International Business Machines Corporation

Kyndryl, Inc.

Fabio Minoru Tanada

Breno H Leitao

Sergio Varga

Guilherme Steinberger Elias

Yaoping Ruan

Sai Zeng

Constantin Mircea Adam

Milton H Hernandez

Nikolaos Anerousis

Juscelino Candido De Lima Junior

Debasisha Padhi

Frederick Y-f Wu

Vysakh K Chandran

Fabrizio Nascimento Caldas

Silvia Cristina Sardela Bianchi

Marcos Vinicius L Paraiso

Tiago Dias Generoso

Edson Gomes Pereira

Marcos Vinicius Landivar Paraiso

Juscelino C Candido De Lima, Jr

Murilo Goncalves De Aguiar

Marcos D Sylos

Thales Henrique Taveira Garcia

Marco Vinicius Landivar Paraiso

Patricia Pereira Fantini De Melo

Fatima Teixeira Pombo Barile

Maria Do Carmo Miranda Barbosa

Max S Bortolin

Juscelino Candido De Lima, Jr

A system and method for tailoring container images stored in a container image registry to a specific microarchitecture that a host operating system is running on in a virtualized environment. A container image fetch request is sent to the container image registry. Microarchitecture identification instructions are received from the image registry in response to the container image fetch request. Results from the microarchitecture identification instructions are transmitted to the container image registry to identify the specific microarchitecture that the host operating system is running on in the virtualized environment, and a container within the virtualized environment is started using an optimal container image received from the container image registry, the optimal container image being tailored to the specific microarchitecture to leverage the functionalities and capabilities of the specific microarchitecture of the computing system.

Tailoring container images to a specific microarchitecture in virtualized environments

A method, system, and computer program product for augmented reality-based vehicle diagnostics are provided. The method receives vehicle metadata describing a vehicle. The vehicle metadata includes a problem context. The method retrieves vehicle reference data based on the vehicle metadata. A candidate problem is generated for the problem context based on the vehicle metadata and the vehicle reference data. The method generates a set of candidate solutions for the candidate problem. The set of candidate solutions address the problem context. The method generates a set of visualizations for the set of solutions based on the vehicle metadata and the candidate problem. The method presents a visualization of the set of visualizations as an augmented reality user interface.

Augmented reality diagnostic interface

A method and system for improving virtual machine allocation and migration is provided. The method includes initiating a migration process for migrating database files of a virtual machine from a first hardware device to a second hardware device. A checkpoint and restart command is transmitted to a first hypervisor of the first hardware device and a request for a cryptographic key from a memory encryption engine is received. The cryptographic key is transmitted to a first enclave and the first enclave is encrypted resulting in an encrypted enclave. A resulting a data file comprising the database files is generated and the encrypted enclave is disconnected from the first hardware device. The encrypted enclave is destroyed and checkpoint and restart code is executed for restarting the first hardware device.

Virtual machine allocation and migration between hardware devices by destroying and generating enclaves using transmitted datafiles and cryptographic keys

Aspects define a union mixed secure virtual machine image to include an encrypted code virtualization machine for code machine instructions of a first retrieved package; and an unsecure virtualization hypervisor that includes a non-encrypted code virtualization machine for code machine instructions of a second retrieved package and a non-encrypted data storage device.

Virtual machine structure

Aspects automatically identify and minimize local populations of mosquitoes wherein processors are configured to assign different exposure risk values to different geographic locations as a function of determining different respective values of likelihood that each of the locations will experience a threshold exposure to mosquito activity, assign population risk values to the locations as a function of population data, filter a location from the plurality of locations to generate a filtered remainder set of the locations as a function of one or more one risk values of the exposure risk value and the population risk value failing to meet a minimum threshold value, rank the filtered remainder set of the geographic locations, and associate each of a plurality of mosquito activity abatement actions to each of the ranked filtered remainder set of the geographic locations.

Mosquito population minimizer

A system, method and program product for recommending a network resource provider to a resource consumer. An interactive recommendation engine for determining a recommendation of a network resource provider is provide and includes: a requirements collection manager that collects a set of requirements for an organization and includes: a query management system that provides an interactive platform for implementing a natural language dialog with a user; and a semantic analysis system that analyzes inputs from the user to identify requirements and formulate outputs to the user; a provider data curation manager that curates structured and unstructured provider information into a provider knowledgebase; and a decision analytics system that analyzes the set of requirements and provider knowledgebase to identify a recommended resource provider.

Semantic analysis network resource provider recommendation system

A method includes generating one or more computing deployment solutions, each of the one or more computing deployment solutions specifying one or more parameters for deployment of a corresponding computing solution. The method also includes evaluating adoption of the one or more computing deployment solutions by respective ones of a plurality of computing systems utilizing one or more component evaluators connected via a network to the plurality of computing systems. The method further includes generating one or more solution deployment adoption reports for respective ones of the one or more computing deployment solutions based on information obtained over the network from the plurality of computing systems, and presenting the one or more solution deployment adoption reports via a dashboard user interface.

Evaluating adoption of computing deployment solutions

Aspects provide for a virtual machine structure wherein processors are configured to create an encrypted code virtualization machine for code machine instructions of a retrieved package that has a security field value that indicates secure code, wherein the code machine instructions of the first retrieved package are allocated to encrypted code memory regions of a computer memory resource. Configured processors further create a non-encrypted code virtualization machine in non-encrypted code memory regions of a computer memory resource comprising code machine instructions of another retrieved package that has a security field value that does not indicate secure code; and define a union mixed secure virtual machine image to include (as a function of) the encrypted code virtualization machine and the non-encrypted code virtualization machine.

A computer-implemented agent process running on a first computer automatically intercepts a command issued from the first computer to execute on a target computer prior to invocation of the command on the target computer. A server profile built for an application running on the target computer that supports the command may be retrieved. At least based on the server profile a risk enforcement policy is dynamically constructed. Based on the risk enforcement policy, one or more computer-executable enforcement actions to perform prior to sending the command to the target computer for execution is determined. Based on executing of one or more of the computer-executable enforcement actions, the command may be transmitted to execute on the target computer or prevented from executing on the target computer.

Computer-implemented command control in information technology service environment

A method and system for remotely managing business processes via a mobile device is provided. The method includes enabling, for a user, an application integrated with analytic models and geo-positioning technology. The user and a location of the user are identified. Preferences associated with the user are identified and a status of business processes associated with the entity at the location is monitored. In response, a status of the entity at the location is determined. Status data associated with the status is presented to the user via the mobile device. The status data is based on the preferences. The user may initiate an escalation process based on the status provided.

Business systems management mobile administration

Growing community of inventors

Campinas, Brazil

Fabio Minoru Tanada