Abstract: According to one embodiment, a system comprises one or more processors coupled to a memory and executing logic. A policy life cycle component is configured to maintain a repository of security policies. The repository of security policies comprises policies governing access to a virtual host and to a plurality of virtual machines running on the virtual host. The policy life cycle component is also configured to issue a compound policy for an identified virtual operating system running on the virtual host. The compound policy provides a virtual host policy and access rules for each of the plurality of virtual machines running on the virtual host. A topology manager is configured to receive the compound policy from the policy life cycle component, assign the compound to an access control agent, and maintain a security policy topology. The security policy topology stores associations between access control agents and compound policies.

Abstract: According to one embodiment, a system comprises one or more processors coupled to a memory. The one or more processors when executing logic encoded in the memory provide a topology manager. The topology manager is configured to maintain a security topology of a plurality of hosts. The security topology associates one or more virtual hosts policies with a plurality of virtual hosts in a cloud computing deployment. The topology manager is also configured to request a query for one or more hosts that are candidates to be enforced. A portability manager is configured to receive a request to deploy an access control agent on the one or more candidate hosts, determine an optimal agent to be deployed from a list of available agents, and deploy the optimal agent on the one or more candidate hosts.

Abstract: A method for infrastructure automatic discovery from business process models through middleware flows is provided. Data flow in an infrastructure is monitored to observe middleware flows. An information model is formed based on the observed middleware flows.

Abstract: A system and method for filtering network messages, e.g., electronic mail, are provided. A user-specific blocked list or identified junk sender list is published at a server of a computing network, so when a new e-mail arrives, the server can automatically apply filtering rules based on the user-specific junk sender list and delete the appropriate messages. The method includes the steps of generating a list of unacceptable identities at a server; determining an identity associated with a network message received by the server; comparing the identity with the list of unacceptable identities; and deleting the network message from the server if the identity matches an identity on the list of unacceptable identities.

Abstract: A monitoring system is used to monitor extended business transactions comprised of asynchronous messages. Each message may be a request or a response of an application transaction request-response pair and may be identified with a unique identifier. The unique identifier may be used to identify two or more asynchronous messages, where each extended business transaction may be associated with one or more unique identifiers to identify messages that comprise the business transaction. The extended business transactions are completed over an extended period of time and implemented over several different machines which may or may not be in communication with each other are monitored. Alerts are generated when messages of the extended business transaction do not satisfy a threshold or other criteria, such as a time period for occurring.

Abstract: Methods and systems are disclosed for managing wireless devices in an enterprise. A first exemplary method manages the physical access points of a wireless network in an enterprise. A second exemplary method manages the assets of wireless devices in an enterprise. A third exemplary method enables virus detection within wireless devices. A fourth exemplary method manages wireless device data backup.

Abstract: A method for converting a table object from a first partitioning type to a second partitioning type includes steps or acts of gathering information including a definition of a clustering index of the table object; converting the table object of the first partitioning type into a virtual table object of the second partitioning type by virtually applying the information to a clustering index of the table object such that the virtual table object represents how the table object will appear when it is explicitly converted; and presenting the virtual table object to a user for viewing and manipulating as a table of the second partitioning type before generating an explicit conversion to said second partitioning type.

Abstract: A method for generating computer code includes automatically generating a data structure based on a data description. Automatically generating a user interface based on the data description. Automatically generating linking code for linking the generated data structure, the user interface and control code.

Abstract: An information management system is described comprising one or more workstations running applications to allow a user of the workstation to connect to a network, such as the Internet. Each application has an analyzer, which monitors transmission data that the application is about to transmit to the network or about to receive from the network and which determines an appropriate action to take regarding that transmission data. Such actions may be extracting data from the transmission data, such as passwords and usernames, digital certificates or eCommerce transaction details for storage in a database; ensuring that the transmission data is transmitted at an encryption strength appropriate to the contents of the transmission data; determining whether a check needs to be made as to whether a digital certificate received in transmission data is in force, and determining whether a transaction about to be made by a user of one of the workstations needs third party approval before it is made.

Abstract: According to one embodiment, a computer-implemented method for aligning projects with an objective of an organization is disclosed. The method may include storing in a computer system a representation of an objective of an organization. The method may further include storing in the computer system a plurality of sustainability projects of the organization. Additionally, the method may include establishing a computer-based logical link between the objective of the organization and at least some of the plurality of sustainability projects of the organization. In certain embodiments, the method may include receiving from the computer system data representing one or more respective metrics for each of the at least some of the plurality of sustainability projects of the organization. The method may further include generating one or more key performance indicators for each of the at least some of the plurality of sustainability projects of the organization.

Abstract: A computer-implemented method for managing sustainability for an organization is disclosed. The method may include storing on one or more memory modules of a computer system a plurality of instances of an ecoActivity object. Each instance of the ecoActivity object may represent an activity of the organization affecting environmental sustainability. The method may further include storing a plurality of instances of an emission factor object. Each instance of the emission factor object may at least partially quantify one or more green house gas emissions as a function of one or more respective metrics. The method may include establishing a computer-based logical link between each one of the plurality of instances of the ecoActivity object and at least one of the instances of the emission factor object. In certain embodiments, the method may include receiving data representing the metric(s) for the logically linked instance(s) of the emission factor object.

Abstract: According to one embodiment, a computer-implemented method for evaluating sustainability projects of an organization is disclosed. The method may include retrieving from a computer system a sustainability objective of the organization. In certain embodiments, the method may include retrieving from the computer system a plurality of project submissions of the organization. Each of the plurality of project submissions may be associated with the sustainability objective of the organization. The method may further include retrieving from the computer system a plurality of first scores, each first score being associated with at least one of the plurality of project submissions. In particular embodiments, the method may include generating at the computer system a displayable output representing an expected contribution of each one of the plurality of project submissions towards the sustainability of the organization. The displayable output may comprise a plurality of second scores.

Abstract: A computer-implemented method for managing stakeholder impact on sustainability for an organization is disclosed. The method may include storing a plurality of instances of a stakeholder object. Each instance may define a plurality of characteristics of a stakeholder of the organization.

Abstract: According to one embodiment, a computer-implemented method for managing assessments for an organization is disclosed. The method may include storing in a computer system a plurality of instances of an assessment object. Each of the plurality of instances of an assessment object may be configured to track progress of a plurality of assessment attributes. The method may further include receiving an input associated with a plurality of at least a subset of the assessment attributes. Additionally, the method may include generating an assessment plan based at least in part on the received data. In certain embodiments, the method may include establishing a computer-based logical link between the assessment plan and least one sustainability project of the organization, the at least one sustainability project of the organization stored in the computer system. The method may further include receiving from the computer system data for each of the plurality of at least the subset of the assessment attributes.

Abstract: A computer-implemented method for managing sustainability for an organization is disclosed. The method may include storing in a computer system a plurality of characteristics of an activity. The activity may contribute to the carbon footprint of an organization. The plurality of characteristics may include a unit of measurement, an activity category, a plurality of hierarchical descriptors, and a respective multiplier for each hierarchical descriptor. The method may further include receiving from the computer system data representing a number of the unit of measurement. Additionally, the method may include receiving from the computer system data representing a first one of the plurality of hierarchical descriptors. The method may further include calculating, using a processor of a computer unit, a carbon emission value based at least in part by multiplying the number of the unit of measurement by the respective multiplier of the first one of the plurality of hierarchical descriptors.

Abstract: A reporting system comprises a plurality of reporting modules and a reporting server. Each reporting module comprises an executable data gatherer and an executable registration portion that dynamically registers the reporting module with the reporting server. The reporting server generates reports by invoking the data gatherers associated with registered reporting modules. The data gatherers generate self-describing report documents that contain data description information in addition to the report data. The reporting server encapsulates the report documents within events and stores the events in an event log along with other types of events related to the computing system. A user interface displays the report data using data description information contained in the report documents.

Abstract: Role search apparatus for grouping nodes according to relationships with other nodes, the apparatus comprising: an input for receiving an arrangement of nodes said arrangement comprising at least two partitions of said nodes and with predetermined relationships between nodes across said partitions, and a pattern recognition unit associated with said input, for using pattern recognition on said nodes and said relationships to find relationship patterns amongst said nodes, thereby to form at least one group from nodes of a first of said partitions, wherein said nodes being formed into said group share relationships with same ones of a predetermined number of nodes in a second partition.

Abstract: A system and method for reconstructing a previous state of a configuration item based on information regarding changes to one or more values of one or more attributes associated with the configuration item.

Abstract: A method for creating a reusable library, including providing one or more functions, providing a function table for the provided one or more functions, and providing a configuration structure for communicating values between the provided one or more functions and a program that calls the reusable library. The program that calls the reusable library communicates a function table structure to the reusable library containing information as to which of the one or more functions are desirable. When those of the one or more functions that are not desirable contain dependencies, those dependencies are canceled.

Abstract: A method for scheduling jobs in a computer system includes storing a plurality of job queue files in a random access memory, accessing at least one of the job queue files stored in random access memory, and scheduling, based in part on the at least one job queue file, execution of a job associated with the at least one job queue file. In a more particular embodiment, a method for scheduling jobs in a computer system include storing a plurality of job queue files in a random access memory. The plurality of job queue files include information associated with at least one job. The method also includes storing the information external to the random access memory and accessing at least one of the job queue files stored in the random access memory. The method also includes scheduling, based at least in part on the at least one job queue file, execution of a job associated with at least one job queue file.