International Business Machines Corporation

Alcatel-lucent USA Inc.

Qing Feng Hao

Hui Chen

Xu Zhao

Dong Yan Yang

Biao Cao

Guang Ya Liu

YaLian Pan

Long Long Cao

Xi Qian

Li Ping Hao

Xiao Feng Ren

Xue Yong Zhang

Jia Zhong Wu

Shi Chuang Ren

Jing Ef Zhang

Dong Jia Shi

Yi Min Ym Zhao

Protection of a kernel from a sniff and code reuse attack. A kernel mode page table in initialized in a kernel. The kernel page entries in the kernel mode page table are set from s-pages to u-pages. Supervisor mode access prevention is enabled in the u-pages. Code contained in the kernel page entries in the u-pages is executed, the kernel page entries in the u-pages are capable of execution but are not capable of being accessed and read directly.

Protection of kernel from code reuse attacks

Embodiments of the present disclosure relate to application deployment in a multi-cluster environment. In an embodiment, a computer-implemented method is disclosed. According to the method, first information about a resource requirement of an application is sent to a plurality of managed computing clusters. A plurality of predicted deployment results are received from the plurality of managed computing clusters, which indicate whether the application is to be partially or fully and successfully deployed on the plurality of managed computing clusters. In accordance with a determination, from the plurality of predicted deployment results, that a plurality of functions of the application fail to be deployed on a single managed computing cluster, at least two managed computing clusters are selected from the plurality of managed computing clusters and the application is deployed on the at least two managed computing clusters. In other embodiments, a system and a computer program product are disclosed.

Application deployment in a multi-cluster environment

Techniques for virtual machines include receiving virtual machine (VM) requests, and finding one or more VM requests of the VM requests that optimize available resources of a candidate host machine while seeking to minimize differences between the one or more VM requests and the candidate host machine. The one or more VM requests are allocated to the candidate host machine.

Schedule virtual machines

Systems, methods and computer program products dynamically configuring architecture of high-availability computing environments to maximize uptime of the high-availability systems and minimizing the down time of the computing environment fulfilling incoming connections, requests and data transfers. Embodiments dynamically configure arbitrary systems of the high availability computing environments, including network nodes, virtual machines, containerized systems, managed clusters thereof, agents, and application components, using a lightweight and portable HA controller plugin. The HA controller plugin installs controller components, data migration logic, synchronizes data and configurations of the computing environment on any nodes promoted to controllers with lead HA controllers elected by system administrators. As existing primary or secondary controllers experience failovers, existing components and nodes of the environment can be quickly promoted to operate as controllers via the controller plugin, ensuring redundant controllers are available to takeover and direct incoming network traffic, while minimizing or eliminating downtime due to controller failover.

Dynamic high-availability architecture

Examples of techniques for cache line cleanup for prevention of side channel attack are described herein. An aspect includes determining, by a rollback control unit, a start of a speculative execution in a computer processor. Another aspect includes setting a field in a speculative buffer of the computer processor based on a load or a store to a cache line of a cache being performed by the speculative execution. Another aspect includes determining a failure of the speculative execution. Another aspect includes, based on the failure of the speculative execution, traversing the speculative buffer to determine the set field and performing a cleanup of the cache line based on the set field in the speculative buffer.

Cache line cleanup for prevention of side channel attack

In one embodiment, a network element of the wireless communication system receives a request from a scheduling party. The request is for scheduling message delivery to a destination party. Message delivery parameters are obtained in response to the request. The message delivery parameters may include a date of delivery and contact information for the destination party. The message to be delivered is also obtained. The obtained message is then sent to the destination party as set forth by the obtained message delivery parameters.

Method of scheduling message delivery in a wireless communication system

Growing community of inventors

Beijing, China

Qing Feng Hao