International Business Machines Corporation

Google Inc.

Xiaolan Zhang

Vasanth Bala

Lakshminarayanan Renganarayana

Kamal Bhattacharya

Marcel Schlatter

Praveen Jayachandran

Akshat Verma

Florian Graf

Kristiann J Schultz

Darrell Christopher Reimer

Il-Sung Lee

Birgit Monika Pfitzmann

Liangzhao Zeng

Lawrence H Koved

James R Giles

Ea-Ee Jan

Todd W Mummert

Christopher Charles Young

Rohit Wagle

Trent Ray Jaeger

Glenn S Ammons

Tao Tao

John L Randolph

Patrick Stahlberg

Thomas Diethelm

August Huber

David Elrom

Kun-Lung Wu

Eugen Schenfeld

Joel Leonard Wolf

Bugra Gedik

Henrique Andrade

John Joseph Rofrano

Brian L Peterson

Kirsten Weale Hildrum

Balaji Viswanathan

Rema Ananthanarayanan

Deepak Rajan

Sujay Sunil Parekh

Milton A Bonilla

Bharat Krishnamurthy

Niyu Ge

David Kohen

Bo Yang

Fan Jing Meng

Daniel Michael Kuchta

Nagui Halim

Reiner Sailer

Yoonho Park

Yixin Diao

Robert Filepp

Laurent Schares

Marc A Taubenblatt

Jian Yin

Bowen L Alpern

Pu Jin

Matthew A Markley

Yun-Wu Huang

Timothy M Dierks

Gerhard A Widmayer

Nikhil Bansal

Jian Ni

Leendert Van Doorn

Ariel Joseph Feldman

Hsiao Choong Thio

Lin Tan

Jimmy C Chau

Aditya Sinha

Michael Montinarelli

Yuanyuan Zhou

Netanel Keidar

Hunter James Freyer

Sidharth Durgesh Telang

Pedro Henrique Ribeiro Morais E Silva

Tianyuan Liu

Gregory David Laun

Bo Forsberg

Wolfgang O H Richter

Philippe L Seto

Mona Attariyan

Douglas M Barlett

Phillippe L Selo

Harish Dindigal

A method for integrating third-party encryption managers with cloud services includes receiving, at data processing hardware, an operation request requesting a cryptographic operation on data comprising an encryption operation or a decryption operation. When the operation is an encryption operation, the method includes transmitting a data encryption key associated with the data to a remote entity. The remote entity encrypts the data encryption key with a key encryption key and transmits the encrypted data encryption key to the data processing hardware. When the operation is a decryption operation, the method includes transmitting the encrypted data encryption key to the remote entity which causes the remote entity to decrypt the encrypted data encryption key with the key encryption key and transmit the decrypted data encryption key and transmit to the data processing hardware.

Integration of third-party encryption key managers with cloud services

A method for processing a cryptographic operation request includes receiving, at a hardware security module (HSM), the cryptographic operation request including a cryptographic key and at least one authorization token, determining, by the HSM, whether an access control list (ACL) associated with the cryptographic key of the cryptographic operation request is authorized to govern access to the cryptographic key, and validating, by the HSM, the at least one authorization token. When the at least one authorization token is valid and the ACL is authorized to govern access to the cryptographic key of the cryptographic operation request, the method includes processing, by the HSM, the cryptographic operation request.

Tokenized hardware security modules

A method of checking file system compliance including receiving a plurality of compliance rules corresponding to a file system of a production system, collecting, by a collector, file system meta data from the file system, analyzing, by an analyzer, the file system meta data using the plurality of compliance rules to determine at least one compliance deviation of the file system, and throttling the collector and the analyzer independently of one-another, wherein the collector and the analyzer are configured according to a model of performance for the production system and a schedule for the collection and analyzing.

File system compliance checking

During a process of migrating a source system into a standardized virtual environment, virtual machine instances of the source system executing in a hypervisor are snapshotted as virtual machine images in an operational repository of the hypervisor. The virtual machine images in the operational repository are short-term snapshots. From time to time during the migration process, long-term snapshots of the source system are created by checking given ones of the virtual machine images from the hypervisor operational repository into an image library as image objects.

Use of snapshots to reduce risk in migration to a standard virtualized environment

An arbitrary customer instance is transferred from a customer environment to a target managed-infrastructure-as-a-service cloud environment as a transferred image. An image adjustment plan, capturing at least one adjustment required to render the transferred image compliant with standards of the target managed-infrastructure-as-a-service cloud environment, is formulated. The image adjustment plan is executed to adjust the transferred image to obtain an adjusted image compliant with standards of the target managed-infrastructure-as-a-service cloud environment. The adjusted image is on-boarded into the managed-infrastructure-as-a-service cloud environment as a standard image thereof.

Adjustment to managed-infrastructure-as-a-service cloud standard

In an approach for detecting one or more applications in a VM, one or more processors establish a time duration. One or more processors detect two or more files, each file in the two or more files having a time stamp time that differs from a last modified time stamp time of at least one other file in the two or more files by no more than the time duration. One or more processors record an identifier for each file of the two or more files, a location, a name, and a last modified time stamp time of each file of the two or more files. One or more processors map the two or more files to an application installed on the VM.

Application discovery in virtual machines using temporal clustering of installation files

A conformance checker is received on a system that contains hostable content, and is executed. One or more results provided by the conformance checker are evaluated; and the hostable content is migrated to a destination host in accordance with the evaluating step.

Specification-guided migration

A foreign instance is transferred from a customer environment to a target infrastructure-as-a-service cloud environment as an image. The foreign instance is adjusted to standards of the infrastructure-as-a-service cloud environment to obtain an adjusted instance. The adjusted instance is registered into a management system of the infrastructure-as-a-service cloud environment.

Migration to managed clouds

At least one target virtual disk descriptor that describes at least one virtual disk associated with an existing target virtual machine in a target virtualized environment is merged with at least one source virtual disk descriptor that describes at least one virtual disk associated with a source. The merging is carried out to obtain at least one merged virtual disk descriptor compatible with the target virtualized environment. The at least one virtual disk associated with the existing target virtual machine in the target virtualized environment is replaced with the at least one virtual disk associated with the source, in accordance with the at least one merged virtual disk descriptor.

Replacing virtual machine disks

Access is obtained to a plurality of information technology services problem tickets. At least a first subset of the tickets include free text tickets with server names embedded in unstructured text fields. The server names are extracted from the first subset of the tickets via a statistical machine learning technique. Using the extracted server names, those of the first subset of the tickets from which the server names have been extracted are linked to corresponding server entries in a configuration information database to facilitate resolution of problems associated with the first subset of the tickets from which the server names have been extracted; and/or at least one of the extracted server names is identified as missing from a list of known server names.

Active learning on statistical server name extraction from information technology (IT) service tickets

Growing community of inventors

Chappaqua, NY, United States of America

Xiaolan Zhang