International Business Machines Corporation

Sebnem Jaji

Nam Sang Keung

Ramesh V Chitor

Christopher J Strauss

Jeanne P Bickford

Alan Weger

Amal Ahmed Shaheen

Kerry A Kravec

Wing L Lai

Brian M Trapp

Thomas S Barnett

Rashmi D Chatty

Richard Byron Ward

Robert T Gibbs

Gie Lee

William Y Chang

Thomas George Cantrell

Michel P Riviere

Christopher P Strauss

A method, apparatus, and article of manufacture are provided to support security in a distributed grid computer cluster. Each non-node root node in the cluster is configured with a local security agent, and the root node is configured with a security controller to manage each of the security agents of each non-root node. The security agent of each non-root node is in communication with an associated configuration file that contains data private to the respective non-root node, to allow the security agent to manage security local to the node. The security controller of the root node is in communication with a controller configuration file that contains data that applies to all security agents in the grid cluster, to allow the controller to manage the security agents.

Grid security intrusion detection configuration mechanism

An intrusion detection system, and a related method and computer program product, for implementing intrusion detection in a remote, on-demand computing service environment in which one or more data processing hosts are made available to a remote on-demand user that does not have physical custody and control over the host(s). Intrusion detection entails monitoring resources defined by the on-demand user (or a third party security provider) for intrusion events that are also defined by the on-demand user (or security provider), and implementing responses according to event-action rules that are further defined by the on-demand user (or security provider). An intrusion detection system agent is associated with each of the data processing hosts, and is adapted to monitor the intrusion events and report intrusion activity. If there are plural intrusion detection system agents, they can be individually programmed to monitor and report on agent-specific sets of the intrusion events. An intrusion detection system controller is associated with one of the data processing hosts. It is adapted to manage and monitor the intrusion detection system agent(s), process agent reports of intrusion activity, and communicate intrusion-related information to the on-demand user (or security provider). The responses to intrusion events can be implemented by the intrusion detection system controller in combination with the intrusion detection system agents, or by any such entity alone.

Computer security intrusion detection system for remote, on-demand users

A system includes one or more transponders, a number of sensors, a tracking sub-system, and a billing sub-system. Each transponder is located in a vehicle capable of being driven on a road having at least a first lane and a second lane in which vehicles move in a same direction. Each sensor is movably located at a point along the road to detect the transponder of each vehicle that has changed between the first and the second lanes at the point. The tracking system is communicatively coupled to the sensors to track when and at which of the points the vehicles have changed between the first and the second lanes. The billing system is to periodically bill users of the vehicles based on when and where the vehicles are driven in the second lane of the road.

System and method for tracking and billing vehicle users based on when and in which road lanes their vehicles have been driven

A method of modeling yield for semiconductor products includes determining expected faults for each of a plurality of library elements by running a critical area analysis on each of the library elements, and assessing, from the critical area analysis, an expected number of faults per unit area, and comparing the same to actual observed faults on previously manufactured semiconductor products. Thereafter, the expected number of faults for each library element is updated in response to observed yield. A database is established, which includes the die size and expected faults for each of the library elements. Integrated circuit product die size is estimated, and library elements to be used to create the integrated circuit die are selected. Fault and size data for each of the selected library elements are obtained, the adjusted estimated faults for each of the library elements are summed, and estimated yield is calculated.

Equivalent gate count yield estimation for integrated circuit devices

A cache manager efficiently supporting both connected and disconnected client operation. A single integrated cache is maintained for file system data, status and pathname information. File system requests are satisfied by the cache if possible and passed to a remote file system for servicing if necessary. The cache manager is independent of operating system file syntax and distributed file system protocol. Disconnected operation is supported through an aggressive caching policy and by logging of file system modifications. Modification logs are created when the client is disconnected by logging objects that optimize the log as it is created. Cache file system objects can have multiple parents each with different naming syntax because the object name is not cached.

System and method for efficient cache management in a distributed file

An electronic mail (E-Mail) server system is disclosed that is used within a client/server network system. Typically, the network system includes at least one client connected to a server. The E-Mail server system comprises a mail server, a client mail server, located within the client, and a log manager. The mail server, which is located within the server of the client/server network system, provides a plurality of E-Mail functions accessible across the client/server network system. The client mail server access the mail server and invokes the mail server to copy selected ones of a plurality of the E-Mail functions in the client mail server to enable the client to perform E-Mail composing while in a disconnected state from the mail server. The log manager logs all E-Mail activity performed by the user on the client while in the disconnected state and then performs reconnection and resynchronization between the client and server for replaying the logged activity for execution by the mail server. Optimally, the client/server network system operates in an object oriented environment so that the local client/server instantiates selected ones of class functions of the plurality of E-Mail functions.

Client/server electronic mail system for providng off-line client

Growing community of inventors

Flower Mound, TX, United States of America

Sebnem Jaji