including molecular branching degree, polarity and the like is transmitted. For an oil-water-surfactant ternary interface system, the oil-water interfacial tension in the presence of a surfactant is simulated and calculated through molecular dynamics, and an IFT value is set as a model prediction target. An active learning mechanism is introduced, and iterative sample labeling in the molecular dynamics simulation process is guided; and integrating the obtained IFT data with the molecular descriptor features, constructing a machine learning data set, and training a random forest model. According to the method, the problem of screening a high-performance surfactant layer by a middle-phase microemulsion system can be solved, and the ultra-low oil-water interfacial tension can be rapidly and efficiently screened.

The invention discloses a database installation and deployment method based on an MCP protocol, and relates to the technical field of database deployment. In order to solve the problems of high requirement on professional knowledge of a user and tedious privacy configuration in traditional database automatic deployment, the scheme adopted by the invention comprises the following steps: realizing standardized configuration of privacy information based on an MCP protocol, and completing related settings by the user through an operation interface; the method comprises the following steps of: receiving a natural language deployment instruction input by a user and triggering a deployment process by virtue of natural language analysis capability of an MCP protocol: calling MCP Tools by an MCP Server to acquire full-amount environment information of a server, and matching to obtain an adaptive installation package version; detecting dependence conditions of a target environment, automatically supplementing missing software packages, and automatically executing database installation, initialization configuration and monitoring component deployment; and the MCP Server summarizes the state information of the whole process and returns a deployment result. According to the invention, automatic and rapid installation and deployment of the database can be realized.

The invention belongs to the technical field of electrical digital data processing, and particularly relates to a Hash cache-based software component analysis optimization method, which comprises the following steps of: S1, scanning multi-dimensional features for the first time, and calculating storage component Hash by fusing dynamic behavior features, the method comprises the following steps: acquiring dynamic behavior characteristics of components during operation through a lightweight sandbox environment, and extracting basic characteristics, content characteristics and dependency characteristics of a software package and each component; hash values are introduced to serve as unique identifiers of software packages and components, and the Hash values of the components and corresponding detection results are calculated and stored during first-time scanning; according to the method, the component hash value is verified preferentially during subsequent scanning, if the hash value exists in the cache library, the historical detection result is directly reused, the full-amount analysis process does not need to be repeatedly executed, and on the premise that analysis accuracy is guaranteed, repeated calculation is reduced through a cache reuse mechanism, SCA analysis efficiency is improved, and resource consumption is reduced.

Risks associated with installing a software package on a computer system can be automatically detected and mitigated using techniques described herein. In one example, a system can generate severity scores for software components. Each severity score may correspond to a software component and indicate a severity of its vulnerabilities. The system may generate a risk score based on the severity scores. The risk score may represent an overall level of risk associated with installing the software package on the computing device. The system may also determine that an alternative software component is correlated with a software component of the software package, determine respective severity scores for the software component and the alternative software component, and compare their respective severity scores. The system can determine that the severity score of the alternative software component is lower and output a notification indicating the risk score and the alternative software component.

In one example, a method can detect and notify a user of package breaking changes for software in a computer environment. The method includes receiving, from a user, a request associated with upgrading a software program of a computing device from a first version to a second version of the software program, where the second version is newer than the first version. The method may then determine a package difference between the second version and a third version of the software program, with the third version of the software program being newer than the second version. The package difference may be a change to a package associated with the software program. The method then may output a notification indicating the package difference prior to the computing device being upgraded from the first version to the second version.

The invention provides an offline patch making method and device, electronic equipment and a storage medium. The method comprises the steps that a basic version mirror image is mounted, an obtained file system is decompressed, and information of a software package to be installed is extracted to generate a basic version software package list and a status file; executing the same processing on the target version mirror image to obtain a software package list of the target version; apt is configured, and a software source cache is updated; comparing the software package list of the basic version with the software package list of the target version, determining a software package needing to be upgraded, analyzing a source code package corresponding to the software package, and generating a complete difference list to be upgraded; downloading the software package and the dependency package thereof in the difference list in the virtual environment; and de-duplicating the upgrade packages of the plurality of basic versions and uniformly packaging the upgrade packages into offline service packs. Therefore, the method can support multiple basic versions to share one off-line service pack for system upgrading, and the flexibility and efficiency of patch making are improved.

The invention relates to a software bill of material generation method and device, and belongs to the technical field of computers.The method comprises the steps that a software source address is obtained, and a software source type is recognized according to the software source address; positioning and downloading a warehouse metadata file according to a software source type; calling a corresponding parser to parse the warehouse metadata file according to the software source type to obtain software package metadata; and according to the software package metadata, extracting an original field required by the generation of the software bill of material, and converting the original field required by the generation of the software bill of material into a standard field of the software bill of material, thereby generating the software bill of material conforming to the specification of the software bill of material. According to the software bill of material generation method and device provided by the invention, the self-adaptive generation of software bills of material of different software source types can be realized, the universal adaptation capability for multi-source and multi-architecture in the software bill of material generation is improved, and the preposition, lightweight and efficient generation of the software bill of material is realized.

A hard drive destruction device includes a kiosk having: a user interface, a hard drive portal, a camera, and a crushing unit; and a software for managing the hard drive destruction device. The software includes: an artificial intelligence and / or machine learning software component that detects and analyzes a hard drive inserted into the hard drive portal using the camera; and a back-end software component comprising a memory that stores a captured image of the hard drive, a verification information, and a chain-of-custody documentation.

The invention discloses an automobile software upgrading processing method and device, a storage medium and electronic equipment, and relates to the technical field of automobile electronics. The target upgrading software package is written into the partition obtained through the preset partition mode to be upgraded, part of software is precisely upgraded in a targeted mode, and therefore dynamic upgrading of the automobile software is achieved. The system partition and the application program partition form a double-partition design, only software in one partition is upgraded, in the process of running software in a new partition after upgrading, if the conditions that the software cannot be started or running is abnormal after starting and the like occur, the software in an old partition can be switched to run, the condition that the software cannot be started due to upgrading is avoided, and the software upgrading efficiency is improved. And the situation that the system cannot work normally when the whole firmware upgrading scheme fails to upgrade is avoided, so that the stability and the reliability of the system are improved.

A software package is received and unpacked into a plurality of components. Features are extracted from each component which are indicative (i.e., useful, etc.) in determining whether such component presents a software supply chain risk. The extracted features are consumed by one or more machine learning models to determine a level of supply chain risk associated with the component. This determined level of supply chain risk can be provided to a consuming application or process. Component identities can also be identified using machine learning or other similarity analyses. In some cases, embeddings are used to characterize risk and / or provide component identities. Related apparatus, systems, techniques and articles are also described.

The embodiment of the invention provides a vehicle software upgrading method, electronic equipment and a vehicle, and relates to the technical field of Internet of Vehicles. The vehicle software upgrading method is applied to a server, and the vehicle software upgrading method comprises the steps that an upgrading demand portrait is generated according to historical operation data corresponding to a target vehicle, and the upgrading demand portrait is used for describing upgrading demands of the target vehicle from multiple dimensions; according to the upgrading demand portrait, at least one to-be-upgraded target software package is determined from a software pool corresponding to the target vehicle, and the software pool comprises a plurality of upgradable software packages corresponding to software and hardware configuration of the target vehicle; and sending the target upgrading task to the target vehicle based on the target software package, so that the target vehicle executes vehicle software upgrading on the target software package. The technical problem that the user experience is affected due to the fact that vehicle software upgrading is lack of personalization in the related technology is solved.

Systems and methods provide agentless security assessment for workloads and cloud posture control across multi-cloud environments. Discovery modules are configured with collection intervals to ingest posture control data including assets, identities, configurations, activities, network flows, and build-time artifacts. A multi-cloud configuration inventory maintains current and historical states and produces misconfiguration and identity-activity findings. For workload vulnerability evaluation, an external snapshot manager obtains point-in-time root-disk state without installing an in-workload agent. A file system data processor derives operating system and package metadata, and a detector matches the metadata against a vulnerability feed refreshed on a recurring basis to identify vulnerabilities. Identified vulnerabilities are correlated with misconfiguration and activity findings to generate prioritized risk exposures. Results are stored per workload and presented through graphical user interfaces that display risk levels, timelines, alerts, and guided remediation, enabling continuous, low-overhead security coverage for cloud workloads and configurations.

The invention provides a method and a system for dynamically calling a kernel unexported function, which are used for dynamically acquiring a function address of an unexported kernel function and forcibly calling the function through a kProbes mechanism, matching with a function pointer type definition and a mechanism for forcibly converting the function address into a function pointer. The method not only supports the calling of the kernel function which is not exported, but also does not need to carry out hard coding on the address of the called kernel function, supports the dynamic acquisition of the address of the kernel function, avoids the change of the coincidence address caused by the difference of kernel versions, greatly enhances the compatibility of the software package of the kernel function which is not exported, and improves the reliability of the software package. And the packet does not need to be recompiled in each kernel small version, so that the problem that the kernel symbol table is not matched and the kernel module cannot be loaded is avoided.

The invention provides a system updating method and a related product. The system updating method comprises the following steps: sending a latest software information list to terminal equipment through a server, and then determining a to-be-updated software identifier set by the terminal equipment according to a current software information list and the latest software information list of locally installed software of the terminal equipment; then, the terminal equipment determines an incremental update file address set of the to-be-updated software, and downloads all incremental update files of the to-be-updated software from an incremental update file warehouse stored in the server according to the incremental update file address set of the to-be-updated software; then, the terminal equipment generates a virtual software package of the to-be-updated software based on all the current files and the incremental updating file of the to-be-updated software; and the terminal equipment uses the installed preset system updating program to install the virtual software package of the to-be-updated software so as to update the to-be-updated software. Therefore, rapid system updating can be realized based on the installed preset system updating program.

The invention discloses a control method and device of an automation system based on a pre-start execution environment and a storage medium, and relates to the technical field of computers, the method comprises the following steps: a terminal device obtains and installs a start software package sent by a server according to a start instruction; loading a mirror image code in a mirror image version information writing file based on a reading request triggered by the starting software package; according to the mirror image code, obtaining and loading a configuration file corresponding to the mirror image code from the server, and generating an installation parameter corresponding to the mirror image code; and according to the installation parameters, combining with a mirror image version in the mirror image version information writing file, and executing a system installation process of the mirror image version. According to the method and the device, the technical problem of low system installation efficiency caused by the phenomena of wrong installation and mismatched configuration which are easy to occur due to the fact that mirror images are manually selected from a large number of lists for installation when the shipping system is installed is solved, and the system installation efficiency is improved.

The invention belongs to the technical field of AI and containers, and discloses a simplified duplicate removal and security enhancement system and method for an AI mirror image. The method comprises the steps of recording an access event of a container to a file system, and performing file clipping; partitioning and storing the mirror image file based on a content partitioning algorithm; an index structure is optimized, so that the data retrieval efficiency is improved; when a user requests the container mirror image, the system performs security scanning on the container mirror image through a parallel processing and static analysis method, and automatically updates the outdated software package in the container, thereby preventing potential security risks caused by the outdated software package. According to the method, through triple technologies of dynamic behavior monitoring, three-mask content block deduplication and parallelization vulnerability repair, edge node mirror image pulling time delay is effectively reduced, and distributed training deployment is accelerated; the storage pressure of a mirror image warehouse is reduced and the resource utilization rate is improved; and the method is suitable for scenes such as AI model cloud edge collaborative deployment and the like.

The invention belongs to the field of computer software and system maintenance, and particularly discloses a software state management and upgrading method and system supporting multi-mode deployment, and the method comprises the steps: collecting a service operation state and resource use data of software, carrying out the comprehensive research and judgment of the service operation state, storing the service operation state, and carrying out the service restart based on a research and judgment result; receiving the software package, calculating a check code of the software package, and storing and recording the information data of the software package, the check code and the storage path in a database based on a preset path; a software upgrading instruction sent by a front end is received, the storage path of the target software package and the stored check code are obtained from the database, and the integrity of the target software package is checked; and deploying the target software package to a specified path, recording upgrading information, and closing the old version service to start the new version service. The operation and maintenance efficiency and safety of software management can be improved.

Techniques are disclosed relating to the protection of secrets within a software development lifecycle. Developers can use an encryption service to encrypt a secret to be used by an application within a package. The secret can be associated with the application, and then encrypted and included in a package that is signed and passed through a software automation pipeline to a data center that hosts the production server for the application. The application executing on the production server can request that the secret be decrypted by a decryption service after package verification. A developer can also specify, in a manifest file, a set of secrets needed for applications executing in the same data center. The manifest file may be passed from the software development environment to the data center, where the specified secrets are created and used by the applications without ever residing or being accessible outside the data center.

One or more embodiments of the invention provide a three-dimensional model generation method, apparatus and device, a medium and a program product. The method is applied to CAD software and comprises the following steps: acquiring a plane image and a model thickness of a modeling object; generating a plane grid for the modeling object according to the plane image; generating a front grid, a back grid and a side grid for the modeling object according to the plane grid and the model thickness; and combining the front grid, the back grid and the side grid into a three-dimensional grid, and mapping the texture of the plane image to the three-dimensional grid to obtain a three-dimensional model of the modeling object.

A software defined vehicle (SDV) operating system may include components for executing software packages that declare unit types (e.g., interfaces) and define service units that each implement a unit type. For each unit type, there may be several service units that each provide a different implementation of that unit type. The SDV operating system may manage a service discovery module that registers service units for each unit type in a centralized registry. While executing a software package that declares a unit type, the service discovery module may fetch, from the centralized registry, an implementation of the unit type by a service unit defined by a different software package. While still executing the software package (i.e., at runtime), the SDV operating system may load a service unit defined by the software package with the fetched implementation. The SDV operating system may then execute the service unit based on the fetched implementation.

A computer-implemented operation method is provided for isolating a software application from operating system software, including: installing a configuration file; installing a plurality of detectors; and installing and executing a monitoring software program. The configuration file enables interaction with the application. The detectors analyze input to the application. The input either belongs to an authorization list or else is absent therefrom. Executing the monitoring software program loads the detectors, receives application information from the configuration file, and activates an alert in response to the input being absent from said authorization list.

The invention discloses an industrial network traffic anomaly detection and source tracing method, device and equipment and a storage medium, and relates to the technical field of artificial intelligence, and the method comprises the steps: converting a traffic data package of an industrial network into a process characteristic analysis software package, extracting a plurality of dimension statistical features from the process characteristic analysis software package, and storing the extracted statistical features in a database; converting the statistical characteristics of each dimension into table data; performing classification coding processing on connection behavior features in the table data to obtain a target coding result, normalizing statistical features to obtain a normalization result, converting time features to obtain a conversion result, obtaining a mixed feature vector, constructing a DAGMM model comprising a self-codec and a Gaussian mixture model by using an unsupervised mode, and obtaining a mixed feature vector; performing anomaly detection on the mixed feature vector to obtain an anomaly detection result; and if the traffic is abnormal, performing reverse decoding on the mixed feature vector by using a tracing algorithm to obtain a tracing result, thereby improving the efficiency of performing anomaly detection and tracing on the industrial network traffic.

The invention discloses a binary dependency package management method, device and equipment, and relates to the technical field of software package management. Comprising the following steps: analyzing a dependency statement in a project configuration file; based on the dependency declaration, communicating with the central warehouse to obtain metadata of the dependency packet; performing dependency decision according to the metadata; executing corresponding acquisition and integration based on the determined dependency type; executing corresponding acquisition and integration based on the determined dependency type; and if the central warehouse does not return the matched product, outputting error information and prompting a user to construct by using a local source code or other configuration sources. Dependence management automation, construction safety improvement and construction process high efficiency are realized.