Abstract: Messages which are provided to an application are monitored. Similarities between the messages are determined based on a distance algorithm, in one approach, and messages which are similar are assigned to a common group. For example, the messages may be HTTP messages which include a URL, HTTP header parameters and/or HTTP post parameters. The messages are parsed to derive a string which is used in the distance calculations. Additionally, application runtime data such as response times is obtained and aggregated for the group. Further, a representative message can be determined for each group for comparison to subsequent messages. Results can be reported which include a group identifier, representative message, count and aggregated runtime data.

Abstract: A method and apparatus for managing data, voice, application, and video services allows anticipation of poor quality of service from a remote management station, in order to allow correction of the cause before the end user perceives service quality degradation. Specific system phenomena are identified that coincide with user-perceived service degradation in a particular network. The network is then monitored for the occurrence of those phenomena. Incipient or existing user-perceived quality of service degradation is inferred from the occurrence of one or more of those phenomena and action is taken to avoid and/or correct the degraded service quality condition. In a preferred embodiment, as many of the steps as possible are performed automatically by a network management system. In one embodiment, a close correlation is assumed between application data buffer over-extension and poor quality of service from a user's point of view.

Abstract: An information management system is described comprising one or more workstations running applications to allow a user of the workstation to connect to a network, such as the Internet. Each application has an analyzer, which monitors transmission data that the application is about to transmit to the network or about to receive from the network and which determines an appropriate action to take regarding that transmission data. Such actions may be extracting data from the transmission data, such as passwords and usernames, digital certificates or eCommerce transaction details for storage in a database; ensuring that the transmission data is transmitted at an encryption strength appropriate to the contents of the transmission data; determining whether a check needs to be made as to whether a digital certificate received in transmission data is in force, and determining whether a transaction about to be made by a user of one of the workstations needs third party approval before it is made.

Abstract: A distributed computing system conforms to a multi-level, hierarchical organizational model. One or more control nodes provide for the efficient and automated allocation and management of computing functions and resources within the distributed computing system in accordance with the organization model. The model includes four distinct levels: fabric, domains, tiers and nodes that provide for the logical abstraction and containment of the physical components as well as system and service application software of the enterprise. A user, such as a system administrator, interacts with the control nodes to logically define the hierarchical organization of distributed computing system. The control nodes are responsible for all levels of management in accordance with the model, including fabric management, domain creation, tier creation and node allocation and deployment.

Abstract: A system and method for locating a wireless device includes estimating respective distances between a wireless device and each of a plurality of access points, based upon respective signal strengths of a plurality of signals received by the wireless device from the plurality of access points. The location of the wireless device is estimated based upon the estimated respective distances and position information of the access points.

Abstract: A method and apparatus for addressing problems associated with the implementation of directory services, such as X.500 and LDAP, in a SQL environment, particularly problems associated with interrogating database provided to implement directory services in the SQL environment. According to the disclosed method and apparatus, the system is based on the use of tables that may be arranged to have a plurality of columns, so that they support a variety of functions in order to implement directory services, such as X.500 and LDAP. In one aspect, the present invention provides a method of creating one or more SQL commands corresponding to a directory service. In another aspect, the present invention provides a many examples of tables and their function. Many examples of an implementation of directory services using SQL based technology are disclosed.

Abstract: A method for performing complex event processing includes receiving events from at least one entity at a grid of complex event processing (CEP) units, each of the CEP units comprising a modular architecture for receiving events from event suppliers, recursively processing events, and transmitting events to event consumers. The method further includes generating event inferences based on the plurality of events by one or more CEP units of the grid of CEP units.

Abstract: A method and apparatus are generally disclosed for maintaining data integrity across distributed computer systems. In one embodiment, the method of the invention includes the step of transmitting an object from a server application to a client application. The method also includes the step of transmitting an object state from the server application to the client application. The method further includes the steps of synchronizing the object and object state between the server application and the client application, and updating the object by invoking a server application method after the step of synchronizing. An apparatus and article of manufacture for carrying out the steps of the method are also disclosed.

Abstract: A distributed computing system conforms to a multi-level, hierarchical organizational model. One or more control nodes provide for the efficient and automated allocation and management of computing functions and resources within the distributed computing system in accordance with the organization model. The model includes four distinct levels: fabric, domains, tiers and nodes that provide for the logical abstraction and containment of the physical components as well as system and service application software of the enterprise. A user, such as a system administrator, interacts with the control nodes to logically define the hierarchical organization of distributed computing system. The control node includes an automation subsystem having one or more rule engines that provide autonomic control of the application nodes in accordance with a set of one or more rules.

Abstract: A system includes a plurality of remote servers deployed in a remote network, a central information management server, and a connector for routing transmissions between the plurality of remote servers and the central information management server.

Abstract: Software managing long names in an application programming interface receives a request to perform a requested operation on one or more fields, the application comprising a first operation operable to perform the requested operation on at least one field type. The software determines whether the field type of any of the fields is incompatible with the first operation. If the field types of the one or more fields are compatible with the first operation, then the software performs the requested operation on the one or more fields using the first operation. If the software determines that the field type of at least one of the fields is incompatible with the first operation, then it converts the request into a call for a second operation operable to perform the requested operation on the one or more fields and performs the requested operation using the second operation.

Abstract: A method of detecting malicious code in computer readable code includes performing an initial determination to determine whether a first portion of the computer readable code may potentially have malicious code and if it is determined that the computer readable code potentially has malicious code, performing another determination to determine whether a second portion not including the first portion of the computer readable code has malicious code.

Abstract: Deviation of expected response times is used to characterize the health of one or more backend machines invoked by an application to process a request. Performance data generated in response to monitoring application execution is processed to select backend response time data. The selected data is processed to predict future values of a time series associated with backend response time. The predicted response time values are compared to actual response time values in the time series to determine a deviation from the predicted value. Deviation information for the time series data of response times is then reported to a user through an interface in a simple manner.

Abstract: According to one embodiment, a method for formatting and indexing data includes selecting an input data string associated with a data entry. The input data string is of a first format associated with a first numeral system. The input data string is converted to a second format to create an output data string, which is associated with a second numeral system that is a higher-based numeral system than the first numeral system. The output data string is used to create an index associated with the data entry.

Abstract: A method for dynamic resource provisioning for job placement includes receiving a request to perform a job on an unspecified computer device. One or more job criteria for performing the job are determined. Each job criteria defines a required operational characteristic needed for a computer device to perform the job. A list of available computer devices is provided. The list includes a plurality of computer devices currently provisioned to perform computer operations. A list of suitable computer devices for performing the job is determined from the list of available computer devices by comparing operational characteristics for each available computer device with the job criteria. The list of suitable computer devices includes one or more computer devices having operational characteristics that satisfy the job criteria. From the list of suitable computer devices, a least active computer device is determined, and the job is forwarded to the least active computer device.

Abstract: A method for efficient machine selection for job provisioning includes receiving a job request to perform a job using an unspecified server machine and determining one or more job criteria needed to perform the job from the job request. The method further includes providing a list of one or more server machines potentially operable to perform the job. For each server machine on the list of one or more server machines, a utilization value, one or more job criteria satisfaction values, and an overall suitability value are determined. The overall suitability value for each server machine is determined from the one or more job criteria satisfaction values and the utilization value, and may include a numeric degree to which each server machine is suitable for performing the job. Furthermore, the overall suitability value for each server machine may be included on a list of one or more overall suitability values.

Abstract: Deviation of an expected error rate for a backend server invoked by an application to process a request is used to characterize the backend server health. Performance data generated in response to monitoring application execution is processed to select backend error rate data. The selected data is processed to predict future values of a time series associated with backend error rates. The predicted error rate values are compared to actual error rate values in the time series to determine a deviation from the predicted value. Deviation information for the time series data of error rates is then reported to a user through an interface in a simplified manner.

Abstract: An information management system is described comprising one or more workstations running applications to allow a user of the workstation to connect to a network, such as the Internet. Each application has an analyzer, which monitors transmission data that the application is about to transmit to the network or about to receive from the network and which determines an appropriate action to take regarding that transmission data. Such actions may be extracting data from the transmission data, such as passwords and usernames, digital certificates or eCommerce transaction details for storage in a database; ensuring that the transmission data is transmitted at an encryption strength appropriate to the contents of the transmission data; determining whether a check needs to be made as to whether a digital certificate received in transmission data is in force, and determining whether a transaction about to be made by a user of one of the workstations needs third party approval before it is made.

Abstract: The invention provides a system and method for tracking memory information associated with dynamically loaded kernel modules with the help of a tracking system. The tracking system defines its own kernel memory allocation functions. Whenever, a dynamic kernel module is loaded/unloaded into/from the kernel space, these newly defined functions are called in response to kernel memory allocation/de-allocation requests from the kernel module. The newly defined functions are responsible for allocating and de-allocating kernel memory, as well as, keeping track of information relating to the kernel memory allocations/de-allocations. The tracked information may be used to identify the source of kernel memory leaks.

Abstract: The disclosed methods and systems can be used to manage at least one asset, where the methods and systems include associating the at least one asset with at least one user, and providing the at least one user with at least one task list that includes at least one task associated with a vulnerability of the asset and at least one task associated with a configuration standard associated with the asset.