G06F9/44589

Cloud agnostic workload identity

Examples include a system and computer-implemented method to create a cloud native workload identity (CNWI) and assign the CNWI to an instance of a workload to be instantiated in a cloud computing environment of a cloud service provider (CSP); translate the CNWI into a cloud agnostic workload identity (CAWI) and assign the CAWI to the workload instance; and use the CAWI by the workload instance to communicate with other workloads in the same or a different CSP.

Systems and methods for preparing and deploying cross-platform applications

The technology disclosed relates to systems and methods for deploying cross-platform applications to tiny ML hardware. The system provides tools to maintain definitions of a first, a second and a third declarative instruction. The system provides tools to maintain compiled bytecode for a procedure block and a tiny ML model that runs on the tiny ML hardware. The compiled bytecode further includes a manifest of one or more capabilities, one or more procedure blocks and at least one output supported by the tiny ML model. The system provides a loader that connects to an instance of the tiny ML hardware. The loader includes logic to verify that the instance of the ML hardware supports the one or more capabilities, the one or more procedure blocks and at least one output specified in the manifest. The loader loads the bytecode and verifies integrity of the load.

Modular Java manager performing capturing and overriding of access check failures for inter-module operations between Java modules by an agent using inserted instrumentation

In one embodiment, an agent inserts instrumentation into a Java Platform Module System in which a plurality of Java modules of an application is executed. The agent captures, using the instrumentation, an access check failure for an inter-module operation between the Java modules. The agent overrides, using the instrumentation, the access check failure. The agent reports the captured access check failure to a user interface.

DATA PLANE PROGRAM VERIFICATION

A method for verifying data plane programs is provided in some embodiments. Because the behavior of a data plane program (e.g., a program written in the P4 language) is determined in part by the control plane populating match-action tables with specific forwarding rules, in some embodiments, programmers are provided with a way to document assumptions about the control plane using annotations (e.g., in the form of “assertions” or “assumptions” about the state based on the unknown control plane contribution). In some embodiments, annotations are added automatically to verify common properties, including checking that every header read or written is valid, that every expression has a well-defined value, and that all standard metadata is manipulated correctly. The method in some embodiments translates programs from a first language (e.g., P4) to a second language (e.g., Guarded Command Language (GCL)) for verification by a satisfiability modulo theory (SMT) solver.

APPLYING SECURITY MITIGATION MEASURES FOR STACK CORRUPTION EXPLOITATION IN INTERMEDIATE CODE FILES
20220107827 · 2022-04-07 ·

Presented herein are methods and systems for generating intermediate code files adjusted to prevent return oriented programming exploitation, comprising receiving compiled intermediate code file(s) comprise a plurality of routines and adjusting them prior to generation of a respective executable file for execution by one or more processor. The adjusting comprising analyzing a symbol table of the intermediate code file(s) to identify a beginning address of each of the routines, analyzing each of the routines to identify indirect branch instructions in the routines, and replacing each detected indirect branch instruction with invocation of a verification code segment configured to verify that the respective indirect branch instruction points to the beginning address of one of the routines. In runtime, the verification code segment causes the processor(s) to initiate one or more predefined actions in case the indirect branch instruction isn't pointing to the beginning address of one of the plurality of routines.

INFORMATION PROCESSING APPARATUS, INFORMATION PROCESSING METHOD, AND STORAGE MEDIUM
20220113990 · 2022-04-14 ·

An information processing apparatus comprising a verification unit configured to verify, among a plurality of divided parts of software to be started up, a part of software to be started up next and setting data relating to startup of the part of software to be started next.

System and method for software verification

A system and a method for verification of a source code are provided. There as many techniques available that can be used for verification of software codes, however, it is difficult to determine appropriate technique that can be utilized for verification of a given software code. In an embodiment, the system receives a source code encoded with one or more specifications to be verified. A static analysis of the source code is performed to identify program features of the source code. The program features may include, but are not limited to, multiple return paths, loops with an unstructured control flow, loops with arrays, short ranges and numerical loops. Based on the identification of the program features, verification techniques are applied to the source code for the verification. Each verification technique of the one or more verification techniques is applied for a predetermined period of time and in a predefined order.

STORAGE DEVICE FOR PERFORMING FIRMWARE UPDATE AND OPERATING METHOD OF THE STORAGE DEVICE
20220091750 · 2022-03-24 ·

A controller is included in a storage device communicating with a host device. The controller is configured to receive a firmware image download command and a firmware image corresponding to the firmware image download command from the host device, perform verification for determining whether the firmware image is damaged in response to the received firmware image download command, and when a firmware update request for the firmware image is received from the host device, determine whether to perform a firmware update based on the firmware image by using a verification result of the firmware image.

Devices, systems, and methods for providing on-demand engine software using a distributed ledger
11288052 · 2022-03-29 · ·

Devices, systems, and methods for providing software to aircraft using a distributed ledger are disclosed. A software delivery system includes aircraft having an engine control system configured to verify and install software utilized by components of the aircraft, an electronic distribution system coupled to the aircraft, an edge manager coupled to the electronic distribution system, and computing devices acting as nodes in a distributed ledger base maintaining a distributed ledger. The electronic distribution system verifies a request for software, requests software, and initiates an installation protocol with the engine control system. The edge manager maintains software. The distributed ledger base is coupled to the aircraft, the electronic distribution system, and the edge manager. The distributed ledger provides a record including information pertaining to a request for software, verifications of the request by the electronic distribution system, the edge manager, and the engine control system, and an installation of the software.

Robotic process automation system with a command action logic independent execution environment

A robotic process automation system employs centralized compilation to generate a platform independent executable version of a bot, which is encoded to perform user level operations. The system employs an extensible set of commands which can be user generated. The bots execute on devices that are separate and independent from a server processor that controls the system. The devices execute bots in an execution environment that is provided by the server processor. Change in a command in a bot requires recompilation of the bot which is then delivered upon request to a device. The execution environment does not require recompilation upon a change in a command.