International Business Machines Corporation

Salesforce, Inc.

Synchronoss Technologies, Inc

Luis Campo Giralte

Jose Luis Mujeriego Gomez

Barrett Allen Weisshaar

Anil Abraham

Systems, methods, and devices are disclosed herein that provide distribution of policies for computing platforms. A computing platform may be implemented using a server system, and the computing platform is configurable to cause receiving a policy data object at a first domain of the computing platform, the policy object identifying one or more security policies associated with the first domain, and determining if the policy data object should be implemented at the first domain based, at least in part, on a second domain identified by the policy data object. The computing platform is also configurable to cause determining if one or more changes should be made to the policy data object based, at least in part, on one or more properties of the first domain, and implementing the policy data object at the first domain by translating the policy data object from a generic syntax to a domain-specific syntax.

Systems, methods, and devices for improved security policy distribution in a cloud-computing environment

In some embodiments, a method stores an executable contract in a ledger. The executable contract is for a test to be performed on a network and includes terms for the test. The method receives an indication of traffic that is received at a network device. It is determined that the traffic is associated with the executable contract that is stored in the ledger based on the terms of the test. The method responds to the network device with a response indicating that the traffic is associated with the executable contract. The network device allows the traffic to be sent to a destination on the network to perform an operation for the test.

Automatic testing of networks using smart contracts

Systems and methods for verifying a firewall for a cloud provider. The method includes receiving by a timelord module configured with access to a plurality of HTTP attacks that incorporate random tokens, an updated policy ok signal that was generated by an external element. The timelord module responds by (a) loading a first HTTP attack with a first expected response that is either forbidden or accepted, the first HTTP attack including the random tokens in a form of a header key value parameter; (b) sending the first HTTP attack to the firewall; (c) comparing a response from the firewall to the first HTTP attack with the first expected response; and (d) incrementing the first HTTP attack and repeating (a)-(c) until the plurality of HTTP attacks has been sent; and deleting the random tokens after the plurality of HTTP attacks have been sent.

Systems and methods for verifying a firewall for a cloud provider

Disclosed herein are system, method and computer readable storage medium for enabling access control to be performed on messages received in a first-party (corporate) data center from a third-party (cloud) data center. Based on a received update request from an update service in the third-party (cloud) data center, an access control system ('ACL') controller generates an ACL entry for enabling access to a first-party (corporate) data center from a system, within the third-party data center where a system configuration change was performed by a cloud platform. The ACL controller then transmits the ACL entry to one or more devices within the first-party data center, enabling access from the updated system hosted in the third-party data center.

Distributing dynamic access control lists for managing interactions with a cloud datacenter

A method for providing a proof-of-work challenge based on hash mining for reducing spam attacks comprising: receiving an email message from a client device; determining a level of trustworthiness of the client device; generating a challenge message based on the determined trustworthiness of the client device; transmitting the challenge message to the client device; receiving a response to the challenge message from the client device; and forwarding the email to one or more recipients when the response to the challenge message is correct.

System and method for proof-of-work based on hash mining for reducing spam attacks

Data obsolescence is managed using a bitmap or bit array index which is associated with a table during an obsolescence control period. A table is selected to undergo obsolescence control for a period of time. Any records that have not been accessed for a certain number of cycles 'M', which represents an obsolescence limit, are deemed to be obsolete. During at least a part of each cycle, the results of database queries to the table are monitored, such that for each cycle an 'obsolescence' bitmap is created indicating which records were accessed. Once a sufficient number of cycles have elapsed, so that records that have not been accessed at all since the start of the obsolescence control period lie outside the obsolescence limit, queries are restricted to records which have been accessed during the last &#x2018;M&#x2019; cycles by applying the &#x2018;M&#x2019; most recently stored obsolescence bitmaps.

Managing data obsolescence in relational databases

A computer implemented method and system comprising receiving a data packet from a network source, extracting source and destination data from the received data packet, determining a user from the extracted source and destination data from the received data packet. If a label does not exist for the extracted source and destination data from the received data packet, creating a label for the data packet, the label comprising the extracted source data and historic source data for the determined user, calling a chaotic function with the label for the received data packet. If the chaotic function returns false, calling an alternative function for an output with the label for the received data packet. If the chaotic function returns true, capturing the output of the chaotic function, and updating the label with the output of the chaotic function or with the output of the alternative function.

Network traffic classification

A computer program product for implementing a method comprising receiving a data packet from a network source, extracting source and destination data from the received data packet, and determining a user from the extracted source and destination data from the received data packet. If a label does not exist for the extracted source and destination data from the received data packet, creating a label for the data packet, the label comprising the extracted source data and historic source data for the determined user, calling a chaotic function with the label for the received data packet. If the chaotic function returns false, calling an alternative function for an output with the label for the received data packet. If the chaotic function returns true, capturing the output of the chaotic function, and updating the label with the output of the chaotic function or with the output of the alternative function.

A denormalized dataset, an associated primary key field, one or more associated secondary key fields and information identifying one or more normalized datasets associated with each secondary key field, is received. A denormalized table comprising fields and data types corresponding to said denormalized dataset, said denormalized table having a primary key field corresponding to said primary key field associated with said denormalized dataset, is created. The said information identifying the one or more normalized datasets associated with each secondary key field, creating one or more normalized tables, each of said one or more normalized tables corresponding to a respective one of said one or more normalized datasets, each of said one or more normalized tables comprising a foreign key corresponding to said associated primary key and a primary key corresponding to the secondary key field associated with said normalized dataset, is utilized. Additionally, each of said foreign keys is utilized.

Growing community of inventors

Dublin, Ireland

Luis Campo Giralte