International Business Machines Corporation

Derek Wayne Botti

Charles Steven Lingafelt

Ramamohan Chennamsetty

William H Tworek

Anji Greene

Richard A Locke

Leon H Cash, Jr

Robert E Garza

James Corvin Fletcher

Elizabeth Daly

Stefano Braghin

Martin Stephenson

Spyridon Antonatos

To improve the security performance of a computer system, a retrieval component executing on at least one hardware processor obtains a list of known compromised passwords. A validation component executing on the at least one hardware processor obtains a specification of a putative password and risk-scores the putative password based at least in part on presence of the putative password in the list of known compromised passwords. The system obtains a specification of an actual password chosen in accordance with the risk score of the putative password. Access to at least one aspect of the computer system is controlled based on the actual chosen password.

Augmenting password generation and validation

An approach for allocating information technology (IT) resources in a networked computing environment (e.g., a cloud computing environment) based on physical location mapping is provided. Specifically, an IT allocation system assigns resources to a specific cloud pool based on the physical location of the resources. By mapping a given physical location (e.g., a defined region of a grid defining a datacenter) to a specific pool, and by enabling the tracking of a resource to a location within the datacenter, the approach can automatically assign a resource to a cloud pool based upon its physical location. Thus, the IT allocation system provides additional pool elasticity while easing the management burden.

Allocation of resources in a networked computing environment based on physical location mapping

Examples of techniques for determining security access based on user behavioral measurements are disclosed. In accordance with aspects of the present disclosure, a computer-implemented method is provided. The method may comprise performing a trust evaluation to calculate a trust penalty value for a user based on a plurality of measured user attributes. The method may further comprise determining, by a processing device, a security access level based on a predefined trust threshold and the trust penalty value for the user. The method may also comprise applying the security access level to the user.

Determine security access level based on user behavior

A computer establishes normal activity levels of a factor associated with an application, system, network, or computing environment. The computer receives rules prescribing the trust levels assigned to users or devices during normal and abnormal activity levels exhibited by the factor. The computer monitors the activity level exhibited by the factor and determines whether the activity is normal or abnormal. If the computer determines that the factor is exhibiting abnormal activity, the computer modifies the trust level of associated users and devices according to the rules. The computer continues to monitor the activity of the factor until the computer determines that normal activity levels of the factor have returned, at which point the computer modifies the trust level of associated users or devices according to the rules.

Trust level modifier

A system and method for deploying a software application to a hosting environment that considers the development environment, and bases any decision on data about the development environment to make a selection of hosting environment and/or operational attributes. The system and methods determines and attaches metadata describing the development environment to an application, then uses that metadata to select a deployment model, and to select an operational model. The method assigns a security risk score to a developed application which may be hosted in a virtual hosting environment or a physical hosting environment. The system and method considers security issues in its scoring and focuses on the security risk associated with an application that would be deployed. The method steps convey the application attributes, such as complexity, robustness, likelihood of operational issued, likelihood of compromise, etc. to the deployment and operating entities.

Method to convey an application's development environment characteristics to the hosting provider to facilitate selection of hosting environment or the selection of an optimized production operation of the application

An approach for scheduling clinical procedures based on defined environmental thresholds of medical units in healthcare facilities. In one embodiment, a computer system monitors environmental conditions of the medical unit in which clinical procedures will be performed utilizing a measurement system that includes an environmental device for monitoring the environmental conditions. The computer system further receives a schedule of the clinical procedures of the medical unit. The computer system further identifies environmental thresholds for the medical unit to be used for comparison against the environmental conditions of the medical unit. The computer system further compares environmental conditions to the environmental threshold to determine if the environmental thresholds are violated. In another embodiment, the computer system modifies the schedule of clinical procedures of the medical unit responsive to the determination.

Growing community of inventors

Holly Springs, NC, United States of America

Derek Wayne Botti