Abstract: A method for key distribution includes steps or acts of: deprecating a first key on a server; receiving a request from a client wherein the client request includes the deprecated key; verifying the client request by using the deprecated key provided in the client request to decrypt the client request; and sending a communication to the client advising that the first key has been updated. An additional step of sending instructions to the client on obtaining the updated key may also be provided. Additionally, instructions on obtaining the updated key may be sent to the client.

Abstract: A system, method, and computer-readable storage medium for handling hand-offs in a cloud computing environment is provided. The method includes identifying, at a cloud governance module of a server device, a plurality of applications executing on a plurality of servers belonging to a plurality of cloud computing service providers. The method includes determining based upon information in a policy module, to hand-off an execution of at least one identified application executing on a first cloud computing service provider platform to a second cloud computing service provider, determining whether the second cloud computing service provider satisfies one or more governance policies associated with the at least one identified application, and handing-off the execution of the at least one identified application to a second cloud computing provider platform based upon the second cloud computing provider being compliant with the one or more governance policies associated with the at least one identified application.

Abstract: Systems and methods are provided for intrusion detection. The systems and methods may include receiving transaction information related to one or more current transactions between a client entity and a resource server, accessing a database storing a plurality of transaction groups, analyzing the received transaction information with respect to information related to at least one of the plurality of transaction groups, and based on said analyzing, determining a possibility of an occurrence of an intrusion act at the resource server. The transaction groups may be formed based on a plurality of past transactions between a plurality of client entities and the resource server. Identity information of a user associated with the one or more current transactions may also be received along with the transaction information. The user may be associated with at least one of the plurality of transaction groups.

Abstract: According to one embodiment of the present disclosure, a method includes receiving session information including first fingerprint data corresponding to each of one or more fingers presented by an individual in a sequence on a sensor. The method also includes comparing the session information to stored information associated with the individual. The method further includes determining whether the identity of the individual is verified based on the session information and the sequence.

Abstract: A system and method is provided for facilitating data collection from storage devices. A generic low level module may be provided that can handle data collection for devices that store data according to particular variants of a storage standard such as SMI-S storage standard, SNMP protocol, and/or other storage standard.

Abstract: A computer implemented system and method includes accessing an application dialog from a computer readable storage device, wherein the application dialog contains process modules having interface operations and business logic. Process module commands are identified via the computer that are invalid for a service and identifying options for remediation of such commands. A completed process module that has invalid commands removed is compiled as a service procedure. A remote procedure definition and a service wrapper interface are created and stored in a computer readable storage device.

Abstract: According to one embodiment of the present disclosure, a method includes receiving an event notification from a virtual machine manager operable to control the execution of one or more virtual machines, the event notification corresponding to a first virtual machine and indicating an event type associated with the first virtual machine. The method also includes updating an inventory indicating a number of active instances of one or more applications based on the event notification. The method further includes determining compliance or non-compliance with one or more license policies based on the inventory, each license policy corresponding to at least one of the one or more applications.

Abstract: Provided are systems and methods for providing multilingual support for users in a computing environment. The systems and methods may receive and store communications from a user in a first language. If the first language does not match a standard language of the environment, the communication may be translated to the standard language. If a subsequent access request for the stored communication is received, it may be determined whether a language associated with the request matches the standard or first language. If there is a match, the stored original user communication or the stored standard language version maybe returned. If the access request language does not match either language, the user communication may be translated to a language associated with the request directly from the stored original user communication.

Abstract: A system and method is provided for partitioning a global index into multiple index datasets to house indexes and their index values. The index datasets may be stored in initialized physical index areas that are distinct from a standard physical index area.

Abstract: According to one embodiment of the present disclosure, a method for synchronizing data sets includes receiving a request to synchronize a first data set associated with a first server and a second data set associated with a second server. The method also includes determining, with reference to one or more replication constraints, whether to begin synchronization. The method further includes applying one or more resource control actions in response to determining to begin synchronization.

Abstract: A system includes a computer processor that is configured to implement an upper layer stateful application network journaling process. The process includes recording and managing individual client actions on each server in a network. The recording and managing of the individual client actions executes at an application layer of a network protocol stack of the network. The process also includes recording and managing a server status snapshot on a per client basis. The recording and managing of the server status snapshot executes at the application layer of the network protocol stack of the network.

Abstract: A system and method retrieve an image using a first computer processor, and transmit the image from the first computer processor to a second remote computer processor. The first computer processor and the second remote computer processor are coupled via a network connection. The image is received at the network connection, and the image is a lightweight operating system that is configured to be stored in and execute in a virtual memory coupled to the second remote computer processor. The second remote computer processor is not equipped with additional hardware or an agent to receive or execute the image.

Abstract: A system includes a toolbar configured to receive a knowledge nugget relating to a software architecture. The knowledge nugget includes information relating to the software architecture, an identification of the creator of the knowledge nugget, a link to information relating to the knowledge nugget, a blog relating to the knowledge nugget, a tag to enable search and retrieval of the knowledge nugget, and a point of contact for discussion relating to the knowledge nugget. The toolbar is further configured to analyze the knowledge nugget, and to store the knowledge nugget in a transient database or a permanent database as a function of the analysis.

Abstract: According to one embodiment of the present disclosure, a method includes receiving a request to instantiate a virtual machine image in a virtualization environment. The method also includes sending a request for verification of the virtualization environment. The method further includes receiving information from the enforcement module in response to the request for verification of the virtualization environment. The method further includes determining whether the virtualization environment is verified based on the information received.

Abstract: A system is configured to provide a suite of network-based services to users with high availability. The suite of network-based services may include browser-based collaboration functions, process management functions, index functions, search functions, help search functions, document-management functions, and/or other functions. The suite of network-based services may correspond to services provided by a server application such as Microsoft® SharePoint™ being executed on one or more processors of one or more servers. As used herein, the term “high availability” may refer a system design protocol that ensures a certain degree of operational continuity during a given measurement period.

Abstract: In accordance with one embodiment of the present disclosure, a method includes receiving second information about second data stored on a second device. The method also includes determining that the second data is associated with first data stored on a first device. The method further includes, based on the determination about the second data, associating the second data with a policy for backing up a particular type of data. The method further includes initiating a transfer of one or more copies of the second data to a second one or more storage medias defined by the policy.

Abstract: Systems and methods for generating a bookmark for a snapshot of one or more volumes of a production server include initiating a snapshot process to capture a shadow copy of a snapshot-volume set, which includes one or more volumes of the production server. The snapshot process (e.g., Volume Shadow Copy Service of Windows™ operating system) may include (a) temporarily freezing operations on a file system of the production server, and (b) releasing a freeze of operations on the file system of the production server. A bookmark for the shadow copy (representing a consistent state of the associated volumes) may be generated such that the bookmark corresponds to a completion of the temporarily freezing or releasing a freeze of the operations. The bookmark may include a point in time of the completion of the temporarily freezing or releasing the freeze of the operations.

Abstract: The system and method described herein may be used to reconcile duplicate configuration items in a configuration management database. In particular, corresponding properties that represent relationships with a trial configuration item and an existing configuration item may be compared to reconcile whether the trial configuration item corresponds to the existing configuration item and should therefore be combined with the existing configuration item, or alternatively whether the trial configuration item represents a new configuration item that can be added to the configuration management database. If comparing the properties associated with the trial configuration item and the existing configuration item results in an indeterminate outcome, a reconciliation engine may inspect a table stored directly on the trial configuration item and/or the existing configuration item to reconcile whether the trial configuration item and the existing configuration item are indeed different or identical.

Abstract: A method and system for identifying a machine used for an online session with an online provider includes executing a lightweight fingerprint code from a provider interface during an online session to collect and transmit machine and session information; generating and storing a machine signature or identity including a machine effective speed calibration (MESC) which may be used to identify the machine when the machine is used in a subsequent online session by a method of matching the machine signature and MESC to a database of machine identities, analyzing a history of the machine's online sessions to identify one or more response indicators, such as fraud indicators, and executing one or more responses to the response indicators, such as disabling a password or denying an online transaction, where the response and response indicator may be provider-designated.

Abstract: According to one embodiment of the present disclosure, a method for deploying a virtual network address translation (NAT) appliance includes receiving a request to generate a virtual machine environment. The method also includes generating the virtual machine environment from an environment template, the virtual machine environment comprising a first virtual machine. The method further includes configuring a hostname for a virtual NAT appliance instance, and configuring one or more private network settings for the virtual NAT appliance instance. The method also includes generating the virtual NAT appliance instance from the NAT appliance template, the NAT appliance instance comprising a public network interface and a private network interface.