International Business Machines Corporation

Krishna Kishore Yellepeddy

Kristin Marie Hazlewood

John Thomas Peck

Richard Jay Cohen

Miguel Sang

Anne Louise Bolgert

Amal Ahmed Shaheen

John A Morganti

David B Kumhyr

Rabindranath Dutta

Dwip N Banerjee

Sandra Lee Tipton

Sadanand Rajaram Bajekal

Rod Mancisidor

Jai Singh Arun

Perry Lee Statham

Conrad James Johnson

Michael Delaine Nix

Pamela Ann Nesbitt

Lorin Ullmann

Randolph Michael Forlenza

Bruce Arland Rich

Kumar Ravi

Xiaoyan Y Zhang

Theodore C Waldron, Iii

Keith Edward Carter

Thomas Joseph Porcaro

Richard Byron Ward

Helen McKinstry

David Dah-Haur Lin

James Ealem Shewbert

Systems and methods for identifying and remediating malware-compromised mobile devices are disclosed. A computer-implemented method includes accessing, by a computing device, malware risk data; determining, by the computing device, a mobile device is at risk from malware based on the malware risk data; identifying, by the computing device, a set of connections of a user of the mobile device, wherein each connection in the set of connections is associated with a user computer device; identifying, by the computing device, at least one user computer device from the set of connections at risk from the malware; and outputting, by the computer device, a malware notification for the mobile device at risk and at least one user computer device at risk.

Identifying and remediating malware-compromised devices

Embodiments include a technique for scheduling meeting based on calendaring dependencies. The technique includes receiving prerequisite information for scheduling a meeting, the prerequisite information including a meeting agenda, meeting objective, and location, and validating, by a computing system, the prerequisite information based on an aggregate condition of the prerequisite information. The technique also includes responsive to the validation, scheduling the meeting based on the prerequisite information, otherwise restricting the scheduling of the meeting, and electronically transmitting a meeting request including the prerequisite information based on the validation.

Calendaring dependencies

This disclosure describes an automated process of discovering characteristics needed to integrate a web-based application to a web portal, such as a reverse proxy. This process eliminates the need for application owners and security analysts to manually discover the information needed for the on-boarding process. To this end, application-specific information is determined by monitoring network traffic flows in and out of the application, user authentication and authorization event data, and the like. An application discovery engine analyzes the discovered data, preferably against a set of patterns and heuristic-based rules, to discover or identify the one or more application characteristics. A set of configuration data is then generated, and this configuration data is then used to integrate the application into the web reverse proxy and, in particular, by specifying the configuration needed to 'board' the application. Preferably, the monitoring and application characterization determination functions occur in an automated manner.

Auto-detection of web-based application characteristics for reverse proxy enablement

Use of cryptographic key-store hardware security modules is optimized in a system having a first scarce high-security key storage device and a second more plentiful low-security key storage device comprising securing a cryptographic key to the higher security level by initially storing the key in the first storage device, then responsive to an event, evaluating the stored key against one or more rules, and subsequent to the evaluation, reclassifying the stored key for relocation, encrypting the reclassified key using a key-encryption key; relocating the reclassified key into the second, lower-security storage device, and storing the key-encryption key in the first storage device.

Optimizing use of hardware security modules

A security management system comprises a key management sub-system, an asset/workload management sub-system, and an event management sub-system. The event management sub-system detects events. The asset/workload management sub-system correlates events (irrespective of type) with the assets that generate them, and the key management sub-system uses the event-asset associations determined by the asset/workload management sub-system to automatically orchestrate the necessary key management activities (e.g., key creation, revocation, refresh, etc.) across the impacted components in the information technology and operational realms to ensure data security. In one use case, a security event detected by the event management sub-system triggers one or more actions within the asset/workload management sub-system. Service configuration records are identified from this scan, and assets defined in those records are identified. An event-asset association is then supplied to the key management sub-system, which uses this information to determine a key management operation.

Event-driven, asset-centric key management in a smart grid

A method, system, and computer usable program product for protocol based key management are provided in the illustrative embodiments. A key management protocol associated with a key request is identified, the key request being a request for data usable in cryptographic security. A first subset is selected from a set of policies using the key management protocol. A set of permissions is computed based on the first subset of policies, the set of permissions indicating whether the key request is permitted under the key management protocol. The set of permissions is cached in a cache in a data storage device.

Protocol based key management

A method, a data processing system, and a computer program product for managing cryptographic information. A determination is made as to whether a first time stamp of when cryptographic information was created is more recent than a second time stamp of a backup of the cryptographic information in response to receiving a request for the cryptographic information from a requester. The cryptographic information is used to encrypt data. The cryptographic information is prevented from being provided to the requester in response to a determination that the first time stamp of cryptographic information creation is more recent than the second time stamp of the backup of the cryptographic information.

Managing keys used for encrypting data

Growing community of inventors

Austin, TX, United States of America

Krishna Kishore Yellepeddy