International Business Machines Corporation

Globalfoundries Inc.

Joefon Jann

Pratap Chandra Pattnaik

Ramanjaneya Sarma Burugula

Niteesh Kumar Dubey

Hao Yu

Ching-Farn Eric Wu

Manoj N Kumar

Jose Eduardo Moreira

Kattamuri Ekanadham

Mauricio J Serrano

Ilie G Tanase

Kaoutar El Maghraoui

William Pettit Horn

Clifford A Pickover

Charles Scott Graham

Timothy J Schimke

Jesse Paul Arroyo

Ravi Shankar

Paul Gregory Crumley

Juan J Alvarez

Jenny S Li

Hubertus Franke

Janani Janakiraman

Mark Edwin Giampapa

Mark D Rogers

Douglas James Joseph

Anuradha Rao

David Alan Hepkin

Thomas Stanley Mathews

Rodney Carlton Burnett

Murali Vaddagiri

Saurabh Desai

Sandra Johnson Baylor

Matthew David Fleming

James Arthur Lindeman

Wendy Chong

Tai-chi Su

Beng-Hong Lim

Wu Zheng

Ronald C Geiger, Jr

Singpui Zee

Ramanjaneva Sarma Burugula

Kaoutar El Maghroaui

Prach Jerry Chuaypradit

A method, a computer program product, and a system for mitigating unauthorized encryptions of filesystem objects stored on a computing system. The method includes allocating a backup memory area for storing pre-encrypted filesystem objects, setting data bits in an encryption register that allow for monitoring a filesystem object marked for ransomware protection. The method also includes calculating an encryption rate of an encryption occurring on the filesystem object and determining that the encryption rate of the filesystem object exceeds an encryption-rate threshold. The encryption-rate threshold can be set by an administrator when marking the filesystem object for ransomware protection. The method further includes generating an alert to an administrator that the encryption rate of the filesystem object exceeds the encryption rate threshold and storing a backup of the filesystem object for a predetermined amount of time in the backup memory area.

Filesystem object protection from ransomware attacks

A method, a computer program product, and a system for initializing components to monitor for unauthorized encryptions of filesystem objects stored on a computing system. The method includes configuring an encryption monitor register to establish monitoring preferences of filesystem objects and allocating a predetermined size of persistent memory as a backup memory area for storing pre-encrypted versions of the filesystem objects. The method also includes inserting a starting address of the backup memory area in data bits of the encryption monitor register, and setting encryption monitor bits of page table entries in a hardware page table that correspond to at least one filesystem object, thereby establishing encryption monitoring of the filesystem object.

Encryption monitor register and system

Communication endpoints associated with a virtual machine for migration can be discovered. Properties associated with the communication endpoints can be discovered. The communication endpoints can be matched to establish a communication channel between the endpoints. The communication endpoints, the properties and the at least one communication channel can be used in recreating the communication channel for a migrated version of the virtual machine.

Discovery and recreation of communication endpoints in virtual machine migration

A method and system are provided. The method includes generating, by a machine-based sentiment prediction generator, respective machine-determined sentiment predictions for each of a plurality of software patches using sentiment analysis. The method further includes setting, by a sentiment-based confidence value generator, a confidence value for each of the plurality of software patches based on the machine-determined sentiment predictions. The method also includes at least one of selecting and prioritizing, by a software patch selector and prioritizer, at least one of the plurality of software patches based on the respective confidence value therefor.

Software patch management incorporating sentiment analysis

Various embodiments execute a program with improved cache efficiency. In one embodiment, a first subset of operations of a program is performed on a plurality of objects stored in one or more data structures. The first subset of operations has a regular memory access pattern. After each operation in the first subset of operations has been performed, results of the operation are stored in one of the plurality of queues. Each queue in the plurality of queues is associated with a different cacheable region of a memory. A second subset of operations in the program is performed utilizing at least one queue in the plurality of queues. The second subset of operations utilizes results of the operations in the first subset of operations stored in the queue. The second subset of operations has an irregular memory access pattern that is regularized by localizing memory locations accessed by the second subset of operations to the cacheable region of memory associated with the at least one queue. Results of each operation performed in the second subset of operations are stored in memory.

Reducing memory access latency in scatter/gather operations

The present disclosure relates to sharing an I/O device across multiple virtual machines. According to one embodiment, a computing system configures shared ownership of the I/O device between a first partition and one or more of the plurality of virtual machines. The computing system transfers partial ownership of the I/O device from the first partition to the one or more virtual machines and generates device configuration information for the I/O device. The virtual machines can use the generated device configuration information to access and configure the I/O device. Once the I/O device is configured for shared ownership, the computing system boots the one or more virtual machines.

Sharing ownership of an input/output device using a device driver partition

A server LPAR operating in a virtualized computer shares pages with client LPARs using a shared memory region (SMR). A virtualization function of the computer receives a get-page-ID request associated with a client LPAR to identify a physical page corresponding to a shared page included in the SMR. The virtualization function requests the server LPAR to provide an identity of the physical page. The virtualization function receives a page-ID response comprising the identity of a server LPAR logical page that corresponds to the physical page. The virtualization element determines a physical page identity and communicates the physical page identity to the client LPAR. The virtualization element receives a page ID enter request and enters an identity of the physical page into a translation element of the computer to associate a client LPAR logical page with the physical page.

Shared memory in a virtual environment

A server logical partition (LPAR) of a virtualized computer includes shared memory regions (SMRs). The SMRs include pages of the server LPAR memory to share with client LPARs. A hypervisor utilizes an export vector to associate logical pages of the server LPAR with SMRs. The hypervisor further utilizes a reference array to associate SMRs with client LPARs that have mapped at least one physical memory page of the SMR from a logical page of the client LPAR memory. In processing an operation to unmap one or more shared physical pages from one or more LPARs, the hypervisor uses the export vector and reference array to determine which LPARs have had a mapping to the physical pages.

Invalidation of shared memory in a virtual environment

Systems, methods, and computer program products to perform an operation comprising executing a device driver in a private logical partition on a compute host, wherein the device driver is configured to execute in an environment different than an environment of a hypervisor of the compute host, establishing a communication channel between the private logical partition and an adjunct partition executing on the compute host, and configuring, responsive to a command sent by the adjunct partition to the device driver via the communication channel, a physical function of a single root I/O virtualization (SR-IOV) device of the host system.

Extending trusted hypervisor functions with existing device drivers

A method for diagnosing software crashes includes calculating, using vector space modeling, angles between vectors representing stack-traces from reports in a repository on one or more server computer systems, to define similarities in the reports, wherein reports are deemed similar where angles between their respective vectors are less than a threshold value. The method further includes grouping the reports into similar sets using a maximal cliques process and automatically diagnosing, in response to a received software crash, a first stack-trace extracted from a first report of the received software crash, to determine a potential solution to the received software crash.

Automated diagnosis of software crashes

To mitigate collisions in a physical space during gaming, a set of physical objects and a user situated in the 3D space are mapped to determine a spacing between an object in the set of physical objects and the user, where the user moves in the 3D space to cause a motion in a virtual environment of a game. A prediction is computed that the user will make a motion in the 3D space during the gaming. For the motion in the 3D space, a motion trajectory of the user is computed using a measurement parameter corresponding to the user stored in a user profile. A detection is made that the motion trajectory of the user violates a spacing threshold between the user and the object, and the user is alerted about a risk of collision between the user and the object in the 3D space.

Mitigating collisions in a physical space during gaming

Growing community of inventors

Ossining, NY, United States of America

Joefon Jann