International Business Machines Corporation

Globalfoundries Inc.

Kyndryl, Inc.

Luigi Pichetti

Marco Secchi

Giuseppe Ciano

Claudio Marinelli

Sandro Piccinini

Stefano Sidoti

Mauro Arcese

Antonio Secomandi

Rosario Gangemi

Antonio Di Cocco

Alessandro Donatelli

Francesco Lecciso

Scot MacLellan

Jacques Fontignie

Gianluca Bernardini

Giancarlo Carbone

Luisa Attanasio

Piotr P Godowski

Michele Crudele

Francesco Maria Carteri

Giovanni Lanfranchi

Marco De Santis

Artur Obrzut

Marco Canu

Massimiliano Celli

Marco Imperia

Pietro Iannucci

Linwood Earl Loving

Luca Ferri

Francesco Lupini

Mark David Batinich

Fabio Benedetti

Marcello Vitaletti

Antonio Bagarolo

Marc Vuilleumier Stueckelberg

Alessandro Capomassi

Marcello Velati

Michele D'Urso

Giuseppe Longobardi

Antonio Perrone

Bernardo Pastorelli

Arcangelo Di Balsamo

Paolo Salerno

Randa Salem

Enrica Alberti

Gianluca Perreca

Roberto Piras

Maurizio Simeoni

Krzysztof Pienkowski

Giuseppe Fioretti

Luca Di Litta

Alessandro Terenzi

Allison V Pelt

Roberto Ragusa

Nicola Milanese

Ilaria Gorga

Riccardo Pizzutilo

Paolo Cavazza

Alessandro Scotti

Francesca Curzi

Paolo Ottaviano

Valerio Bellizia

Domenico D'Alterio

Alex Donatelli

Amr F Yassin

Leonardo Modeo

Salvatore D'Alo'

Pietro Marella

Francesco Carusi

Nicolas Andre Druet

Grzegorz Majka

Felice Mansi

Pierre-Antoine Queloz

Salvatore D'Alo′

Jacek J Stezowski

Cristiana D'Amore

Carlo Romano

Marcin Mirecki

Alessandro Ferenzi

Mohamed Zakaria

Roberto Ranucci

Celli Massimiliano

Antonio Gallo

Pescuma Michele

Dariusz P Glocki

Scot Maclellan

Paavo Anselmi Parkkinen

Daniel W Montgomery

Marco Esposito

A solution is proposed for controlling usage of computing services. A corresponding method comprises allocating a new usage token to a user in response to a usage entitlement thereof being insufficient to meet a usage weight of a new computing service. The usage entitlement is updated according to the new usage token and the usage weight of the new computing service, and the usage of the new computing service is enabled in response thereto. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Control of usage of computing services based on dynamic grouping

An approach is described with respect to dynamically constructing and configuring a conversational agent learning model. Various aspects of the conversational agent learning model may be constructed and updated without continuous intervention of a domain administrator. A method pertaining to such approach may include retrieving a corpus of information. The corpus of information may include records from a set of repositories and external data, including data from social networks or applications. The method further may include configuring the conversational agent learning model based upon the retrieved corpus of information. The method further may include deploying the conversational agent learning model by facilitating interaction between the conversational agent learning model and a plurality of clients. The method further may include updating the conversational agent learning model to address any modification to the corpus of information.

Dynamically constructing and configuring a conversational agent learning model

Monitoring and automatically remediating issues that arise at run-time during integrations between Application Program Interfaces (APIs) of two or more endpoint products over an integration framework. The monitoring is facilitated by inserting specialized modules into the integration framework that detects changes in the outputs of the integrated endpoint products and attempts to remedy them by automatically adjusting the output in-transit towards a destination endpoint. The specialized modules can be enhanced by machine learning algorithms trained on previously successful remedies. Remedies may be directed towards schema variations and performance drifts, among others.

Automatic and continuous monitoring and remediation of API integrations

Facilities of a shared environment are automatically optimized by inferring sentiment from unstructured conversational data towards various environmental entities such as heat, light, service levels, etc. Conversational audio streams from different areas are analyzed to identify an entity and associated sentiment, and a heatmap is created representing the sentiment across the different areas. The conversational audio streams are captured by directional microphones and are assigned metadata such as a location tag indicating a position of a microphone within the shared environment. Heatmap creation can be supplemented by other sensory data. A cognitive system is used to generate actions for control of the facilities based on the heatmap. A suggested action may still be subject to operational policies for the facility. In some scenarios a first suggested facility action compensates for an effect of a second suggested facility action.

Inferring sentiment to manage crowded spaces by using unstructured data

A computer system performs software discovery on a shared resource in a network. A logical group is generated for the shared resource, wherein the logical group includes a plurality of devices accessing the shared resource. A designated device is selected from the plurality of devices for performing a software discovery operation on the shared resource, wherein the selection is based on one or more performance factors. Results of the software discovery operation on the shared resource are received from the designated device. The results of the software discovery operation are distributed by the designated device to the plurality of devices. Embodiments of the present invention further include a method and program product for performing software discovery on a shared resource in a network in substantially the same manner described above.

Control of scanning shared resources by devices for software discovery

A first latest status of the one or more disconnected endpoints from a memory is retrieved. A set of predicted vulnerabilities for each of the one or more disconnected endpoints from the memory is retrieved. A set of preventive actions and policies associated with the set of predicted vulnerabilities to be performed when each of the one or more disconnected endpoints reconnects to the network is retrieved. The set of preventive actions and policies are retrieved from the memory. A determination is made whether at least one endpoint in the one or more endpoints not connected to the network reconnects to the network. If least one endpoint in the one or more endpoints not connected to the network has reconnected to the network, at least one preventive action from the set of preventive actions and policies on the at least one endpoint reconnected to the network is performed.

Vulnerability management of disconnected endpoints

Embodiments include systems, methods, and computer program products to perform an operation for managing different virtual machine images as a single virtual machine image. The operation generally includes generating a representation of a virtual machine (VM) image, and generating a first VM instance from the VM image. The representation of the VM image includes a set of artifacts associated with the VM image. The operation also includes receiving an indication of an available software update. Upon determining that the software update is applicable to the representation of the VM image, the operation further includes applying the software update to the first VM instance image.

Deploying updates to virtual machine images based on differences in artifacts

Provided is a computer-implemented method, system, and computer program product for processing an electronic document. The method may include retrieving an electronic document during a computing session maintained for a user of a computer system. The method may also include determining context information related to the computing session. The method may also include selecting at least one annotator from a set of annotators based on the context information, the at least one annotator comprising data describing a set of rules for annotating content of the electronic document. The method may also include associate the selected annotator with the electronic document, wherein the associating is specific to the user.

Electronic document processing system

A method and system for populating a software catalogue in software applications which monitor the presence of software products on a plurality of computers. The proposed method aims at populating a software catalogue with a limited manual intervention of an administrator. The present invention reduces the cost of producing and maintaining a comprehensive knowledge base (the catalogue) which contains definitions of software products and the related signature. Information about software products and their related signature is obtained through a process using some special files (e.g. XML files) which contains information and/or pointers to other products.

Populating a software catalogue with related product information

A virtual scan group manager (VSGM) can receive a plurality of respective sets of data from a plurality of respective devices. The VSGM can allocate respective portions of the plurality of respective sets of data to respective virtual scan groups (VSGs). The VSGs can be processed by storing the data contained in each VSG in a data repository. Respective sets of data stored in the data repository can be catalogued in a VSGM logfile.

Dynamic data ingestion

Methods, computer program products, and systems are presented. The methods include, for instance: building a change management meta model on relationships between change request tasks of a change request and logical components of a computing environment via deployment processes that realizes respective change request tasks onto the logical components. A change request fulfillment plan that minimizes a maintenance window for deploying the change request tasks to the logical components is produced. After deployment, performance metrics of the logical components updates change request constraints.

Change management optimization in cloud environment

A method and system. One or more local parameters are collected from one or more corresponding endpoints. Each policy of one or more policies includes an indication of one or more activities for execution on the corresponding endpoints. At least one of the activities of the policies is conditioned by a condition based on one or more aggregated parameters. Each aggregated parameter depends on at least one of the one or more local parameters. The local parameters are aggregated into the aggregated parameters. Each aggregated parameter is distributed at least to the corresponding endpoints of each policy including any activity conditioned on the aggregated parameter. At least the corresponding policies are sent to the endpoints to cause each endpoint to apply each corresponding policy by collecting any aggregated parameters of the policy on the endpoint and executing the activities of the policy according to the corresponding aggregated parameters.

Control of activities executed by endpoints based on conditions involving aggregated parameters

A method for creating a software image of a software application. During an installation of the software application on a computing machine, one or more changes of the computing machine occurring during the installation of the software application are detected. The one or more changes include one or more artifacts being added to the computing machine and one or more updates being applied to the computing machine. The software image is created by copying the one or more artifacts from the computing machine to a virtual disk and by adding activation procedures and activation information obtained from the activation procedures to the virtual disk. The activation procedures and activation information were determined according to the updates. The activation procedures are configured to apply the updates when running the activation procedures according to the activation information.

Creation of software images of software applications for image-based maintenance of the software applications

A method for determining a deployment configuration of multiple micro services that interact with each other is provided. The method includes the steps of determining a metric describing an amount of communication traffic between at least two of the micro services. Based on the metric, an execution environment may be determined for at least one of the micro services. Deployment information specifying that the at least one micro service shall be deployed on the determined execution environment may be generated.

Dynamic deployment of an application based on micro-services

The present disclosure relates to related methods, systems, and media containing instructions for detecting security risks related to a software component deployable in a container-based runtime environment. The method comprises receiving a trigger, the trigger indicating that a layer of a container within the container-based runtime environment is to be checked for security risks. A check layer of the container is identified that is to be checked for security risks. A determination is made that a check for security risks has not been previously performed for the check layer according to a check criterion, and responsive to this determination, a determination is made that a security analysis indicates a security risk. Responsive to this determination, a remedial action may be initiated.

Detecting security risks related to a software component

Growing community of inventors

Rome, Italy

Luigi Pichetti