International Business Machines Corporation

Nikolaos Anerousis

Jinho Hwang

Maja Vukovic

Jin Xiao

Anup Kalia

Milton H Hernandez

Sai Zeng

Constantin Mircea Adam

Debanjan Saha

Shang Qing Guo

Zon-Yin Shae

Hani Talal Jamjoom

Brian L Peterson

Frederick Y Wu

Daniela Rosu

Shu Tao

Hubertus Franke

Jose Eduardo Moreira

Yaoping Ruan

John Joseph Rofrano

Anuradha Bhamidipaty

Shripad Nadgowda

Giovanni Pacifici

Kun Bai

Ramendra K Sahoo

Abhijit Bose

Chen Lin

Debasisha Padhi

Fabio Minoru Tanada

Frederick Y-f Wu

Mitesh H Vasa

Anubha Verma

Suman K Pathapati

Vysakh K Chandran

Ahmed Amokrane

Larisa Shwartz

Gennaro A Cuomo

Divyesh Jadav

Genady Grabarnik

Frank Andre Schaffa

Mu Qiao

Asser Nasreldin Tantawi

Brian Keith Martin

Eric Kevin Butler

Malgorzata Steinder

Anees Abdul Shaikh

Michael Joseph Spreitzer

Aliza Rivka Heching

Bhavna Agrawal

Frederick Yung-Fung Wu

Lily Barkovic Mummert

Elizabeth Ann Black-Ziegelbein

Sreeram Ramakrishnan

Erik Alan Daughtrey

Susan Maureen Hanson

Hani Talal Jamjoon

Hoda Parvin

Yun Mao

Preethi Anantharaman

Systems and methods are described for a data breach detection based on snapshot analytics. The described systems and methods identify a plurality of snapshots of a data structure, identify a plurality of leaf nodes of the data structure for each of the snapshots, generate a vector of data attributes for each of the leaf nodes, assign a weight to each of the vectors to produce a set of weighted vectors for each of the snapshots, compute a distance metric between each pair of the snapshots based on the corresponding sets of weighted vectors, and detect an abnormal snapshot among the plurality of snapshots based on the distance metrics.

Data breach detection

Embodiments relate to an intelligent computer platform to utilize a micro-service architecture that supports secure connection and policy management for devices. The micro-services include managers to support establishment of a secure connection. The managers register devices in the architecture, and define security policies which are encoded as rules. The policies and corresponding rules are stored in a knowledge base operatively coupled to the architecture. The patterns of security policies are learned over time and used for recommending new rules or validating existing rules. The managers selectively validate one or more rules that correspond to a setting of a requesting device. The secure connection is established for a network level device determined to comply with one or more of the selectively validated rules.

Hybrid network infrastructure management

Techniques facilitating causing a information technology change service action in response to a received instructive command are provided. In one example, a computer-implemented method can comprise receiving a command from a device, wherein an intent of the command relates to performing an information technology change service action. The computer-implemented method can also comprise determining the intent of the command and selecting a service from a federation of services based on the information indicative of the intent of the command. The computer-implemented method can further comprise ordering the service relative to another service of the federation of services based on a determined level of confidence that the service will facilitate performing the information technology change service action. Moreover, the computer-implemented method can comprise activating the service based on an order of the service relative to the other service and the information indicative of the intent of the command.

Contextual automation of information technology change services

Content is selectively provided to users of mobile devices within a venue including an on-site wireless network. User authorization requests and/or user account registration data are transmitted to the on-site wireless network from mobile devices within the venue. Attributes such as user interests and professions, which comprise inferred user profiles, are obtained using the network traffic data. Identities of mobile devices are established based on a combination including two or more of network identifiers, mobile device signatures, and browser signatures. The inferred user profiles are correlated with the mobile device identities. The inferred user profiles are aggregated into user profile groups and then matched with a content provider's intended target profiles. Content is transmitted to the mobile devices corresponding to the intended target profiles and based on correlation of the inferred user profiles with identities of the devices. Inferred user profiles may be verified using social and/or geographical data.

User/group servicing based on deep network analysis

Techniques for generating domain and client-specific application program interface recommendations are provided. In one example, a computer-implemented method comprises determining a semantic similarity between a first client application program interface and a second client application program interface based on a modified client application program interface being generated by removing text data associated with a first description of the first client application program interface. The computer-implemented method can further comprise matching the first description to a second description of the second client application program interface based on the semantic similarity, resulting in on or more matched client application program interfaces. Additionally, the computer-implemented method can further comprise associating the first client application program interface with a community based on the one or more matched client application program interfaces.

Facilitation of domain and client-specific application program interface recommendations

Systems, computer-implemented methods and/or computer program products that facilitate compliance-aware runtime generation of containers are provided. In one embodiment, a computer-implemented method comprises: identifying, by a system operatively coupled to a processor, information used by a target application to containerize; determining whether one or more risk violations exist for the information within one or more defined thresholds; determining whether a compliance or a security violation exists in the information, wherein the determining whether the compliance or security violation exists is performed based on a determination by the risk assessment component that one or more risk violations do not exist; and generating a new container of components corresponding to defined components of the target application that allow the target application to execute without an underlying operating system, wherein the generating is based on a determination that no compliance or security violation exists in the information.

Compliance-aware runtime generation based on application patterns and risk assessment

Techniques for generating domain and client-specific application program interface recommendations are provided. In one example, a computer-implemented method comprises modifying, by a device operatively coupled to a processor, a description of a client application program interface by removing text data associated with the description of the client application program interface, resulting in a modified description of the client application program interface. The computer-implemented method can further comprise analyzing, by the device, a performance associated with the client application program interface to generate an ontology based on a semantic similarity between the modified description of the client application program interface and one or more previous descriptions of one or more previous client application program interfaces.

A system management tool, with a risk assessment mode enabled, is executed within an execution infrastructure on a management computer system, to manage a target computer system in a production situation. When the execution of the tool reaches a risk segment which raises risk for the target system, a user is informed of at least one action to be executed in the risk segment. If the user agrees, the tool is allowed to execute in an automatic mode until an end of the risk segment is reached. Feedback is obtained from the user regarding safety of the risk segment; and the steps are repeated for a plurality of additional risk segments until the tool is deemed safe for all of the risk segments, after which the tool is transitioned from the risk assessment mode to an automatic mode of operation.

Building confidence of system administrator in productivity tools and incremental expansion of adoption

One or more embodiments identify server management actions for resolving problems associated with one or more nodes in information technology infrastructure. In one embodiment, a node-ticket record for an information processing node associated with at least one problem ticket is generated. A set of node-ticket clusters is queried based on the node-ticket record. Each of the set of node-ticket clusters maps a set of server management actions to set of historical node-ticket records associated with the node-ticket cluster. The set of server management actions was previously performed to resolve at least one operational problem associated with at least one information processing node. At least one set of server management actions associated with at least one of the set of node-ticket clusters corresponding to the node-ticket record within a given threshold is identified based on the querying.

Recommending server management actions for information processing systems

The present invention provides a method, system, and computer program product of an intelligent self-service delivery advisor. In an embodiment, the present invention includes, in response to receiving computer system service data, identifying, by a second computer system, a computer system service category among a plurality of computer system categories, identifying, by the second computer system, one or more computer system service tasks, based on the computer system service data and the computer system service category, selecting, by the second computer system, a catalog among a plurality of catalogs, based on the one or more computer system service tasks and the computer system service data, generating, by the second computer system, one or more suggestions based on the catalog and the one or more computer system service tasks; and displaying, displaying by the second computer system, the one or more suggestion on a display logically coupled to the computer system.

Intelligent self-service delivery advisor

Predictive network traffic management in a computer network. Information relating to events likely to have an adverse impact on network traffic, based on predefined parameters of network performance, is collected from the Internet. Details that may be used to predict network traffic density is extracted from the collected events information, and a predicted traffic density, based on the details is generated. Based on the predicted network traffic density, a traffic pattern is generated. A best-matching traffic pattern template to the generated traffic pattern is identified in a store of traffic pattern templates. Based on the best-matching traffic pattern template, bandwidth on the network is provisioned via an SDN controller.

Predictive network traffic management

A computer-implemented agent process running on a first computer automatically intercepts a command issued from the first computer to execute on a target computer prior to invocation of the command on the target computer. A server profile built for an application running on the target computer that supports the command may be retrieved. At least based on the server profile a risk enforcement policy is dynamically constructed. Based on the risk enforcement policy, one or more computer-executable enforcement actions to perform prior to sending the command to the target computer for execution is determined. Based on executing of one or more of the computer-executable enforcement actions, the command may be transmitted to execute on the target computer or prevented from executing on the target computer.

Computer-implemented command control in information technology service environment

A software-defined passive optical network includes a set of optical network terminals, a set of passive optical network ports, and a plurality of splitters. Each of the optical network terminals is connected to a single one of the passive optical network ports through a given one of the splitters, and the network is divided into a plurality of areas, each of which is assigned a given fraction of the passive optical network ports. Passive optical network port utilization is monitored for each of the plurality of areas; for those of the areas determined to have passive optical network port overutilization, the number of the passive optical network ports assigned thereto is increased; and for those of the areas determined to have passive optical network port underutilization, the number of the passive optical network ports assigned thereto is reduced.

Enabling software-defined control in passive optical networks

Growing community of inventors

Chappaqua, NY, United States of America

Nikolaos Anerousis