International Business Machines Corporation

Christopher J Berube

Sagi Shechter

Leonid Rodniansky

Sean Christopher Foley

Viktor Ginzburg

Systems, methods, and computer programming products for loading and upgrading software using DLL files injected into a running target program process by a DLL manager of an injection program. Background services of the injection program allocate virtual memory for the code and data within the memory addresses dedicated to the target program process and injects the code and data by writing the code and data of the DLL manager to the virtual memory. A remote thread created within the target program process, controlled by the injection program, executes the DLL manager code, allowing the DLL manager to load and unload DLL files within the target program process. During runtime of the target program process the software can be upgraded, without rebooting the OS executing the target program process, by instructing the DLL manager to unload the DLL file(s), and load and/or re-load updated DLL file(s) within the target program process.

Software upgrading using dynamic link library injection

Centralized monitoring of plural file systems that operate within or in association with an enterprise computing environment is provided. Each of the plural file systems are provided with a security policy, wherein the security policy defines one or more file system access activities to be monitored at the file system. Each file system is instrumented with a software agent that intercepts the relevant file system access activity. A centralized collector component is operative to receive from each of the plural file systems audit trail data, wherein the audit trail data is data that has been generated locally as file system access activity is intercepted at the file system by the local software agent in accordance with the applicable security policy. The collector applies the security policy against the audit trail data received from at least one of the plural file systems and, in response thereto, takes a given action.

File system monitoring and auditing via monitor system having user-configured policies

A first computing system receives a user request. The user request includes a first set of data. The first computing system determines that one or more resources have exceeded at least one resource utilization threshold. In response to the determining that one or more resources have exceeded the at least one utilization threshold, a first data transfer rate is modified to a second data transfer rate based on transmitting a first subset of the first set of data to one or more host devices, wherein a second subset of the first set of data is not transmitted to the one or more host devices. The one or more host devices validate the user request against one or more security policies in order to complete or terminate the user request.

Growing community of inventors

Westminster, MA, United States of America

Christopher J Berube