International Business Machines Corporation

Globalfoundries Inc.

Trend Micro Inc.

Other

Lenovo (singapore) Pte. Ltd.

Nuance Communications, Inc.

Gerald Francis McBrearty

Johnny Meng-Han Shieh

Shawn Patrick Mullen

Jessica Kelley Murillo

Susann Marie Keohane

Johnny Menh-Han Shieh

John Maddalozzo, Jr

Mark Allen Grubbs

Jeffrey Wayne Tenner

Denise Marie Genty

Samuel D Matzek

William Alton Fiveash

Ramachandran Unnikrishnan

Julianne Frances Haugh

Grover Herbert Neuman

Thomas V Weaver

Guha Prasad Venkataraman

Michael William Wortman

Johnny Meng Han Shieh

Scott Allen Carroll

Rodney Carlton Burnett

James Stanley Tesauro

Gunisha Madan

Robert B Gordon

Matthew Slade Cronk

Wu Zheng

Susan Marie Keohane

Duyen M Tong

Susann Marie Koehane

Jessica C Murillo

David Michael Adams

Aaron J Quirk

Rohith Kottamangalam Ashok

Mark D Rogers

James P Allen

Joon Chang

Ivan M Heninger

William Boyd Brown

Michael Beck

Chris Alan Schwendiman

Michael Paul Cyr

Matthew J Sheard

David Richard Marquardt

Hypatia Rojas

Georg Ochs

Martin Smolny

Douglas Alan Larson

Thomas Dürr

Kevin Lynn Fought

Darryl Edward Gardner

Vi Trieu Tran

Kim-Khanh Vu Tran

Patrick Justin Laffey

Scott Trieu Tran

George Andrew Kephart

Thomas Van Weaver

Johnny M H Shieh

Sharon M Gordon

Stephen SooHoo

Daynerd Kaena Freitas

Leonard Barry Tropiano

Jonathan Ellsworth Lahr

Guja Prasad Venkataraman

Ramalingeswar Pandiri

Jack Ronald Ackermann, Jr

Ram Pandirl

Patrick Shawn Mullen

Ian Damain Romanick

Jessica Carol Murillo

A computer-implemented process, computer program product, and system for dynamic change of a password under a brute force attack. A computer processor determines a quantity of consecutive unsuccessful attempts to access the targeted item protected by a password. Responsive to the quantity of consecutive unsuccessful attempts to access the targeted item exceeding a predefined threshold, the computer processor acquires a new password for access to the targeted item, wherein the new password is based on a more complex set of password generation rules than a current password. The computer processor changing the current password of the targeted item to the new password, and in response to changing the current password of the targeted item to the new password, the computer processor sends an encrypted message regarding the new password to a user associated with the targeted item.

Dynamic protection from detected brute force attack

A method for deploying workloads in a heterogenous computing environment having multiple hosts of multiple different types and/or multiple monitors of multiple different types is disclosed. The method includes selecting a master image for deployment of a workload, wherein multiple subimages are associated with the master image, and the subimages correspond to at least some of the different types of hosts and/or the different types of monitors such that the master image is usable to deploy the workload on at least one of the hosts. The method also includes determining a host on which to deploy the workload using the master image; determining a monitor of the host to manage the workload; determining a monitor type of the monitor; determining, by an orchestration engine and based on the monitor type, a subimage that supports the first monitor; and cloning the associated resources to the host to initiate the workload thereon.

Master image for deploying workloads in a heterogeneous computing environment

By querying a set of fabrics to determine an initiator logged into a fabric in the set of fabrics, a set of accessible fabrics is discovered, an accessible fabric in the set of accessible fabrics accessible to the initiator, an initiator comprising a transceiver connecting a server to a switch, a fabric in the set of fabrics comprising a switch connecting a server to a storage device, the storage device comprising a storage volume. Using a fabric usage policy, a set of allowed fabrics within the set of accessible fabrics is determined. Using the set of allowed fabrics, a storage volume is mapped to a server, the mapping enabling the server to access the storage volume via a fabric in the set of allowed fabrics.

Fabric-based storage-server connection

Method and system for deploying a virtual machine or attaching a storage volume to a virtual machine (VM). A process obtains information regarding fabrics attached to hosts and storage devices attached to the fabrics and determines whether a VM can be deployed to a host or whether storage volumes can be attached to a VM. In one case, determining that a fabric attached to a host can support a virtual SCSI volume causes migrating a VM to the host and attaching the virtual SCSI volume to the migrated VM. In another case, determining that the fabric attached to a host can support an NPIV volume causes migrating the VM to the host and attaching the NPIV volume to a virtual channel mapped to the fabric attached to the host. If the VM cannot be migrated, then the user is given an indication that the attachment is not possible.

Migrating virtual machines across commonly connected storage providers

A method, a computer program product, and a system for distributing a private signature key between authorization instances. The method includes registering a plurality of authorization instances in a configuration file and generating host instance key pairs by each of the authorization instances. The method also includes storing the public host keys in the shared database and electing one of the authorization instances to be a signature key leader instance. The method includes generating, by the signature key leader instance, a signature key pair. The signature key pair includes a public signature key and a private signature key. The method also includes storing the public signature key in the shared database and transmitting an encrypted private signature key to a requesting authorization instance of the authorization instances. The method further includes decrypting the encrypted private signature key using the private host key generated by the requesting authorization instance.

Secure private key distribution between endpoint instances

A first processor may receive a first request, from a first user, to initiate a first application. The first processor may initiate a first recording device. Initiating the first recording may include executing firmware embedded in the first recording device. The first processor may validate the identity of the first user using the first recording device. The first processor may initiate the first application. Initiating the first application may include loading and executing a first operating system associated with the first application.

Enabling/disabling applications using face authentication

A method, computer program product, and system for dynamic change of a password under a brute force attack. A computer processor monitors a password protected account. A frequency of access attempts to the account is determined and in response to the frequency of access attempts exceeding a first threshold, a brute force password attack against the account is determined. A quantity of consecutive unsuccessful access attempts is tracked and responsive to the unsuccessful access attempts exceeding a second predefined threshold, a new password of the account is acquired, in which the new password follows a more complex set of password generation rules than the current password. An encrypted message regarding the new password is sent to a user of the account, the password of the account is reset to the new password, and the quantity of consecutive unsuccessful attempts to access the account is reset to zero.

Dynamic protection from detected to brute force attack

Method and apparatus for dynamically updating a zoning methodology on a fibre channel (FC) fabric are provided. One example method generally includes receiving a request to provision storage to a virtual machine (VM) via the FC fabric connecting a host machine of the VM to a storage area network (SAN) and determining a dynamic zoning methodology to use for the VM. The method further includes determining a previous zoning methodology in use by the fabric, updating the FC fabric from the previous zoning methodology to the dynamic zoning methodology by modifying a zoning table of the FC fabric and activating the dynamic zoning methodology on the FC fabric.

Method for dynamically controlling the membership of a zone in a cloud environment

A storage system port allocator allows defining multiple whitelists for automatically allocating ports on a storage system to virtual machines. An administrator can manually define one or more of the whitelists. In addition, the storage system port allocator can automatically generate one or more whitelists based on defined rules for generating whitelists, and the administrator can then accept, edit, or ignore the automatically-generated whitelists. A whitelist selection policy is defined that determines criteria for selecting among the multiple whitelists for allocating ports to virtual machines. A whitelist zoning policy can define criteria for zoning initiator virtual machines to storage system ports in the whitelists. The storage system port allocator then allocates storage system ports to initiator virtual machines using one or more of the whitelists according to the selected whitelist that is selected according to the whitelist selection policy, and according to the whitelist zoning policy.

Allocating storage system ports to virtual machines

Aspects of the present disclosure concern automated volume reconfiguration for volumes assigned to a virtual machine (VM). Properties of a volume controller with respect to a set of input/output (I/O nodes) used to transmit a set of volumes to the VM are analyzed, wherein each volume of the set of volumes is mapped to an I/O node of the set of I/O nodes. Based on the analysis, a reconfiguration action is determined, wherein the reconfiguration action includes migrating at least one volume of the set of volumes to a different I/O node of the set of I/O nodes. The reconfiguration action is then executed.

Volume reconfiguration for virtual machines

Virtual machine volumes may be migrated between software defined storage (SDS) systems by an orchestration engine configured to manage one or more virtual machines. The orchestration engine may identify one or more volumes associated with the one or more virtual machines and resident in a first SDS system to migrate to a second SDS system, and for each identified volume among the one or more identified volumes, the orchestration engine may create a replacement volume for the identified volume on the second SDS system, map the replacement volume to the associated virtual machine for the identified volume, cause the associated virtual machine to discover the replacement volume, mirror data from the identified volume to the replacement volume, unmap the identified volume from the associated virtual machine, and delete the identified volume from the first SDS system.

Virtual machine migration between software defined storage systems

A method for enabling management of cloud resources based on tiered storage data movement includes receiving a request from a cloud computing system to provide the cloud computing system a notification of a data movement initiated by a tiered storage system, where the data movement comprises moving data associated with the cloud computing system from a first storage tier to a second storage tier, and the notification comprises an indication of a condition for initiating the data movement. The method then includes determining that a condition for initiating the data movement was satisfied. The method further includes initiating the data movement in response to determining that the condition was satisfied. The method additionally includes transmitting the notification in response to initiating the data movement.

Policy-based optimization of cloud resources on tiered storage operations

A method for sequencing virtual machines in a shared pool of configurable network computing resources includes sequencing at least one computing element for two or more virtual machines into a respective two or more profiles, stored in a security database. Each virtual machine corresponds to a respective profile. The method also includes comparing a profile of a virtual machine corresponding to a security incident in the shared pool of configurable network computing resources with respective profiles of other virtual machines to identify similar profiles and group profiles into first and second groups. The method also includes comparing profiles of the groups of virtual machines and determining an alteration plan based on the comparison of profiles of the groups. The alternation plan includes a plan to modify one or more computing elements for virtual machines in the first group of virtual machines to reduce likelihood of susceptibility to the security incident.

Sequencing virtual machines

A sender selection is detected at a sender computer system within a user interface of at least one suggested folder name for a composed electronic message for a recipient receiving the electronic message to select as a folder name for filing the electronic message. The at least one suggested folder name is attached to the electronic message at the sender computer system for distribution to the recipient. The electronic message is sent with the suggested filing folder name from the sender computer system to a recipient, wherein a recipient receiving the electronic message receives the at least one suggested folder name specified by the sender in the electronic message for selecting a folder for filing the electronic message in a messaging filing directory for the recipient.

Automated electronic message filing system

Growing community of inventors

Austin, TX, United States of America

Gerald Francis McBrearty