公开(公告)号：US20080168017A1

公开(公告)日：2008-07-10

申请号：US11620143

申请日：2007-01-05

申请人： Vugranam C. Sreedhar ,  Dana Glasner

发明人： Vugranam C. Sreedhar ,  Dana Glasner

IPC分类号： G06N5/02 ,  G06F9/44

CPC分类号： G06F8/10

摘要： A method, system and article are provide for treating consistency checking of a configuration of an information technology system by developing a model of the configuration based on common criteria functional requirements, extending the common criteria to model the configuration, imposing a set of constraints on the configuration model, converting the system configuration to a model instance, and verifying that the model instance satisfies the set of constraints.

摘要翻译： 提供了一种方法，系统和文章，用于通过基于共同标准功能需求开发配置模型来处理信息技术系统配置的一致性检查，扩展共同标准以对配置进行建模，对 配置模型，将系统配置转换为模型实例，并验证模型实例是否满足约束集。

公开(公告)号：US20130110568A1

公开(公告)日：2013-05-02

申请号：US13287386

申请日：2011-11-02

申请人： Winnie W. Cheng ,  Jia Liu ,  David Loewenstern ,  Larisa Shwartz ,  Vugranam C. Sreedhar

发明人： Winnie W. Cheng ,  Jia Liu ,  David Loewenstern ,  Larisa Shwartz ,  Vugranam C. Sreedhar

IPC分类号： G06Q10/06

CPC分类号： G06Q10/06

摘要： A method of recommending an assignment for a work order includes receiving the work order, retrieving information from the work order, identifying a skill set needed to complete the work order using the information retrieved from the work order, extracting, automatically, a first set of evidences from a first data source based on the identified skill set, and a second set of evidences from a second data source based on the identified skill set, combining a first inference and a second inference, by a processor, wherein the first inference is determined using the first set of evidences, the second inference is determined using the second set of evidences, and the first and second set of evidences comprise dissimilar data, and generating a work order assignment recommendation based on the combined inferences.

摘要翻译： 一种推荐工作分配的方法包括接收工单，从工单中检索信息，使用从工单检索的信息来识别完成工单所需的技能集，自动提取第一组 基于所识别的技能集来自第一数据源的证据，以及基于所识别的技术集合的来自第二数据源的第二组证据，由处理器组合第一推断和第二推断，其中确定第一推断 使用第一组证据，使用第二组证据来确定第二推断，并且第一和第二证据集合包括不同的数据，并且基于组合的推论生成工作分配推荐。

公开(公告)号：US06530079B1

公开(公告)日：2003-03-04

申请号：US09323989

申请日：1999-06-02

申请人： Jong-Deok Choi ,  Manish Gupta ,  Mauricio J. Serrano ,  Vugranam C. Sreedhar ,  Samuel Pratt Midkiff

发明人： Jong-Deok Choi ,  Manish Gupta ,  Mauricio J. Serrano ,  Vugranam C. Sreedhar ,  Samuel Pratt Midkiff

IPC分类号： G06F9445

CPC分类号： G06F9/52 ,  G06F8/443

摘要： A method and several variants for using information about the scope of access of objects acted upon by mutual exclusion, or mutex, locks to transform a computer program by eliminating locking operations from the program or simplifying the locking operations, while strictly performing the semantics of the original program. In particular, if it can be determined by a compiler that the object locked can only be accessed by a single thread it is not necessary to perform the “acquire” or “release” part of the locking operation, and only its side effects must be performed. Likewise, if it can be determined that the side effects of a locking operation acting on a variable which is locked in multiple threads are not needed, then only the locking operation, and not the side effects, needs to be performed. This simplifies the locking operation, and leads to faster programs which use fewer computer processor resources to execute; and programs which perform fewer shared memory accesses, which in turn not only causes the optimized program, but also other programs executing on the same computing machine to execute faster. The method also describes how information about the semantics of the locking operation side effects and the information about the scope of access can also be used to eliminate performing the side effect parts of the locking operation, thereby completely eliminating the locking operation. The method also describes how to analyze the program to compute the necessary information about the scope of access. Variants of the method show how one or several of the features of the method may be performed.

摘要翻译： 一种方法和几种变体，用于使用通过互斥或互斥锁进行访问的对象的范围的信息，以通过从程序中消除锁定操作或简化锁定操作来转换计算机程序，同时严格执行 原始程序。 特别是，如果可以由编译器确定锁定的对象只能由单个线程访问，则不需要执行锁定操作的“获取”或“释放”部分，只有其副作用必须是 执行。 同样，如果可以确定不需要对锁定在多个线程中的变量作用的锁定操作的副作用，则仅需要执行锁定操作而不是副作用。 这简化了锁定操作，并导致更快的程序使用更少的计算机处理器资源来执行; 以及执行较少的共享存储器访问的程序，这又不仅导致优化的程序，而且还导致在同一计算机上执行的其他程序执行得更快。 该方法还描述了关于锁定操作侧的语义的信息如何影响以及关于访问范围的信息也可以用于消除执行锁定操作的副作用部分，从而完全消除锁定操作。 该方法还描述了如何分析程序来计算有关访问范围的必要信息。 该方法的变体显示了如何执行该方法的一个或多个特征。

公开(公告)号：US08627442B2

公开(公告)日：2014-01-07

申请号：US13114315

申请日：2011-05-24

申请人： Peng Ji ,  Lin Luo ,  Vugranam C. Sreedhar ,  Shun Xiang Yang ,  Yu Zhang

发明人： Peng Ji ,  Lin Luo ,  Vugranam C. Sreedhar ,  Shun Xiang Yang ,  Yu Zhang

IPC分类号： G06F9/00 ,  G06F15/16 ,  G06F17/00 ,  G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00

CPC分类号： H04L63/0263 ,  H04L63/02 ,  H04L63/0245 ,  H04L63/105 ,  H04L63/1416 ,  H04L67/02

摘要： At least one of an HTTP request message and an HTTP response message is intercepted. A corresponding HTTP message model is identified. The HTTP message model includes a plurality of message model sections. Additional steps include parsing a representation of the at least one of an HTTP request message and an HTTP response message into message sections in accordance with the message model sections of the HTTP message model; and binding a plurality of security rules to the message model sections. The plurality of security rules each specify at least one action to be taken in response to a given condition. The given condition is based, at least in part, on a corresponding given one of the message sections. A further step includes processing the at least one of an HTTP request message and an HTTP response message in accordance with the plurality of security rules. Techniques for developing rules for a web application server firewall are also provided.

摘要翻译： HTTP请求消息和HTTP响应消息中的至少一个被拦截。 识别出相应的HTTP消息模型。 HTTP消息模型包括多个消息模型部分。 附加步骤包括根据HTTP消息模型的消息模型部分将HTTP请求消息和HTTP响应消息中的至少一个的表示解析成消息部分; 并将多个安全规则绑定到消息模型部分。 多个安全规则每个指定响应于给定条件要采取的至少一个动作。 给定条件至少部分地基于相应给定的一个消息部分。 另一步骤包括根据多个安全规则处理HTTP请求消息和HTTP响应消息中的至少一个。 还提供了开发Web应用服务器防火墙规则的技术。

公开(公告)号：US20120185825A1

公开(公告)日：2012-07-19

申请号：US13407097

申请日：2012-02-28

申请人： Vugranam C. Sreedhar

发明人： Vugranam C. Sreedhar

IPC分类号： G06F9/44

CPC分类号： G06F8/70 ,  G06F8/315 ,  G06F8/36

摘要： A method and apparatus are disclosed for programming software components that treats software components as the basic unit of abstraction and computation. A software component is encapsulated and classes and other program entities, such as data fields and methods, within a given component do not exist beyond a component boundary. A component interacts with other components only by means of a defined set of input and output ports. A component can inherit and implement ports declared in a template and can declare and implement new ports. A component can only access the external environment through its output ports. An output port of one component can only be connected to a conforming input port of another component. A connect statement is an explicit plumbing operation for connecting components together. Interactions between components are loosely coupled. A related set of templates can be grouped together to form a group.

摘要翻译： 公开了一种用于对软件组件进行编程以将软件组件视为抽象和计算的基本单元的方法和装置。 软件组件被封装，给定组件内的类和其他程序实体（如数据字段和方法）不存在于组件边界之外。 组件只能通过一组定义的输入和输出端口与其他组件交互。 组件可以继承和实现在模板中声明的端口，并可以声明和实现新端口。 组件只能通过其输出端口访问外部环境。 一个组件的输出端口只能连接到另一个组件的一致输入端口。 连接语句是将组件连接在一起的显式管道操作。 组件之间的相互作用松耦合。 相关的一组模板可以组合在一起形成一个组。

公开(公告)号：US07730001B2

公开(公告)日：2010-06-01

申请号：US10073608

申请日：2002-02-11

申请人： Douglas N. Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

发明人： Douglas N. Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

IPC分类号： G06F15/18 ,  G06F9/44 ,  G06F9/445 ,  G06F9/45 ,  G06F9/50 ,  G05B13/00

CPC分类号： G06F11/3409 ,  G06F11/3447 ,  G06F11/3466 ,  G06F2201/865

摘要： A method is provided for characterizing objects generated during an initial run of a program, each object being characterized by a number of alternative properties which can be chosen. The method includes steps of instrumenting an initial run of program to determine characterization information about each of objects, then determining a desirable property for each object, then determining a correlation between the desirable property and the characterization information for each of the objects. This correlation is then used to select a property for an object that is subsequently created during a run of the program based only upon characterization information about the subsequently created object.

摘要翻译： 提供了一种用于表征在程序的初始运行期间生成的对象的方法，每个对象的特征在于可以选择的多个备选属性。 该方法包括以下步骤：对程序的初始运行进行测试，以确定关于每个对象的特征信息，然后确定每个对象的期望属性，然后确定所需属性与每个对象的表征信息之间的相关性。 然后，该相关性仅用于基于仅关于随后创建的对象的表征信息来选择随后在程序运行期间创建的对象的属性。

公开(公告)号：US20080320451A1

公开(公告)日：2008-12-25

申请号：US11765396

申请日：2007-06-19

申请人： Daniel Brand ,  Marcio Buss ,  Vugranam C. Sreedhar

发明人： Daniel Brand ,  Marcio Buss ,  Vugranam C. Sreedhar

IPC分类号： G06F9/44

CPC分类号： G06F8/434

摘要： Pointer analysis is used for different applications, e.g., compilers, debugging tools and programs understanding tools, each having different requirements. A framework for pointer analysis is provided that defines a multidimensional space, for example a three-dimensional space, containing an order sensitivity dimension, a predicate sensitivity dimension and a value persistence dimension. A point in the three-dimensional space is identified. This point yields values for order sensitivity, predicate sensitivity and value persistence. Pointer analysis is then conducted on a computer program in accordance with the identified values for order sensitivity, predicate sensitivity and value persistence.

摘要翻译： 指针分析用于不同的应用程序，例如编译器，调试工具和程序，了解工具，每个应用程序都有不同的要求。 提供了一种用于指针分析的框架，其定义了多维空间，例如包含订单敏感度维度，谓词敏感度维度和值持久性维度的三维空间。 确定三维空间中的一点。 这一点产生订单敏感性，谓词敏感性和价值持久性的值。 然后根据订单灵敏度，谓词灵敏度和价值持久性的识别值，在计算机程序上进行指针分析。

公开(公告)号：US08108841B2

公开(公告)日：2012-01-31

申请号：US12037080

申请日：2008-02-25

申请人： Douglas Neil Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

发明人： Douglas Neil Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

IPC分类号： G06F9/44

CPC分类号： G06F11/3409 ,  G06F11/3447 ,  G06F11/3466 ,  G06F2201/865

摘要： A method for minimizing total cost of interaction among components of a computer program, each of the components being characterized by at least one implementation property includes steps of: a) carrying out at least a partial run of the program; b) monitoring the at least partial run of the program to measure an amount of interaction between each pair of components; c) determining a cost of interaction between each pair of interacting components; d) determining a choice of implementation properties which minimizes total cost of the at least partial run; and e) assigning that choice of implementation properties to the components for a subsequent at least partial run of the program.

摘要翻译： 一种用于使计算机程序的组件之间的交互的总成本最小化的方法，每个组件的特征在于至少一个实现属性包括以下步骤：a）执行程序的至少部分运行; b）监视程序的至少部分运行以测量每对组件之间的相互作用量; c）确定每对相互作用的部件之间的交互成本; d）确定最小化至少部分跑步的总成本的实施属性的选择; 以及e）将所述实现属性的选择分配给所述组件以用于所述程序的后续至少部分运行。

公开(公告)号：US20100333167A1

公开(公告)日：2010-12-30

申请号：US12493356

申请日：2009-06-29

申请人： Lin Luo ,  Vugranam C. Sreedhar ,  Shun X. Yang ,  Yu Zhang

发明人： Lin Luo ,  Vugranam C. Sreedhar ,  Shun X. Yang ,  Yu Zhang

IPC分类号： H04L29/06 ,  G06F15/18

CPC分类号： H04L63/1441 ,  H04L63/20

摘要： Mechanisms are provided for handling client computing device requests with adaptive rule loading and session control. The mechanisms partition a set of rules, into a plurality of filter sets with each filter set having a different subset of the set of rules and being directed to identifying a different type of attack on a backend application or service. A subset of filter sets is selected to be used to validate client computing device requests received from client computing devices. The selected filter sets are applied to requests and/or responses to requests. The mechanisms dynamically modify which filter sets are included in the subset of filter sets based on an adaptive reinforcement learning operation on results of applying the selected filter sets to the requests and/or responses to requests.

摘要翻译： 提供了用于处理具有自适应规则加载和会话控制的客户端计算设备请求的机制。 这些机制将一组规则划分成多个过滤器集合，其中每个过滤器集合具有该组规则的不同子集，并被引导以识别对后端应用或服务的不同类型的攻击。 选择过滤器集合的子集以用于验证从客户端计算设备接收的客户端计算设备请求。 所选择的过滤器集合应用于请求和/或对请求的响应。 基于对所请求的请求和/或对请求的响应的结果的自适应强化学习操作，机制动态地修改哪些过滤器集合被包括在过滤器组的子集中。

公开(公告)号：US20080163163A1

公开(公告)日：2008-07-03

申请号：US12037080

申请日：2008-02-25

申请人： Douglas N. Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

发明人： Douglas N. Kimelman ,  Vadakkedathu T. Rajan ,  Tova Roth ,  Vugranam C. Sreedhar ,  Mark N. Wegman

IPC分类号： G06F9/44

CPC分类号： G06F11/3409 ,  G06F11/3447 ,  G06F11/3466 ,  G06F2201/865

摘要： A method for minimizing total cost of interaction among components of a computer program, each of the components being characterized by at least one implementation property includes steps of: a) carrying out at least a partial run of the program; b) monitoring the at least partial run of the program to measure an amount of interaction between each pair of components; c) determining a cost of interaction between each pair of interacting components; d) determining a choice of implementation properties which minimizes total cost of the at least partial run; and e) assigning that choice of implementation properties to the components for a subsequent at least partial run of the program.

摘要翻译： 一种用于使计算机程序的组件之间的交互的总成本最小化的方法，每个组件的特征在于至少一个实现属性包括以下步骤：a）执行程序的至少部分运行; b）监视程序的至少部分运行以测量每对组件之间的相互作用量; c）确定每对相互作用的部件之间的交互成本; d）确定最小化至少部分跑步的总成本的实现属性的选择; 以及e）将所述实现属性的选择分配给所述组件以用于所述程序的后续至少部分运行。