International Business Machines Corporation

Napatech A/s

Vijay Dheap

Michael D Whitley

Christopher J Hardee

Heather Castelli Miller

Baiju Dhirajlal Mandalia

Russell L Couturier

Ben A Wuest

Lee Michael Surprenant

Nicholas E Poore

Jimmy Ming-Der Hsu

William Alexander Bird

Belinda Ying-Chieh Chang

Patrick V Johnstone

Alex Omø Agerholm

Sandeep R Patil

Gabriel Aaron Cohen

Abhinay Ravinder Nagpal

Belinda Y Chang

Suyash S Jape

Douglas H Cox

Ying Chieh Belinda Langner

Christopher Michael Gladd

Derek T Lohnes

Aaron Charles Lindsay

David Preston Sink

A method, apparatus and computer program product for selectively storing network traffic data are described. Network traffic is stored according to a first packet filtering policy in a first repository. The stored network traffic is scanned in the first repository according to a second packet filtering policy to identify a subset of network traffic for archiving. The identified subset of network traffic identified by the second packet filtering policy are forensically interesting packets concerning a security issue. The identified subset of network traffic from the first repository is then stored in a second repository.

Intelligent security context aware elastic storage

Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

Persistent flow identifiers enabling disparate applications

Systems, methods and articles of manufacture allow adjusting the relative weighting associated with evaluation criteria associated with a unified view of dissimilar data. The operation generally includes collecting data regarding attributes of a user interacting with an application, where the collected data has associated evaluation criteria. The data is collectively represented according to the evaluation criteria. The systems, methods and articles of manufacture then allow dynamically modifying the evaluation criteria before evaluating and collectively representing the data according to the adjusted criteria.

Applying relative weighting schemas to online usage data

Business processes are implemented using a collection component for storing system knowledge comprising usage history and user input relative to activities within community of users, where the system knowledge comprises at least a folksonomy. At least one of a user client component interacts with the data collection component to enable a corresponding user to contribute user-derived information to the folksonomy and a monitoring component monitors activities associated with the community of users and interacts with the data collection component to contribute usage information to the system knowledge. Still further, a composition design application interacts with a user to build and/or modify processes built using services, wherein the composition design application recommends candidate services that can implement aspects of the business processes based upon information derived from the system knowledge.

Tooling for implementing business processes using web services

Bandwidth allocation management includes determining current available bandwidth of a network within which a computer system is operating. The bandwidth allocation management also includes using the current available bandwidth and applied feature delivery settings to determine an adjustment in feature delivery to the computer system. At least a portion of the feature delivery settings is specified by an end user of the computer system.

Bandwidth allocation management

A method, a system and a computer program product for selecting a further inquiry for a user to clarify a request for information from the user. One or more candidate answers to the request for information from the user are determined, and a score value is generated for each of one or more characteristics of each candidate answer, where at least one characteristic is associated with an inquiry for the user to clarify the request for information. A characteristic associated with an inquiry is determined that includes score values providing the greatest potential adjustment for the candidate answers in response to a clarification of the request for information, and the inquiry is selected that is associated with the determined characteristic for presentation to the user.

Providing intelligent inquiries in question answer systems

A memory management system is implemented at an application server. The management system includes a configuration file including configuration settings for the application server and applications. The configuration settings include multiple memory management rules. The management system also includes a memory management framework configured to manage settings of resources allocated to the applications based on the memory management rules. The applications requests for the resources through one or more independently operable request threads. The management system also includes multiple application programming interfaces (APIs) configured to facilitate communication between the applications and the memory management framework. The management system further includes a monitoring engine configured to monitor an execution of the request threads and perform actions based upon the configuration settings. The actions include notifying the applications about memory related issues and taking at least one preventive action to avoid the memory related issues.

Monitoring and managing memory thresholds for application request threads

A method and system for enhancing problem resolution at a call center based on speech recognition of a caller includes, receiving an incoming call and generating call data based on speech recognition of the incoming call using a computer. The method generates and associates annotated metadata about the call data. A historical record is created which includes the call data and the annotated metadata. The historical record may be stored in a storage medium communicating with the computer. Context data is generated for the incoming call by analyzing the historical record to identify: a caller, a topic, a date and a stress level of the caller. The method compares the context data to historical records of previous calls. A topic probabilities analysis is conducted by comparing the context data to the historical records of previous calls, and a solution is determined for the topic based on the probabilities analysis.

Enhanced customer experience through speech detection and analysis

Information about security events detected by a group of protected web-connected resources is centrally managed in order to detect distributed attacks and slow paced attacks by providing to a plurality of web-connected resources a deployment component which couples to a native authorization service of each web-connected resource; receiving a plurality of security event reports from one or more of the deployment components by a command and control center computer; based on collected information from the plurality of security event reports, determining a threat level indicator across the plurality of web-connected resources using one or more analyses and metrics; and transmitting the threat level indicator to each of the web-connected resources.

Distributed real-time network protection for authentication systems

Determining and storing at least one validated results set in a global ontology database for future use by an entity that subscribes to the global ontology database. If global ontology data is stored in a global ontology database, attempt to determine a mapping between first and second ontologies. If a mapping between the first and second ontologies can be determined from the global ontology data, the mapping is validated and the validated mapping is defined as a validated results set. If global ontology data is not stored in a global ontology database or a mapping between the first and second ontologies can not be determined from global ontology data stored in the global ontology database, the first and second ontologies are unified by determining a mapping between the first and second ontologies, the mapping is validated and the validated mapping is defined as a validated results set. The validated results set is stored in the global ontology database for future use by an entity that subscribes to the global ontology database.

Determining and storing at least one results set in a global ontology database for future use by an entity that subscribes to the global ontology database

A mashup session manager maintains state of the mashup session to ensure presentation consistency/uniformity across the execution environments. The mashup session manager also tracks the participating execution environments associated with a mashup session (e.g., usernames, device identifiers, network addresses, etc.), and transmits data for presentation consistency to the participating execution environments. In some cases, a view of the mashup session at a participating execution environment may not be current ('stale mashup session view'). The mashup session manager can detect if a view at a participating execution environment is of a past mashup session state, and provide data for the stale mashup session view to become current. In addition, the mashup session manager can propagate design modifications to the participants of the mashup session.

Growing community of inventors

Durham, NC, United States of America

Vijay Dheap