International Business Machines Corporation

Chris Dotson

Charles Steven Lingafelt

Charles K Davis, Iii

Nader M Nassar

Santosh S Borse

Annette S Riffe

Samuel S Grummons

Todd D Deloach

Annuschka Bork

Examples described herein provide a computer-implemented method that includes receiving source code to implement on the cloud infrastructure. The method includes receiving user-defined requirements. The method further includes determining, based on the source code and the user-defined requirements, multiple suitable cloud architectures from a plurality of cloud providers to operate the source code on the cloud infrastructure. The method further includes presenting, to a user, the multiple suitable cloud architectures. The method further includes implementing a selected cloud architecture for the cloud infrastructure based on a selection by the user.

Cloud architecture interpretation and recommendation engine for multi-cloud implementation

Provided are techniques for determining an effect of a message on a personal brand based on future goals. A message is received from an entity for a social media platform. Additional messages related to the message are identified. A reaction sentiment trend is determined for each topic of the additional messages for a period of time. An effect the message has on a personal brand of the entity in future is predicted based on future goals of the entity and based on the reaction sentiment trend for each topic. An indication of whether the message is aligned with the future goals based on the predicted effect is provided. In response to the message being aligned with the future goals, the message is posted to the social media platform. In response to the message not being aligned with the future goals, one or more suggestions to modify the message are provided.

Determining an effect of a message on a personal brand based on future goals

A method, apparatus and computer program product for use in identifying and blocking operation of compromised or potentially compromised IoT device(s) on a network, such as a local network behind a router or firewall. To this end, the technique provides for automated and seamless on-boarding of a 'guard' system for IoT devices, preferably as those devices join (or re-join) into the network via a Dynamic Host Configuration Protocol message exchange. In operation, and in response to receipt of a DHCP discover message that includes a network location, a DHCP server uses the network location to locate and retrieve a set of flow attributes for the device. Those attributes are then associated with the IP address to be assigned to the IoT device in a network control device. The network control device then selectively identifies and/or blocks operation of the IoT device when the IoT device is compromised or potentially compromised, thereby protecting the network (or network resources) from damage or misuse.

Guard system for automatic network flow controls for internet of things (IoT) devices

A method, apparatus and computer program product for protecting enterprise Information Technology (IT) infrastructures by automatically instantiating individualized network flow controls and/or network access controls specific to an IoT device. In this approach, an IoT device is identified, e.g., via network scanning or other observational sensors, or by receipt of information from a network administrator. In response to receiving information about the new IoT device, a control component obtains applicable network flow control and/or access control rules for the IoT device. These rules are obtained from one or more authoritative (trusted) sources, e.g., querying a website of the IoT vendor, an industry site, or an enterprise site. In this manner, applicable network flow control and/or access control rules are obtained. The control component then translates those rules into configuration parameters that are consumable by the particular network flow control device that is (or will be) associated with the IoT device.

Automated individualized network security controls for internet of things (IoT) devices

A method, apparatus and computer program product for use in monitoring and controlling network behavior of Internet of Things (IoT) devices connected to a network. According to this approach, a set of network characteristics of an IoT device (e.g., as published by the device manufacturer) are assigned various risk values and then monitored over an initial time period to generate a 'fingerprint' of the device's network flow. This flow is then transformed into one or more flow control rules representing 'normal' or abnormal behavior of the IoT device. Preferably, the rules are instantiated into a network boundary control system (NBCS), such as an enterprise router, gateway, or the like, and then enforced, e.g., to generate alerts or others actions when the rules are triggered. The approach enables dynamic and automated threat detection and prevention based on anomalous and/or known-bad behavior.

Growing community of inventors

Lexington, KY, United States of America

Chris Dotson