International Business Machines Corporation

James Stanley Tesauro

Shawn Patrick Mullen

Neal Richard Marion

Denise Marie Genty

George Francis Ramsay, Iii

Johnny Meng-Han Shieh

Gerald Francis McBrearty

Vinit Jain

Gerald James Tesauro

Dolapo Martin Falola

Sriram M Ramanathan

Ramachandran Unnikrishnan

Anandha S Srinivasan

George F Ramsay, Ii

Denise M Gentry

Mark B Gunning

Shannon Marie MacAlpine

Sankara Subbiah Muthukrishnan

George Ramsay

A method, apparatus and computer instructions for handling intrusions. A tracer packet is sent back to an intruder causing the intrusion in response to receiving notification of an intrusion from a particular node in a network data processing system. Nodes in the network data processing system are notified of the tracer packet. Identification of the node is stored for use in tracing a route of the tracer packet through the data processing system in response to receiving a message from a node indicating receipt of the tracer packet.

Identifying intrusions into a network data processing system

A method of communicating with a remote site on a network by establishing different user personas respectively associated with different remote sites on the network, each user persona containing one or more attributes used in accessing the remote sites, and then accessing a specific one of the remote sites using the attributes in a specific one of the user personas that is associated with the specific remote site. The specific remote site can be associated with the specific user persona by a universal resource locator (URL), e.g., for web sites on the Internet, and the accessing is automatically performed in response to matching of the URL of the specific remote site to the URL associated with the specific user persona. A default persona can be used for any remote site having no specifically associated user persona.

Method of switching Internet personas based on URL

A method, apparatus, and computer instructions for storing colors in a color table used in displaying graphics in a data processing system. A request for a color map is received, wherein the request includes a number of entries for the color map. A color map location and size in the color table is set based on the number of entries in the request. Colors for the color map are loaded into the color table at the color map location, wherein dynamic sizing of color tables occurs.

Method and apparatus for dynamically sizing color tables

Methods, systems, and products are provided for peer-to-peer computer software installation. Embodiments include receiving, by an observing install agent running on an observing host from a test install agent running on a test host, performance information describing the performance of software installed on the test host; determining, by the observing install agent, whether the performance information meets performance criteria for the observing host; and if the performance information meets the performance criteria for the observing host, installing the software on the observing host. In some embodiments, determining, by the observing install agent, whether the performance information meets performance criteria for the observing host is carried out by determining, whether the performance information meets performance criteria for the observing host in dependence upon a rule.

Autonomic peer-to-peer computer software installation

The present invention provides a system and method for automatically hiding sensitive information, obtainable from a process table, from other processes that should not access the sensitive information. The system and method include a sensitive command attribute table that is used by a system administrator to designate the commands and command attributes that will typically be associated with sensitive information. The sensitive command attribute table is used when a command is entered that requests information from the process table to be displayed or output. In response, a search of the process table entries is made to determine if a command and/or its attribute in the process table matches an entry in the sensitive command attribute table. If so, the command, its attributes, and/or its attribute values are blanked from the output of the process table information.

Automatically hiding sensitive information obtainable from a process table

Exemplary methods, systems, and products are described that operate generally by moving subroutine return address protection to the processor itself, in effect proving atomic locks for subroutine return addresses stored in a stack, subject to application control. More particularly, exemplary methods, systems, and products are described that write protect subroutine return addresses by calling a subroutine, including storing in a stack memory address a subroutine return address and locking, by a computer processor, the stack memory address against write access. Calling a subroutine may include receiving in the computer processor an instruction to lock the stack memory address. Locking the stack memory address may be carried out by storing the stack memory address in a protected memory lockword. A protected memory lockword may be implemented as a portion of a protected content addressable memory.

Write protection of subroutine return addresses

An install program is enabled for a user to configure at least one location of at least one policy system that is to be accessed via a network to gather at least one install policy, where the install policy specifies a policy for filtering out a selection of install items from among multiple items installable by the install program. In addition, the install program retrieves the install policy from each accessed location when filtering a list of the items installable by the install program to only include a particular selection of install items for the client system as directed by accessed install policies.

Filtering a list of available install items for an install program based on a consumer's install policy

HTTP/HTML is enhanced to provide information to a server about the current usage level of the continuous data that is being sent to the client. With this information, the server is able to tailor the data being sent to the client based on the current usage level. If the usage level changes in the client system, the server receives information about the changed level and the amount of data being sent is adjusted (up or down) accordingly. The client (browser) is enhanced to determine and send the current usage status and the server is enhanced with the intelligence to tailor the data it sends based on the current usage status received from the client.

Usage consciousness in HTTP/HTML for reducing unused data flow across a network

System and method for automatically hiding sensitive information obtainable from a process table

A display interface at a sending/receiving display terminal including the conventional implementations for reading and sending E-Mail with an implementation for organizing the text content of a chronological sequence of E-Mail documents having the same subject identifier or header. There is designated a subject identifier of one received electronic mail as a message text sequencer and there is an implementation at a receiving display station for enabling the display of a chronological sequence of the text of said received message and the text of all subsequent messages having said designated subject identifier. The designation of the identifier may automatically designate a subject identifier as a message text sequencer based upon user predetermined attributes. Such an implementation for automatically designating may include the combination of means for counting the number of messages having the same subject identifier within a predetermined period in combination with means for automatically designating the same subject identifier when said counted number reaches a predetermined value. In its simplest application, the predetermined value may be two, e.g. even two consecutive messages.

Electronic mail distribution via a network of computer controlled display terminals with interactive display interfaces enabling senders/receivers to view sequences of only text from sequences of E-Mail having same headers

A method, data processing system, and computer instructions for simulating direct frame buffer access. A request for access to a frame buffer memory is received from an application. A portion of system memory is allocated for use as the frame buffer memory in response to receiving the request. A pointer to the portion of system memory is returned to the application. The application writes data to the portion of system memory, treating the portion of system memory like the frame buffer memory.

Method and apparatus for simulated direct frame buffer access for graphics adapters

A method and system for enabling secure IPsec tunnels within NAT without compromising security. A local network is configured with a gateway machine connected to the Internet and having an IPsec ID for interfacing with the Internet and a local IP/interface address for interfacing with the local network. Client machines are connected to the gateway machine and communicate with the Internet via the gateway and network address translation (NAT) techniques. Each client machine is configured with a local IP/interface address. The client machines are also provided with an alias of the IPsec ID for the gateway machine. When an IPsec request is received by the gateway machine to establish a tunnel (secure communication) with one of the clients, the gateway machine forwards the packet to the particular client using NAT. The client machine receives the request and since it has an alias of the gateway's IPsec ID, the client machine will confirm that it has one of the IPsec IDs in the packet. The client machine sends the reply packet back to the gateway machine, which then forwards it to the requesting machine over the Internet. The requesting machine receives the packet and a confirmation that it has reached its intended recipient and opens the secure IKE tunnel with the particular client via the gateway machine. In this manner authentication of the IKE tunnel and establishment of a secure IPsec session is completed with a client machine that is accessible only via a gateway implementing NAT.

Secure IPsec tunnels with a background system accessible via a gateway implementing NAT

Apparatus for eavesdropping within an area layer adjacent to and surrounding a LAN area periphery for potential wireless transmissions of an intruder having a lower frequency within a level below the LAN frequency; and an implementation responsive to said eavesdropping apparatus for changing the encryption code of said encrypted wireless transmission upon the eavesdropping detection of a wireless transmission of said lower frequency addressed to a network location of one of the terminals in said LAN.

Protecting wireless local area networks from intrusion by eavesdropping on the eavesdroppers and dynamically reconfiguring encryption upon detection of intrusion

A method, apparatus, and computer instructions for managing colors in a color table used in displaying graphics. A request is received for a color map. A color map location is set in the color table, wherein the color map location has a starting point. An identification of the starting point for the color map is placed in an entry in a window attribute table. The colors for the color map are loaded into the color table. The starting point of the color map at the color map location is identified using the window attribute table.

Growing community of inventors

Austin, TX, United States of America

James Stanley Tesauro