380results about How to "Reduce performance overhead" patented technology

The invention discloses a smart contract protection system based on a trusted environment, including a client, block chain nodes, a data provider, a trusted environment, a non-trusted environment, a smart contract information processing module (A), a block chain node information transmission module (B) (such as a node interaction interface in the Ethereum), an input data transmission module (C), a smart contract execution module (D), a local contract information storage pool (E) and a block chain smart contract storage pool (F). The client is in communication connection with the block chain nodes. The data provider is in communication connection with the block chain nodes. The block chain nodes are in communication connection with one another. The technical problem that the copyright of smart contracts cannot be protected and the rights and interests of smart contract users are damaged due to the fact that the information of smart contracts may easily leak in the existing smart contract system and the technical problem that data may be stolen due to data leakage are solved.

The invention discloses an Android device gas platform system based on a Bluetooth handle and an implementation method of the Android device gas platform system. The interactive protocols of different Bluetooth handles on the market are unified, so that handles in different modes on the market can uniformly and conveniently have an access to a game platform and use the server technology, and the game platform is connected to a game content server through a network and can provide rich game resources so as to improve the user experience and the value of games. The game platform disclosed by the invention can be mounted on almost all Android devices so as to enable a common Android device mounted with the Android device gas platform system to become a game machine controlled by the handle in the Internet era.

The invention discloses a network monitoring and analyzing system under an environment of a virtual machine. The system comprises a network data multiplexing module, a lightweight level virtual machine manager module, a virtual machine control module, a service virtual machine module and an I/O access path optimization module, wherein the network data multiplexing module and the lightweight level virtual machine manager module are positioned in an operating system of a host computer, the virtual machine control module and the service virtual machine module are positioned on the operating system of the host computer; and the I/O access path optimization module is positioned in the operating system of the host computer and the service virtual machine. The network monitoring and analyzing system is based on the virtual machine and realizes the network data multiplexing of a single physical machine to a plurality of network monitoring and analyzing service programs, thereby providing a plurality of monitoring and analyzing functions for the same network data in real time, realizing safe isolation between the service programs and dynamically adjusting and distributing resource to the service programs according to requirements. The network monitoring and analyzing system overcomes the problems that the prior network monitoring and analyzing system has resource competition, low safety, instability of the system, uneasy expansion and the like.

A method and equipment for model training in a distributed system are used to relieve burdens of main nodes in model training. The method comprises the steps that a parameter server in a first servo node receives training results which are sent by a parameter client side in at least one servo node in the distributed system, wherein the first servo node is a random servo node in the distributed system, and a parameter client side of each servo node executes a training task corresponding to a sub-model stored in the parameter server of the servo node so as to obtain the training results; and the parameter server in the first servo node updates the stored sub-model according to the received training results.

An apparatus, program product and method utilize targeted boot diagnostics in connection with a boot operation to automate the handling of hardware failures detected during startup or initialization of a computer. In particular, in response to detection of a failure after initiation of and during performance of a boot operation, a targeted diagnostic operation is initiated on at least one hardware device in the computer in response to detecting the failure, such that after the targeted diagnostic operation is initiated, the boot operation may be completed.

The invention provides a task scheduling method and a task scheduling system based on a MapReduce mechanism. The method comprises the following steps of: carrying out regional division on computing nodes in a MapReduce cloud computing environment, wherein a security domain, a scheduling domain and a collision domain are included; scheduling Map subtasks in a MapReduce task onto computing nodes of the security domain, and scheduling a copy of each Map subtask onto a computing node of the scheduling domain; and carrying out Hash verification on execution environments and partial intermediate results of the Map subtasks and the copies of the Map subtasks, wherein Reduce subtasks respectively utilize an execution environment verification value and an intermediate result verification value generated in a Map subtask stage to verify a self execution environment and input data. Due to the utilization of the method and the system, an operation environment of a task submitted by a common user can be effectively isolated from a malicious user, and the completeness of a task computing result can be ensured in a high-efficient way.

In a disk array environment such as a RAID-6 environment, the overall performance overhead associated with exposed mode operations such as resynchronization, rebuild and exposed mode read operations is reduced through increased parallelism. By selecting only subsets of the possible disks required to solve a parity stripe equation for a particular parity stripe, accesses to one or more disks in a disk array may be omitted, thus freeing the omitted disks to perform other disk accesses. In addition, disk accesses associated with different parity stripes may be overlapped such that the retrieval of data necessary for restoring data for one parity stripe is performed concurrently with the storage of restored data for another parity stripe.

An embodiment of the invention provides a policy control method, a policy control device and a policy control system for data services. The method includes: acquiring first policy information from a policy and charging rule function network element, wherein the first policy information is decision policy information needing to be judged and enforced by a policy and charging enforcement function network element based on the services; when a service request is received from a user, acquiring service information needed in match with the first policy information from the service request; and when the service information satisfies the first policy information, performing policy control for the service information according to the first policy information. The method, the device and the system in the embodiment solve the technical problem of more interactive times between the PCRF (policy and charging rule function) network element and the PCEF (policy and charging enforcement function) network element in policy control of frequently modified service request information or result associated policy control in the prior art.

The application discloses a client page display method and apparatus, a client page updating method and apparatus, and a client page display system. The client page display method comprises: sending a page identifier of a page, a verification identifier of local dynamic data of a client and a verification identifier of a page structure to a server, and requesting for an updating part in two parts of the dynamic data of the page and the page structure from the server; receiving a response from the server; and from the response returned by the server and a page part pre-stored locally, selecting the dynamic data with a latest current version and the page structure, and generating and rendering the page. With the adoption of the method provided by the application, the dynamic data and the page structure can be updated, so that the effects of increasing the cache utilization rate of the page structure of the client, reducing performance overhead of the client, lowering network traffic and improving user experience are achieved.

The embodiment of the invention provides a siding display method and a siding display device of list data of a mobile terminal. The siding display method comprises the following steps of: displaying a data target in a list; when detecting list sliding operation on the data target, calculating the sliding speed of the data target; calculating the sliding distance of the data target according to the sliding speed; and if the sliding speed is greater than a first preset speed threshold, performing refresh display on the data target according to the sliding distance. By adopting the siding display method provided by the embodiment of the invention, the refresh frequency is dynamically adjusted under the situation that the sliding speed is relatively high, in primary refresh display, the time for moving the distance threshold is generally longer than conventional primary refresh time based on refresh frequency, that is, the refresh frequency after dynamic adjustment is smaller than the set refresh frequency, and the operation of re-drawing the interface of a whole list control can be reduced.

The invention relates to a similarity detection method for unknown vulnerability discovery based on patch information. The method comprises steps as follows: a known vulnerability function and a patchfunction after patching are sliced, and slices containing vulnerability related statements and slices containing patch statements are generated; variable names, variable types and function call namesof a to-be-detected function, the vulnerability slices and the patch slices are subjected to symbol normalization; the to-be-detected function, the vulnerability slices and the patch slices are mapped to vector space to generate to-be-detected function characteristic vectors, vulnerability characteristic vectors and patch characteristic vectors, one vector is formed by each of the to-be-detectedfunction characteristic vectors, the vulnerability characteristic vectors and the patch characteristic vectors, and a value of each dimension of the one vector represents a product of the number of appearing times of the characteristic statement in the function and TF-IDF weight; after generation of the characteristic vectors, similarity of the characteristic vectors is calculated and sequencing is performed, and whether unknown vulnerability with the characteristics similar to those of known vulnerability in a to-be-detected function set is judged. According to the method, disturbance of vulnerability unrelated statements can be effectively reduced, and detection accuracy is improved.

The invention discloses a shared library isolation protection method based on the hardware virtualization technology. The method includes a novel application address space model is provided, and the memory mapping relationship between an application and a shared library can be more accurately and clearly described; according to the address space model, an isolation mechanism based on the hardware virtualization technology is provided, and the shared library can be efficiently placed in the other isolated address space; an isolated address space interactive control mechanism is provided, the address space is switched when the shared library is in normal interaction with other modules, and at the same time, malicious code execution and data access behaviors occurring during the operation of the shared library are detected. Accordingly, a corresponding system is also provided. The method is suitable for safety isolation and protection of a series of standard and commercial shared libraries, and can avoid the security threats caused by application vulnerabilities to the shared libraries.