International Business Machines Corporation

Michael D Williams

Jeffrey Alan Frey

Hubertus Franke

Chung-Sheng Li

Pratap Chandra Pattnaik

Nagui Halim

Matt Richard Hogstrom

Brad L Brech

Scott W Crowder

Radha P Ratnaparkhi

Dimitrios Pendarakis

David Bruce Lindquist

Edward Barnes Boden

Josyula R Rao

Balachandar Rajaraman

Rodney A Smith

Stefan Pappe

Dinesh C Verma

Sambit Sahu

Dinakaran B Joseph

Lap Thiet Huynh

Michael E Baskey

Jeffery J Van Heuklon

Chun-Shi Chang

John Elliott Arwe

Gregory Richard Hintermeister

Steve Richard White

Boas Betzler

Jeffrey Alan Calcaterra

Franklin A Gruber

Wesley A Brzozowski

JaiPaul K Antony

Renato John Recio

Yu-Cheng Hsu

Joshy Joseph

John Joseph Rofrano

Andrew Neil Trossman

Dilip Dinkar Kandlur

Thomas R Maguire

Ramamohan Chennamsetty

Frank V Paxhia

Lianjun An

Hendrik Wagner

Mark C Bullock

Mark J Melville

John B Diamond

Donald A Palermo

Scott B Parks

Scott P Monheimer

Jeremy R Bauer

There is a computer program product and computer system that includes program instructions programmed to establish a security container describing a workload and a set of resources in a software-defined environment, the security container including a set of sub-containers that are self-describing sub-containers having associated metadata describing content of a respectively corresponding sub-container, each sub-container of the set of sub-containers respectively corresponds to a resource-divisible portion of the workload, the set of resources being required by the workload, wherein a sub-container of the set of sub-containers is an operating system sub-container; monitor the workload and the set of resources for security events; and responsive to identifying a security event, adjust isolation mechanisms provided by the plurality of sub-containers at various layers of a stack. The set of sub-containers represents an end-to-end run time environment for processing the workload using the set of resources.

Security within a software-defined infrastructure

There is a computer program product and computer system that includes program instructions programmed to identify, in a software-defined environment, a security container describing a workload and a set of resources required by the workload, the security container including self-describing sub-containers having associated metadata describing content of a respectively corresponding sub-container; determine, for the workload, a set of resource-divisible portions of the workload including a compute-resource portion; generate a plurality of sub-containers within the security container, a sub-container within the plurality of sub-containers being a self-describing sub-container having associated metadata describing the content of the sub-container representing only one resource-divisible portion, the sub-container being an operating system sub-container; and responsive to identifying a security event while processing the workload, adjust a security mechanism associated with the security container. The plurality of sub-containers represents an end-to-end run time environment for processing the workload.

Outcome-based adjustment of a software-defined environment (SDE) includes determining a business operation and a corresponding set of tasks to be performed in a software defined environment (SDE), establishing a first resource configuration to perform the corresponding set of tasks to achieve a business outcome target, determining a first resource cost for performing the corresponding set of tasks, assigning a priority level to tasks within the corresponding set of tasks, determining a set of performance indicators corresponding to a task having a first priority level, monitoring the SDE to identify a triggering event, responsive to identifying the triggering event, establishing a second resource configuration based, at least in part, on a performance level of a performance indicator in the set of performance indicators, the second resource configuration addressing the triggering event, and determining a second resource cost for performing the corresponding set of tasks according to the second resource configuration.

Outcome-based software-defined infrastructure

A method and system for outcome-based adjustment of a software-defined environment (SDE) that includes establishing a link between a business outcome and a first resource configuration from software defined environment, establishing a monitoring mechanism for continuously measuring a current state of the SDE, using a behavior model of the SDE to anticipate, or forecast, a triggering event, and responsive to the forecast of a triggering event, using the behavior model to determine a second resource configuration to achieve the business outcome. The link includes at least one of a utility of services for the business outcome, a cost of a set of resources consumed by the first resource configuration, and a risk of the set of resources becoming unavailable.

There is a method and system that includes establishing a security container that describes a workload and a set of resources that corresponds to the workload in a software-defined environment, determining a set of security criteria for the security container, monitoring the workload and the set of resources for security events based, at least in part, upon the set of security criteria, and responsive to identifying a security event, adjusting one or more security mechanisms. The steps of monitoring and adjusting are operated within the software-defined environment.

There is a method and system for capability-based resource allocation in a software-defined environment that performs the following steps (not necessarily in the following order): (i) determining a set of capability characteristics for a plurality of workload resources within a software-defined environment; (ii) determining a set of workload components for a specified workload; and (iii) identifying a set of workload resources from the plurality of workload resources to allocate to the specified workload based, at least in part, on the set of capability characteristics corresponding to each workload within the set of workload resources. A workload component of the set of workload components has a unique set of workload characteristics.

Capability-based abstraction of software-defined infrastructure

A usage allocation of a hardware resource to each of a number of workloads over time is determined using a demand model. The usage allocation of the resource includes a current and past actual usage allocation of the resource, a future projected usage allocation of the resource, and current and past actual usage of the resource. A capacity allocation of the resource is determined using a capacity model. The capacity allocation of the resource includes a current and past capacity and a future projected capacity of the resource. Whether a gap exists between the usage allocation and the capacity allocation is determined using a mapping model. Where the gap exists between the usage allocation of the resource and the capacity allocation of the resource, a user is presented with options determined using the mapping model and selectable by the user to implement a remediation strategy to close the gap.

Remediating gaps between usage allocation of hardware resource and capacity allocation of hardware resource

A system and method for monitoring liveliness includes a management device which has an application layer where applications are executed. A connection monitor is located other than on the application layer, and the connection monitor is configured to receive requests from clients and deliver the requests to components on the application layer. The components include a generic application monitor which responds to liveliness monitor requests from the clients for all applications monitored, and one or more applications which response to requests to that application.

Method and system for generic application liveliness monitoring for business resiliency

A method, system, and computer program product for optimizing query evaluation and processing services in a subscription notification system are provided. The method includes determining hierarchical relationships among a set of subscription queries received from subscription client systems. The hierarchical relationships are determined by identifying subscription queries that are subsets of corresponding other subscription queries in the set. The method also includes creating at least one subscription query at a notification source, the at least one subscription query corresponding to one or more selected subscription queries in the set and including any corresponding subsets.

Methods, systems, and computer program products for optimizing query evaluation and processing in a subscription notification service

Extending a plurality of manageability capabilities of manageable information technology (IT) resources utilize an 'aspect of' association for describing a relationship between a first object representing a manageable resource playing a role of a subject and one or more additional objects each playing a role of an aspect. The 'aspect of' association establishes an overall manageability function for the first object representing a manageable resource and the one or more additional objects as a logical composition of a plurality of manageability capabilities. The manageability capabilities are provided using distinct implementation classes for supporting a specific role, and for supporting management-discipline related aspects and behaviors needed by each of a plurality of resource management applications for managing the manageable resource. The one or more additional objects have an aspect life cycle that is bounded maximally by a subject lifecycle of the first manageable resource.

Dynamically extending a plurality of manageability capabilities of it resources through the use of manageability aspects

A system for managing topologies includes a topology data datastore that stores topology information. A topology computer element interfaces with the topology data datastore to create and update a topology of resources. A subscription computer element generates notifications to a user based on at least one of the creating and the updating of the topology of resources and further based on subscription data.

Expressing manageable resource topology graphs as dynamic stateful resources

Growing community of inventors

Gardiner, NY, United States of America

Michael D Williams