International Business Machines Corporation

Google Inc.

John Reumann

Dinesh C Verma

Debanjan Saha

Sambit Sahu

Atul Adya

Gregory H Cooper

Daniel Sumers Myers

Zon-Yin Shae

Kunwadee Sripanidkulchai

Techniques are provided for detecting computer fraud. The techniques include obtaining a text version of a candidate destination and a graphical rendering of the candidate destination, comparing the text version of the candidate destination and the graphical rendering of the candidate destination with a corresponding text version of a stored destination and a corresponding graphical rendering of the stored destination, and generating a fraud warning if the graphical rendering of the candidate destination is substantially similar to the graphical rendering of the stored destination while the text version of the candidate destination differs substantially from the corresponding text version of the stored destination.

Method and apparatus for detecting computer fraud

Techniques are provided for computer network security. The techniques include obtaining operational data for at least a first networked application; obtaining enterprise data for at least a second networked application; correlating the operational data with the enterprise data to obtain correlated data; and using the correlated data to improve security of the computer network.

Method and apparatus for computer network security

Techniques are provided for automatically generating a database of destinations to be protected against computer fraud. The techniques include generating at least one category of destinations to be protected, and retrieving (i) at least one list of destinations belonging to said at least one category and (ii) contents specified at each uniform resource locator associated with a destination identified in the at least one list of destinations belonging to said at least one category.

A computer implemented method of virtual machine migration with filtered network connectivity includes enforcing network security and routing at a hypervisor layer which is independent of guest operating systems via dynamic updating of routing controls initiated by a migration of said virtual machine from a first device to a second device.

Moveable access control list (ACL) mechanisms for hypervisors and virtual machines and virtual port firewalls

A distributed network system includes at least one server having memory and one or more processors. The server performs the following operations in connection with propagating object updates to respective client devices: receiving a first object update message from an application server, the first object update message including a first object identifier and a first object version; updating an object update record that includes the first object identifier using the first object version, wherein the object update record includes a first client identifier; propagating the first object version from the object update record to a client-object registration record that includes the first client identifier; and sending a second object update message to a first client device associated with the first client identifier, wherein the second object update message includes the first object identifier and the first object version.

Method and system for distributing object update messages in a distributed network system

A distributed network system includes a distributed server system and a plurality of client devices that are communicatively coupled to the distributed server system. The distributed server system includes multiple servers, each server including a set of client devices registered with the server. Through client re-registration, a client device can move its registration from one server to another server. Through server-side data replication, an object registration request submitted by a client device to a first server is forwarded to a second server without having the client device submitting the same request to the second server.

Method and system for maintaining client cache coherency in a distributed network system

A method (and system) which provides virtual machine migration with filtered network connectivity and control of network security of a virtual machine by enforcing network security and routing at a hypervisor layer at which the virtual machine partition is executed, and which is independent of guest operating systems.

A voice-over-internet protocol (VoIP) caller verification method includes generating a challenge to be sent to a VoIP caller which needs a response from the VoIP caller prior to accepting a VoIP call, wherein the challenge includes a test pattern crafted to create a greater load at a spammer VoIP caller as compared to a human VoIP caller. A response or lack thereof is determined from the VoIP caller, and the response is analyzed relative to an acceptable response to determine whether the VoIP caller is acceptable to communicate with.

System and method for spam detection

A proactive problem resolution system, method of proactive problem resolution and program product therefor. User sensors extract data from user interaction with a computer terminal and pass extracted data to a sniffer agent. The sniffer agent checks for an indication of a user problem by comparing user behavior data against behavior data from previously encountered problems. When the sniffer finds a match, the computer terminal user may be asked if assistance is needed or the user may be automatically referred to the help desk. If a solution already exists for a problem that corresponds to the user behavior, that solution(s) is(are) presented at the computer terminal. Computer terminal users automatically receive problem support, even before it would otherwise be requested.

Growing community of inventors

Croton on Hudson, NY, United States of America

John Reumann