International Business Machines Corporation

Globalfoundries Inc.

Dmitri Pikus

Omer Tripp

Omri Weisman

Daniel Kalman

Aharon Abadi

Yinnon Avraham Haviv

Idan Ben-Harrush

Samuel Kallner

Nili Ifergan-Guy

Gal A Shachor

Alan Hartman

Mila Keren

Nili Guy

Yoav Rubin

Shiri Kremer-Davidson

Andrei Kirshin

Oleg Sternberg

Alexander Dvinsky

Anat Berkman

A computer implemented method of assuring correctness of data updated at a remote server and used by a local application, comprising one or more processors at a client terminal adapted to receive from a remote server updated values for a plurality of data items associated with a dataset required for execution of an application executed by the processor(s) where the dataset defines a close relation among the plurality of associated data items, determine whether the reception includes updated values for all of the associated data items, retrieve automatically from a local memory resource, previous values for all of the associated data items in case the updated value is missing for at least one of the associated data items and provide to the application the updated values or the previous values according to the determination.

Assuring data correctness in non-stable network environment

According to an aspect of some embodiments of the present invention there is provided a method for verifying correctness of application configuration of an application, comprising: for each of baseline and changed source codes of an application analyzing a graph representation of an execution flow of a plurality of application functionalities performed by execution of the respective source code to identify a plurality of functional dependencies between source code segments of the baseline source code and a plurality of functional dependencies between source code segments of the changed source code, wherein each of the functional dependencies is at least one of data dependency and control dependency, identifying a configuration discrepancy according to a match between functional dependencies of the changed source code when compared to the baseline source code, and producing a notification when the configuration discrepancy is found and is not permitted by the configuration.

Method for static and dynamic configuration verification

Statically analyzing a computer software application can include identifying a plurality of objects within the instructions of a computer software application, where the objects in the plurality of objects are of the same object type, and preparing a modified version of the instructions in which any of the objects in the plurality of objects determined to be extraneous is omitted.

Static analysis with input reduction

Obtaining a dynamic download policy for a mobile application being executed on the mobile computing device, wherein the dynamic download policy indicating a download policy for a data item, the download policy is defined by the dynamic download policy as enabled in a first device context of the mobile computing device. During execution of the mobile application, a current device context of the mobile application is being monitored. In response to the mobile application attempting to download the data item and in response to the current device context being the first device context, the download policy may be enforced.

Dynamic download policy for mobile applications

According to an aspect of some embodiments of the present invention there is provided a computer implemented method of refactoring a source code that includes a plurality of references to sensitive data into at least two separate source codes, comprising receiving a source code comprising a plurality of references to sensitive data, identifying a plurality of code blocks comprising the plurality of references, refactoring the source code into an enterprise source code having a plurality of functions containing the plurality of code blocks and a cloud source code that is semantically equivalent when executed to the source code when executed, and replacing within the cloud source code at least one of the plurality of code blocks with a call to a function within the enterprise source code, the function containing a code block that is semantically identical to the replaced code block.

Automatic extraction of sensitive code fragments to be executed in a sandbox

A method of presenting hyperlink data. The method comprises identifying when a web browser running on a web browser client retrieves, in response to a web document data request submitted to a target server, a first web document data for displaying a first web document containing a hyperlink having a label for display and a target destination defining an address of a second web document, evaluating a risk from content of the second web document, generating by the web browser to a reference evaluation indication of the risk, and processing the web document data and the reference evaluation indication by the web browser for generating a presentation on the client terminal which combines the first web document data and the reference evaluation indication such that when the reference evaluation indication is presented when the label is presented by the web browser.

Hyperlink data presentation

Detecting security vulnerabilities in web applications by interacting with a web application at a computer server during its execution at the computer server, identifying client-side instructions provided by the web application responsive to an interaction with the web application, where the client-side instructions are configured to be implemented by a client computer that receives the client-side instructions from the computer server, evaluating the identified client-side instructions, and identifying a security vulnerability associated with the client-side instructions.

Black-box testing of web applications with client-side code evaluation

A method of telephone call management in process of service development that allows a user to model and create telephone call management schemes independent of telecommunications protocols and network layer details. The method of the invention operates by creating an abstract model of a telephone call life-cycle that is converted, using a set of communication threads, into executable code. Models in accordance with the method of the invention are constructed using an Integrated Development Environment (IDE) for creating and developing telecom services that embodies the Telecom Service Domain Specific Language (TS-DSL) which is implemented as a Unified Modeling Language (UML) extension for the telecom domain. By this method, individuals without specialized knowledge of telecom related software programming and protocols can successfully design and implement telecom services that manages calls. The ease of implementation of the method also reduces design time and, therefore, time to market of the finished product.

Protocol independent telephony call lifecycle management scheme

Performing data flow analysis of a computer software application, including, for a data flow analysis type, identifying within a computer software application code base a plurality of seeds relating to the data flow analysis type, for each of the plurality of seeds, defining a portion of the computer software application code base to a predefined depth of calls backward from the seed and to a predefined depth of calls forward from the seed, thereby resulting in a plurality of bounded portions of the computer software application code base, detecting a change in the computer software application code base, and performing, on any of the bounded portions affected by the change, a data flow analysis relating to the data flow analysis type.

Growing community of inventors

Haifa, Israel

Dmitri Pikus