308 results about "User space" patented technology

An illustrative method includes receiving, by a data platform configured to monitor the compute environment, runtime workload data collected by an agent deployed to the compute environment, wherein the runtime workload data comprises user space data collected from a user space of the compute environment and kernel space data collected from a kernel space of the compute environment. The method further includes performing, by the data platform, a monitoring operation based on the user space data and the kernel space data of the runtime workload data.

The invention provides a Linux access control system based on attributes, and relates to the technical field of data access control. The system comprises a system monitor module, a data interaction module and a decision unit. The system monitor module collects attributes from a kernel and a user space and writes the attributes into the data interaction module; the access decision unit compiles the access control strategy into an eBPF program and mounts the eBPF program to a corresponding hook; executing the kernel to the hook, and triggering an eBPF program; an eBPF program queries a Flow rule; matching the attribute with the Flow rule, and if the matching is successful, executing a corresponding action; if all the Flow rules fail to match, executing a default action; the system can be expanded during operation, and can be loaded or unloaded based on dynamic loading characteristics and strategies of the eBPF program and the eBPF program during operation of the system, so that the problem that a kernel needs to be compiled in a traditional LSM scheme is solved; the method does not intrude the kernel, is completely based on an eBPF program, does not modify a kernel source code, and can guarantee the stability and compatibility.

A containerized agent that is deployed to a compute node of a compute environment and that executes in both user space and kernel space of the compute node is disclosed. The containerized agent collects data associated with a first container entity that is deployed to the compute node and that executes only in the user space of the compute node such that the first container entity is isolated from other entities executing in the user space of the compute node. The containerized agent also provides the collected data associated with the first container entity to a data platform that is monitoring the cloud compute environment using the containerized agent. Corresponding methods, systems, and products are also disclosed.

The invention discloses a file retrieval method and device, equipment and a storage medium, and relates to the technical field of data retrieval, and the method comprises the steps that a user mode space responds to a file retrieval instruction received at the current moment, a target retrieval strategy corresponding to the file retrieval instruction is determined, and an event filtering strategy is updated to a kernel mode space; the kernel mode space obtains a target file operation event from all file operation events captured at the current moment based on the updated event filtering strategy; and the user mode space determines metadata information of a target file corresponding to the target file operation event, updates the mixed index database based on the metadata information, and then retrieves in the updated mixed index database based on the target retrieval strategy and the file retrieval instruction to obtain a file retrieval result. According to the method, the purposes of real-time updating of the metadata information of the file system and efficient retrieval of multiple retrieval dimensions are achieved, the efficient file retrieval requirement is met, and the file retrieval efficiency is improved.

The invention relates to the technical field of inner cores, and particularly provides an operating system abstraction layer implementation method applied to drive development, which comprises the following steps: according to different basic capabilities, defining a corresponding abstraction layer structural body and an abstraction layer interface function, or defining a corresponding abstraction layer structural body, an abstraction layer interface function and an abstraction layer callback function; the basic capability of the operating system is packaged, and a stable interface is provided and exported to a driver for use; a general data structure is provided, and an operation method thereof is realized and exported to a driver for use; an abstraction layer equipment driving subsystem is realized, and a stable framework for writing a driving program is provided; a platform peripheral drive set is realized and provided for other drive modules to use in a service or export interface mode; according to the technical scheme, a universal user space driver access library is achieved, communication with a driver is achieved through a library function, and the technical problem that a driver binary file cannot be compatible on different kernel versions is solved through the scheme.

A technique includes receiving, by a monitoring agent, heartbeat messages that are associated with a status of a process of a computer system. The technique includes determining, by the monitoring agent and based on the heartbeat messages, whether the process has an expected state. The determination includes authenticating a given heartbeat message based on a content of the given heartbeat message and an expected integrity measurement of the process. The technique includes initiating, by the monitoring agent, a responsive action to counter tampering with the process responsive to the determination of whether the process has an expected state.

The invention relates to the technical field of chips, and discloses a hardware accelerator and a data handling method, the hardware accelerator comprises a doorbell processing module, a descriptor cache module and at least one DMA engine module; wherein a target engine module in the at least one DMA engine module is configured to read a target descriptor from effective descriptors in the descriptor cache module and analyze the target descriptor to obtain a source address field, a source address space identifier, a destination address field and a destination address space identifier, and carrying the target data block in the first user space to the second user space based on the source address field, the source address space identifier, the destination address field and the destination address space identifier, wherein the effective descriptor is read from a descriptor ring in the first user space through the doorbell processing module and is written into the descriptor cache module. Therefore, through cooperative work of all the modules, full-hardware acceleration of user mode data carrying is completed, and therefore the data carrying efficiency is remarkably improved.

The invention discloses a data packet analysis method and device based on eBPF and electronic equipment. Relates to the field of cloud computing, and the method comprises the steps that a to-be-analyzed data packet captured by an eBPF kernel mode program from an operating system kernel is acquired based on an extended Berkley data packet filter eBPF user mode program, the eBPF user mode program is a program running in a user space of an operating system, and the eBPF kernel mode program is a program running in a kernel space of the operating system; determining a target analytic function; a target analytic function on a function calculation platform is called through the flow entry function, and the function calculation platform is a service system for operating the function according to needs; and based on the target analysis function, performing analysis processing on the to-be-analyzed data packet to obtain an analysis result of the to-be-analyzed data packet. According to the method and the device, the problem of limited processing capability of an eBPF flow analysis system on a single node in related technologies is solved.

The invention discloses an eBPF-based log collection method, a medium and a system. The method comprises the following steps: S1, positioning a tracking point; s2, compiling an eBPF program based on the tracking points; s3, compiling and deducing the compiled eBPF program, and then loading the compiled eBPF program; s4, capturing information when the project program runs based on the eBPF program; s5, the captured information is written into the BPF Maps; and S6, the captured information is read from the BPF Maps and formatted. According to the method, on the premise that the system performance is not affected, key events can be directly captured on the kernel level, and valuable information is selectively collected; by defining a unified log format standard, the consistency and readability of log data are improved, and the troubleshooting efficiency and accuracy are enhanced; most log processing work is completed in a kernel space, dependence on user space resources is reduced, the storage performance overhead is effectively reduced, and the operation efficiency of the system is improved.

The invention relates to the technical field of data acquisition, and discloses a PCIe-based DMA data zero copy processing method and system. The method is applied to a zero copy processing system, and comprises a HOST module for distributing a physical DMA buffer area and mapping a physical address of the DMA buffer area to a logically continuous virtual address space; the HOST module is used for constructing a preset descriptor queue and sending a head address of the queue to the FPGA module; the FPGA module receives the initial address of the queue through a PCIe interface, analyzes a descriptor, and writes DMA data with a preset transmission length into a sub DMA buffer area of the HOST module; and the HOST module monitors the state of the DMA buffer area and adopts a dynamic flow control mechanism to adjust the data transmission rate of the FPGA module according to the state. According to the method provided by the embodiment of the invention, the physical DMA buffer area is mapped to the logically continuous virtual address space, and the application program can directly access the DMA data in the user space without copying through the middle of a kernel, so that zero-copy access is realized, the data processing delay is reduced, and the data transmission efficiency is improved.

According to embodiments of the present disclosure, a system includes: a microkernel having a low-level application programming interface (API) and providing memory protection domains to user-level processes; and an abstraction layer running on top of the microkernel and comprising a plurality of service extensions to the microkernel and configured to provide a high-level operating system (OS) API for use by one or more application processes running in user space, wherein different ones of the service extensions are configured to run within different ones of the memory protection domains provided by the microkernel.

The invention discloses an intelligent backboard interaction method supporting terminal interconnection, a medium and an intelligent backboard. The intelligent backboard interaction method comprises the following steps: collecting user space motion data to generate a space-time trajectory sequence and binding a user identity label, segmenting a multi-user shooting action data stream in real time, extracting dynamic association features and combining sphere trajectory data to construct a multi-dimensional feature matrix; inputting the matrix into a distributed intention understanding engine, and fusing voice, a touch event and historical data to generate an interactive decision instruction; a dynamic content generation module is driven according to the instruction, a training difficulty coefficient and a tactical matching degree are calculated in real time, and a multi-terminal cooperative control signal is output; and aggregating multi-user and sphere state feedback data, and continuously adjusting a collaborative strategy of a shooting action evaluation standard, a multi-user confrontation rule and terminal display content. According to the method, accurate distinguishing and collaborative intention understanding of multi-user actions are realized, and the training individuation level and the self-adaptive real-time control capability of multi-user interaction are effectively improved.

The invention discloses a trusted execution environment construction method, system, equipment and medium for electric power intelligent equipment, and relates to the technical field of electric power intelligent equipment monitoring, and the method comprises the following steps: carrying out Hash measurement on a to-be-detected area in an operating system kernel, carrying out comparison based on a preset reference value, and monitoring the consistency of kernel static data and codes; performing list management and integrity verification on the system kernel module, and identifying illegal loading, unloading or tampering behaviors; monitoring a kernel module event, sensing the change of the life cycle of the module and dynamically triggering a verification mechanism; performing Hash verification on an execution file of the specified user space process, and identifying process-level illegal replacement or injection behaviors; and updating the trusted measurement database based on a detection result, and executing log recording, alarming and blocking strategy response. The method does not depend on a chip, a virtualization platform or hardware extension, realizes security monitoring only through a software means, and is suitable for an embedded terminal with limited resources.

The embodiment of the invention provides a memory allocation method, system and equipment in a Linux environment and a storage medium, and the method comprises the following steps: when a memory application request of an application program is received, determining a target memory type allocated to the application program according to a preset memory allocation arbitration algorithm; if the target memory type is a dynamic random access (DRAM) memory, allocating the DRAM memory for the application program, and accessing the DRAM memory through a first access interface provided by a system function library GLIBC; and if the target memory type is a high-speed interconnection protocol CXL persistent memory, allocating the CXL persistent memory to the application program, and accessing the CXL persistent memory through a second access interface provided by a CXL persistent memory driver. By utilizing the method, the total memory capacity and bandwidth of the system are greatly expanded, the CXL persistent memory allocation is realized in the user space, the interaction frequency with the kernel is reduced, and the efficient allocation and scheduling of the CXL persistent memory in the Linux environment are realized.

The invention provides a file system client kernel mode and user mode communication method based on asynchronous communication. According to the asynchronous communication-based file system client kernel mode and user mode communication method provided by the embodiment of the invention, the context switching overhead of communication between the user mode and the kernel mode can be reduced, the data transmission throughput is improved, the resource utilization rate is optimized through dynamic queue management, and the problem of performance bottleneck in a high-concurrency scene is effectively solved.

The invention discloses a graphics processor simulation method, a simulator, a device, electronic equipment and a storage medium, and belongs to the technical field of simulation. Loading a target system call simulator for simulating the target graphics processor; the target system call simulator comprises a user space simulation layer, a graphics processor simulation layer and a graphics drive simulation layer connected with the graphics processor simulation layer and the user space simulation layer; and running a target program in the user space simulation layer, and directly sending a graphic system call generated in the running process of the target program to the graphic drive simulation layer, so that the graphic drive simulation layer transmits a corresponding GPU instruction set to the graphic processor simulation layer based on the graphic system call, and executes the GPU instruction set through the graphic drive simulation layer. Therefore, the software and hardware of the corresponding graphics processor can be simulated by calling the simulator through the lightweight target system, and the simulation precision of the graphics processor can be improved under the condition of ensuring relatively high simulation efficiency.

The invention discloses a transparent virtual machine monitoring method for cloud security. The method comprises the following steps: S1, activating and stopping an LBR and a PMU; s2, integrity verification and user space interaction; s3, performing hardware configuration and interrupt processing; s4, performing double mapping on the kernel cache and the user space; and S5, user space interaction and CFI verification are carried out. Real-time monitoring and integrity verification of the control flow of the kernel of the virtual machine are achieved by ingeniously utilizing the hardware characteristics of a modern processor, control flow hijacking attacks are effectively resisted on the premise that normal operation of the virtual machine is not affected, and the safety of the kernel of the virtual machine in the cloud computing environment is improved.

The invention discloses a heterogeneous processor-oriented deep neural network reasoning task dynamic scheduling method and system, and belongs to the technical field of computer systems. The method comprises the steps that a DNN model is converted into a computational graph in a user space, and the computational graph is divided into a plurality of fine-grained micro-tasks through key path analysis; monitoring resource states of the CPU and the GPU in a kernel space in real time; dynamically selecting an optimal processor for each microtask in a kernel layer based on a cost model comprising execution time, queue length and utilization rate; and executing the micro-task on the corresponding processor according to a scheduling result, and triggering cross-processor task dynamic migration when detecting that the load is unbalanced, including context storage, data transmission and execution recovery. The system adopts a user space and kernel space collaborative architecture to realize the method. Through fine-grained division, kernel-level real-time scheduling and a dynamic migration mechanism, the reasoning efficiency, the resource utilization rate and the system stability of the heterogeneous system under a complex load are effectively improved.

The embodiment of the invention provides a process interception method and device and electronic equipment. The method comprises the following steps: a kernel space receives a process protection list sent by a user space by utilizing a virtual file system interface; wherein the process protection list comprises a process identifier of at least one to-be-protected process; the kernel space obtains a process termination request; wherein the process termination request is used for requesting to terminate a target process, and the target process is a process entity scheduled by an operating system; under the condition that the kernel space determines that the request type of the process termination request is a preset request, determining a matching relationship between the target process and a process protection list based on a target process identifier of the target process; and when the matching relationship indicates that the process identifier of the at least one to-be-protected process in the process protection list comprises the target process identifier, the kernel space intercepts the process termination request. By the adoption of the method, the important process can be effectively prevented from being terminated due to malicious or misoperation, and the safety and stability of the system are improved.

The invention relates to the technical field of user mode program fault positioning, and provides a user mode program fault positioning method and device based on a DBus message queue, and the method comprises the steps: collecting DBus target data from a kernel space; the DBus target data is converted into event information, and the event information is stored in a Map storage structure of an eBPF; and obtaining the event information from the Map storage structure in a user space, and sending the event information to a back-end component, so that the back-end component determines a target state value of a DBus outbound queue according to the event information, and determines a fault state of a user state program according to the target state value. According to the embodiment of the invention, the fault positioning efficiency of the user mode program can be improved.

The invention discloses a user space planning and recommendation system and method based on analog simulation, and relates to the technical field of route planning, and the recommendation method comprises the following steps: generating a corresponding three-dimensional model for the space information of a scenic spot; tracking the coordinate position of the authorized user to form a playing record; randomly selecting one playing record, extracting the generation time of the playing record, and identifying a plurality of congestion points of the scenic spot; when a target area is input every time, generating a route recommendation sequence of the certain authorized user based on the congestion point distribution condition and the route selection condition included in each playing route; the method comprises the following steps: acquiring an area where a certain authorized user is located in real time, acquiring position distribution conditions of other authorized users, judging whether to adjust a playing route of the certain authorized user or not, and if the playing route changes, performing route replacement reminding and pushing the adjusted route.

The invention provides a resource management method and device, electronic equipment and a storage medium, the method is applied to the field of terminals, and the method comprises the following steps: in a multi-user operating system, responding to a system resource management instruction received by a performance optimization main program in a main user space; the method comprises the steps of determining first resource use data of a main user space based on a performance optimization main program, calling a performance optimization agent process based on the performance optimization main program, determining second resource use data of a sub-user space, and optimizing system resources of a multi-user operating system based on the first resource use data and the second resource use data. Therefore, one-stop management of multi-user system resources is achieved, the response speed and efficiency of the whole system are improved, and resource consumption is reduced.

The invention discloses a first-in first-out semaphore scheduling method based on a POSIX interface, and the method comprises the steps: modifying a POSIX interface of a user space and a cortex synchronization mechanism of a kernel space, increasing the support for an FIFO strategy, defining a semaphore strategy type identifier, and modifying a correlation function to support the setting of a scheduling strategy when semaphore is created. And modifying the system call to process the FIFO policy semaphore; and unifying the priority of each semaphore application thread, inserting the threads into a waiting queue according to an application sequence, and awakening the thread which firstly enters the queue when the semaphore is available. According to the method, the performance and the resource utilization rate of multi-thread concurrency control in the embedded real-time operating system are improved, meanwhile, the problems of deadlock, hunger and the like are avoided, and the reliability and the user experience of the system are improved.

Systems, methods, and apparatuses for reducing context switches in a virtualized computing environment are provided herein. An example method comprises executing a supervisor, executing a first virtual machine on the supervisor, detecting a first exit from the first virtual machine, responsive to detecting the first exit, loading a userspace context without loading a supervisor context, executing a second virtual machine on the supervisor, detecting a second exit from the second virtual machine, and responsive to detecting the second exit, loading the supervisor context.

The present disclosure provides techniques for context-sensitive token-bucket rate limiting. A processing device obtains, in a kernel space of an operating system (OS), a message comprising a unique process identifier (UPID) and a message type. The processing device determines whether to send the message from the kernel space to a user space of the OS based on at least one of: the UPID, the message type, or a token count and a discrete time unit in an entry in a data structure in the kernel space. The processing device processes the message based on the determination of whether to send the message from the kernel space to the user space.

Systems and methods for testing sandboxed in-kernel programs are provided. A method of testing a program includes: obtaining a Berkeley Packet Filter (BPF) program to test; obtaining a test to run on the BPF program; performing the test on the BPF program for a plurality of Linux kernels and reporting a result of performing the test on the BPF program for a plurality of Linux kernels. This enables a generic testing solution for black box testing of BPF programs. The embodiments can integrate with existing testing suites and frameworks and can integrate into CI / CD pipelines. Some embodiments allow testing using any kernel from user space. Host kernel testing of BPF programs is enabled by a developer using the developer's own workstation and version of the Linux kernel. Guest kernel testing of BPF programs is enabled using specific kernel versions by providing the framework a specification of the target kernel environment.

Provided in the embodiments of the present disclosure are a file processing method, a file system in user space, a device, and a computer program product. The file processing method is applied to a file system in user space, wherein the user state file system comprises a file system process and a file system in user space (fuse) process which is in communication connection with the file system process. The file processing method comprises: a fuse process acquiring a file processing request; the fuse process caching the file processing request, wherein the fuse process comprises a caching request queue used for caching the file processing request; and when a file system process exits, the fuse process determining a request processing state of the file processing request to be a suspension state, such that a file processing link where the fuse process is located maintains a normal state. In the embodiment, when a file system process exits, a fuse process may cache a file processing request, thereby ensuring the normal operation of a user process.

The invention belongs to the technical field of computer man-machine interaction and automatic control, and particularly relates to an RPA mouse and keyboard control method and system for a Wayland desktop. The method comprises the following steps: S1, creating and registering a virtual input device supporting mouse and keyboard functions in a user space by accessing a virtual input device interface provided by an operating system kernel; s2, current activity display output is detected, and screen resolution information is obtained; s3, the server program monitors a preset local Unix domain socket path for receiving a control instruction from the client; s4, the client sends a control request to the local Unix domain socket path in a structured format, and the server receives and analyzes the control request; s5, the server side maps the analyzed control request into a corresponding kernel input event sequence according to the operation type; meanwhile, by writing event data into the virtual input device, an input event is injected into the system so as to simulate a control operation on the graphic desktop.

The subject matter described herein includes methods, systems, and computer readable media for improving remote direct memory access (RDMA) performance. A method for improving RDMA performance occurs at an RDMA node utilizing a user space and a kernel space for executing software. The method includes posting, by an application executing in the user space, an RDMA work request including a data element indicating a plurality of RDMA requests associated with the RDMA work request to be generated by software executing in the kernel space; and generating and sending, by the software executing in the kernel space, the plurality of RDMA requests to or via a system under test (SUT).

Distributed fiber optic sensing (DFOS) / distributed acoustic sensing (DAS) that illustrate inventive techniques—applicable to all embedded systems—that deliver high-bandwidth traffic from a DFOS system to a cloud or other processing resources in real-time, employ firmware that operates at a register-transfer level and writes data repeatedly into the embedded host memory directly—without software intervention after initial configuration. This technique advantageously enables the use of the relatively large host memory to compensate for any software jitter. Preferably configured, the firmware employs only a small buffer to compensate for a transaction and host-memory arbitration latency. A second dedicated thread sends out data from the user space buffer to a cloud, or a connected server. Remote procedures that are executed on a remote system (a computer, network of computers, or cloud), receive data transmitted from the embedded system, and perform further processing as necessary.