517 results about "Software package" patented technology

A software package is received and unpacked into multiple components comprising plural functions. Each function is lifted from machine code into static single-assignment intermediate representation and tokenized to produce semantics-preserving embeddings. Intermediate-representation data-flow features are extracted, including detection of constant static variables on a stack, stack reaching definitions, uninitialized variables, and intra-procedural aliases. For each component, the embeddings and features are input to a machine-learning model trained on semantic properties derived from a corpus of software packages to generate a software supply chain risk level. Data characterizing the risk level is provided to a consuming application. When the risk level satisfies a remediation criterion, a remediation action is initiated, including generation of a source-code patch recommendation for an identified root-cause function, insertion of a runtime guard into the component, or issuance of a security advisory for distribution to a security operations dashboard.

Techniques are disclosed for sending downloadable software packages that may be executed to perform tests of a network device without requiring the network device to update firmware. In one example, the network device obtains a software package comprising instructions for simulating a network instance and stores the software package in a volatile memory of the network device. The network device simulates, based on the instructions, the network instance to obtain data indicative of a performance of the network instance. The network device sends, via a communication channel established with a network management system (NMS) based on the software package, the data indicative of the performance of the network instance. In some examples, the NMS uses the data indicative of the performance of the network instance to identify a root cause of a failure of the network device or a remedial action to be performed upon the network device.

The invention relates to the technical field of embedded system construction, in particular to a software dependency relationship automatic integration method and system based on meta packaging, and the method comprises the steps: S1, creating a meta packaging framework in an embedded construction system, and defining and constructing a stage hook through a Makefile; s2, automatically deploying the pre-compiled software package and the shared dependency library to a target directory of a construction system through a resource injection script; s3, analyzing a metadata file of the pre-compiled software package, extracting dependency relationship information, and generating a global dependency relationship list based on a directed acyclic graph topological sorting algorithm; and S4, inversely writing the global dependency relationship list into the dependency declaration configuration of the meta-packaging by utilizing the dependency aggregation script. By implementing the scheme, the problems of dependency sequence disorder and metadata auditing failure during embedded system integration are solved, the reliability of system integration is improved, the system construction efficiency is optimized, the safety of system construction is enhanced, and the maintainability and expansibility of system construction are improved.

The invention discloses a microemulsion interfacial tension efficient prediction method and system based on active learning and molecular dynamics. According to the method, 217 molecular descriptors corresponding to each molecular structure are calculated by adopting an RDKit software package, and the descriptors are used for representing molecular structure characteristics and serve as input variables of a machine learning model, so that key structure information including molecular branching degree, polarity and the like is transmitted. For an oil-water-surfactant ternary interface system, the oil-water interfacial tension in the presence of a surfactant is simulated and calculated through molecular dynamics, and an IFT value is set as a model prediction target. An active learning mechanism is introduced, and iterative sample labeling in the molecular dynamics simulation process is guided; and integrating the obtained IFT data with the molecular descriptor features, constructing a machine learning data set, and training a random forest model. According to the method, the problem of screening a high-performance surfactant layer by a middle-phase microemulsion system can be solved, and the ultra-low oil-water interfacial tension can be rapidly and efficiently screened.

The invention belongs to the technical field of electrical digital data processing, and particularly relates to a Hash cache-based software component analysis optimization method, which comprises the following steps of: S1, scanning multi-dimensional features for the first time, and calculating storage component Hash by fusing dynamic behavior features, the method comprises the following steps: acquiring dynamic behavior characteristics of components during operation through a lightweight sandbox environment, and extracting basic characteristics, content characteristics and dependency characteristics of a software package and each component; hash values are introduced to serve as unique identifiers of software packages and components, and the Hash values of the components and corresponding detection results are calculated and stored during first-time scanning; according to the method, the component hash value is verified preferentially during subsequent scanning, if the hash value exists in the cache library, the historical detection result is directly reused, the full-amount analysis process does not need to be repeatedly executed, and on the premise that analysis accuracy is guaranteed, repeated calculation is reduced through a cache reuse mechanism, SCA analysis efficiency is improved, and resource consumption is reduced.

Risks associated with installing a software package on a computer system can be automatically detected and mitigated using techniques described herein. In one example, a system can generate severity scores for software components. Each severity score may correspond to a software component and indicate a severity of its vulnerabilities. The system may generate a risk score based on the severity scores. The risk score may represent an overall level of risk associated with installing the software package on the computing device. The system may also determine that an alternative software component is correlated with a software component of the software package, determine respective severity scores for the software component and the alternative software component, and compare their respective severity scores. The system can determine that the severity score of the alternative software component is lower and output a notification indicating the risk score and the alternative software component.

The invention relates to a software bill of material generation method and device, and belongs to the technical field of computers.The method comprises the steps that a software source address is obtained, and a software source type is recognized according to the software source address; positioning and downloading a warehouse metadata file according to a software source type; calling a corresponding parser to parse the warehouse metadata file according to the software source type to obtain software package metadata; and according to the software package metadata, extracting an original field required by the generation of the software bill of material, and converting the original field required by the generation of the software bill of material into a standard field of the software bill of material, thereby generating the software bill of material conforming to the specification of the software bill of material. According to the software bill of material generation method and device provided by the invention, the self-adaptive generation of software bills of material of different software source types can be realized, the universal adaptation capability for multi-source and multi-architecture in the software bill of material generation is improved, and the preposition, lightweight and efficient generation of the software bill of material is realized.

A hard drive destruction device includes a kiosk having: a user interface, a hard drive portal, a camera, and a crushing unit; and a software for managing the hard drive destruction device. The software includes: an artificial intelligence and / or machine learning software component that detects and analyzes a hard drive inserted into the hard drive portal using the camera; and a back-end software component comprising a memory that stores a captured image of the hard drive, a verification information, and a chain-of-custody documentation.

The invention discloses an automobile software upgrading processing method and device, a storage medium and electronic equipment, and relates to the technical field of automobile electronics. The target upgrading software package is written into the partition obtained through the preset partition mode to be upgraded, part of software is precisely upgraded in a targeted mode, and therefore dynamic upgrading of the automobile software is achieved. The system partition and the application program partition form a double-partition design, only software in one partition is upgraded, in the process of running software in a new partition after upgrading, if the conditions that the software cannot be started or running is abnormal after starting and the like occur, the software in an old partition can be switched to run, the condition that the software cannot be started due to upgrading is avoided, and the software upgrading efficiency is improved. And the situation that the system cannot work normally when the whole firmware upgrading scheme fails to upgrade is avoided, so that the stability and the reliability of the system are improved.

A software package is received and unpacked into a plurality of components. Features are extracted from each component which are indicative (i.e., useful, etc.) in determining whether such component presents a software supply chain risk. The extracted features are consumed by one or more machine learning models to determine a level of supply chain risk associated with the component. This determined level of supply chain risk can be provided to a consuming application or process. Component identities can also be identified using machine learning or other similarity analyses. In some cases, embeddings are used to characterize risk and / or provide component identities. Related apparatus, systems, techniques and articles are also described.

The embodiment of the invention provides a vehicle software upgrading method, electronic equipment and a vehicle, and relates to the technical field of Internet of Vehicles. The vehicle software upgrading method is applied to a server, and the vehicle software upgrading method comprises the steps that an upgrading demand portrait is generated according to historical operation data corresponding to a target vehicle, and the upgrading demand portrait is used for describing upgrading demands of the target vehicle from multiple dimensions; according to the upgrading demand portrait, at least one to-be-upgraded target software package is determined from a software pool corresponding to the target vehicle, and the software pool comprises a plurality of upgradable software packages corresponding to software and hardware configuration of the target vehicle; and sending the target upgrading task to the target vehicle based on the target software package, so that the target vehicle executes vehicle software upgrading on the target software package. The technical problem that the user experience is affected due to the fact that vehicle software upgrading is lack of personalization in the related technology is solved.

Systems and methods provide agentless security assessment for workloads and cloud posture control across multi-cloud environments. Discovery modules are configured with collection intervals to ingest posture control data including assets, identities, configurations, activities, network flows, and build-time artifacts. A multi-cloud configuration inventory maintains current and historical states and produces misconfiguration and identity-activity findings. For workload vulnerability evaluation, an external snapshot manager obtains point-in-time root-disk state without installing an in-workload agent. A file system data processor derives operating system and package metadata, and a detector matches the metadata against a vulnerability feed refreshed on a recurring basis to identify vulnerabilities. Identified vulnerabilities are correlated with misconfiguration and activity findings to generate prioritized risk exposures. Results are stored per workload and presented through graphical user interfaces that display risk levels, timelines, alerts, and guided remediation, enabling continuous, low-overhead security coverage for cloud workloads and configurations.

The invention provides a method and a system for dynamically calling a kernel unexported function, which are used for dynamically acquiring a function address of an unexported kernel function and forcibly calling the function through a kProbes mechanism, matching with a function pointer type definition and a mechanism for forcibly converting the function address into a function pointer. The method not only supports the calling of the kernel function which is not exported, but also does not need to carry out hard coding on the address of the called kernel function, supports the dynamic acquisition of the address of the kernel function, avoids the change of the coincidence address caused by the difference of kernel versions, greatly enhances the compatibility of the software package of the kernel function which is not exported, and improves the reliability of the software package. And the packet does not need to be recompiled in each kernel small version, so that the problem that the kernel symbol table is not matched and the kernel module cannot be loaded is avoided.

The invention provides a system updating method and a related product. The system updating method comprises the following steps: sending a latest software information list to terminal equipment through a server, and then determining a to-be-updated software identifier set by the terminal equipment according to a current software information list and the latest software information list of locally installed software of the terminal equipment; then, the terminal equipment determines an incremental update file address set of the to-be-updated software, and downloads all incremental update files of the to-be-updated software from an incremental update file warehouse stored in the server according to the incremental update file address set of the to-be-updated software; then, the terminal equipment generates a virtual software package of the to-be-updated software based on all the current files and the incremental updating file of the to-be-updated software; and the terminal equipment uses the installed preset system updating program to install the virtual software package of the to-be-updated software so as to update the to-be-updated software. Therefore, rapid system updating can be realized based on the installed preset system updating program.

The invention belongs to the field of computer software and system maintenance, and particularly discloses a software state management and upgrading method and system supporting multi-mode deployment, and the method comprises the steps: collecting a service operation state and resource use data of software, carrying out the comprehensive research and judgment of the service operation state, storing the service operation state, and carrying out the service restart based on a research and judgment result; receiving the software package, calculating a check code of the software package, and storing and recording the information data of the software package, the check code and the storage path in a database based on a preset path; a software upgrading instruction sent by a front end is received, the storage path of the target software package and the stored check code are obtained from the database, and the integrity of the target software package is checked; and deploying the target software package to a specified path, recording upgrading information, and closing the old version service to start the new version service. The operation and maintenance efficiency and safety of software management can be improved.

Techniques are disclosed relating to the protection of secrets within a software development lifecycle. Developers can use an encryption service to encrypt a secret to be used by an application within a package. The secret can be associated with the application, and then encrypted and included in a package that is signed and passed through a software automation pipeline to a data center that hosts the production server for the application. The application executing on the production server can request that the secret be decrypted by a decryption service after package verification. A developer can also specify, in a manifest file, a set of secrets needed for applications executing in the same data center. The manifest file may be passed from the software development environment to the data center, where the specified secrets are created and used by the applications without ever residing or being accessible outside the data center.

One or more embodiments of the invention provide a three-dimensional model generation method, apparatus and device, a medium and a program product. The method is applied to CAD software and comprises the following steps: acquiring a plane image and a model thickness of a modeling object; generating a plane grid for the modeling object according to the plane image; generating a front grid, a back grid and a side grid for the modeling object according to the plane grid and the model thickness; and combining the front grid, the back grid and the side grid into a three-dimensional grid, and mapping the texture of the plane image to the three-dimensional grid to obtain a three-dimensional model of the modeling object.

A software defined vehicle (SDV) operating system may include components for executing software packages that declare unit types (e.g., interfaces) and define service units that each implement a unit type. For each unit type, there may be several service units that each provide a different implementation of that unit type. The SDV operating system may manage a service discovery module that registers service units for each unit type in a centralized registry. While executing a software package that declares a unit type, the service discovery module may fetch, from the centralized registry, an implementation of the unit type by a service unit defined by a different software package. While still executing the software package (i.e., at runtime), the SDV operating system may load a service unit defined by the software package with the fetched implementation. The SDV operating system may then execute the service unit based on the fetched implementation.

A computer-implemented operation method is provided for isolating a software application from operating system software, including: installing a configuration file; installing a plurality of detectors; and installing and executing a monitoring software program. The configuration file enables interaction with the application. The detectors analyze input to the application. The input either belongs to an authorization list or else is absent therefrom. Executing the monitoring software program loads the detectors, receives application information from the configuration file, and activates an alert in response to the input being absent from said authorization list.

The invention discloses an industrial network traffic anomaly detection and source tracing method, device and equipment and a storage medium, and relates to the technical field of artificial intelligence, and the method comprises the steps: converting a traffic data package of an industrial network into a process characteristic analysis software package, extracting a plurality of dimension statistical features from the process characteristic analysis software package, and storing the extracted statistical features in a database; converting the statistical characteristics of each dimension into table data; performing classification coding processing on connection behavior features in the table data to obtain a target coding result, normalizing statistical features to obtain a normalization result, converting time features to obtain a conversion result, obtaining a mixed feature vector, constructing a DAGMM model comprising a self-codec and a Gaussian mixture model by using an unsupervised mode, and obtaining a mixed feature vector; performing anomaly detection on the mixed feature vector to obtain an anomaly detection result; and if the traffic is abnormal, performing reverse decoding on the mixed feature vector by using a tracing algorithm to obtain a tracing result, thereby improving the efficiency of performing anomaly detection and tracing on the industrial network traffic.

The invention discloses a binary dependency package management method, device and equipment, and relates to the technical field of software package management. Comprising the following steps: analyzing a dependency statement in a project configuration file; based on the dependency declaration, communicating with the central warehouse to obtain metadata of the dependency packet; performing dependency decision according to the metadata; executing corresponding acquisition and integration based on the determined dependency type; executing corresponding acquisition and integration based on the determined dependency type; and if the central warehouse does not return the matched product, outputting error information and prompting a user to construct by using a local source code or other configuration sources. Dependence management automation, construction safety improvement and construction process high efficiency are realized.

A system for providing a safety critical operating environment container architecture, the system including a computing device having a memory communicatively connected to at least one multi-core processor, the memory containing instructions configuring the processer to receive at least a software module to be executed on the at least one multi-core processor, create a separate virtual environment for the at least a software module, wherein creating the virtual environment further includes generating a virtualization layer and allocating a dedicated private static memory space through the virtualization layer, wherein the separate virtual environment includes a dedicated operating system, integrate the at least a software module into the virtual environment by instantiating, the software module into at least one software container, wherein the at least one software container includes a plurality of dedicated software packages and execute the software module on each software container for each virtual environment.

This application relates to the field of vehicle update technology, and particularly to an online update method, apparatus, vehicle, and storage medium for a vehicle intelligent controller. The method includes: determining whether a software update request for the intelligent controller has been received; upon receiving the software update request, parsing the request to obtain the current vehicle configuration management requirements, and determining the vehicle configuration information to be updated based on these requirements; sending an update command and pushing an update software package to the intelligent controller based on the vehicle configuration information to be updated, according to a preset mapping table; and updating the software of the intelligent controller based on the update command and the update software package. This solves the problem that existing technologies require manual intervention, and that current vehicle assembly line operations have strict requirements and planning regarding production rhythm, making it impossible to perform online updates for large-scale intelligent controllers. This improves production efficiency while reducing management costs.

Embodiments of the present application disclose a model training method, a software package generation method, a device and a vehicle, comprising: obtaining a data extraction model, the data extraction model being used for data extraction on a DCM file to obtain calibration data of the DCM file, performing data extraction on a first test DCM file and a standard DCM file respectively by using the data extraction model to obtain first calibration data corresponding to the first test DCM file and standard calibration data corresponding to the standard DCM file, determining target index data according to the first test DCM file, the standard DCM file, the first calibration data and the standard calibration data, the target index data being used for representing a difference degree between data extraction on the first test DCM file by the data extraction model and data extraction on the standard DCM file by the data extraction model, and determining whether to train the data extraction model according to the target index data. The accuracy of the data extraction model is improved.

The invention provides a software package synchronization method, which utilizes templates to synchronize software packages of different scene program projects, and comprises the following steps: obtaining a target software package of a target scene program project and a corresponding software package record file, the software package recording file records a template identifier and a template version used when the target software package is generated; wherein the software package is generated based on the template version of the reference template; according to the template identifier, determining the reference template corresponding to the target software package; comparing the current version of the reference template with the template version, and checking whether difference content exists or not; and if the difference content exists, synchronizing the difference content to a target software package of the target scene. The invention further provides a corresponding device and program item synchronization. According to the application, accurate mapping between a plurality of target software packages and software package versions can be established in robot application program development under multiple application scenes, and batch updating of the software packages is realized.

The application relates to a software package installation method and a software package installation device. The method comprises the following steps: obtaining attribute information of a software package to be installed based on a software package installation request input in a software package management tool, and then querying the attribute information of the software package to be installed in a software package index tree; then, determining a list of dependent software packages of the software package to be installed from a dependency database in the case that the attribute information of the software package to be installed exists in the software package index tree; and finally, executing an installation step of the software to be installed based on the list of dependent software packages. The leaf node of the software package index tree is attribute information of a plurality of software packages; the dependency database stores key-value pairs of each software package; and the key-value pair of each software package comprises attribute information of the software package and a list of dependent data packages. The method can improve the software package installation efficiency.

Disclosed subject matter encompasses method operations performed by an embedded device. Exemplary deployments may include a BMC as the embedded device, but the embedded device is expressly not limited to BMCs. Disclosed subject matter enables partially-sandboxed execution environments (SSEEs) with an auditable framework supporting unrestricted or restricted system access via privilege elevation capabilities not generally permitted within conventional container solutions. Functional modularity is implemented without incurring the substantial overhead inherent in fully modular and isolated containers. Disclosed SSEEs require no intermediate runtime or the corresponding overhead. Disclosed subject matter may leverage sandboxing functionality native to at least some software package management utilities (SPMUs) including, as a non-limiting example, a Flatpak utility suitable for use in embodiments employing a Linux OS, to achieve footprint-efficient SSEEs.

The invention discloses an in-situ upgrading migration method, device and equipment for a Linux operating system and a storage medium, and relates to the technical field of operating system upgrade.The in-situ upgrading migration method for the Linux operating system comprises the steps that whether the current Linux meets upgrading conditions or not is judged, if yes, adaptation configuration of a new version is loaded, and if not, the adaptation configuration of the new version is not loaded; comprising a warehouse address, a signature key and identification packet mapping; then, the configuration package manager accesses the new warehouse, and the software package is upgraded after multiple rounds of dependency analysis repair are executed; and finally, updating the system identifier, the boot configuration, the service state and the modular warehouse configuration according to the mapping relationship and the boot mode to finish upgrading. According to the method, the Linux operating system can be upgraded to a new version in situ.

In some implementations, a remote scanning system may receive, from a developer system, a request for a software package from a package repository. The remote scanning system may provide at least a portion of the software package to a machine learning model in order to receive a security indicator associated with the software package. The remote scanning system may generate a message based on the security indicator. The remote scanning system may transmit, to the developer system and in response to the request, the message. The remote scanning system may receive, from the developer system, a confirmation that the software package is requested. The remote scanning system may forward the software package from the package repository and to the developer system.

The invention discloses a control system and control method for manual and automatic working condition switching of a commercial vehicle, and belongs to the technical field of commercial vehicles. The control system comprises an E / P switch, a vehicle-mounted TBOX, a VCU controller, a TCU controller and an instrument which are electrically connected in sequence; m preset application software packages are installed on the gearbox; each preset application software package corresponds to one working condition and calibration; during working, the control system executes the following steps that the vehicle-mounted TBOX conducts working condition recognition and sends the recognized working condition to the VCU controller; when the TBOX cannot carry out working condition identification, an instrument control key is manually controlled to carry out working condition selection, and the instrument control key sends the identified working condition to the VCU controller; and the VCU controller sends the received working condition to the TCU controller for mode execution. Switching of different working conditions is achieved through TBOX automatic identification or manual switching, corresponding working conditions are executed, and the method is suitable for various vehicle using scenes.