International Business Machines Corporation

Palo Alto Networks, Inc.

Palm, Incorporated

Palmsource Inc.

Access Systems Americas, Inc.

Gregory Mitchell Toto

Peter Benjamin Loer

Dennis Sidney Goodrow

Amrit Tsering Williams

Scott D Lincke

Matthew Kraning

Benjamin John Kus

James B Evans

Jonathan S Fan

Jason E Mealins

Michael E Golden

Lisa Ellen Lippincott

Peter Lincroft

Jeremy Scott Spiegel

Lisa Catherine Wallace

Gregory Heon

Haley Sayres

Peter Sorrentino

Introduced here are Internet monitoring platforms configured to define, monitor, and assess the boundary of a private network associated with a client. By monitoring the entire Internet, a private network, and relationships between these networks, an Internet monitoring platform can discover changes in the boundary of the private network that is defined by those assets on the private network capable of interfacing with a public network, such as the Internet. The Internet monitoring platform may, in response to discovering the boundary of the private network has experienced a change, identify an appropriate remediation action by mapping the change to a technological issue, a relevant business relationship, etc. For example. If the Internet monitoring platform discovers that the boundary of the private network has expanded due to the introduction of a new cloud computing asset, the Internet monitoring platform may automatically reconfigure a network tool so that traffic generated by the new computing device is examined.

Autonomous alerting based on defined categorizations for network space and network boundary changes

Systems and methods for network asset lifecycle management are described. Network assets may include ephemeral Internet-accessible assets such as IP addresses, domain names, digital certificates, and cloud infrastructure accounts. A set of addresses associated with a computer network such as the Internet are scanned. Response data is received from one or more network systems connected to the computer network and processed to identify one or more network assets associated with an entity such as an enterprise organization. Asset data indicative of the identified network assets are then stored to build a record of the network assets associated with the entity.

Network asset lifecycle management

A pseudo-agent is disclosed herein that bridges this divide. For purposes of the discussion herein, a pseudo-agent is a machine that is installed on a fully capable host machine, such as a Windows or UNIX machine, and that gathers and evaluates content from a management server, takes actions if so instructed, and reports the results of its evaluation upstream. However, unlike an agent in a traditional management system, which inspects and acts on the local machine, the pseudo-agent actually inspects and acts on a remote device, or many remote devices.

Mechanisms for evaluating relevance of information to a managed device and performing management operations using a pseudo-agent

A client hypervisor comprises a virtual agent that runs outside of a system OS and that allows device management independent of the OS and user. The virtual agent is tied to a device and not a specific instance of the OS. Such client hypervisors expose new functionality to ease managing systems. Some of these capabilities come from the persistence and privileges outside the OS. In some embodiments of the invention, this new management functionality is exposed to allow device management via new virtualization concepts, such as multiple VMs per system, VM replacement, snapshot/rollback, etc.

Endpoint-hosted hypervisor management

An embodiment of the invention provides a technique that extends relevance-based computation to include computation based on information accessed from or exchanged with other agents. Mechanisms are provided by which an agent accesses or exchanges information between or among other agents and may include one or more of: central bulletin board, broadcast, direct request&#x2014;pull, direct request&#x2014;push, and server-routed. Architectural models of distributed decision making to facilitate a distributed and policy-based management of IT infrastructure are provided.

Method and apparatus for distributed policy-based management and computed relevance messaging with remote attributes

Pseudo-agent

A method of presenting a unified view of two mailboxes, each mailbox associated with a client is described. The unified view allows the user to see all actions she/he performed on a message in one mailbox performed in all other unified mailboxes. One of the clients has both a high cost, e.g. wireless, communication channel and a low cost, e.g. synchronization, communication channel. When a message is received by a client from its respective mailbox without an identifier, an identifier is generated and a copy of the message is sent to the other mailboxes with the identifier. When the user performs actions on a message with a client, the identifier for the message and the action can be conveyed to the other clients in a message to the other mailboxes. The unified view can be selectably updated either over the high cost communication channel or the low cost communication channel. The presence of two communication channels enables the cost of performing the unification to be contained. The user can select options to control the unification process and the use of the high cost communication channel, e.g. summarize messages over 250 words and/or remove attachments.

Method and apparatus for maintaining a unified view of multiple mailboxes

A unified view of mailboxes is presented. The unified view allows the user to see in one mailbox all actions performed in all mailboxes on a message. One of the clients of a mailbox has both a high cost and a low cost communication channel. When a message is received by a client from its respective mailbox without an identifier, an identifier is generated and a copy of the message is sent to the other mailboxes along with the identifier. When the user performs actions on a message on a client, the identifier for the message and the action is conveyed to the other clients in a message to the other mailboxes. The unified view can be selectably updated either over the high cost communication channel or the low cost communication channel. The presence of two communication channels enables management of the cost of performing the unification. The user can select options to control the unification process and the use of the high cost communication channel.

Growing community of inventors

Piedmont, CA, United States of America

Gregory Mitchell Toto