International Business Machines Corporation

Takahide Nogayama

Yuji Watanabe

Toshihiro Takahashi

Takashi Sakairi

Miki M Enoki

Yuta Tsuboi

Yasuharu Katsuno

Rika Nagahara

Scott Ross Trent

Raymond H P Rudy

Masayoshi Mizutani

Kenichiro Ueno

Takeshi Kubota

Gregory Louis Truty

Toshiyuki Yamane

Toshiro Takase

Takuya Mishina

Akihiko Tozawa

Hyen Vui Chung

Fumiko Akiyama

Toshinari Itoko

Ai Yoshino

Sei Kato

Hyen-Vui Chung

Hideki Inomata

Yu Ito

Daisuke Mogi

Operation testing without side effects may be enabled by a method including preparing a copy of a directory set of at least a part of a host system disk, creating a link to a file in a first directory in the host system disk, in a second directory of the copy of the directory set, wherein the second directory corresponds in position to the first directory in the directory set, and starting a non-privileged system using a disk image including the copy of the directory set and the created link.

Side-effect resistant operation testing

Methods and systems for software analysis include determining a similarity score for an ordered input set and at least one ordered cluster set that represents a distance between the ordered input set and the at least one ordered cluster set. It is determined that he ordered input is similar to a first cluster of the at least one ordered cluster set, based on the similarity score. The ordered input set is merged to the first cluster of the at least one cluster set to generate a merged set that preserves an ordering of the ordered input set and the first cluster. Software analysis is performed using the merged set.

Merging totally ordered sets

A computer-implemented method for invalidating an access token includes generating an access token and an HTML file in response to receipt of a request for issuing the access token, the HTML file comprising a set of instructions for rendering on one window in a browser, a code for generating a child segment in a memory which is controlled by the window, and a code for invalidating the access token in response to completion of rendering on the child segment, in response to completion of receiving, from a resource server, one or more resources requested by a client program executed on the child segment or in response to closing of the window, sending the access token and the HTML file to the browser, and invalidating the access token, in response to receipt, from the browser, of a request for invalidating the access token.

Invalidation of an access token

An example operation may include one or more of requesting, by a client, a service that does not require an account registration, providing, by a server coupled to the client, calculation parameters comprising block content for a new block of a blockchain network to the client, calculating, by the client, one or more hashes of the block content while changing one or more nonces in the block, verifying the one or more hashes and nonces of the block content are valid, submitting, by the client, the one or more valid nonces to the server, submitting a valid hash to the blockchain network, and in response receiving a reward from the blockchain network.

Database service token

Methods and systems for estimating latent service and latent wait times include extracting transition times between activities from a partial event log. Parameters for respective gamma distributions are estimated that characterize latent waiting time and latent service time for each activity. A latent waiting time and latent service time for each activity is estimated based on the estimated parameters using a processor.

Estimation of latent waiting and service times from incomplete event logs

A method, executed by one or more processors, includes receiving a first bit sequence corresponding to source data having a source encoding bit-length (BLS), generating one or more additional bit sequences by shifting the first bit sequence by shift lengths that are equal to a multiple of the source encoding bit-length, partitioning the first bit sequence and the one or more additional bit sequences according to a target encoding bit-length (BLT) to provide a plurality of target encoding search patterns, and searching a target character string encoded with the target encoding using the plurality of target encoding search patterns. A computer system and computer program product corresponding to the above method are also disclosed herein.

Searching base encoded text

A method and system are provided for performing a security inspection of a set of virtual images. The method includes merging the virtual images into a tree structure having a root and a plurality of leaves such that child leaves and a parent leaf to the child leaves have common ones of the virtual images. The method further includes applying a bisection method against a path in the tree from the root to a given one of the plurality of leaves having a given one of the virtual images in which a security violation has been identified to find a particular one of the virtual images that is a root cause of the security violation. The method also includes performing a corrective action for any of the plurality of images having the security violation.

Security inspection of massive virtual hosts for immutable infrastructure and infrastructure as code

A method and system are provided for performing a security inspection of a set of virtual images in a cloud infrastructure. The method includes merging the virtual images into a tree structure having a root and a plurality of leaves such that child leaves and a parent leaf to the child leaves have common ones of the virtual images. The method further includes identifying a security violation in a given one of the virtual images at a given one of the plurality of leaves. The method also includes applying a bisection method against a path in the tree from the root to the given one of the plurality of leaves to find a particular one of the virtual images that is a root cause of the security violation. The method additionally includes performing a corrective action for any of the plurality of images having the security violation.

A three-dimensional shape of a subject is acquired in a healthy and realistic calculation time, using two-dimensional images taken by a general camera having a narrow angle of view. The processing apparatus calculates an image taking position of each of a plurality of images, and includes: a storage unit for storing thereinto a selected image set including images whose image taking position has been calculated; a calculation unit calculates a plurality of image taking position candidates for an unselected image of the plurality of images; a selection unit selects an optimum image taking position having a highest degree of coincidence in correspondence points, from among the plurality of image taking position candidates for the unselected image; and a determination unit determines whether or not the unselected image is added to the selected image set.

Processing apparatus, processing method, and program for determining an image taking position

A method, article, and system for reconfiguring a web page. The method includes extracting dependencies between pages, files, and components of the web page, measuring a network delay value, a transfer efficiency value, and a component size, estimating load time of a candidate file using information of the network delay value, the transfer efficiency value, the dependencies, and the component size. An integer programming problem is generated to minimize an object function representing the load time of the web page by analyzing the web page, solving the integer programming problem, reconfiguring a library file from the solution and reconfiguring the web page by replacing a link to the library file of each page with a link to the reorganized file.

System, method, and program for generating web page

An XML digital signature mechanism for providing message integrity. A sending party serializes a source XML document into a serialized byte array, calculates the source offset and length of the array of the signed part in the serialized byte array, and calculates a source hash value using the serialized array and the source offset and length. The serialized byte array is a non-canonicalized array. The array and source hash value used to sign a part or the whole of the serialized byte array is sent to a receiving party. The receiving party calculates the target offset and length of the signed part in the serialized byte array and calculates a target hash value of the signed part by using the array and the target offset and length. The receiving party compares the target hash value and the source hash value to verify the integrity of the target XML document.

Optimization of signing soap body element

A message gateway apparatus is provided for use in a web service system to process a message containing a request for a destination web service application, in which the message includes a plurality of events within a structured document conforming to a web service protocol and each event of the plurality of events has a name and a content thereof. The message gateway apparatus comprises a message parsing module configured to sequentially identify the events of the plurality of events of the message, an input object creation module configured to sequentially extract the events of the plurality of events from the message parsing module, and a message filtering module configured to sequentially access the events of the plurality of events as the events are extracted from the message parsing module by the input object creation module to analyze the name of each event and perform security processing on the content of each event for which the corresponding name indicates that security measures have been applied according to a security protocol. The input object creation module is configured to construct an input object including input parameters for the destination web service application based on the message. The input object creation module constructing the input object by adding a representation of each event of the plurality of events to the input object after each event is accessed by the message filtering module.

Filtering technique for processing security measures in web service messages

A method for analyzing performance of an information processing system having information processing apparatuses providing services to each other. Communication packets sent or received between the apparatuses are acquired. The apparatuses receive calls from other apparatuses for providing services indicated in the packets. A service call count aof the calls received by the apparatuses during period j of m periods for the service i of n services is computed. A busy time bis computed by summing processing times by the apparatuses for performing the services pertaining to the calls received by the apparatuses during period j. An average processing time dis computed by the apparatuses for each service i, as is an error &#x3b5;in dwherein &#x3b5;=b&#x2212;&#x3a3;ad, by minimizing an index indicative of &#x3b5;. The average processing time dis stored in a storage device and/or displayed on a display device.

Growing community of inventors

Yokohama, Japan

Takahide Nogayama