Abstract: A method and system for discovering from a database an object which is confusingly similar with a known object. A database, such as the internet, is searched for objects which, when discovered, may be duplicated and stored. A determination is then made if any object from the database is confusingly similar with a known object. A computer-readable storage medium storing program for causing a processing system to perform the steps of duplicating objects from a database to produce duplicated objects; storing the duplicated produce to produce stored duplicated objects; and determining if any stored duplicated object is confusingly similar with a known object.

Abstract: A system, method and program product for operating a cluster of servers. A load balancer, separate from the servers, selects servers to handle respective work requests assigned to the cluster based on a load balancing algorithm, and sends the work requests to the selected servers. The load balancer receives a request from another server not currently a member of the cluster. The request requests that the other server become a member of the cluster to handle work requests. In response to the request, the load balancer joins the other server as a member of the cluster to handle some work requests subsequently assigned to the cluster. The other server specifies to the load balancer a load threshold for the other server. The other server specifies to the load balancer a time-out to be used for the other server. The time-out indicates a time allotted for the other server to send a hello message since sending a previous hello message.

Abstract: Under the present invention, componentized costs for providing/producing an item are collected from a plurality of suppliers. The componentized costs include the fixed and variable costs associated with raw materials and production for providing the item according to various specifications and order quantities. When a buyer wishes to obtain the item, a particular order specification and a demand forecast for the item will be provided. Based on the particular specification, the demand forecast and the componentized costs, an optimal order quantity for the item will be calculated. Then, a total (lifetime) cost for providing the item will be calculated for each supplier. The supplier having the lowest total cost for the projected lifetime of the item will be identified to the buyer.

Abstract: A method for restoring a remote server that is not responding due to a memory constraint is provided. The method comprises providing a remote server connected to a network communications channel, pinning a reserve memory segment program to the memory in the remote server to control a reserve memory segment allocated within the memory in the remote server when a memory constraint arises. The method further comprises continuously running the reserve memory segment program to listen for a request packet to release the reserve memory segment that is allocated, releasing the reserve memory segment within the memory in the remote server in response to the request packet received, and performing any corrective action at the remote server for restoring the remote server when the reserve memory segment is released.

Abstract: System, method and program product for generating an attack profile. A set of messages from a same source IP address sent to a plurality of different destination IP addresses of a same company during an interval of time is identified. Each of the messages contains a respective signature characteristic of a malicious message. First and second messages of the set that are correlated to each other as part of a same attack are determined based on frequency of occurrence of the first message, frequency of occurrence of the second message in the set and similarity in a number of occurrences of the first message in the set to a number of occurrences of the second message in the set. The first message has a first signature and the second message has a second, different signature. An attack profile based on a combination of the first and second messages is generated and recorded. A rule can be automatically generated to detect a combination of the first and second messages.

Abstract: A system and method of adjusting a display and, more particularly, to a system and method of automatically adjusting a viewing angle of a display is provided. The method includes determining a location of one or more viewers and adjusting the display based on an average viewing location of the one or more viewers. The system includes a computer infrastructure. The computer infrastructure is operable to receive a detection signal indicative of a location of one or more viewers, and adjust the display based on an average viewing location of the one or more viewers.

Abstract: System, method and computer program product for managing a document. A printer driver of a computer outputs printing data corresponding to the document to an IP port of the computer. A program detects the printing data en route to or at the IP port and determines whether there exists, apart from the printing data, a file containing classification information for storing the printing data. If so, the program appends the classification information to the printing data and sends the printing data and appended classification information to a storage server for storage. The classification information specifies a format for storing the printing data. The program determines whether there exists a file containing classification information by searching for a file with a name which corresponds by convention to a name of the document represented by the printing data. The program appends the classification information to the printing data as comments.

Abstract: A computer system and program product for managing events. Program instructions, respond to notification of an event, by determining if a problem ticket can be automatically generated for the event. If so, the program instructions make a request to generate the problem ticket. The program instructions determine if the problem ticket can be automatically generated based in whole or in part on (a) a type of the event and a customer who owns or uses a computer system in which the event occurred, (b) a type of the event, a customer who owns or uses a computer system in which the event occurred, and a severity of the event, (c) a type of the event, a customer who owns or uses a computer system in which the event occurred, and a magnitude of the event, or (d) a type of the event and whether other events of a same type occur at approximately a same time.

Abstract: System, method and program product for detecting a malicious SQL query in a parameter value field of a request. The parameter value field is searched for query operands, characters and/or symbols and combinations of query operands, characters and/or symbols indicative of malicious SQL injection. A respective score assigned to each of the query operands, characters and/or symbols or combinations of query operands, characters and/or symbols found in the parameter value field is added to yield a total score for at least two of the query operands, characters and/or symbols or combinations of query operands, characters and/or symbols found in the parameter value field. Responsive to the total score exceeding a threshold, the request is blocked.

Abstract: The present invention provides for congestion and flow control for a data transmission between computers in a network (e.g., a lossless network) by repeatedly setting a transmission rate for the data transmission at predetermined time intervals. Under the present invention, a ratio of a current occupancy to a maximum occupancy of a queue used for the data transmission is provided (e.g., the ratio can be calculated under the present invention, or obtained as input from an external source). The queue can be that of the receiving computer or of any component (e.g., a switch) that resides in the path of the data transmission. In any event, once the ratio is known, the present invention will set the transmission rate for the data transmission based on a comparison of the ratio to at least one threshold.

Abstract: Intrusion protection. A first packet en route to a first destination is received. A first value representing a benefit for analyzing the first packet for intrusions in relation to a cost for analyzing the first packet for intrusions is automatically determined. An automatic determination is made that the first value is sufficiently high to warrant an analysis of the first packet for intrusions, and in response, the first packet is analyzed for intrusions. If the analysis of the first packet for intrusions indicates an intrusion, the first packet is discarded without forwarding the first packet to the first destination. A second packet en route to a second destination is received. A second value representing a benefit for analyzing the second packet for intrusions in relation to a cost for analyzing the second packet for intrusions is automatically determined.

Abstract: System, method and program for transferring same files from a first computer to a plurality of second computers. Respective measures of file transfer rates from the first computer to the second computers are determined. Based on the respective measures of file transfer rates from the first computer to the second computers, determinations are made as to respective numbers of sockets within the first computer to transfer the files to the second computers to tend to equalize the time required to transfer the files from the first computer to each of the second computers. The files are transferred to each of the second computers using the determined number of sockets, wherein for each of the second computers where the number of sockets is greater than one, the files are divided between the number of sockets for transfer to the respective second computer.

Abstract: A single firewall or cluster of firewalls with a public IP address is interfaced to an internet public subnet to receive service requests for a cluster of network servers. A first private subnet with a plurality of private IP addresses is interfaced to the single firewall or cluster of firewalls to receive the service requests after passing through a firewall. A plurality of redundant load balancers with a respective plurality of private IP addresses are interfaced to the first private subnet to receive the service requests after passing through the first private subnet. The load balancers are interfaced to a second private subnet. The network servers with respective private IP addresses are interfaced to the second private subnet to receive the service requests from the load balancers. At an initialization time, a private IP address is defined for the network load balancer system within the internet access subnet.

Abstract: The present invention relates to a method and system for the remote and dynamic configuration of a webserver to facilitate capacity on demand. The present invention provides a solution to the problem of the management and administration of one or more servers within an environment such as a server farm with regards to the rigid infrastructure and architecture of the servers due to the definition of roles the servers play in relation to the data the servers are publishing. A solution is provided in the form of autonomic modular computing components to allow a server to process a URL and the server to associate it with a remote data source without the need for a restart or manual intervention of the server and to allow the introduction of new services and or hardware resources by collating and analyzing performance data collected from the server to determine if the server is over or under utilized.

Abstract: System, method and program product for determining a cause of a failure of a communication from a source device to a destination device. A preferred route from the source device to the destination device comprises a series of routers in a forward order. First program instructions determine one or more initial routers in the series in the forward order from the source device toward the destination device. A last of the initial routers does not designate a next router in the series in the forward order toward the destination device. Second program instructions determine the series of routers in a reverse order from the destination device toward the source device.

Abstract: A data storage management system for managing a plurality of remotely located, independent data storage systems includes a central monitoring system and a plurality of agent systems, each in communication with a respective remotely located customer data storage system. Each remote agent system collects data from a respective customer data storage system that relates to the performance/status of the data storage system. Each agent system converts the collected data to a standardized format and then stores the collected data at the central monitoring system. The central monitoring system continuously and automatically monitors activities at the remote data storage systems and, using pattern recognition and data correlation techniques, can predict when system faults are developing at these remote data storage systems. Data storage management experts staffing the command center can initiate corrective action before a customer's data is adversely impacted.

Abstract: System, method and program product for managing a chat session. A server maintains an identity and list of member(s) of a group that can be added to a chat session, and a list of people authorized to request that the group of member(s) be added to the chat session. A person in a chat session at a workstation makes a request to add the group of member(s) to the chat session. In response, the workstation sends the request to the server. In response to the request, the server determines if the person is authorized to add the group to the chat session. If so, the server sends an invitation to the member(s) to join the chat session. If not, the server does not send an invitation to the member(s) to join the chat session. To make the request to add the group to the chat session, the person can enter in a chat session text field a character string that is a command to add the group to the chat session.

Abstract: A method for determining if a multiplicity of networks are authorized to communicate with each other and what IP protocol can be used for communication between each combination of two of the networks. For each network, a computer readable data base stores a record of (a) IP protocol(s) permitted to be used with said each network and (b) types of other networks permitted to communicate to said each network. For said each network, a computer readable data base stores a record of IP protocols and destination and source networks permitted by a respective firewall or router for said each network. For said each network, a computer readable data base stores a record of a type of said each network. Multiple combinations of the networks are automatically identified. Each of the combinations comprises a source network and a destination network.

Abstract: Authenticating a first user in a protected network to an application in a DMZ network shared simultaneously with a second user in an unprotected network. The first user supplies a userID and a password to a first server within the protected network for authentication for the application. The first server checks authentication of the first user based on the userID and password. If the first user is authentic, the first server forwards to the application an authentication key for the first user and a selection by the first user pertaining to the application. The application checks authentication of the key, and if authentic, complies with the selection by the first user. The second user supplies another userID and another password to the application. If the other userID and other password are authentic, the application complies with a selection made by the second user pertaining to the application.

Abstract: A system, method and program product for sharing content contained in an e-mail. The method includes determining, using a tool, presence of any file attachments in an e-mail created in an e-mail application, removing, responsive to the determination, any file attachments from the e-mail prior to queuing the e-mail message for delivery, posting, using the tool, the e-mail as a feed document on a feed server on a network, publishing, using the tool, any file attachments removed from the e-mail on a network drive on the network, and sending, using the tool, respective links to the feed document posted and any file attachments published on the network to one or more recipients specified for the e-mail, wherein the respective links notify the one or more recipients of the e-mail and any file attachments. Further, the e-mail application includes a tagging tool for creating tags for the e-mail.