公开(公告)号：US08407696B2

公开(公告)日：2013-03-26

申请号：US11757954

申请日：2007-06-04

申请人： Bowen Alpern ,  Glenn S Ammons ,  Vasanth Bala ,  Todd W Mummert ,  Balachandar Rajaraman ,  Darrell Christopher Reimer ,  Mark N. Wegman

发明人： Bowen Alpern ,  Glenn S Ammons ,  Vasanth Bala ,  Todd W Mummert ,  Balachandar Rajaraman ,  Darrell Christopher Reimer ,  Mark N. Wegman

IPC分类号： G06F9/455 ,  G06F9/44 ,  G06F9/445 ,  G06F12/16 ,  G06F7/04

CPC分类号： G06F8/65

摘要： A method for updating an application on a host system includes steps or acts of: installing an application on the host system; installing a virtual machine monitor on the host system, installing a first virtual container on the host system, wherein the first virtual container comprises at least one update to the installed application; and instantiating the first virtual container under the virtual machine monitor in a mode wherein the host system can be accessed but not modified and wherein instantiating the first virtual container includes updating the installed application in the first virtual computer and running the updated application in the first virtual container. The method may also include a step of confirming that the updated application runs properly. Optionally, the virtual container may be devirtualized.

摘要翻译： 用于在主机系统上更新应用程序的方法包括以下步骤或动作：在主机系统上安装应用程序; 在所述主机系统上安装虚拟机监视器，在所述主机系统上安装第一虚拟容器，其中所述第一虚拟容器包括对所安装的应用的至少一个更新; 以及虚拟机监视器下的第一虚拟容器，其中所述主机系统可以被访问但不被修改，并且其中实例化所述第一虚拟容器包括更新所述第一虚拟计算机中安装的应用并且在所述第一虚拟计算机中运行所述更新的应用 容器。 该方法还可以包括确认更新的应用程序正常运行的步骤。 可选地，虚拟容器可以是半虚拟化的。

公开(公告)号：US20080301676A1

公开(公告)日：2008-12-04

申请号：US11757954

申请日：2007-06-04

申请人： Bowen Alpern ,  Glenn Ammons ,  Vasanth Bala ,  Todd W. Mummert ,  Balachandar Rajaraman ,  Darrell Christopher Reimer ,  Mark N. Wegman

发明人： Bowen Alpern ,  Glenn Ammons ,  Vasanth Bala ,  Todd W. Mummert ,  Balachandar Rajaraman ,  Darrell Christopher Reimer ,  Mark N. Wegman

IPC分类号： G06F9/455

CPC分类号： G06F8/65

摘要： A method for updating an application on a host system includes steps or acts of: installing an application on the host system; installing a virtual machine monitor on the host system, installing a first virtual container on the host system, wherein the first virtual container comprises at least one update to the installed application; and instantiating the first virtual container under the virtual machine monitor in a mode wherein the host system can be accessed but not modified and wherein instantiating the first virtual container includes updating the installed application in the first virtual computer and running the updated application in the first virtual container. The method may also include a step of confirming that the updated application runs properly. Optionally, the virtual container may be devirtualized. A system for updating an application on a host system includes: at least one virtual machine monitor, at least one virtual container; at least one application; at least one update to the application contained within the at least one virtual container; and a processor configured for carrying out the above method steps. The system may also include an input multiplexer configured for mediating access to the at least one virtual container; and an output analyzer configured for confirming that the updated application performed as expected in at least one virtual container.

摘要翻译： 用于在主机系统上更新应用程序的方法包括以下步骤或动作：在主机系统上安装应用程序; 在所述主机系统上安装虚拟机监视器，在所述主机系统上安装第一虚拟容器，其中所述第一虚拟容器包括对所安装的应用的至少一个更新; 以及虚拟机监视器下的第一虚拟容器，其中所述主机系统可以被访问但不被修改，并且其中实例化所述第一虚拟容器包括更新所述第一虚拟计算机中安装的应用并且在所述第一虚拟计算机中运行所述更新的应用 容器。 该方法还可以包括确认更新的应用程序正常运行的步骤。 可选地，虚拟容器可以是半虚拟化的。 用于更新主机系统上的应用的系统包括：至少一个虚拟机监视器，至少一个虚拟容器; 至少一个应用程序; 所述至少一个虚拟容器中包含的所述应用的至少一个更新; 以及配置用于执行上述方法步骤的处理器。 系统还可以包括被配置用于中介对至少一个虚拟容器的访问的输入多路复用器; 以及输出分析器，被配置为用于确认更新的应用程序如至少一个虚拟容器中所预期的那样执行。

公开(公告)号：US20080256019A1

公开(公告)日：2008-10-16

申请号：US11735708

申请日：2007-04-16

申请人： Bowen Alpern ,  Joshua S. Auerbach ,  Vasanth Bala ,  Thomas V. Frauenhofer ,  Todd W. Mummert

发明人： Bowen Alpern ,  Joshua S. Auerbach ,  Vasanth Bala ,  Thomas V. Frauenhofer ,  Todd W. Mummert

IPC分类号： G06F17/30

CPC分类号： G06F16/152 ,  G06F16/14

摘要： A method and computer system for determining an existence of a file and, possibly, information related to the file are provided. The method and system include providing a file name, generating a file designator from the file name, and generating a hash value from the file name. The hash value is used to index a cache containing other file designators that meet a certain criterion, and if no entry is found in the cache, an operating system call is performed. If an entry is found in the cache, the entry of the cache is compared with the generated file designator. If the entry and the generated file designator are not the same, an operating system call is performed. If the entry and the generated file designator are the same, this indicates that the criterion is satisfied.

摘要翻译： 提供了用于确定文件的存在以及可能的与文件相关的信息的方法和计算机系统。 方法和系统包括提供文件名，从文件名生成文件指示符，以及从文件名生成哈希值。 哈希值用于对包含符合特定标准的其他文件指定符的缓存进行索引，如果缓存中没有条目，则执行操作系统调用。 如果在缓存中找到条目，则将高速缓存的条目与生成的文件指示符进行比较。 如果条目和生成的文件指示符不相同，则执行操作系统调用。 如果条目和生成的文件指示符相同，则表示满足标准。

公开(公告)号：US20060047974A1

公开(公告)日：2006-03-02

申请号：US10929337

申请日：2004-08-30

申请人： Bowen Alpern ,  Joshua Auerbach ,  Vasanth Bala ,  Thomas Frauenhofer ,  Jobi George ,  Todd Mummert ,  Michael Pigott

发明人： Bowen Alpern ,  Joshua Auerbach ,  Vasanth Bala ,  Thomas Frauenhofer ,  Jobi George ,  Todd Mummert ,  Michael Pigott

IPC分类号： H04N7/16 ,  G06F12/14 ,  H04L9/32 ,  G06F17/30 ,  G06F11/30 ,  G06F7/04 ,  G06K9/00 ,  H03M1/68 ,  H04K1/00 ,  H04L9/00

CPC分类号： H04N21/435 ,  G06F9/445 ,  G06F9/44521 ,  G06F9/45537 ,  H04L9/3236 ,  H04L9/3247 ,  H04L67/06 ,  H04L67/34 ,  H04L2209/60 ,  H04N21/235 ,  H04N21/812 ,  H04N21/8173 ,  H04N21/8456

摘要： A method for executing on a first computer an application having an installed image prepared on a second computer, wherein the installed image is virtually installed on the first computer, is disclosed. The method includes emulating on the first computer a native environment of the second computer. The method further includes detecting an operation of the application upon data, wherein the operation requires an operation on data located on the first computer, and wherein a copy of the data is located in the virtually installed image. The method further includes directing the operation of the application to operate on the data located in the virtually installed image.

公开(公告)号：US06226653B1

公开(公告)日：2001-05-01

申请号：US09480190

申请日：2000-01-10

申请人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

发明人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

IPC分类号： G06F1200

CPC分类号： G06F12/0276 ,  Y10S707/99931 ,  Y10S707/99957

摘要： A method and apparatus are provided for the efficient management of remembered sets in a generational garbage collection scheme. In order to manage the remembered set, the present invention provides a first mechanism for detecting when an old object has a pointer to a young object, and needs to be added to the remembered set, and a second mechanism for detecting when an object already in the remembered set no longer contains a pointer to a young object, so that the object can be removed from the remembered set. Entries in the remembered set have an associated counter, C, identifying the garbage collection cycle during which the object was placed in the remembered set. Objects inserted into the remembered set are assumed to point to the youngest possible object. Entries automatically expire from the remembered set when the garbage collection counter reaches C+N, since the objects pointed to by the object in the remembered set must now themselves be old objects. If an old object (one that has survived at least N garbage collections) is identified during a minor garbage collection, the old object is scanned normally, and is placed into the remembered set, with a counter C identifying the garbage collection cycle during which the old object was placed in the remembered set. The counter identifies the age of the youngest possible object pointed to by this object. When the garbage collection count reaches C+N, this entry can be discarded from the remembered set, since the associated object cannot point to any objects that are not old unless another more recent entry in the remembered set or write buffer exists for that object.

摘要翻译： 提供了一种用于在代代垃圾回收方案中有效管理记忆集的方法和装置。 为了管理记忆集，本发明提供了一种用于检测旧对象何时具有指向年轻对象的指针并且需要被添加到记忆集合的第一机制，以及用于检测何时已经在对象中的对象 记忆集不再包含指向年轻对象的指针，以便可以从记忆集中删除对象。 记住的集合中的条目具有关联计数器C，标识对象被放置在记忆集中的垃圾收集循环。 插入到记忆集中的对象被假定为指向最小的对象。 当垃圾收集计数器达到C + N时，条目自动从记忆集合过期，因为记忆集中的对象指向的对象现在必须是旧对象。 如果在较小的垃圾收集期间识别出一个旧对象（一个至少存储了N个垃圾收集的对象），则旧对象被正常扫描，并被放置到记忆集中，计数器C标识垃圾收集循环，在该循环期间 旧对象被放置在记忆集中。 计数器识别此对象指向的最小可能对象的年龄。 当垃圾收集计数达到C + N时，可以从记忆集中丢弃此条目，因为关联的对象不能指向任何不是老的对象，除非存在该对象的记忆集或写入缓冲区中的另一个更新的条目。

公开(公告)号：US06510440B1

公开(公告)日：2003-01-21

申请号：US09480189

申请日：2000-01-10

申请人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

发明人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

IPC分类号： G06F1200

CPC分类号： G06F12/0276 ,  Y10S707/99957

摘要： A method and apparatus are disclosed for efficiently creating and maintaining a remembered set in a generational garbage collection scheme using a write buffer and a barrier bit associated with each object. A barrier bit associated with each object differentiates generations in a generational garbage collection scheme. When an object is first created, the barrier bit of the object is set to zero. The barrier bit is set when the object becomes old, for example, after surviving a first garbage collection. The barrier bit is used to determine whether to make an entry into a write buffer when a reference to another object is stored into an object. An entry is made in the write buffer only if the barrier bit of the object that is written into is set. At the end of each garbage collection, entries in the write buffer are added to the remembered set for the next garbage collection if the objects satisfy the criterion for membership, i.e., they are live and may contain pointers to objects in a younger generation. Thus, the remembered set consists of objects that were in the write buffer at the time of a garbage collection, that must be remembered for the next garbage collection. The write buffer is kept small by eliminating duplicate entries. The present invention turns off the barrier bit after the first store during each reclamation period (which causes the object to be identified in the write buffer). The barrier bit is turned on again by the garbage collector after the write buffer has been processed.

摘要翻译： 公开了一种方法和装置，用于使用与每个对象相关联的写缓冲器和屏障位，在代数垃圾回收方案中有效地创建和维护记忆集。 与每个对象相关联的障碍位在代数垃圾回收方案中区分世代。 当对象首次创建时，对象的障碍位设置为零。 当对象变老时，例如，在第一个垃圾收集生存之后，屏障位被置位。 当将对另一个对象的引用存储到一个对象中时，屏障位用于确定是否进入写缓冲区。 仅当写入的对象的屏蔽位被置位时，才在写入缓冲区中进行条目。 在每个垃圾回收结束时，如果对象满足成员资格的标准，即它们是活的，并且可能包含指向年轻一代中的对象的指针，则将写缓冲区中的条目添加到下一个垃圾收集的记忆集中。 因此，记住的集合由垃圾回收时在写缓冲区中的对象组成，必须为下一个垃圾回收记住。 通过消除重复条目，写缓冲区保持较小。 本发明在每个回收周期（使得在写入缓冲器中识别对象）之后关闭第一次存储之后的屏障位。 写入缓冲区被处理完毕后，垃圾收集器再次打开屏障位。

公开(公告)号：US06470361B1

公开(公告)日：2002-10-22

申请号：US09480186

申请日：2000-01-10

申请人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

发明人： Bowen Alpern ,  Clement Richard Attanasio ,  Stephen Edwin Smith

IPC分类号： G06F1200

CPC分类号： G06F12/0276 ,  Y10S707/99931 ,  Y10S707/99957

摘要： A method and apparatus are provided for the efficient management of remembered sets in a generational garbage collection scheme. The present invention detects when an old object has a pointer to a young object, and needs to be added to the remembered set. A write buffer and a temporary buffer are used to create and maintain the remembered set. Entries in the write and temporary buffers are used as part of the root set for creating the remembered set for the next garbage collection. A barrier bit associated with each object differentiates generations in the generational garbage collection scheme and is used to determine whether to make an entry into a write buffer when a reference to another object is stored into an object. Objects that have survived one or more collections, but not the minimum number, N, of collections to be considered an old object are referred to as “middle-aged” objects. During a minor garbage collection, the write buffer is scanned. Objects identified in the write buffer are transferred to the remembered set for the next cycle if the object is (i) an old object pointing to a younger object, or (ii) a middle-aged object that is determined to be live. Middle-aged objects identified in the write buffer that are not yet known to be live are transferred to the temporary buffer. At the end of the minor collection, the temporary buffer is processed and objects that are then known to be live are transferred into the remembered set.

摘要翻译： 提供了一种用于在代代垃圾回收方案中有效管理记忆集的方法和装置。 本发明检测旧对象何时具有指向年轻对象的指针，并且需要将其添加到记忆集。 写入缓冲区和临时缓冲区用于创建和维护记忆集。 写入和临时缓冲区中的条目用作创建下一个垃圾收集的记忆集的根集的一部分。 与每个对象相关联的障碍位在代数垃圾回收方案中区分世代，并且用于当对另一对象的引用存储到对象中时，确定是否进入写入缓冲区。 被认为是旧对象的集合中存在一个或多个集合但不是最小数量N的对象被称为“中年”对象。 在小垃圾收集期间，扫描写入缓冲区。 如果对象是（i）指向较年轻对象的旧对象，或（ii）被确定为实时的中年对象，则在写缓冲区中识别的对象将被传送到下一周期的记忆集。 在写入缓冲区中识别的尚未知道的实时对象被传送到临时缓冲区。 在次要收集结束时，处理临时缓冲区，然后将已知为活动的对象转移到记忆集中。

公开(公告)号：US20050015752A1

公开(公告)日：2005-01-20

申请号：US10620078

申请日：2003-07-15

申请人： Bowen Alpern ,  Robert Johnson ,  Aaron Kershenbaum ,  Lawrence Koved ,  George Leeman ,  Marco Pistoia ,  Darrell Reimer ,  Kavitha Srinivas ,  Harini Srinivasan

发明人： Bowen Alpern ,  Robert Johnson ,  Aaron Kershenbaum ,  Lawrence Koved ,  George Leeman ,  Marco Pistoia ,  Darrell Reimer ,  Kavitha Srinivas ,  Harini Srinivasan

IPC分类号： G06F9/44 ,  G06F9/45

CPC分类号： G06F11/3604

摘要： A system and method for providing “static analysis” of programs to aid in improving runtime performance, stability, security and privacy characteristics of deployed application code. The method includes performing a set of analyses that sifts through the program code and identifies programming security and/or privacy model coding errors. In particular the invention focuses on identifying coding errors that cause loss of correctness, performance degradation, security, privacy and maintainability vulnerabilities. A deep analysis of the program is performed using detailed control and data flow analyses. These deeper analyses provide a much better perspective of the overall application behavior. This deep analysis is in contrast to shallow analyses in current industry tools, which inspect or model a single or a few classes at a time.

摘要翻译： 提供程序的“静态分析”的系统和方法，以帮助提高部署应用程序代码的运行时性能，稳定性，安全性和隐私特性。 该方法包括执行通过程序代码筛选的一组分析，并识别编程安全性和/或隐私模型编码错误。 特别地，本发明着重于识别导致正确性，性能下降，安全性，隐私和可维护性漏洞损失的编码错误。 使用详细的控制和数据流分析对程序进行深入分析。 这些更深入的分析为整体应用行为提供了更好的视角。 这个深刻的分析与当前行业工具中的浅析分析形成对比，该工具一次检查或建立一个或几个类。

公开(公告)号：US06651248B1

公开(公告)日：2003-11-18

申请号：US09654291

申请日：2000-09-01

申请人： Bowen Alpern

发明人： Bowen Alpern

IPC分类号： G06F944

CPC分类号： G06F9/449

摘要： The interface method invocation mechanism of the present invention includes an interface method table (IMT) for a given class of objects. The IMT comprises a table of entries each corresponding to a set S of interface methods that are implemented by objects of the given class. The entries of the IMT are used to support invocation of interface methods. More specifically, processing of a method invocation statement involves either I) loading the pointer to the implementation of the interface method from an entry of the IMT and passing control to this implementation; or II) loading the pointer to a conflict resolution routine pointed by an IMT entry and passing control to this conflict resolution routine. The conflict resolution routine pointed to by the IMT entry identifies at execution time to the location of the particular interface method of the two or more interface methods that are associated with the given IMT entry that corresponds to the method invocation statement being processed, and pass control to this particular interface method.

摘要翻译： 本发明的接口方法调用机制包括给定类对象的接口方法表（IMT）。 IMT包括各自对应于由给定类的对象实现的接口方法的集合S的条目表。 IMT的条目用于支持调用接口方法。 更具体地说，方法调用语句的处理涉及I）从IMT的条目将指针加载到接口方法的实现，并将控制传递给该实现; 或II）将指针加载到由IMT条目指示的冲突解决程序，并将控制传递给该冲突解决程序。 IMT条目指出的冲突解决程序在执行时识别到与正在处理的方法调用语句相对应的给定IMT条目关联的两个或多个接口方法的特定接口方法的位置，并且传递控制 到这个特定的接口方法。