International Business Machines Corporation

Raymond Mak

Allan Henry Kielstra

Roch Georges Archambault

Maria Eleftheriou

Siddhartha Chatterjee

Rachel E Craik

Anthony Simon Bolmarcich

Melanie Ullmer

G Calin Cascaval

Techniques are described for detecting anomalous behavior in program execution. In one example, a method includes logging occurrence of one or more key events during execution of a program. Each key event has a corresponding key event data structure associated with the program, and logging includes storing records associated with the key events, wherein each record is based on the key event data structure associated with the key event. The method further includes analyzing the records to determine if a current pattern of key events associated with the program during execution matches an expected pattern of key events and generating a security alert if the current pattern of key events does not match the expected pattern of key events for the program.

Detecting anomalies in program execution

An improved scalability runtime system for a global address space language running on a distributed or shared memory machine uses a directory of shared variables having a data structure for tracking shared variable information that is shared by a plurality of program threads. Allocation and de-allocation routines are used to allocate and de-allocate shared variable entries in the directory of shared variables. Different routines can be used to access different types of shared data. A control structure is used to control access to the shared data such that all threads can access the data at any time. Since all threads see the same objects, synchronization issues are eliminated. In addition, the improved efficiency of the data sharing allows the number of program threads to be vastly increased.

Scalable runtime system for global address space languages on shared and distributed memory machines

Growing community of inventors

Thornhill, Canada

Raymond Mak