Containerized software discovery and identification

    公开(公告)号:US12001863B2

    公开(公告)日:2024-06-04

    申请号:US17027275

    申请日:2020-09-21

    IPC分类号: G06F9/455 G06F3/06 G06F16/28

    摘要: Containerized software discover and identification can include discovering a plurality of container remnants by electronically scanning portions of computer memory of at least one computer system of one or more of computing nodes, the portions of computer memory being allocated to persistent storage of computer data, and each container remnant containing computer data providing a record of system-generated execution attributes generated in response to execution of one or more containerized applications. One or more inactive container remnants unutilized by a currently running containerized application can be identified among the plurality of container remnants. Each inactive container remnant can be categorized, the categorizing being based on system-generated execution attributes contained in each inactive container remnant. Based on the categorizing, a previously run containerized application can be identified by reference to a database comprising data whose structures map identities of containerized applications to patterns of execution attributes.

    ADAPTIVE NETWORK CONTROL OF TRAFFIC FLOWS IN A SECURE NETWORK

    公开(公告)号:US20230188470A1

    公开(公告)日:2023-06-15

    申请号:US17643498

    申请日:2021-12-09

    摘要: A method is provided for rate limiting in a network. The method comprises receiving a traffic flow from the network. In a supervised learning phase, and determining if the traffic flow matches a pretrained network flow model. If so, the method comprises designating the traffic flow as a classified traffic flow according to the pretrained network flow model. The method further comprises advancing to a grouping phase, conditioned upon the traffic flow not matching pretrained network flow models. In the unsupervised learning phase, the method comprises designating the traffic flow as a classified traffic flow. In the grouping phase that follows the supervised learning phase and the unsupervised learning phase, the method comprises using side information about the traffic flows to assign related traffic flows into traffic flow groups, identifying a particular traffic flow group from the traffic flow groups as being an offending traffic flow group.

    FORECAST OF RESOURCES FOR UNPRECEDENTED WORKLOADS

    公开(公告)号:US20220237047A1

    公开(公告)日:2022-07-28

    申请号:US17158487

    申请日:2021-01-26

    IPC分类号: G06F9/50 G06N3/04

    摘要: One or more processors receive resource type and capability information and activity information of workloads of a domain. A first model is generated and trained to map the resource information to the activity information of domain workloads. The activity information is decomposed into a set of activity core elements (ACEs). The one or more processors generate a second model, wherein the second model is trained to predict a set of resource types and resource capabilities of the respective resource types, based on an input of the first set of ACEs decomposed from the activity information of the workloads of the domain. The one or more processors receive a second set of ACEs that are decomposed from activities associated with an unprecedented workload, and the one or more processors generate a predicted set of resources to perform the second set of ACEs.

    SECURE VIRTUAL MACHINE SOFTWARE MANAGEMENT

    公开(公告)号:US20220179673A1

    公开(公告)日:2022-06-09

    申请号:US17110391

    申请日:2020-12-03

    摘要: One or more computer processors responsive to a hypervisor data request, generate an encrypted set of hypervisor data indicating hypervisor hardware details using a plurality of respective asymmetric encryption keys to tag the generated set of encrypted hypervisor data with a timestamp at a time of encryption. The one or more computer processors decrypt the tagged set of encrypted hypervisor data utilizing a software asset manager and the plurality of respective asymmetric encryption keys determined valid based on a threshold time period and the tagged timestamp. The one or more computer processors validate the set of decrypted hypervisor data utilizing corresponding checksums to determine whether the set of encrypted hypervisor data was successfully decrypted. The one or more computer processors sanitize the validated hypervisor data based on a corresponding software license.

    Enhanceable Cross-Domain Rules Engine For Unmatched Registry Entries Filtering

    公开(公告)号:US20170168794A1

    公开(公告)日:2017-06-15

    申请号:US14969711

    申请日:2015-12-15

    IPC分类号: G06F9/445

    CPC分类号: G06F8/61

    摘要: Identification of unmatched registry entries may be provided, by scanning a file system, discovering software, collecting first attribute values of the discovered software, receiving a plurality of filtering rules including a method and an attribute. The attribute may comprise a software-specific condition. The method may further comprise collecting native registry entries comprising second attribute values indicated by said attributes of at least one of said rule, and comparing said first attribute values of said discovered software with related ones of said second attribute values of said collected native registry entries. Then, the native registry entries may be grouped into two groups. The first group represents matched registry entries and the second group represents unmatched registry entries. The unmatched registry entries may be identified as unequivocal entries for further software discovery. Finally, the filtering rules may be applied against said collected registry entries based on said filtering method.

    Software discovery in an environment with heterogeneous machine groups
    6.
    发明授权
    Software discovery in an environment with heterogeneous machine groups 有权
    在具有异构机器组的环境中的软件发现

    公开(公告)号:US09535677B2

    公开(公告)日:2017-01-03

    申请号:US14801964

    申请日:2015-07-17

    IPC分类号: G06F9/445 G06F9/44

    CPC分类号: G06F8/61 G06F8/60 G06F8/70

    摘要: A mechanism is provided for software discovery in an environment with heterogeneous machine groups may be provided. A group comprising computing systems that have similar software program installations is defined. A first scan procedure is performed by scanning each computing system of the group using a first software signature catalogue to identify installed programs. Software signatures of identified installed programs are added to a base installation software catalogue. A second scan procedure is performed by scanning the group of computing systems using the base installation software catalogue to identify installed software programs.

    摘要翻译: 提供了一种用于在具有异构机器组的环境中的软件发现的机制。 定义了包含具有类似软件程序安装的计算系统的组。 通过使用第一软件签名目录扫描组中的每个计算系统来识别安装的程序来执行第一扫描过程。 已将已安装程序的软件签名添加到基本安装软件目录中。 通过使用基本安装软件目录扫描该组计算系统来识别所安装的软件程序来执行第二扫描过程。

    Software Discovery in an Environment with Heterogeneous Machine Groups
    7.
    发明申请
    Software Discovery in an Environment with Heterogeneous Machine Groups 有权
    在异构机组的环境中的软件发现

    公开(公告)号:US20160026449A1

    公开(公告)日:2016-01-28

    申请号:US14801964

    申请日:2015-07-17

    IPC分类号: G06F9/445

    CPC分类号: G06F8/61 G06F8/60 G06F8/70

    摘要: A mechanism is provided for software discovery in an environment with heterogeneous machine groups may be provided. A group comprising computing systems that have similar software program installations is defined. A first scan procedure is performed by scanning each computing system of the group using a first software signature catalogue to identify installed programs. Software signatures of identified installed programs are added to a base installation software catalogue. A second scan procedure is performed by scanning the group of computing systems using the base installation software catalogue to identify installed software programs.

    摘要翻译: 提供了一种用于在具有异构机器组的环境中的软件发现的机制。 定义了包含具有类似软件程序安装的计算系统的组。 通过使用第一软件签名目录扫描组的每个计算系统来识别所安装的程序来执行第一扫描过程。 已将已安装程序的软件签名添加到基本安装软件目录中。 通过使用基本安装软件目录扫描该组计算系统来识别所安装的软件程序来执行第二扫描过程。

    AUTOMATIC SOFTWARE CATALOG CONTENT CREATION BASED ON BIO-INSPIRED COMPUTING PREDICTION
    8.
    发明申请
    AUTOMATIC SOFTWARE CATALOG CONTENT CREATION BASED ON BIO-INSPIRED COMPUTING PREDICTION 有权
    基于生物启发式计算机预测的自动软件目录创建

    公开(公告)号:US20150363193A1

    公开(公告)日:2015-12-17

    申请号:US14306273

    申请日:2014-06-17

    IPC分类号: G06F9/44

    摘要: A computer system for automatically creating a software catalog content that includes a plurality of software components associated with a computing system is provided. The computer system may include creating a population comprising a plurality of potential software signatures associated with the plurality of software components. The computer system may include ranking the population based on a highest ratio value. The computer system may include selecting a set of parent software signatures based on the ranking. The computer system may include creating a new population of potential software signatures based on the selected set of parent software signatures. The computer system may include performing recombination on the new population of potential software signatures. The computer system may include predicting at least one potential software signature from the new population of potential software signatures based on a comparison between the performed recombination and the created new population of potential software signatures.

    摘要翻译: 提供了一种用于自动创建包括与计算系统相关联的多个软件组件的软件目录内容的计算机系统。 计算机系统可以包括创建包括与多个软件组件相关联的多个潜在软件签名的总体。 计算机系统可以包括基于最高比值来对总体进行排名。 计算机系统可以包括基于排名来选择一组父母软件签名。 计算机系统可以包括基于所选择的父软件签名组创建新的潜在软件签名群体。 计算机系统可以包括对新的潜在软件签名人群执行重组。 计算机系统可以包括基于所执行的重组与创建的潜在软件签名的新群体之间的比较来预测来自新的潜在软件签名群体的至少一个潜在的软件签名。

    SOFTWARE ASSET MANAGEMENT USING A BROWSER PLUG-IN
    9.
    发明申请
    SOFTWARE ASSET MANAGEMENT USING A BROWSER PLUG-IN 有权
    软件资产管理使用浏览器插入

    公开(公告)号:US20140149585A1

    公开(公告)日:2014-05-29

    申请号:US14073440

    申请日:2013-11-06

    IPC分类号: H04L12/26

    摘要: A software asset management method comprising storing URL data for each of a first plurality of software entities, obtaining, by means of a first browser plug-in, first data indicative of a URL from which a browser has obtained content, comparing, for at least one of the first plurality of software entities, the URL data of the respective software entity with the first data, and communicating the first data to a first computer other than a computer hosting the browser subject to a first condition that, for each of the first plurality of software entities, the comparing reveals that the first data does not match the URL data of the respective software entity.

    摘要翻译: 一种软件资产管理方法,包括存储第一多个软件实体中的每一个的URL数据,通过第一浏览器插件获得指示浏览器已获得内容的URL的第一数据,至少比较 第一多个软件实体中的一个,具有第一数据的相应软件实体的URL数据,并且将第一数据传送到除托管浏览器的计算机之外的第一计算机,该第一条件是对于第一条件, 多个软件实体,比较显示第一数据与相应软件实体的URL数据不匹配。

    Containerized software discovery and identification

    公开(公告)号:US12001864B2

    公开(公告)日:2024-06-04

    申请号:US17134086

    申请日:2020-12-24

    IPC分类号: G06F9/455 G06F3/06 G06F16/28

    摘要: Containerized software discover and identification can include discovering a plurality of container remnants by electronically scanning portions of computer memory of at least one computer system of one or more of computing nodes, the portions of computer memory being allocated to persistent storage of computer data, and each container remnant containing computer data providing a record of system-generated execution attributes generated in response to execution of one or more containerized applications. One or more inactive container remnants unutilized by a currently running containerized application can be identified among the plurality of container remnants. Each inactive container remnant can be categorized, the categorizing being based on system-generated execution attributes contained in each inactive container remnant. Based on the categorizing, a previously run containerized application can be identified by reference to a database comprising data whose structures map identities of containerized applications to patterns of execution attributes.