Abstract: One example method includes integrating user space applications with kernel space events including primitives. The events are intercepted in kernel space and processed in user space. The events can be stored in a session cache that allows a holistic view of behavior to be determined with regard to resources of the computing system. The events in the session cache can be correlated to user or process behavior by provided a time-based view of the events.

Abstract: One example method includes generating a biometric of a user, requesting, and receiving, biometric data from a card, comparing the biometric data with the biometric, and when the biometric data matches data of the biometric, authorizing a transaction requested by a user using the card. The request for biometric data may identify what particular type of biometric data is compatible with the device making the request, and the biometric data may be a subset of the data that makes up the biometric.

Abstract: Techniques are provided for detection of anomalous backup files using known anomalous file fingerprints (or other file-dependent values such as hash values, signatures and/or digest values). One method comprises obtaining first file-dependent values corresponding to respective known anomalous files; obtaining a second file-dependent value for a stored backup file; comparing the second file-dependent value to the first file-dependent values; and performing an automated remedial action in response to a result of the comparing. The second file-dependent value for the stored backup file may be determined by a backup server in response to a source file corresponding to the stored backup file being backed up by the backup server, and may be stored as part of metadata associated with the stored backup file.

Abstract: A system partitions files, including segments identified by fingerprints. into clusters. The system counts common fingerprints by counting fingerprints which correspond to both a file cluster and another file cluster. The system counts unique fingerprints by counting fingerprints which correspond to the file cluster and/or the other file cluster. The system uses the common and unique fingerprint counts to approximate the distance between the file cluster and the other file cluster. The system identifies the smallest of distances which are approximated between all file clusters. The system merges the file cluster and the other file cluster into a merged file cluster if the approximated distance is the smallest of distances. The system determines an index corresponding to the smallest and next smallest of distances. The system determines indexes which correspond to merges of all file clusters. The system uses the maximum of indexes to identify the optimal file clustering.

Abstract: Embodiments of the present disclosure relate to a method, an electronic device, and a computer program product for managing a storage system. The method includes: based on respective task types of a plurality of tasks to be executed, allocating the plurality of tasks to a plurality of accelerator resources in a storage system for processing; at least for a first accelerator resource in the plurality of accelerator resources, determining a first polling interval based on an average task size of a first group of tasks allocated to the first accelerator resource; and scheduling the execution of the first group of tasks at the first accelerator resource at the first polling interval. The embodiments of the present disclosure can optimize the scheduling of the tasks to be executed on the plurality of accelerator resources, thereby optimizing system performance.

Abstract: Techniques for data transmission involve obtaining respective data transmission characteristics of a set of to-be-processed data transmission jobs, the data transmission characteristics of each data transmission job indicating at least one of an expected transmission time and a data size of the data transmission job; determining corresponding weights of the set of data transmission jobs based on the data transmission characteristics of the set of data transmission jobs; and determining a transmission rate of each data transmission job based on the weights and a total transmission rate used for the set of data transmission. Accordingly, different transmission rates may be assigned to different data transmission jobs, thereby increasing a recovery point objective (RPO) completion rate before a failure occurs.

Abstract: An apparatus in one embodiment comprises a processing platform configured to communicate over a network with a plurality of Internet of Things (IoT) devices. The processing platform receives at least a first intermediate message from a first gateway of the network, receives one or more additional intermediate messages from each of one or more additional gateways of the network, associates the first and additional intermediate messages with one another based at least in part on a common message identifier detected in each such intermediate message, and processes the associated first and additional intermediate messages to recover a device message from a given one of the IoT devices. The first intermediate message is based at least in part on at least one application of a designated cryptographic function to the device message utilizing a corresponding key. At least one of the one or more additional intermediate messages provides at least a portion of the key.

Abstract: A method of managing CPU cores in a data storage apparatus (DSA) configured to perform both host I/O (Input/Output) processing and background storage processing is provided. The method includes (a) selectively classifying background storage tasks in one of a first classification for longer-running tasks and a second classification for shorter-running tasks; (b) selecting CPU cores that are running fewer than a threshold number of first-classification background tasks to process host I/O requests; and (c) processing the host I/O requests on their selected CPU cores. An apparatus, system, and computer program product for performing a similar method are also provided.

Abstract: A method for processing trust and security for leased infrastructure includes: detecting a first audit event directed to the leased infrastructure; initiating, in response to detecting the first audit event, an execution of a first trust audit; making a first determination, based on a result of the first trust audit, that the first audit event is a verified event; and transmitting, in response to the first determination and to a computing device of a user leasing the leased infrastructure, first instructions for the computing device to display a first output notifying the user that the leased infrastructure is in a trusted domain.

Abstract: One example method includes performing sound quality operations. Microphone arrays are used to cancel background noise and to enhance speech. With arrays at each environment of each user participating in a call, a first microphone array can cancel or suppress background noise and a second array can generate enhanced speech for transmission to other users. Thus, for user, the audio signal output by the user's device includes an anti-noise signal to cancel background noise present in the user's environment and enhanced speech from other users.

Abstract: A method for managing applications includes obtaining an application resolution report from an administrative system, wherein the application resolution report comprises a customer query and a response, applying a neural network algorithm on a set of tokens associated with the application resolution report to obtain a vector representation of the application resolution report, performing a probability analysis on each vector in the vector representation, based on the probability analysis, identifying an unanswered portion of the application resolution report, and in response to the unanswered portion of the application resolution report, performing a query resolution.

Abstract: One example method includes providing temporary access to a computing system and to providing temporary access as a service. The features of a temporary access can be defined by an entity and a user may be able to obtain a token that includes these features, which may be embedded in the token as claims. The user's access is then controlled in accordance with the embedded claims. The temporary access as a service can be federated. The token may include trust levels and tolerance limits. Further, aspects of the temporary access can be monitored and/or changed. Adjustments to trust levels can be automated or manually performed. Further trust for specific users can be gained or lost over time based on at least previous accesses.

Abstract: Techniques for constructing and otherwise managing knowledge graphs in information processing system environments are disclosed. For example, a method comprises the following steps. The method collects data from a plurality of data sources. The method extracts structured data and unstructured data from the collected data, wherein unstructured data is extracted using an unsupervised machine learning process. The method forms a plurality of sub-graph structures comprising a sub-graph structure for each of the data sources based on at least a portion of the extracted structured data and unstructured data. The method combines the plurality of sub-graph structures to form a combined graph structure representing the collected data from the plurality of data sources. The resulting combined graph structure is a comprehensive knowledge graph.

Abstract: One example method includes, in a data buffer that includes one or more words and whitespaces, calculating a hash value of data in a window that is movable within the data buffer, comparing the hash value to a mask, and when the hash value matches the mask, identifying a position of the window in the data buffer as a chunk anchor position, searching for a whitespace nearest the chunk anchor position, and designating an offset of the whitespace as a segment boundary.

Abstract: One example method includes creating an image definition file, using the image definition file to create an image that is deployable to an edge device, copying an agent into the image, stripping any user passwords out of the image, and removing any unnecessary packages from the image, and after the stripping and the removing, the image becomes an immutable image. The immutable image may then be deployed to a group of edge devices, and one or more layers of the immutable image may be updated by the agent.

Abstract: Techniques are provided for firmware protection using multi-chip storage of firmware images. One method comprises obtaining a firmware image; encrypting the firmware image; splitting the encrypted firmware image into a plurality of encrypted firmware image portions; and storing the plurality of encrypted firmware image portions on a plurality of recovery chips, wherein a threshold number of the encrypted firmware image portions from at least two different recovery chips are needed to reconstruct the firmware image. The threshold number of the encrypted firmware image portions can be obtained from the at least two different recovery chips and a validation can be applied to the obtained encrypted firmware image portions. The threshold number of encrypted firmware image portions may be obtained in response to a chip that stores the firmware image being inactive.

Abstract: A method of managing resources is provided in embodiments of the present disclosure. The method includes determining a set of candidate historical requests associated with a target request. Here, the set of candidate historical requests has the same request type and target resource as the target request. The method further includes determining a target request pattern of the target request based on at least one previous request of the target request. The method includes determining a target historical request from the set of candidate historical requests based on the target request pattern. The method includes generating a target response to the target request based on a historical response to the target historical request. In this way, by determining a response to a historical request that has the most similar request pattern to the target request, a simulated response that is more in line with the context can be generated.

Abstract: Data protection operations based on direct storage access. Data protection operations that involve large data transfers are optimized or improved by transferring the data using a communication path that includes direct access to disks of a storage array. This avoids latencies associated with transferring data through the layers of the storage array. The locations of the data to be transferred are identified and provided to an appliance. The appliance can then read and transfer the data over a communication path that includes direct disk access.

Abstract: Techniques for intelligently routing IO to a storage class memory (SCM) namespace are disclosed. A configuration for a namespace is determined, where the configuration indicates a type of IO that the namespace is structured to handle. Details about the configuration of the namespace are stored in a repository. A forwarding rule is generated based on the namespace's stored configuration. When incoming IO having attributes similar to that type is received, implementation of the forwarding rule causes the incoming IO to be directed to the namespace. Attributes of a particular incoming IO are determined. As a result of the attributes satisfying a similarity threshold relative to the type, the forwarding rule is implemented such that the particular incoming IO is directed to the namespace.

Abstract: One example method includes receiving, from a VM, a request for a software license, in response to the request, transmitting a UUID to the VM, receiving, from the VM, a response that comprises a first encrypted UUID corresponding to the request, and transmitting a client object that includes the first encrypted UUID, and the client object serves as a request for entry of the client object in a database of a cloud computing site.