International Business Machines Corporation

Google Inc.

Hcl Technologies Limited

Jeffrey Robert Hoy

Jonathan Frederick Brunn

Asima Silva

Nataraj Nagaratnam

Sreekanth Ramakrishna Iyer

Shadi Eskamaei Albouyeh

Bernadette Alexia Carter

Ravi Krishnan Muthukrishnan

Kaushal Kiran Kapadia

Stephanie Lynn Trunzo

Rick A Hamilton, Ii

Kulvir Singh Bhogal

Gregory J Boss

Jessica Whitley Forrester

Agueda M H Magro

Stephen Carlyle Hess

Marit L Imsdahl

Barry Joseph Pellas

David Michael Stecher

Sridhar R Muppidi

Joshua A Alger

Paul R Bastide

Alan Richard Buss

Shawn Patrick Mullen

Jenny S Li

James D Creasman

Clifford A Pickover

Brian M O'Connell

Keith R Walker

Andrew J Ivory

Daniel Victor Klein

Matthew T Pellas

Belinda M Vennam

Terry W Barbee

Molly F Levenson

Cynthia J Rainey

Provided are techniques for controlling message delivery corresponding to a near field communication (NFC) device, comprising establishing, on a mobile computing device, a rule-based session corresponding to a NFC device; executing an application, corresponding to the NFC device, in conjunction with the session; and responsive to detecting a condition meeting a criterion corresponding to the rule-based session, limiting execution of the application on the mobile computing device in conformity with the criterion.

Non-intrusive proximity based advertising and message delivery

Adjusting system actions based on an absence of relationship acceptance may include detecting absence of connection acceptance by one or more first users in a computer-implemented social networking system. Patterns of the absence of connection acceptance of the one or more first users may be correlated. Users with common patterns of absence of connection acceptance may be clustered into a cluster of users. Absence of connection acceptance by a second user may be detected. Responsive to determining that a pattern of the absence of connection acceptance associated with the second user matches with the common patterns, a profile associated with the second user may be updated according to a template profile associated with the cluster. System actions of the social networking system may be activated for the second user based on the profile updated according to the template profile.

Adjusting system actions, user profiles and content in a social network based upon detected skipped relationships

A social network activity mode that is implemented using social network activity rules is identified. The social network activity rules allow only social network posts of relevance to a particular activity of a user to be presented to the user. The social network activity mode is applied to a group of social network posts. Based upon applying the social network activity mode to the group of social network posts, social network posts that comply with the social network activity rules of the social network activity mode are provided to the user and social network posts that do not comply with the social network activity rules of the social network activity mode are blocked.

Social network activity modes

Presenting an electronic message includes receiving an electronic message, the electronic message includes a message originator, a message recipient, and a number of digital stamps wherein each of the number of digital stamps is associated with a social network, validating each digital stamp by contacting the social network associated with that digital stamp, when a digital stamp is validated, identifying a social relationship between the message recipient and the message originator using the social network corresponding to that digital stamp, and displaying, with the electronic message, an indication of the social relationship.

Presenting an electronic message

Approaches for providing data protection in a networked computing environment are provided. A method includes detecting, by at least one computer device, a breach of a first system in the networked computing environment. The method also includes generating, by the at least one computer device, a second system in the networked computing environment, wherein the second system includes a patch based on the breach. The method additionally includes converting, by the at least one computer device, the first system to a decoy system. The method further includes generating, by the at least one computer device, a third system in the networked computing environment, wherein the third system has reduced security relative to the first system.

Data protection in a networked computing environment

A method, apparatus and computer program product for managing a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment is described. In a first virtual private network (VPN) manager a request is received from a first cloud application resident in the first cloud. The request includes a first set of requirements for a first VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a first VPN manager request to a first system in a first cloud, wherein the first system creates the first VPN tunnel according to the first set of requirements. The VPN manager receives a request from a second cloud application resident in the first cloud. The request includes a second set of requirements for a VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a second VPN manager request to the system in a first cloud, wherein the second VPN manager request contains the second set of requirements. The second VPN manager request is either tuning the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible or creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible, the second VPN tunnel created by the first system.

Dynamically defined virtual private network tunnels in hybrid cloud environments

Identifying content in an incoming message on a social network includes categorizing a sender-recipient relationship between a sender and a recipient of an incoming message in an activity stream in a display.

Identifying content in an incoming message on a social network

This disclosure provides the ability for a cloud application to specify its security requirements, the ability to have those requirements evaluated, e.g., against a specific cloud deployment environment, and the ability to enable the application to control a cloud-based security assurance service to provision additional security technology in the cloud to support deployment (or re-deployment elsewhere) of the application if the environment does not have the necessary topology and security resources deployed. To this end, the application queries the service by passing a set of application-based security rights. If the security capabilities provided by the security assurance service are sufficient or better than the application's security rights, the application functions normally. If, however, the security environment established by the security assurance service is insufficient for the application, the application is afforded one or more remediation options, e.g., issuing a request to upgrade the security environment, or the like.

Application-based security rights in cloud environments

A user state tracking and anomaly detector for multi-tenant SaaS applications operates in association with a log management solution, such as a SIEM. A given SaaS application has many user STATES, and the applications often have dependencies on one another that arise, for example, when a particular application makes a request (typically on behalf of a user) to take some action with respect to another application. The detector includes a mapper that maps the large number of user STATES to a reduced number of mapped states (e.g., 'red' and 'green'), and a dependency module that generates user-resource dependency graphs. Using a dependency graph, a SaaS modeler in the detector checks whether a particular dependency-based request associated with a SaaS application is valid. State and dependency information generated by the mapper and dependency module are reported back to the log management solution to facilitate improved logging and anomaly detection.

User state tracking and anomaly detection in software-as-a-service environments

Approaches for managing security breaches in a networked computing environment are provided. A method includes detecting, by at least one computer device, a breach of a production system in the networked computing environment, wherein the networked computing environment includes a decoy system interweaved with the production system. The method also includes receiving, by the at least one computer device, a communication after the detecting the breach. The method further includes determining, by the at least one computer device, the communication is associated with one of a valid user and a malicious user. The method additionally includes, based on the determining, routing the valid user to an element of the production system when the communication is associated with the valid user and routing the malicious user to a corresponding element of the decoy system when the communication is associated with the malicious user.

Managing security breaches in a networked computing environment

Using mobile devices in a gesture based security system is described. An image based feed is received from a camera incorporated in a first mobile device. The first mobile device is in communication with the gesture based security system. The camera has a view of one of a plurality of secured areas monitored by the gesture based security system. A gesture is recognized within the feed. Non-gesture metadata from the mobile device is associated with the recognized gesture. The non-gesture metadata is used to determine that the image based feed is a view of a first secured area of the plurality of secured areas. The determination whether the recognized gesture is an approved gesture within the first secured area is made according to non-gesture metadata associated with the recognized gesture.

Augmenting gesture based security technology using mobile devices

A method, system and/or computer program product predicts viewing activity of a new posting to an activity stream. A first computer transmits a new posting to an activity stream in a second computer, where the new posting is available to a potential viewer set. Based on identified viewer information about one or more members of the potential viewer set, a prediction is made of viewing activity of the new posting by the potential viewer set. This predicted viewing activity is based on identified viewer information about members of the potential viewer set, and describes a predicted likelihood of the potential viewer set viewing the new posting. The derived predicted viewing activity of the new posting by the potential viewer set is then presented at the first computer.

Predicting viewing activity of a posting to an activity stream

An indication is received, from a content viewing device used by a remote viewer, that specifies a video content sub-area of interest within streamed video content viewed by the remote viewer. Original video content outside of the video content sub-area of interest is designated as a region not of interest (RNOI) within the streamed video content. A transmission rate of image changes of the original video content within the RNOI is reduced within the streamed video content. Image disparity between the video content sub-area of interest and the RNOI is reduced by continuing to transmit the image changes of the original video content within the RNOI at the reduced transmission rate. Bandwidth consumed to transmit the streamed video content is reduced in relation to the reduced transmission rate of the image changes of the original video content within the RNOI.

Aggregated region-based reduced bandwidth video streaming

Growing community of inventors

Southern Pines, NC, United States of America

Jeffrey Robert Hoy