International Business Machines Corporation

Pratik Gupta

David Gerard Kuehr-McLaren

David Bruce Lindquist

Hari Shankar

Govindaraj Sampathkumar

Vincent C Williams

Sumit Taank

Sharon L Cutcher

Brian A Stube

Manish Satyapal Gupta

David Louis Kaminsky

Yu-Cheng Hsu

Manish Sethi

Balachandar Rajaraman

Neeraj Joshi

Narendran Sachindran

Erin M Farr

Manoj Soni

Luis Benici Casco-Arias

Andrew David Record

An embodiment identifies a fileset used by an executing application. An embodiment generates, at a first time, a first snapshot of the fileset, the first snapshot comprising a first state of the fileset at the first time and a first indicator corresponding to the first state of the fileset. An embodiment selects, at a recovery time later than the first time, from a sequence of snapshots of the fileset including the first snapshot, a recovery snapshot, the recovery snapshot comprising a recovery indicator, wherein the recovery indicator has a difference from the first indicator that is higher than a threshold value. An embodiment restores, using the recovery snapshot, the fileset to a state other than the first state, the restoring resulting in a restored application.

Application dependency based malware recovery

Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.

Automatic policy generation based on role entitlements and identity attributes

A framework instantiates an application from its disk snapshots. The disk snapshots are taken from a different network environment and migrated to a virtualized environment. Modifications to operating systems and hypervisors are avoided, and no special network isolation support is required. The framework is extensible and plug-in based, allowing product experts to provide knowledge about discovering, updating, starting and stopping of software components. This knowledge base is compiled into a plan that executes various interleaved configuration discovery, updates and start tasks such that a required configuration model can be discovered with minimal start and update task execution. The plan generation automatically stitches together knowledge for the various products, thus significantly simplifying the knowledge specification. Once discovery is complete, the framework utilizes the discovered model to update stale network configurations across software stack and customize configurations beyond network settings.

System and method for instantiation of distributed applications from disk snapshots

The present invention discloses a solution for managing policy artifacts using a configuration management database (CMDB). Policies can be associated with a number of information technology resources, such as servers, businesses applications and the like. The solution permits automatic tagging of the policies (auto-discovery) as they enter the CMDB. For example, when a policy is added, it can be compared against a set of tagging rules. Multiple rules can match a new policy, which results in multiple tags being added for the policy. The policy specific tags can be optionally indexed for faster searching. Once indexed, the CMDB can support policy and policy tag based queries. In one embodiment, policy artifacts can be manipulated within a CMDB tool in a manner consistent with how the CMDB tool handles configuration items (CIs).

Configuration management database (CMDB) which establishes policy artifacts and automatic tagging of the same

A method, apparatus, and computer instructions for responding to a threat condition within the network data processing system. A threat condition within the network data processing system is detected. At least one routing device is dynamically reconfigured within the network data processing system to isolate or segregate one or more infected data processing systems within the network data processing system. This dynamic reconfiguration occurs in response to the threat condition being detected.

System for dynamic network reconfiguration and quarantine in response to threat conditions

A method of controlling password changes in a system having a plurality of data processing systems having separate password registries. Contents of passwords in the password registries of the data processing systems are controlled using password content policies that are centrally shared between the plurality of data processing systems.

Methods, systems, and computer program products that centrally manage password policies

Growing community of inventors

Cary, NC, United States of America

Pratik Gupta