International Business Machines Corporation

Globalfoundries Inc.

Hai Huang

Sambit Sahu

Yaoping Ruan

Chunqiang Tang

Salman Abdul Baset

Anees Abdul Shaikh

Long Wang

Byung Chul Tak

Alaa Salah Youssef

Michael Joseph Spreitzer

Ali Kanso

Mariusz Sabath

Utz Bacher

Lawrence David Bergman

Raymond Byars Jennings, Iii

Milton H Hernandez

Thomas W Keller, Jr

Brian L Peterson

Paolo Dettori

Robert Alan Flavin

Stefan Raspl

Kumar Bhaskaran

Ramendra K Sahoo

Winnie W Cheng

Jia Jun Brandon Lum

Ravi B Konuru

Manas Singh

Jinho Hwang

Birgit Monika Pfitzmann

Charles Robert Lefurgy

Mahesh Viswanathan

Sai Zeng

Malgorzata Steinder

Eric Van Hensbergen

Nikolai A Joukov

Debanjan Saha

Shripad Nadgowda

Orna Raz

Kunwadee Sripanidkulchai

Sahil Suneja

Ashu Gupta

Kyung Hwa Kim

Ricardo Andrei Koller Jemio

Rajesh Garg

Mohamed Fazal Mohamed Feroze

Sumithra Ravichandran

MadhuSudhan Kagalavadi Ningaiah

Kai-Yuan Hou

Debanjan Saba

Xiangdong Ding

Yaoping Roan

Raymond B Jennings

Techniques facilitating security hardening systems that host containers are provided. In one example, a system comprises: a memory that stores computer executable components; and a processor that executes computer executable components stored in the memory. The computer executable components comprise: a boot component performs a portion of a trusted boot sequence to securely boot the system to a defined secure state wherein one or more types of administrative access to a container memory are deactivated. The computer executable components also comprise: a core service component started as a part of the trusted boot sequence and that securely obtains one or more decryption keys for use with the container memory; and a runtime decryption component that uses the one or more decryption keys to perform runtime decryption of one or more files accessed by a container associated with the container memory.

Blackbox security for containers

According to one or more embodiments of the present invention, a computer-implemented method includes uploading, by a first instance of an integrated development environment (IDE), a first source-code change to a change log of a version control system. A second instance of the IDE is used to upload a second source-code change to the change log of the version control system. A determination is made that the second source-code change conflicts with the first source-code change. Based on the determination that the second source-code change conflicts with the first source-code change, generating a notification of the second source-code change is generated in the first instance of the IDE.

Collaborative software development tool for resolving potential code-change conflicts in real time

An artificial intelligence (AI) platform to support a continuous integration and deployment pipeline for software development and operations (DevOps). One or more running processes are subject to monitoring to identify presence of vulnerabilities. An automated rebuild of the monitored processes is initiated, which includes constructing a map representing a relationship of test code elements corresponding to different portions of source code. The identified vulnerable source code reflected in a new container image is subject to an automatic verification to ascertain if the source code is covered by at least one of the represented test code elements. A risk assessment is employed as part of the verification. A new container image is selectively deployed responsive to the risk assessment.

Dynamic automation of DevOps pipeline vulnerability detecting and testing

Aspects of the invention include creating and starting fast-start container images. A preview image of a container is received at a host computer. The preview image includes a subset of an original image of the container. The preview image of the container is executed, at the host computer, for a workload. Based at least in part on detecting a fault during the executing of the preview image of the container, one of the original image of the container and a portion of the original image not included in the preview image of the container is accessed for continuing execution of the workload.

Creating and starting fast-start container images

A method for updating an application executing on a virtual machine includes replicating the virtual machine to produce a replica, applying an update to the replica that is scheduled to be made to the virtual machine, in parallel with the applying, updating one of the virtual machine and the replica so that a state of the virtual machine matches a state of the replica, and continuing execution of the application on one of the virtual machine and the replica.

Patching systems and applications in a virtualized environment

Techniques are provided for automated employment of respective quota managers for framework instances, where the respective quota managers can negotiate amongst themselves to manage usage of a resource of a shared computing system in relation to a quota for the resource for a tenant of the shared computing system. This can allow tenants to share their quota among multiple frameworks, enable quota exchange between multiple frameworks, and choose a quota with a minimum costs, and thus maximize savings.

Quota management protocol for shared computing systems

Access is obtained to a plurality of intermediately transformed electronic documents (with a plurality of sections and subsections) which have been transformed, by topical analysis and text summarization techniques, from a plurality of original electronic documents comprising at least some unstructured electronic documents. Audit and retrieval agent code is appended to the sections and subsections to create a plurality of finally transformed electronic documents. Users are allowed to access the finally transformed electronic documents. The users are provided with accountability reminders contemporaneous with the access. The access of the users to the sections and subsections of the finally transformed electronic documents is logged. An audit report is provided based on the logging. Also provided is a cloud service for enterprise-level sensitive data protection with variable data granularity, using one or more one guest virtual machine images.

Enterprise-level data protection with variable data granularity and data disclosure control with hierarchical summarization, topical structuring, and traversal audit

Evaluating the performance of an application when migrated from a first environment in which the application is currently executing to a different second environment includes generating a configuration file using data obtained from the application executing in the first environment, installing the configuration file in a virtual machine residing in the second environment, launching the application in the virtual machine after the installing, and obtaining a metric indicative of the performance from the virtual machine.

Evaluating distributed application performance in a new environment

A method for evaluating the performance of an application when migrated from a first environment in which the application is currently executing to a different second environment includes generating a configuration file using data obtained from the application executing in the first environment, installing the configuration file in a virtual machine residing in the second environment, launching the application in the virtual machine after the installing, and obtaining a metric indicative of the performance from the virtual machine.

Configuration information associated with software installed on a production system may be discovered. A script is automatically generated for capturing data traffic from and to the software installed on the production system using the configuration information. The script may be executed to capture data traffic of the software running on the production system. A migrated version of the software may be executed on a test system using requests extracted from the captured data traffic. The responses in the captured data traffic may be compared with responses from the migrated version of the software.

Deployment of a tool for testing migrated applications

Managing a virtual machine snapshot in O(1) time by initially storing data from a virtual machine executing under a host operating system, to a first host operating system managed data block and creating a first pointer that points to the first host operating system managed data block and associates the virtual machine to the data stored in the first host operating system managed data block. A first value, associated with the first host operating system managed data block, is initialized indicating the number of pointers created to associate the virtual machine to the first host operating system managed data block. Receiving, by the computer host operating system, a request to create a snapshot of the virtual machine creates a second pointer replicating the first pointer, and increments, by the computer host operating system, the first value associated with the first host operating system managed data block.

O(1) virtual machine (VM) snapshot management

Growing community of inventors

White Plains, NY, United States of America

Hai Huang