Cisco Technology, Inc.

Oracle International Corporation

Sailpoint Technologies, Inc.

Abhishek Saxena

Ramana Mellacheruvu

Neerja Bhatt

Ayan Banerjee

Luca Cafiero

Vishal Jain

Parag Deshpande

Yang Seok Ki

Daniel ManHung Wong

Gaurav Garg

Alan Robert Downing

Shubha Bose

Devendra Singh

Manish Kalia

Sujatha Janardhanan

Jinqiang Han

Normalized access control policies associated with entities in an information technology (IT) infrastructure comprising a plurality of subsystems may be obtained based on a stored access control policy representation governing access to resources in the IT infrastructure. Based on the normalized access control policies, entity clusters associated with the entities may be determined. Further, derived access control policies corresponding to the at least one entity cluster may be determined. A set of non-compliant access control policies may be determined where the set of non-compliant access control policies may comprise: a subset of the normalized access control policies that are non-compliant with stated access control policies applicable to the entity clusters, and/or a subset of the derived access control policies that are non-compliant with the stated access control policies. Machine learning and/or Artificial Intelligence techniques may be used to determine, maintain, and audit policies for the IT infrastructure.

Automated access control management for computing systems

Systems, methods, and non-transitory computer-readable storage media for performing hierarchical routing are disclosed. The method includes identifying routes in a computer network and arranging those routes in two separate routing tables. The first routing table is stored on a first module and the second routing table is stored on a second module.

Hierarchical routing with table management across hardware modules

Systems and approaches are provided for optimizing the Spanning Tree Protocol (STP) in a switched network. STP port type for a network infrastructure device can be controlled based on the dynamically discovered neighbor device type of the directly connected peer of the device using the Link Level Discovery Protocol (LLDP). LLDP can provide system capabilities of a link level peer to identify whether the link level peer is a host or a network infrastructure device. In various embodiments, the exchange of system capabilities can the trigger the configuration of an STP port as a network port for ports connected to network infrastructure devices or edge ports for ports directly connected to host devices.

Spanning tree protocol optimization

A method and apparatus for an in-database sharded queue that supports JMS session ordering is provided. Messages from a plurality of enqueuers are stored in a plurality of shards of a particular queue. For each enqueuer, all messages are stored in only one of the shards. Each shard includes one or more subshards, each subshard having one or more partitions of a queue table maintained by a relational database system. All messages from a first enqueuer are stored in partitions of the queue table that are assigned to a first shard of the plurality of shards. All messages from a second enqueuer are stored in partitions of the queue table that are assigned to a second shard of the plurality of shards. Subscribers of the particular queue are caused to dequeue messages from the plurality of shards.

In-database sharded queue

Spanning tree protocol (STP) optimization techniques

Techniques for processing events in parallel are provided. Multiple publishers publish events in parallel to a plurality of channels. Each channel is a queue that maintains a list of events that are awaiting to be processed by one or more slave processes. In one approach, all events that need to be persistent are published to a persistent channel, whereas all events that do not need to be persistent are published to one or more in-memory channels. In another approach, for each event, a publisher determines which channel of the plurality of channel to publish the event. The determination is based, at least in part, on the number of events in each channel and, optionally, the type of each event in each channel. In either approach, each event from a single publisher is published to the same channel.

Parallel event processing in a database system

One embodiment of the present invention provides a database server for securing database event notifications. The server includes a session key creation mechanism configured to create a session key when a client registers for an event, a storage mechanism configured to store the session key on the database server, a data accessing mechanism configured to access registration metadata to obtain the session key when the event occurs, a connection mechanism configured to establish a communication channel between the database server and the client, a mutual authenticating mechanism configured to using the session key to mutually authenticate the client and the database server during event notification, and an event notifying mechanism configured to send the event notification to the client.

Securing DBMS event notifications

Techniques for grouping events in a computing system are provided. A registrant sends, to a database server, a request to register to receive a single notification based the occurrence of multiple events that satisfy certain criteria, referred to as grouping attributes. Such registrations are referred to as grouping registrations. An eventing mechanism in the database server receives and maintains grouping registrations. When an event is received, the eventing mechanism determines whether the event has been registered for in an active grouping registration, i.e., one whose start time has passed but whose completion criteria are not yet satisfied. If so, then the eventing mechanism updates grouping data associated with the grouping registration. When the completion criteria of a grouping registration are satisfied, the eventing mechanism sends a notification to the registrant and/or other intended recipient(s). The notification may provide a summary of all the events in the group or provide details about a single event from the group, such as the latest event.

Growing community of inventors

San Jose, CA, United States of America

Abhishek Saxena