International Business Machines Corporation

Ori Pomerantz

Franklin Charles Breslau

David B Kumhyr

Louis Thomas Fuka

David S Freeman

Benjamin Hicks Briggs

Gregory J Boss

Andrew R Jones

Kevin Charles Mcconnell

Pamela Ann Nesbitt

Rahul Mishra

Miguel Pedroza

Thuanan Ho

Frank C Breslau

Orcun Atakan

A database contains available cloud environments to which a virtual image workload may be deployed. The database includes ratings for each available cloud option, such as cost, distance, reliability, which workloads that environment may handle. A table of attributes and weights is used to create a rating of the requested deployment. This rating determines where the image is deployed. The invention discloses techniques for gathering additional information from the user about the virtual image workload to be deployed. A mapping algorithm applies the attributes and weights to the gathered information to create a rating for the deployment. An algorithm is then used to determine to which available cloud environment the workload will be deployed.

System of geographic migration of workloads between private and public clouds

In response to a local Advanced Persistent Threat (APT) agent identifying a potential data exfiltration attack, the binary identified in the attack is sent to a static analysis tool for further analysis. The agent also identifies a source and a sink involved in the potential data exfiltration. The static analysis tool decompiles the binary, and then runs the de-compiled code through a static analysis to identify data flows between the source and the sink, e.g., a data flow from the source that is the method used to read sensitive information, and a data flow to the sink that is the method used to write to the remote system. If there are such data flows, the activity reported by the agent is likely a true exfiltration attack. Based on this flow determination, the static analysis tool returns a response to the agent validating that the activity is an attack.

Using source taint analysis to reduce false positives in an advanced persistent threat (APT) protection solution

A method, system and computer-usable medium are disclosed for automating the identification of web form parameters for an authorization engine. A web page containing a set of parameters is received and then processed to identify structured portions it may contain. A target structured portion is then selected and processed to identify a corresponding set of web form parameters. Once identified, the set of web form parameters are then processed to generate a policy with a corresponding set of policy rule parameters. Matching operations are then performed to respectively match individual parameters of the set of web form parameters to individual parameters of the set of policy rule parameters. The policy is then associated with its associated web page URL and the process is repeated, proceeding with selecting another target structured portion to process.

Identification of web form parameters for an authorization engine

The illustrative embodiments provide a method, computer program product, and apparatus for managing collectively sensitive data. Collectively sensitive data is divided into a first partition for reassembly data, a second partition of the collectively sensitive data, and a third partition of the collectively sensitive data. Each of the second partition and the third partition are collectively nonsensitive in isolation. The first partition is stored in a translation table in a secure database. The translation table is configured for use in assembling collectively sensitive data from the second partition and the third partition. The second partition of the collectively sensitive data is stored in a first database associated with a first cloud computing environment. The third partition of collectively sensitive data is stored in a second database associated with a second cloud computing environment.

Managing sensitive data in cloud computing environments

The present invention describes an automated process that enables dynamic provisioning (both creation and deletion) of administrative accounts based upon a real-time need as defined by service desk processes and procedures. This invention enhances current provisioning of administrative account processes that are typically handled by service desk personnel that constantly turnover through firings and hirings. By creating an on-demand provisioning process on a strictly as-needed basis an enhanced security structure is created. In addition, audit ability of access can be added to the processes that provides accountability and traceability of activities that can be directly related back to actual business justifications (the initial problem report) for actions (important not only in ITIL but also regulatory requirements).

Dynamic account provisions for service desk personnel

A method, system, and computer usable program product for verifying certificate use are provided in the illustrative embodiments. A secure data communication is directed to a certificate use verification application. A test certificate that may be stored in a data storage associated with a data processing system is presented to an originator of the secure data communication. The test certificate includes an identity, and the identity identifies an entity other than the intended party to the secure data communication as being the holder of the test certificate. A determination is made whether the originator responds to continue the secure data communication when presented with the test certificate. If the originator responds to continue the secure data communication, a report is made that the originator does not perform a verification of the identity from the test certificate.

Verifying certificate use

A model generator computes a first image perimeter color difference value for each of a plurality of first pixels included in a first image that is captured using a first focal length, and selects one of the first image perimeter color difference values that exceeds a perimeter color difference threshold. Next, the model generator computes a second image perimeter color difference value for each of a plurality of second pixels included in a second image that is captured using a second focal length, and selects one of the second image perimeter color difference values that exceeds the perimeter color difference threshold. The model generator then determines that an edge is located at the first focal length by detecting that the selected first image perimeter color difference value is greater than the selected second image perimeter color difference value, and generates an image accordingly.

Focus-based edge detection

A method, system and computer program product are presented for intercepting data entry by a proxy server to automatically define data entry fields in a webpage. The proxy server counts a number of instances in which a particular type of data is entered into each field in the webpage. If the number of instances exceeds a predetermined number for a specific field, then subsequent users are prompted to enter data of that particular type in that specific field.

Automatic defaults proxy for web-delivered services

A data storage apparatus and method. The apparatus comprises a mounting structure, a motor mechanically attached to mounting structure, and a data storage platter mechanically attached to the motor. The apparatus additionally comprises a single actuator arm comprising a first and second read/write data head or multiple radial movement mechanisms each comprising a read/write data head. The single actuator arm is configured to move axially along an arc and across a top surface of the data storage platter such that the first read/write data head has access to a first section and a second section of the data storage platter and the second read/write data head only has access to the second section of data storage platter. Each radial movement mechanism moves a different read/write data head radially all along a radius of the data storage platter and over and across different sections of the data storage platter.

Data storage

A method for controlling a portable audio device using radio frequency tuning is provided. A radio signal transmitter device communicatively coupled to the portable audio device transmits an audio signal of an audio file on a first radio frequency channel, a forward control signal on a second radio frequency channel, and a backward control signal on a third radio frequency channel to a radio signal receiver device. The portable audio device determines whether an audio output of the forward control signal is received by an audio receiver device. In response to determining that the portable audio device did receive the audio output of the forward control signal using the audio receiver device, the portable audio device plays a next audio file in a play list.

Using radio frequency tuning to control a portable audio device

Data storage apparatus and method

A computer implemented method, apparatus, and computer usable program code for reducing overpolled data in a data processing system is provided. A controller identifies a set of redundant measurements in a cycle. The controller then identifies a number of measurements repeated in the set of redundant measurements. The controller the computes a percentage of redundant polls based on the number of measurements repeated in the set of redundant measurements. The controller then computes a new polling period by reducing an original polling period by the percentage of redundant polls.

Reducing overpolling of data in a data processing system

A method of operating software configured for Internet access on a remote computer includes opening a virtual machine on a remote computer from a user computer and sending user preferences from the user computer to the virtual machine. The method includes sending a request to operate the software configured for Internet access, and receiving user preferences from the virtual machine upon shutdown. A method of operating software configured for Internet access remote from a user computer includes opening a virtual machine on a remote computer and receiving user preferences at the virtual machine from the user computer. The method further includes receiving a request from the user computer at the remote computer and requesting at least one web page from the virtual machine and receiving a close command at the virtual machine from the user computer and sending the user preferences to the user computer in response to the shutdown.

Method for operating software configured for internet access on a remote computer

A system and method for implementing environmentally-sensitive simulations on a data processing system. According to an embodiment of the present invention, an ambient temperature associated with a player's location is provided to an environmental module. The environmental module provides the ambient temperature information to a simulation application. The simulation application modifies the behavior of a simulation executing on the data processing system according to the ambient temperature. The data processing system displays the simulation with the modified behavior to the player.

Growing community of inventors

Austin, TX, United States of America

Ori Pomerantz