Abstract: A method of automatic security parameter renewal includes determining if the security parameter satisfies a renewal condition, the determining including automatically detecting a time when a security parameter is going to expire, and automatically updating the security parameter when the renewal condition is satisfied. The automatically updating the security parameter includes modifying a certificate upon receipt of a new certificate.

Abstract: An approach for regional firewall clustering for optimal state-sharing of different sites in a virtualized/networked (e.g., cloud) computing environment is provided. In a typical embodiment, each firewall in a given region is informed of its peer firewalls via a registration process with a centralized server. Each firewall opens up an Internet protocol (IP)-based communication channel to each of its peers in the region to share state table information. This allows for asymmetrical firewall flows through the network and allows routing protocols to ascertain the best path to a given destination without having to take firewall placement into consideration.

Abstract: High-sensitivity fluid detection devices and more particularly to devices for alleviating toilet water leaks into the bowl and for detecting overflows from the flush tank or the bowl.

Abstract: A method of automatic security parameter renewal includes determining if a security parameter satisfies a renewal condition, and automatically updating the security parameter when the renewal condition is satisfied. The automatically updating the security parameter includes modifying a certificate in dependent components of an application of the security parameter, by a central certification server, upon receipt of a new certificate.

Abstract: A service catalog may be stored on a storage device and represent systems management tools with types, managed component types the systems management tools can manage, and dependencies associated with the systems management tools. A portal comprises a user interface receiving a request for a systems management tool from the service catalog. A configuration management database stores registered state of the systems management tools and the managed components managed by the systems management tools. An orchestration component is capable of coupling a computer-executable plugin to activate, deactivate, and run the systems management tool on a managed component.

Abstract: A computer-implemented method includes: receiving, by a computing device, a template for creating a virtual machine (VM) instance; separating, by the computing device, the template into a repeated portion and a unique portion; determining, by the computing device, whether the repeated portion is stored in a cache; creating, by the computing device and based on determining that the repeated portion is stored in the cache, the VM instance using the repeated portion stored in the cache; completing, by the computing device, the unique portion of the VM instance to create a completed VM instance; and deploying, by the computing device, the completed VM instance.

Abstract: An approach for regional firewall clustering for optimal state-sharing of different sites in a virtualized/networked (e.g., cloud) computing environment is provided. In a typical embodiment, each firewall in a given region is informed of its peer firewalls via a registration process with a centralized server. Each firewall opens up an Internet protocol (IP)-based communication channel to each of its peers in the region to share state table information. This allows for asymmetrical firewall flows through the network and allows routing protocols to ascertain the best path to a given destination without having to take firewall placement into consideration.

Abstract: A method to generate an executable orchestration process includes: querying a user to enter first computer code for activating a service; querying the user to enter second computer code for undoing actions performed in the activating; loading pre-defined third computer code for determining whether the activated service is a success or has an error, based on the service; loading pre-defined fourth computer code for correcting the error; generating an executable orchestration function from the first through fourth computer code; and generating the orchestration process from the executable orchestration function.

Abstract: Restarting virtual machines is provided. Each server in a plurality of servers is monitored within a client virtual machine host environment via a network. In response to determining that a server failed in the plurality of servers within the client virtual machine host environment, a list of virtual machines that were executing in the failed server is retrieved. A set of virtual machine dependency groups for virtual machines in the list of virtual machines is retrieved based on properties corresponding to each respective virtual machine in the list of virtual machines. The set of virtual machine dependency groups is restarted in parallel on a failover server of an alternate virtual machine host environment via the network.

Abstract: Allocating resources during failure recovery is provided. A set of one or more service level agreement tiers are identified corresponding to a client workload that was being processed by a failed computing environment. A highest level tier is selected in the set of one or more service level agreement tiers. Recovery resources are allocated in a failover computing environment to the highest level tier sufficient to meet a service level agreement associated with the highest level tier. The highest level tier is recovered in the set of one or more service level agreement tiers using the recovery resources in the failover computing environment. In response to recovering the highest level tier, tier resources of the highest level tier are reduced to a steady state level of processing in the failover computing environment.

Abstract: Software, hardware, and virtual network resources are anti-collocated on a networked computing environment. A computerized network-management system receives a list of resources to be installed on components of a network and a set of anti-collocation rules that identify combinations of resources that may not be installed concurrently on the same network component. Each resource is assigned a priority and the resources are organized into groups as a function of these priorities. The groups are processed sequentially in priority order, and a color is assigned to each resource in each group. Any resource not constrained by an anti-collocation rule is assigned a default “most popular” color. Each constrained resource is assigned a color that is not already used by any other resource with which the constrained resource is anti-collocated. The resources in each group are then installed in order of color, with the more populous colors being installed first.

Abstract: A method and associated systems of automatic notification of isolation of a first networked device. In response to detecting that it is not being properly managed by a network-management means, the first networked device creates a notification message that identifies the problem and requests proper network management. The device then transmits this message to any other device or networked node that it can communicate with, along with a request that recipients try to forward the message to the network-management means. If a device that receives the message is able to forward the message successfully, the network-management means takes appropriate steps to begin properly managing the first networked device.

Abstract: An approach for sharing an asset in a peer-to-peer (P2P) network is provided. After a computer sends a request to a new node for a new subscription and prior to the computer receiving the new subscription, the new node requests a digital certificate or permission from a user. The new node receives the digital certificate or permission. The new node determines a number of P2P connections in the network does not exceed a threshold amount and determines that no bandwidth degradation exists in the network. Responsive to receiving the digital certificate or permission, determining the number of P2P connections does not exceed the threshold, and determining that no bandwidth degradation exists in the network, the new node transfers the asset to the computer and updates a local list of nodes authorized to receive assets shared by the new node by adding an identification of the computer.

Abstract: A microprocessor-operated, networked device that uses sensors in, on and near the toilet to detects toilet leaks and overflows of the toilet tank or bowl, then reports these errant conditions with a visual or audible indicator in addition to sending a message via a network (if available) to a computer system that may collate this data with that from other toilets and other sources and subsequently determine further action such as shutting off water or calling a technician. The present invention can be integral to a toilet or removably attached to an existing toilet without this technology.

Abstract: An approach for sharing an asset in a peer-to-peer network is provided. After determining a locally stored first list does not include meta data specifying the asset, a new node is identified. In response to receiving a subscription from the new node, a second list locally stored at the new node is received. The second list includes the meta data and an identification of a source node that has the asset. The first list is updated to include the meta data and the identification of the source node. The updated first list is searched and in response, the meta data and the identification of the source node are detected. Based on the detected meta data and identification, the source node is identified. A request to retrieve the asset is sent to the source node, and in response, the asset is received.

Abstract: A system, a computer readable storage medium, and a method for determining a suggested component restart order in a computer system on a basis of one or more heuristic analyses of a plurality of input data. The method can include performing one or more sort or merge orders after one or more of each heuristic analysis, combining the one or more sort orders according to a weighting algorithm, generating a recovery dependency graph between each of the components of the computer system, and presenting the recovery dependency graph.

Abstract: The present invention concerns methods and apparatus for identifying and assigning meaning to words not recognized by a vocabulary or grammar of a speech recognition system. In an embodiment of the invention, the word may be in an acoustic vocabulary of the speech recognition system, but may be unrecognized by an embedded grammar of a language model of the speech recognition system. In another embodiment of the invention, the word may not be recognized by any vocabulary associated with the speech recognition system. In embodiments of the invention, at least one hypothesis is generated for an utterance not recognized by the speech recognition system. If the at least one hypothesis meets at least one predetermined criterion, a sword or more corresponding to the at least one hypothesis is added to the vocabulary of the speech recognition system.

Abstract: Embodiments include methods, and computer system, and computer program products for assessing and remediating online servers with minimal impact. Aspects include: duplicating, in real-time at time T0, first instance of computer resources of first server into second instance of computer resources of second server, the first instance of computer resources having first instance of operating systems, first instance of applications and first instance of data and the second instance of computer resources having second instance of operating systems, second instance of applications and second instance of data, running assessment and remediation on the second instance of operating systems and applications of the second server, merging the second instance of data of the second server with the first instance of data of the first server, and swapping the identities of the first instance of computer resources of the first server and the second instance of computer resources of the second server.

Abstract: Provisioning and management of virtual machines and shared processor pools to process the virtual machines is provided. Shared processor pool(s) of processing units are established on server(s) of a cluster. The shared processor pool(s) are to process virtual machines to execute an application for which licensing cost is determined based on a number of processing units used to process the virtual machines executing the application. Provision of the virtual machines into the shared processor pool(s) and assignment of the processing units to the shared processor pool(s) is managed, which controls the number of processing units dedicated to processing the virtual machines executing the application, to thereby control licensing costs of executing the application. The managing can provision at least two virtual machines for different tenants into a common shared processor pool of the one or more shared processor pools.

Abstract: Methods, systems, and computer program products for black box techniques for detecting performance and availability issues in virtual machines exploiting hardware assisted virtualization are provided herein. A computer-implemented method includes capturing multiple hardware assisted virtualization exit calls generated in connection with a given virtual machine; calculating one or more virtual machine performance metrics attributed to the given virtual machine based on the multiple hardware assisted virtualization exit calls; determining one or more virtual machine performance issues and/or one or more virtual machine availability issues attributed to the given virtual machine based on the one or more calculated virtual machine performance metrics; and outputting an alert identifying the one or more determined virtual machine performance issues and/or the one or more virtual machine availability issues attributed to the given virtual machine.