International Business Machines Corporation

Scott Ballentine

Anthony Thomas Sofia

Bonnie Michele Ordonez

Steven Bruce Jones

Michael Kuan

Embodiments are described for ordering records. Aspects include blocking one or more records and storing the one or more blocked records as a set of records. Aspects also include reserving space for a metadata record for each of the one or more blocked records that meet one or more selection criteria and generating the metadata record for each of the one or more blocked records that meet the one or more selection criteria. Aspects further include adding the metadata records to the set of blocked records and storing the set of records including the metadata records.

Ordering records for timed meta-data generation in a blocked record environment

Embodiments are described for generating, by the processor, a first event record in response to an event being performed by the computer and generating, by the processor, a first tamper resistance record in response to the first event record being generated. The first tamper resistance record includes a first signature is created based at least in part on the first event record and a second signature is created based at least in part on the first event record. Aspects also includes validating the first event record based on the first signature and the second signature in the first tamper resistance record in response to a request to detect tampering of the first event record.

Event log tamper resistance

According to aspects of the present disclosure, a computer-implemented method includes generating a metadata record for each event record of a subset of a plurality of event records, the metadata record being one of a plurality of metadata records. The method further includes assigning a metadata indicator to each event record of the subset of the plurality of event records to indicate that the event record is associated with a metadata record. The method further includes assigning, for each event record of the subset of the plurality of event records and the metadata record associated therewith, a timestamp. The method further includes matching for each event record of the subset of the plurality of event records, one of the plurality of metadata records with the event record based at least in part on the metadata indicator and the timestamp.

Matching non-sequential log metadata with out-of-order record data

A method for matching a first list of pattern strings to a second list of data strings, the first list including zero or more wildcards, may include identifying, for each pattern string in the first list, a data string in the second list corresponding with a respective one of the pattern strings. The method may further include determining whether the first list matches the second list by determining, for each pattern string in the first list, whether a respective one of the strings includes a wildcard for matching zero or more characters of a data string corresponding with the pattern string, and further performing a wildcard string comparison between the pattern string and the data string corresponding with the pattern string. The method may additionally include providing a data value indicating whether the first list matches the second list.

Growing community of inventors

Poughkeepsie, NY, United States of America

Scott Ballentine