International Business Machines Corporation

Sophos Limited

Dirk Bolte

Thomas Pohl

Martin Troester

Herwig Gustav Elfering

Shail R Talati

Andreas Bieswanger

Thomas Hess

Markus K Strasser

Michael Andres

Sven Schnelle

Emanuel Taube

Jonas Bernd Freiherr Von Andrian-Werburg

Anil Kaushik

Carl Mayer

Martin Kuenzel

Andrew James Thomas

Angel Nunez Mencias

Jakob Christopher Lang

Marco Kraemer

Senthilraj Shanmugavadivel

Adolf Martens

Dmitry Moor

Yaroslav Chernov

Victor Gusev

Alexander Kuchin

Andrey Mishin

Balthasar Biedermann

Ye Huang

Friedemann Baitinger

Juergen Saalmueller

Andreas Arnez

Friedrich Michael Welter

Frank Scholz

Susanne Friedhilde Heisser

Juergen Nowak

Methods, systems and computer readable media for rogue device detection are described. The method may include automatically generating one or more dummy network identifiers associated with a wireless network, advertising the one or more dummy network identifiers, and identifying a device as a suspect device based on receiving a connection attempt to at least one of the one or more dummy network identifiers by the device. The method can also include allocating a virtual local area network within the wireless network to process traffic associated with the at least one of the one or more dummy network identifiers, and monitoring network traffic of the suspect device on the virtual local area network. The method can further include, if the monitored network traffic meets an abnormality threshold, determining that the suspect device is a rogue device, and performing an action to protect the wireless network from the rogue device.

System and method for rogue device detection

A method includes establishing a wireless link between a wireless interface of an endpoint and a WAP; exchanging, through the wireless link, network traffic associated with execution of an application at the endpoint; executing, at the endpoint, a security routine to monitor a security status of the endpoint; establishing, through the wireless link, a secure channel that shares the wireless link with the network traffic of the application, the secure channel to extend from the security routine to a supervisor through the wireless link and the WAP; conveying, from the security routine and through the secure channel, an indication of the security status; receiving, at the security routine and through the secure channel, a command to change a setting of the wireless interface associated with a characteristic of the wireless link; and accessing, from the security routine, the wireless interface to effect the change in response to receiving the command.

Combined security and QOS coordination among devices

Methods, systems and computer readable media for rogue access point detection are described.

Point-controlled rogue AP avoidance + rogue AP detection using synchronized security

Implementations generally relate methods, systems, and computer readable media for providing automatic access point registration. In some implementations, a method includes receiving an indication of automatic device onboarding activation. The method further includes receiving a selection of one or more reference devices. The method further includes determining one or more detectable devices of the one or more candidate devices to be onboarded that are detectable by at least one of the one or more reference devices. The method further includes obtaining one or more automatic configuration parameters from one or more of the reference devices. The method further includes configuring one or more of the detectable devices to be onboarded with the one or more automatic configuration parameters.

Access point registration in a network

Implementations generally relate methods, systems, and computer readable media for providing automatic access point registration. In some implementations, a method includes receiving an indication of automatic device on-boarding activation. The method further includes receiving a selection of one or includes identification more reference devices. The method further includes determining one or more detectable devices of the one or more candidate devices to be onboarded that are detectable by at least one of the one or more reference devices. The method further includes obtaining one or more automatic configuration parameters from one or more of the reference devices. The method further includes configuring one or more of the detectable devices to be onboarded with the one or more automatic configuration parameters.

Endpoint-controlled rogue AP avoidance + rogue AP detection using synchronized security

Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Threat index based WLAN security and quality of service

The invention relates to a data processing system including at least two disk emulators operating in parallel. Each of the at least two disk emulators emulates a disk subsystem and is associated with a respective file in a file system for any data stored on a physical disk. The data processing system further includes a de-duplicator for de-duplicating the data stored in the respective files associated with the at least two disk emulators. The de-duplicator operates in parallel to the disk emulators and is associated with an additional disk emulator emulating an additional disk subsystem. The additional disk emulator is associated with an additional file in a file system configured to store data shared between the respective disk subsystems emulated by the at least two disk emulators.

Data de-duplication for disk image files

Embodiments relate to controlling configuration of a computer system comprising one or more exchangeable components. The exchangeable components comprising identification means to store an identifier. A pair of a private key and a public key are generated for each accepted manufacturer of the exchangeable components and a pair of a private key and a public key for the computer system; assigning an identifier for each exchangeable component available for attachment to the system; receiving configuration data comprising a list of encrypted identity records comprising identifiers of the components together with signatures over the data generated with the private key of the respective component manufacturer for each component expected to be attached to the system; and receiving a configuration record. The configuration data of the expected components from the received configuration record is compared with the configuration data of the components attached to the system.

Controlling the configuration of computer systems

A beacon device is provided in proximity to a computing system within a computing center. A request to locate the computing system in the computing center is triggered on a central control unit. In response to the request to locate the computing system, the control unit generates specification data for a unique radio signal identifier, sends an activation request and the specification data to the beacon device, and provides the specification data to a portable device and stores the specification data on the portable device.

Locating computer-controlled entities

Growing community of inventors

Birkenfeld, Germany

Dirk Bolte