International Business Machines Corporation

Ellen B Streifel

Mark John Anderson

Scott Forstie

Jeffrey M Uehling

Anna P Dietenberger

Brian J Hasselbeck

Allen K Mei

Carol S Budnik

Gregory Richard Hintermeister

George Francis DeStefano

Diane Elaine Olson

Ronald Joseph Haugen

Brian Richard Lucier

Gary John Vanselow

Jeffrey D Waldbillig

Barbara A Ballard

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, determining, based on environment information in the runtime stack, whether a first set of privileges available to the application are greater than a second set of privileges available to a the user of the application, storing the permission and identity information and an indication of whether the first set of privileges is greater than the second set of privileges in a data file, and adjusting the privileges for the user based on the determination.

Automated mechanism to analyze elevated authority usage and capability

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from a first application to obtain a set of call information based on runtime stack information related to calls of the first application requesting access to the file, storing the set of call information in a data file, receiving a request for access to the file from a second application, obtaining call information from a runtime stack from the second application, comparing the call information with the set of call information, determining the request for access is an abnormal request based on the comparing, and taking an action based on the determination.

Automated mechanism to obtain detailed forensic analysis of file access

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, storing the permission and identity information in a data file, determining for the application and a file of the set of files, privileges available to the application for the available authority based on the stored data file, determining a set of privileges needed by the application to access the file based on the stored data file, selecting privileges for a user of the application based on set of privileges needed by the application and the authority available to the application, and assigning the privileges for the user based on the selected privileges.

Automated mechanism to secure customer data

The present invention generally is directed to a method, system and article of manufacture for managing software fixes for a software product in a computer system. The method comprises: for each of a plurality of software fixes for a corresponding software product, determining whether the corresponding software product is installed on the computer system; if the corresponding software product is installed, then determining whether the each one of the plurality of software fixes is installed in the computer system; and if the each one of the plurality of software fixes is installed, then setting a status value to reflect that the plurality of software fixes is installed.

Dynamically resolving fix groups for managing multiple releases of multiple products on multiple systems

Growing community of inventors

Rochester, MN, United States of America

Ellen B Streifel