816 results about "Software package" patented technology

Methods and systems for assessing a software bill of materials (SBOM) include building a knowledge graph from repositories, using function fingerprints of software packages in the repositories. Dependencies of an application are identified using function fingerprints of the application and comparing to function fingerprints of the software packages. A quality score for an SBOM of the application is generated based on a comparison of the identified dependencies to claimed dependencies of the SBOM. An action is performed responsive to the quality score.

Systems, methods, and computer-readable for endpoint integration and mapping are disclosed. A system can include one or more processing circuits configured to identify endpoints and access information. The processing circuits can generate an object package corresponding to the endpoint by initiating the object package based on an identifier corresponding to an endpoint type of which the object package is structured and mapping the access information to an access scheme corresponding to formatted requests to access the endpoints for protection data. The processing circuits can perform an endpoint request by invoking the object package using at least one formatted request and receiving output data with a response to the endpoint request by a DCDSI system. The processing circuits can further update a distributed ledger or data source based on the output data.

The invention discloses an embedded system construction method and device, and the method comprises the steps: loading a configuration file which is a. Config file generated based on configuration parameters selected by a user through a visual configuration interface; when the CONFIGCONANAUTOUPDATE flag bit is detected to be in an activated state, the Conan warehouse data center is accessed, the latest compatible version of each Conan software package dependency item is inquired, and a semantic version constraint analysis algorithm is adopted to update a version identifier in the configuration file into the latest compatible version; generating a description file containing a dependency item list based on the updated configuration file, and generating a dependency lock file through a Hash locking mechanism; and importing the pre-compiled binary package into the construction environment, calling the corresponding pre-compiled binary package according to the version information and the Hash check value in the dependency lock file in the firmware compiling process, and executing hierarchical compiling operation.

A live mapping framework may be generated for large enterprise- wide networks and systems. The live mapping framework includes identification of key attributes of every device connected to the network. The key attributes may include device type, installed software packages, network connection information, device usage information, and other information. Frequent updates to the live mapping framework and trending over time enable the identification of system vulnerabilities. Generative and explainable Al may additional be used for penetration testing of virtual replicas of the enterprise- wide networks, leading to the generation of solution sets addressing the identified vulnerabilities.

The invention provides a software package source code optimization method of a cross-instruction-set architecture. The method comprises the following steps: step 1, retrieving and collecting various architecture migration optimization cases; step 2, the verified optimization cases are accumulated through the optimization library; 3, collecting a software package source code with a poor migration effect in a project, and providing the software package source code to a big language model to generate an optimization suggestion of migration between an original architecture and a target architecture; 4, inputting the to-be-optimized software package source code and the optimization suggestion into the large language model to generate a candidate optimization code; 5, further evaluating and screening the candidate optimization codes; step 6, retrieving in the optimization library based on the semantic features of the current code to obtain an excellent instance; step 7, performing optimization again by using a large language model; and step 8, evaluating a construction speed increase rate and function consistency. According to the scheme, a double-stage task decomposition strategy is adopted, the semantic drift risk is effectively reduced, and the accuracy of instruction-level conflict repair is improved.

Described herein is an apparatus and method for evaluating software performance. An apparatus may include at least a processor; and a memory communicatively connected to the at least processor, wherein the memory contains instructions configuring the at least processor to receive a software package; identify a safety standard; select an operating environment as a function of the safety standard; deploy the software package on the operating environment; operate a communication channel between a user device and the operating environment, wherein operating the communication channel comprises determining a performance metric for the software package; and displaying, at a display device having a user interface, the performance metric to a user through the user interface.

A method is disclosed. The method comprises detecting one or more vulnerabilities in a software package, generating a version upgrade recommendation for each of the detected vulnerabilities, generating a version graph including one or more of the version upgrade recommendations and displaying the version graph at a user interface.

In some embodiments, a computer cluster system comprises a plurality of nodes and a software package comprising a user interface and a kernel for interpreting program code instructions. In certain embodiments, a cluster node module is configured to communicate with the kernel and other cluster node modules. The cluster node module can accept instructions from the user interface and can interpret at least some of the instructions such that several cluster node modules in communication with one another and with a kernel can act as a computer cluster.

A software package is received and unpacked into multiple components comprising plural functions. Each function is lifted from machine code into static single-assignment intermediate representation and tokenized to produce semantics-preserving embeddings. Intermediate-representation data-flow features are extracted, including detection of constant static variables on a stack, stack reaching definitions, uninitialized variables, and intra-procedural aliases. For each component, the embeddings and features are input to a machine-learning model trained on semantic properties derived from a corpus of software packages to generate a software supply chain risk level. Data characterizing the risk level is provided to a consuming application. When the risk level satisfies a remediation criterion, a remediation action is initiated, including generation of a source-code patch recommendation for an identified root-cause function, insertion of a runtime guard into the component, or issuance of a security advisory for distribution to a security operations dashboard.

The invention discloses an automatic generation method and system for an intelligent adaptation layer based on API change. The method comprises the steps that API change detection is conducted according to new and old version API interface definitions, adaptation codes are generated according to an API change detection result and compiled into a compatible adaptation layer library, and the compatible adaptation layer library is packaged into an installation package; in the installation stage, the new version target library and the compatible adaptation layer library are installed in a target directory; and loading the compatible adaptation layer library prior to the new-version target library in the running stage, taking over and processing the old-version API interface through the compatible adaptation layer library, and transferring the new-version API interface in the new-version target library. The invention aims to solve the compatibility problem caused by the API change of the software library, realize the automatic generation of the intelligent adaptation layer to ensure the seamless compatibility of the application program with different version libraries under the RPM and other software package management systems, and reduce the maintenance workload for solving the incompatibility problem caused by the API change.

A system for providing a safety critical operating environment container architecture, the system including a computing device having a memory communicatively connected to at least one multi-core processor, the memory containing instructions configuring the processer to receive at least a software module to be executed on the at least one multi-core processor, create a separate virtual environment for the at least a software module, wherein creating the virtual environment further includes generating a virtualization layer and allocating a dedicated private static memory space through the virtualization layer, wherein the separate virtual environment includes a dedicated operating system, integrate the at least a software module into the virtual environment by instantiating, the software module into at least one software container, wherein the at least one software container includes a plurality of dedicated software packages and execute the software module on each software container for each virtual environment.

A vehicle software release management system enables receipt of a vehicle software package and an associated test plan to generate a versioned software artifact set. The vehicle software release management system may initiate a workflow to manage testing, certification, and deployment of the software package based on the versioned software artifact set. The vehicle software release management system may facilitate testing of the vehicle software package, including generating test scripts and configuring the testing environment according to test configurations. The vehicle software release management system may facilitate certification of the vehicle software package according to the versioned software artifact set and manage the deployment / rollback to software package destinations.

Implemented within a cyber security appliance, a non-transitory storage medium configured to store software that, when executed, conducts data loss prevention evaluation of an email message to protect against exfiltration of sensitive data from an enterprise. The software includes an email protection module and high availability (HA) fail-open control logic. The email protection module includes email threat detection logic to analyze content associated with an outbound or lateral email message for potential data loss characteristics. The HA fail-open control logic is configured to (i) detect operational failure of the email protection module or intake disruption of email messages via an Application Programming Interface (API) providing access to the email protection module and (ii) redirect the email messages to HA cloud infrastructure pertaining to the enterprise for temporary storage and subsequent release of the redirected email messages upon detecting the operational failure or the intake disruption.

An automated identification of vulnerable software components is presented. The objective to find a method for the automatic identification of CVE affected software components through source-code parsing and text analysis. The method shall reduce manual work to a minimum and ensure a high level of data quality. The objective is solved by the computer-implemented method for identifying vulnerable software, comprising: receiving a software package; unpacking source code files for multiple versions of the software package; retrieving an entry for the software package from a vulnerability database; retrieving a patch for the software package; determining changes made by the patch to source code files of the software package; and determining whether the changes were made to a given version of software and reporting the given version of software as vulnerable in response to a determination the changes were absent from the given version of software.

Techniques are disclosed for sending downloadable software packages that may be executed to perform tests of a network device without requiring the network device to update firmware. In one example, the network device obtains a software package comprising instructions for simulating a network instance and stores the software package in a volatile memory of the network device. The network device simulates, based on the instructions, the network instance to obtain data indicative of a performance of the network instance. The network device sends, via a communication channel established with a network management system (NMS) based on the software package, the data indicative of the performance of the network instance. In some examples, the NMS uses the data indicative of the performance of the network instance to identify a root cause of a failure of the network device or a remedial action to be performed upon the network device.

The invention relates to the field of software, and discloses a software management method, device and equipment based on a target script and a storage medium, the target script comprises an interface calling function and an iteration function, and the method comprises the following steps: calling an interface of a software repository based on the interface calling function to access a software package in the software repository, traversing the software packages in the software warehouse based on the iteration function; if the target software package representing that the integration date is the same as the integration date of the current integrated software is not traversed, creating a first software package for storing the current integrated software in a software warehouse, and uploading the current integrated software to the first software package based on an uploading function; if the target software package is traversed, creating a second software package for storing the current integrated software in the software warehouse, and uploading the current integrated software to the second software package based on the uploading function; according to the method, the integrated software in the same date is automatically stored in the software warehouse of another platform without omission, so that the security of software management is improved.

The invention discloses a vehicle software upgrading method and device, computer equipment and a storage medium. The method comprises the steps that respective priorities and upgrading configuration information of multiple to-be-upgraded vehicles are acquired; according to the priority sequence and the respective upgrading configuration information of the plurality of to-be-upgraded vehicles, respectively obtaining respective to-be-upgraded software packages of the plurality of to-be-upgraded vehicles; downloading the to-be-upgraded software packages of the current to-be-upgraded vehicle to a storage area of the current to-be-upgraded vehicle according to the priority sequence, and configuring software upgrading tasks corresponding to the to-be-upgraded software packages according to the types of the to-be-upgraded software packages of the current to-be-upgraded vehicle. Therefore, the vehicle software upgrading efficiency is effectively improved through priority ranking and software classification and regional upgrading.

The invention relates to the technical field of embedded system construction, in particular to a software dependency relationship automatic integration method and system based on meta packaging, and the method comprises the steps: S1, creating a meta packaging framework in an embedded construction system, and defining and constructing a stage hook through a Makefile; s2, automatically deploying the pre-compiled software package and the shared dependency library to a target directory of a construction system through a resource injection script; s3, analyzing a metadata file of the pre-compiled software package, extracting dependency relationship information, and generating a global dependency relationship list based on a directed acyclic graph topological sorting algorithm; and S4, inversely writing the global dependency relationship list into the dependency declaration configuration of the meta-packaging by utilizing the dependency aggregation script. By implementing the scheme, the problems of dependency sequence disorder and metadata auditing failure during embedded system integration are solved, the reliability of system integration is improved, the system construction efficiency is optimized, the safety of system construction is enhanced, and the maintainability and expansibility of system construction are improved.

The invention relates to the technical field of vehicle-mounted over-the-air technology upgrading, in particular to a vehicle-mounted over-the-air technology upgrading method and device and a vehicle-mounted terminal. Acquiring position data, network signal intensity data and battery state data of the target vehicle and other vehicles within a preset duration before the current moment; adjusting the initial resource allocation data according to the position data, the network signal strength data and the battery state data to obtain target resource allocation data and target priorities of the target vehicle corresponding to the other vehicles; calculating an optimal transmission path of a software package corresponding to the current to-be-upgraded software based on the target resource allocation data and the target priority; and upgrading the current to-be-upgraded software in the current to-be-upgraded partition in the target vehicle based on the optimal transmission path. The reliability problem of traditional over-the-air downloading and upgrading in a complex network environment is solved, and meanwhile, the large-scale vehicle management efficiency is improved.

The invention discloses a microemulsion interfacial tension efficient prediction method and system based on active learning and molecular dynamics. According to the method, 217 molecular descriptors corresponding to each molecular structure are calculated by adopting an RDKit software package, and the descriptors are used for representing molecular structure characteristics and serve as input variables of a machine learning model, so that key structure information including molecular branching degree, polarity and the like is transmitted. For an oil-water-surfactant ternary interface system, the oil-water interfacial tension in the presence of a surfactant is simulated and calculated through molecular dynamics, and an IFT value is set as a model prediction target. An active learning mechanism is introduced, and iterative sample labeling in the molecular dynamics simulation process is guided; and integrating the obtained IFT data with the molecular descriptor features, constructing a machine learning data set, and training a random forest model. According to the method, the problem of screening a high-performance surfactant layer by a middle-phase microemulsion system can be solved, and the ultra-low oil-water interfacial tension can be rapidly and efficiently screened.

The invention discloses a database installation and deployment method based on an MCP protocol, and relates to the technical field of database deployment. In order to solve the problems of high requirement on professional knowledge of a user and tedious privacy configuration in traditional database automatic deployment, the scheme adopted by the invention comprises the following steps: realizing standardized configuration of privacy information based on an MCP protocol, and completing related settings by the user through an operation interface; the method comprises the following steps of: receiving a natural language deployment instruction input by a user and triggering a deployment process by virtue of natural language analysis capability of an MCP protocol: calling MCP Tools by an MCP Server to acquire full-amount environment information of a server, and matching to obtain an adaptive installation package version; detecting dependence conditions of a target environment, automatically supplementing missing software packages, and automatically executing database installation, initialization configuration and monitoring component deployment; and the MCP Server summarizes the state information of the whole process and returns a deployment result. According to the invention, automatic and rapid installation and deployment of the database can be realized.

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC receives, via an application programming interface (API) at the BMC, a package management request for managing a software component of the BMC. The BMC determines, by a package management service of the BMC, whether a software package for the software component is an updatable package to be stored on a read-write partition of a storage of the BMC. When the software package is the updatable package, the BMC manages the software component according to the package management request.

The invention belongs to the technical field of electrical digital data processing, and particularly relates to a Hash cache-based software component analysis optimization method, which comprises the following steps of: S1, scanning multi-dimensional features for the first time, and calculating storage component Hash by fusing dynamic behavior features, the method comprises the following steps: acquiring dynamic behavior characteristics of components during operation through a lightweight sandbox environment, and extracting basic characteristics, content characteristics and dependency characteristics of a software package and each component; hash values are introduced to serve as unique identifiers of software packages and components, and the Hash values of the components and corresponding detection results are calculated and stored during first-time scanning; according to the method, the component hash value is verified preferentially during subsequent scanning, if the hash value exists in the cache library, the historical detection result is directly reused, the full-amount analysis process does not need to be repeatedly executed, and on the premise that analysis accuracy is guaranteed, repeated calculation is reduced through a cache reuse mechanism, SCA analysis efficiency is improved, and resource consumption is reduced.

Risks associated with installing a software package on a computer system can be automatically detected and mitigated using techniques described herein. In one example, a system can generate severity scores for software components. Each severity score may correspond to a software component and indicate a severity of its vulnerabilities. The system may generate a risk score based on the severity scores. The risk score may represent an overall level of risk associated with installing the software package on the computing device. The system may also determine that an alternative software component is correlated with a software component of the software package, determine respective severity scores for the software component and the alternative software component, and compare their respective severity scores. The system can determine that the severity score of the alternative software component is lower and output a notification indicating the risk score and the alternative software component.

In one example, a method can detect and notify a user of package breaking changes for software in a computer environment. The method includes receiving, from a user, a request associated with upgrading a software program of a computing device from a first version to a second version of the software program, where the second version is newer than the first version. The method may then determine a package difference between the second version and a third version of the software program, with the third version of the software program being newer than the second version. The package difference may be a change to a package associated with the software program. The method then may output a notification indicating the package difference prior to the computing device being upgraded from the first version to the second version.

The invention relates to a risk assessment method, device and equipment for an open source software dependency relationship. The method comprises the following steps: acquiring software package attribute information of each open source software package in a project to be evaluated and dependency information between the open source software packages; according to the software package attribute information of each open source software package and the dependency information between the open source software packages, constructing a project graph model for the to-be-evaluated project; wherein nodes in the project graph model represent open source software packages, connecting edges among different nodes represent dependency relationships among different open source software packages, and node information of each node comprises software package attribute information of the open source software package corresponding to the node; the side information of each connection side comprises dependency information between the open source software packages corresponding to the nodes connected with the connection sides; and based on the risk prediction model, according to the project graph model, determining a risk assessment result of the to-be-assessed project. By adopting the method, the risk of the project can be fully predicted and mined.

The invention relates to a method (100) for allocating computing power in a system (1) having at least one machine learning model, wherein the system (1) is designed for developing and / or managing software, comprising the following steps: - initiating (101) an application of the at least one machine learning model, wherein at least one metric is determined for the at least one machine learning model, wherein the at least one metric provides a measure of a required computing power in relation to a quality of an output of the at least one machine learning model, - providing (102) a weighting for the at least one machine learning model, wherein the weighting represents a relevance of the at least one machine learning model related to a context in the system (1), - allocating (103) the computing power with respect to a use of the at least one machine learning model based on the at least one determined metric and the provided weighting. Furthermore, the invention relates to a computer program, a device and a storage medium for this purpose.

The invention provides a controller flashing system and method, electronic equipment and a storage medium, and the system comprises a flashing management module which is used for storing whole vehicle version information, including a whole vehicle software version number and a software package of a controller, and is used for issuing a target software package of the controller to be flashed to a flashing module; the brushing module is used for responding to a brushing instruction of the controller to be brushed, brushing the controller to be brushed, and uploading the unique code of the part of the controller to be brushed and the brushed identification information to the brushing management module, so that the brushing management module determines a target whole vehicle software version number of the controller to be brushed; and the assembly management module is used for determining whether the loading version of the controller to be brushed is correct or not according to the target whole vehicle software version number and the actual whole vehicle software version number of the assembly vehicle of the controller to be brushed. The loading quality of the to-be-brushed controller is monitored through software version verification of the loading controller, so that the brushing accuracy of the controller is ensured, and the production quality of the whole vehicle is improved.

The invention provides an offline patch making method and device, electronic equipment and a storage medium. The method comprises the steps that a basic version mirror image is mounted, an obtained file system is decompressed, and information of a software package to be installed is extracted to generate a basic version software package list and a status file; executing the same processing on the target version mirror image to obtain a software package list of the target version; apt is configured, and a software source cache is updated; comparing the software package list of the basic version with the software package list of the target version, determining a software package needing to be upgraded, analyzing a source code package corresponding to the software package, and generating a complete difference list to be upgraded; downloading the software package and the dependency package thereof in the difference list in the virtual environment; and de-duplicating the upgrade packages of the plurality of basic versions and uniformly packaging the upgrade packages into offline service packs. Therefore, the method can support multiple basic versions to share one off-line service pack for system upgrading, and the flexibility and efficiency of patch making are improved.

The invention relates to a software bill of material generation method and device, and belongs to the technical field of computers.The method comprises the steps that a software source address is obtained, and a software source type is recognized according to the software source address; positioning and downloading a warehouse metadata file according to a software source type; calling a corresponding parser to parse the warehouse metadata file according to the software source type to obtain software package metadata; and according to the software package metadata, extracting an original field required by the generation of the software bill of material, and converting the original field required by the generation of the software bill of material into a standard field of the software bill of material, thereby generating the software bill of material conforming to the specification of the software bill of material. According to the software bill of material generation method and device provided by the invention, the self-adaptive generation of software bills of material of different software source types can be realized, the universal adaptation capability for multi-source and multi-architecture in the software bill of material generation is improved, and the preposition, lightweight and efficient generation of the software bill of material is realized.