International Business Machines Corporation

Gianluca Perreca

Paolo Ottaviano

Antonio Di Cocco

Marco Imperia

Maximiliano Cammisa

Luigi Pichetti

Giuseppe Ciano

Andrea Tortosa

Mauro Arcese

Marco De Santis

Antonio Bagarolo

Vinicio Bombacino

Leonardo Lanni

Rossella De Gaetano

Pasquale Maria Mascolo Montenero

Sergio Pagano

Methods and systems for preventing phishing attacks using the domain name system are disclosed. A method includes: receiving, by a computing device, a domain name system (DNS) request comprising a domain name; determining, by the computing device, at least one domain name that is similar to the domain name; and sending, by the computing device, the at least one domain name that is similar to the domain name as a response to the DNS request.

Preventing phishing using DNS

A method for connecting a computing device to a computing arrangement. A proxy system determines, based on an address in a message specifying the computing arrangement, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement. Establishing the new secure connection includes instantiating a container and initiating an establishment of the secure connection by a protocol entity deployed within the container. The container is a virtual software object that encompasses all of the elements that are needed for an application to run within an operating system, which enables isolation of the container from one or more additional containers running within an operating system.

Secure network connections

An access control method for controlling access to data requested from an electronic information system. The method comprises receiving a request for the data, determining a user identity associated with the request; gathering the requested data from one or more data sources by an orchestrator for input to a cognitive engine; analyzing the requested data; based on results of analyzing the requested data, deciding on whether the user identity can be allowed to access the requested data; providing feedback by the user identity; and updating a learning module based on the feedback.

Controlling access to data requested from an electronic information system

A method and associated system for connecting a computing device to a computing arrangement. A message from the computing device is received. The message includes an address specifying the computing arrangement. The proxy system is a computer system. It is determined, based on the address, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to the determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement.

Techniques are disclosed for validating a ticket based on biometric data provided by a ticket holding user. A ticket controller device broadcasts an inquiry frame specifying a request for authentication data for a ticket user requesting access to a service hosted by the ticket controller. A mobile device may receive the inquiry frame and generate a response frame encapsulating a ticket identifier and biometric data associated with a user. The ticket controller receives the response frame including the ticket identifier and the biometric data. Upon determining that the ticket identifier and the biometric data encapsulated in the response frame matches a stored ticket identifier and biometric data, the ticket controller grants the user access to the service.

Biometric verification of ticket users

A solution for updating at least one software product installed on a virtual machine, including providing a software image of at least one new virtual disk storing a new level of the software product together with new metadata including an indication of at least one new activation procedure of the new level of the software product, and replacing a current level of the software product with the new level of the software product, the current level of the software product being stored in at least one current virtual disk of the virtual machine together with current metadata including current activation information of the current level of the software product, where the replacing includes removing at least one current virtual disk from the virtual machine; adding at least one new virtual disk to the virtual machine; and running at least one new activation procedure according to the current activation information.

Updating software products on virtual machines with software images of new levels

A system, method and/or software for using overlap between a first website area-of-interest map, associated with a first website, and a searcher area-of-interest map to help prioritize the websites returned by a search engine search. The area-of-interest maps are made up of geographic pixels respectively assigned with area-of-interest values. Overlap area is determined by comparing, on a pixel-by-pixel basis, corresponding pixels of the searcher area-of-interest map and the first website area-of-interest map to determine overlap pixels where the following conditions hold: (i) the first website area-of-interest map has a non-zero interest value, and (ii) the searcher area-of-interest map has a non-zero interest value.

Growing community of inventors

Rome, Italy

Gianluca Perreca