International Business Machines Corporation

Miguel Sang

Randolph Michael Forlenza

Krishna Kishore Yellepeddy

Bruce Anthony Beadle

Richard Jay Cohen

Anne Louise Bolgert

Michael Wayne Brown

Douglas Scott Rothert

Herman Rodriguez

Randolph Michael Florenza

Systems and methods for identifying and remediating malware-compromised mobile devices are disclosed. A computer-implemented method includes accessing, by a computing device, malware risk data; determining, by the computing device, a mobile device is at risk from malware based on the malware risk data; identifying, by the computing device, a set of connections of a user of the mobile device, wherein each connection in the set of connections is associated with a user computer device; identifying, by the computing device, at least one user computer device from the set of connections at risk from the malware; and outputting, by the computer device, a malware notification for the mobile device at risk and at least one user computer device at risk.

Identifying and remediating malware-compromised devices

This disclosure describes an automated process of discovering characteristics needed to integrate a web-based application to a web portal, such as a reverse proxy. This process eliminates the need for application owners and security analysts to manually discover the information needed for the on-boarding process. To this end, application-specific information is determined by monitoring network traffic flows in and out of the application, user authentication and authorization event data, and the like. An application discovery engine analyzes the discovered data, preferably against a set of patterns and heuristic-based rules, to discover or identify the one or more application characteristics. A set of configuration data is then generated, and this configuration data is then used to integrate the application into the web reverse proxy and, in particular, by specifying the configuration needed to 'board' the application. Preferably, the monitoring and application characterization determination functions occur in an automated manner.

Auto-detection of web-based application characteristics for reverse proxy enablement

A system for routing different data types along different client-to-network connection paths. A connection utility, at the client, monitors a data type being transmitted. When a first data type is being transmitted, the connection utility selects a most optimal (or efficient) connection route for that data type. The connection utility then assigns a next connection route for a second data type with different characteristics and/or routing requirements than the first data type. Differences in routing path that are factored into the criteria for selection include: wired versus wireless, level of security, transfer protocol, connection cost, speed, etc.

Routing diversified session via multiple network connections

Each entry within a 'hotlist' (bookmark, favorites, or history list) includes a set of keywords topically identifying the content of the linked page. The keywords included within META tags for HTML files of an accessed Web page may be automatically detected and extracted by the browser for the hotlist when the browser creates the entry for that page within the hotlist. Alternatively, the browser may tabulate terms from the page content itself to select keywords identifying the content. In either case, the user may selectively edit the keywords for a hotlist entry to add, modify, or delete keywords. The keywords are stored with the hotlist data and may be searched for a particular topic. Hotlist entries matching the search criteria are displayed to the user and, upon selection of a particular matching entry by the user, employed to automatically generate a request for the corresponding page.

Method and apparatus for improved bookmark and histories entry creation and access

A method, system and program product for utilization within a client that provides an optimal connection between the client and a network. The method, system and program product provides a graphical user interface for receiving user selection and connection requests and a connection utility for connecting the client system with a selected server of the network. The selected server and connection route is dynamically selected from a plurality of servers in response to the receipt of a connection request, based on a determination of a best route for completing the connection request. The client is provided with multiple connection media and the determination of the best route includes a selection of the connection medium to utilize for the connection. Also, a table of connection information is stored within the client and utilized in evaluating which connection route is optimal.

Dynamically selection of most efficient transmission medium and route from a client browser

Content label categories and associated user restrictions for desired access control may be entered by a privileged user in any communications programs (such as a browser) within a system, and are automatically distributed to all other communications programs (such as a different browser or a newsreader) within the system regardless of whether the same communications protocol is utilized. Communications programs being installed check for access control settings within other communications programs or via a common API in a centrally located operating system access control support function, and employ such settings in configuring internal access controls. Content-based access control is thus implemented uniformly across the system without work arounds being available to the nonprivileged users. Content labels for requested content, which may be embedded within the requested content, contained within a communications header for transactions bearing the requested content, or looked up in internal or external databases utilizing an identifier for the requested content, are checked against content label categories restricted for a current user. If restricted content is detected, the user is prompted for a password before the requested content is displayed.

Extension of browser web page content labels and password checking to communications protocols

A system for providing continuous connection between a client and a network during a session. The system comprises of a connection utility, which monitors a network session for an occurrence of a pre-defined event and/or condition. The system is particularly advantageous in scenarios where a session's connection is lost and the session has to be reconnected to the network. The system also finds applicability with several other types of events/conditions, including a connection break, a slow or congested connection or a change in the type of data being transmitted. When any one of the pre-defined events/conditions occur, the session is automatically routed from the present connection route to another connection route, and is completed on the other connection route. In order to complete the re-routing of the sessions, session information is cached on the client and the server. The session data is tagged with the original session ID. On the server, a special Client Key is stored for later retrieval, and on the client a special Server Key is stored. During the reconnect, the server uses its previously stored session data associated with the client key and previous session ID to regain a new session connection. The client uses its previously stored session data to regain its side of the connection and to pass the proper request over the wire to the server. This special &ldquo;handshake&rdquo; occurs at session reconnect time and allows the special session re-connection to occur. The re-routing of the session is completed with no noticeable loss in connection or session information. Thus, a substantially seamless switching of the session from the first connection route to the second connection route is implemented.

Dynamic, seamless switching of a network session from one connection route to another

A method and apparatus in a computer freeing space in a memory, wherein a plurality of objects are present within the memory. Responsive to an indication that space needs to be freed in the memory, an object is identified within the plurality of objects that is an oldest, least recently used object that is in use in the memory, wherein the object is an identified object and has a set of object attributes. The set of object attributes is inspected for the identified object to determine whether the identified object is a candidate for storage in a seldom used object store. Responsive to a determination that the identified object is a candidate, the object is copied to the seldom used object store, wherein the identified object becomes a relocated object. References to the relocated object to a location of the relocated object in the seldom used object store are adjusted. Space is freed in the memory occupied by the relocated object.

Method and apparatus for freeing memory in a data processing system

A method, system, and program that efficiently augments and enhances the functions of a network library with new functional elements. The method, system and program provide an extension utility, which contains a number of extended library services, such as security, Reliability, Availability, Serviceability, RAS, load balancing, snooping, and logging. The extended library services also include a general network monitoring function, by which a network connection is monitored, and the conditions reported back to the client. Also provided is a control utility, which places hooks related to one or more extended library services in the library processing code of the network protocol stack. The control utility-places the hooks within a call sequence based on a priority determination. Thus, hooks are placed within the call response sequence relative to the time the standard library services are to be performed. During response to a network call or other network process, the hooks operate to call back to and implement the particular extended library service(s). The corresponding extended library service is thus effectively added to the standard library services.

Growing community of inventors

Austin, TX, United States of America

Miguel Sang