Ca, Inc.

Dell Products Inc.

Quest Software Inc.

Bristol Technology Inc.

Aaron Blackwell

Michael John Morton

Benny Tseng

Jeffrey Robert Cobb

Charles Terrence Perusse, Jr

Richard Andrew Backhouse

Matthew Lee Domsch

Marco Gagliardi

James T Ahlborn

David Tootill

Indranil Basak

Erik M Erikson

Vladimir Umansky

Mark S LoSacco

Abhijit Sawant

Aage Bendiksen

Zhongliang Lu

Trey Kubena

Amal Shah

Ramana V Lokavarapu

Gabriel D Underwood

In one embodiment, a method includes receiving a request for a value of at least one data element defined by a master data management (MDM) model, wherein the at least one data element is based, at least in part, on monitoring data collected from a monitored system. The method further includes determining from a central data store whether the at least one data element is centrally stored or is federated. The central data store maintains a common representation of a plurality of data elements in conformance to the MDM model. The MDM model is extended to indicate whether each data element of the plurality of data elements is centrally stored or is federated. The determining is based, at least in part, on the indication.

Systems and methods for storing and accessing monitoring data

Various embodiments of the invention increase security of a network of interoperable devices. In certain embodiments, this is accomplished by a security module that uses a user-definable security policy that sets forth one or more tests for validating input data or commands received from an IoT device. A validator receives the command via a command controller and performs a security analysis of the command according to the security policy. Responsive to the security analysis, the validator generates a validation signal in order to authorize or reject further processing of the command.

Systems and methods for securing command and data interfaces to sensors and devices through the use of a protected security zone

A method, system, and computer program product for raising an alert when some subject process is impacted by performance degradation of a software application are disclosed. The real word process may be modeled and executed on a computing device. Service dependencies in the modeled process are correlated to services provided by a managed application. An APM system monitors the managed application to determine when the services it provides may have some degradation. When a degradation of performance of the managed application is determined, a modeled process that has a service dependency that correlates to the degraded performance is determined. Then, an alert is generated to indicate that the process being modeled may be comprised. Therefore, instead of simply reporting that the managed application has some degradation, the alert provides a warning that some broader process outside of the managed application may be compromised.

Alerting based on service dependencies of modeled processes

A model is used to provide a user interface to track flows through at least one application of a computer system. The model relates the structural aspects of the at least one application to a behavioral model such as a business transaction hierarchy. The structural part of the model includes linked Vertex and Edge records. Vertex records for different instances of a component can be aggregated to provide a single vertex or node for display in a user interface. A Vertex record is linked to an Agent record and a Metric Path record. The Edge records identify tail and head components of a call. A set of Edge records can be associated with a Transaction record in the behavioral part of the model. A Transaction record can be associated with a Business Transaction Record, and a Business Transaction record can be associated with a Business Service Record.

Transaction model with structural and behavioral description of complex transactions

A method, system and computer program product are disclosed for routing performance data to compute nodes. According to one aspect of the present disclosure each of a plurality of compute nodes are assigned a topic. Each topic may be associated with a set of calculations. Labeled performance metrics for an application are received. Each performance metric is labeled with a context under which the performance metric was collected. A topic is associated with each of the performance metrics based on the labeled context. Each respective node listens for a topic assigned to it in order to access the performance metrics associated with the assigned topic. Each respective node analyzes the performance metrics associated with the topic assigned to it.

Routing of performance data to dependent calculators

There are techniques for detecting and preventing possible security violations in a computer network. The security violation detection may be based on data attached to transactions as they flow through one or more software applications. A transaction that is processed by a sequence of software components that execute on one or more electronic devices may be traced. Data that is associated with the transaction as the transaction flows through the sequence of software components may be accessed. The accessed data may be analyzed to detect a possible security violation. The accessed data may be compared to one or more pre-defined patterns. The transaction may be intercepted upon detection of a possible security violation.

Flow data for security data loss prevention

Disclosed herein are techniques for detecting possible security intrusions in a computer network. The security intrusion detection may be based on analyzing patterns of how transactions flow through one or more software applications. For example, patterns of transaction flows are determined for an initial time period to establish a baseline of normal flow patterns. These normal flow patterns may be compared with patterns for transaction flows for a later time period. Deviations in the patterns of transaction flow may indicate a possible security intrusion.

Flow data for security intrusion detection

A method and system is disclosed for monitoring an operation of a distributed data processing system. The system can include a plurality of applications running on a plurality of host processors and communicating with one another, such as through a message passing technique. The method includes steps executed in individual ones of the plurality of applications, of (a) examining individual ones of generated API calls to determine if a particular API call meets predetermined API call criteria; (b) if a particular API call meets the predetermined API call criteria, storing all or a portion of the content of the API call as a stored event; (c) processing a plurality of the stored events to identify logically correlated events, such as those associated with a business transaction; and (d) displaying all or a portion of the stored API call content data for the logically correlated events.

Method and apparatus for correlation of events in a distributed multi-system computing environment

Growing community of inventors

Redding, CT, United States of America

Aaron Blackwell