International Business Machines Corporation

Nevenko Zunic

Stephen Michael Matyas, Jr

Mohammad Peyravian

Allen Leonid Roginsky

Raghu Varadan

Kishore Channabasavaiah

David R Safford

Sri Ramanathan

Rosario Gennaro

Matthew B Trevathan

Todd P Seager

Shawn D Hennessy

Shai Halevi

Charanjit Singh Jutla

Paul Ashley Karger

Don Coppersmith

Stephen C Kendrick

Mohammed Peyravian

Donald B Johnson

Marcel Mordechay Yung

Tamer Aboualy

Luke James O'Connor

Charles William Kaufman, Jr

Hyman David Chantz

Kerrie Lamont Holley

Steven Ocepek

Siljan H Simpson

James W Ling

Johnny A Shaieb

David S Braines

Sarbari Gupta

Enrique Vicente Kortright

Benjamin S Gerber

Pawan Khera

Klshore Channabasavaiah

Eva Balogh

Andrew Strain

Per Erwin Jonas

Coimbatore S Chandersekaran

Peter Kenneth Malkin

Stephen M Matyas

Abdul Allam

Omkharan Arasaratnam

Marcel Graf

Morton Gregory Swimmer

Varun Sharma

Adam Charles Nelson

Amy E Creswick

Eduardo M Da Silva

Alison L Graham

Chee Yen Lim

Nicholas J Norris

Gregory J Riche

Subhash K Kothuru

Kenneth R Heard

William D James

Pranav Jhumkhawala

Michael P Bilger

Stewart Wolfe

Aldo P Grossi

Claire-Marie N Karat

Simone Riccetti

Rima Bajaj

David A Chapin

Prioritizing vulnerability scan results is provided. Vulnerability scan results data corresponding to a network of data processing systems are received from a vulnerability scanner. The vulnerability scan results data are parsed to group the vulnerability scan results data by vulnerability identifiers. A corresponding security threat information identifier is associated with each vulnerability identifier. A correlation of each associated security threat information identifier is performed with a set of current vulnerability exploit data that corresponds to that particular security threat information identifier. Current security threat information that affects host data processing systems in the network is determined based on the correlation between each associated security threat information identifier and its corresponding set of current vulnerability exploit data. The current security threat information is prioritized based on a number of corresponding current vulnerability exploit attacks.

Prioritizing vulnerability scan results

A method, computer program product and computer system to analyze network vulnerability expansion is provided. A processor receives network infrastructure data regarding a network. A processor identifies a plurality of vulnerabilities associated with one or more components of the network. A processor generates a architecture model based, at least in part, on the network infrastructure data and the plurality of vulnerabilities. A processor generates a vulnerability expansion model based, at least in part, on the architecture model. A processor determines a vulnerability expansion based, at least in part, on the vulnerability expansion model and at least one vulnerability of plurality of vulnerabilities being compromised.

Cyber-attack vulnerability and propagation model

An approach is disclosed that optically transmit data from a dedicated mobile device (DMD) to another device. Optically transmitting the data is performed by displaying the data on a display screen included in the DMD. The approach further optically receives data at the DMD. The data is received at a digital camera included in the DMD. Based on the exchanged data, the DMD determines if the DMD and the other device are bound to each other.

Dedicated mobile device in support of secure optical data exchange with stand alone certificate authority

An approach is disclosed that places a first side of an optical communication mounting frame (OCMF) onto a surface of a device with some of the device's display and its digital camera being are hidden from view from outside of the OCMF. A second device is received at another side of the OCMF, with some of the device's display and its digital camera being are hidden from view from outside of the OCMF. Each display is viewable from the other device's digital camera. Optical communications between the devices is performed by displaying data on one display that is read by the other device's digital camera and this communication is allowed while the OCMF is present. However, communication between the devices is inhibited when the OCMF is not present.

Optical communication mounting frame in support of secure optical data exchange with stand alone certificate authority

In an approach, a certificate authority management device comprises a computing device with an operating system that supports certificate authority software, a power port with shutter door, a first key slot for an administrative user to enable use of the certificate authority management device in response to an insertion of a first key, a second key slot for management of a plurality of hybrid security keys in response to an insertion of a second key, and a touchscreen with graphical user interface.

Non-networked device performing certificate authority functions in support of remote AAA

In an approach, a hybrid security key comprises at least one physical face on a first side of a key comprising a key groove cut and a barcode coupled to a top surface of the physical face; and at least one logical face on a second side of the key comprising a surface insert overlaying a conductive film, wherein the conductive film includes at least one contact point, at least one conductive trace, and a smart chip.

Hybrid security key with physical and logical attributes

An approach is disclosed that optically transmits a data from an information handling system that is a Stand Alone Certificate Authority (SACA) device, to a dedicated mobile device (DMD). The optically transmission is performed by displaying the data on a display screen included in the SACA device. The approach further optically receives data from the DMD by reading data displayed on the DMD's display screen using the SACA device's digital camera. Based on the data transmitted and received, the system verifies that the DMD and the SACA device are bound to each other.

Secure optical data exchange for stand alone certificate authority device

In an approach, a locking device comprises a lock cylinder, a first solenoid valve and a second solenoid valve, a barcode scanner adjacent to the lock cylinder, a spring-loaded interface adjacent to the lock cylinder, and a logical circuit comprising a first disc and a second disc. In an approach for using a hybrid security key in a non-networked device, a locking device of the non-networked device authenticates logical and physical attributes of a hybrid security key, determines authorizations of the hybrid security key, and audits use of hybrid security key while in the locking device of the non-networked device.

Hybrid physical and logical locking device and mechanism

An approach that provides presence driven notification to a subscriber when a business process automation chain requires manual intervention is provided. In one embodiment, there is a notification tool, including a routing component configured to transmit a message to the subscriber based on data gathered relating to subscriber presence, location and preferences.

Human task integration into BPEL process via presence driven delivery

An approach that identifies a service oriented architecture (SOA) shared service opportunity is provided. In one embodiment, there is an opportunity tool, including an identification component configured to identify a plurality of projects from each of a plurality of lines of business; a selection component configured to select a set of projects common to more than one line of business from the plurality of lines of business; and an evaluation component configured to evaluate the set of projects common to more than one line of business from the plurality of lines of business to identify a SOA shared service opportunity.

Identifying service oriented architecture shared service opportunities

An approach that constructs a service oriented architecture (SOA) shared service is provided. In one embodiment, there is a service construction tool, including an input component configured to receive design input for a SOA shared service solution; and a construction component configured to construct a SOA shared service based on the design input for the SOA shared service solution.

Constructing a service oriented architecture shared service

An approach that transitions to management of a service oriented architecture (SOA) shared service is provided. In one embodiment, there is a service transition tool, including a project component configured to provide a SOA shared service developed as part of a SOA shared services project, and a planning component configured to plan a transition from development of the SOA shared service to management of the SOA shared service.

Transitioning to management of a service oriented architecture shared service

A method including querying a service provider for functional and nonfunctional qualifications of the service provider to provide a service having functional and nonfunctional requirements; responsive to input from the service provider, receiving by a requestor the functional qualifications and nonfunctional qualifications of the service provider including attesting by a third party, not the service provider or requestor, to at least the nonfunctional qualifications of the service provider; evaluating the functional qualifications and attested to nonfunctional qualifications of the service provider; and selecting a service provider having functional and attested to nonfunctional qualifications complying with the functional and nonfunctional requirements of the requestor. The method may be performed on one or more computing devices. Also disclosed is a computer program product.

Programmatically selecting a service provider based on assured quality of service attributes

Methods, including service methods, articles of manufacture, systems, articles and programmable devices are provided for managing the evolution of a service-oriented architecture service over a service lifecycle. An implemented SOA service is evaluated with respect to each of a plurality of line-of-business business-scope attributes and to each of a plurality of different line-of-business functionality attributes. Sets are determined of each of the business-scope attributes and different functionality attributes, wherein each attribute of each determined set is applicable to the implemented service as a function of the evaluating. Sets of business attribute-service evolution factors and technical attribute-service evolution factors associated with the respective determined attribute sets are selected, and both of the sets of selected business attribute-service evolution factors and technical attribute-service evolution factors are used to re-factor the implemented service into a mature enterprise service in response to a service revision.

Service evolution approach in SOA

Growing community of inventors

Hopewell Junction, NY, United States of America

Nevenko Zunic