International Business Machines Corporation

Raffaele Giulio Sperandeo

Gianluca Gargaro

Luigi Lombardi

Davide Fazzone

The present disclosure relates to facilitating a recertification of access control information. A corresponding method comprises collecting network traffic information relating to a network. Context information is estimated from the network traffic information for accesses to the software application relating to invocations over the network of services contributing (at least in part) to implement the software application. For example, the context information is estimated by an estimation engine that is configured incrementally during a migration of the software application from a module architecture to a service architecture (according to the network traffic information and to corresponding log information). A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Recertification of access control information based on context information estimated from network traffic

A solution is proposed for facilitating a maintenance of an access control system. A corresponding method comprises evaluating one or more trigger policies according to one or more policy parameters; the policy parameters of the trigger policies in part relate to risks of the access control system and/or to countermeasures for mitigating the risks. A revision of the access control system, comprising a corresponding mining activity, is triggered according to a result of the evaluation of the trigger policies. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Revision of access control system triggered by policies based on risks and/or countermeasures thereof

A method, computer program product and a computer system for facilitating a maintenance of access control information for controlling access to one or more resources of an information technology system by one or more subjects. One or more trigger policies are evaluated according to one or more policy parameters relating to the resources, the subjects and/or the access to the resources by the subjects. A revision of the access control information including a mining activity for mapping the subjects to the resources is triggered according to a result of the evaluation of the trigger policies. A computer program and a computer program product for performing the method are also proposed.

Policy-based triggering of revision of access control information

Embodiments of the present invention disclose a method, computer program product, and system for accessing a network by one or more client devices via a plurality of access devices of wireless type. An access device receives a hand-over request for performing a hand-over from one of the client devices accessing the network via the access device, the hand-over request comprising an indication of one or more candidate access devices of the other access devices for performing the hand-over. The hand-over between the access device and a target access device of the candidate access devices is negotiate in response to the hand-over request. A further hand-over is negotiate of a further client device accessing the network via a source one of the other access devices between the access device and the source access device. The access device enables the further client device to access the network.

Growing community of inventors

Marcianise, Italy

Raffaele Giulio Sperandeo