Abstract: An embodiment provisions overflow from on-premises cloud workload onto a secure infrastructure provider. The embodiment senses a performance metric of an on-premises cloud. The embodiment deciding, responsive to the sensed performance metric, to scale up, senses a property of an infrastructure provider, responsive to the sensed property, selects the infrastructure provider. The embodiment generates credentials, creates a secure environment, establishes secure communications, and provisions compute hosts in the selected infrastructure provider.

Abstract: An approach is provided for dynamically and automatically generating a playbook. A new incident and the tactics, techniques, and procedures (TTP) specifying the new incident are identified. The TTP are mapped to actions included in a TTP-based response matrix, which associates actions that address security incidents with respective TTPs that specify the security incidents. The actions are mapped to technologies in a defense capabilities matrix, which associates technologies deployed by an organization with multiple countermeasures to security incidents. A playbook is automatically generated that specifies countermeasure(s) to counter the new incident. The countermeasure(s) are based on the actions, the technologies to which the actions are mapped, and the TTP mapped to the actions. The countermeasure(s) are executed by using the defense capabilities matrix.

Abstract: An embodiment detects an inter-cloud service negotiation between a plurality of cloud environments, the inter-cloud service negotiation indicating an interaction between the plurality of cloud environments. The embodiment identifies a plurality of local controllers in the plurality of cloud environments, a local controller in the plurality of local controllers being a computer control node configured to manage resources associated a cloud environment in the plurality of cloud environments including a worker, and the worker being a computer execution node configured to execute tasks using resources associated with the cloud environment. The embodiment selects a local controller from among the plurality of local controllers based on a performance metric of the local controller. The embodiment designates the selected local controller as a super controller, the super controller being configured to manage resources associated the plurality of cloud environments including the plurality of local controllers.

Abstract: A computer-implemented method, according to one embodiment, includes determining a domain and category information from metadata associated with a first webpage. The method further includes determining component types, hierarchies and grouping relationships for a plurality of text elements on the first webpage and constructing context information for the text elements. Word vectors are calculated based on the grouping relationships and the context information, and text feature types of the text elements are extracted based on the word vectors and the context information. The method further includes using the extracted text feature types to determine a re-ordering of a translation of the text elements. A computer program product, according to another embodiment, includes a computer readable storage medium having program instructions embodied therewith. The program instructions are readable and/or executable by a computer to cause the computer to perform the foregoing method.

Abstract: An embodiment causes inserting, into kernel code of an operating system, during execution of the operating system, a traffic monitoring code module. An embodiment extracs, using the traffic monitoring code module, from a plurality of messages between components of a cluster management system managing a first cluster of systems, a first message relating to a resource object, the resource object representing a resource within the first cluster of systems, the traffic monitoring code module triggered by receipt of each of the plurality of messages at a socket of the kernel code. An embodiment constructs, using the first message, a controller-resource object topology, the controller-resource object topology identifying a relationship between the resource object and a controller associated with the resource object.

Abstract: A memory device with in-array magnetic shield includes an electrically conductive structure embedded within an interconnect dielectric material located above a first metal layer. The electrically conductive structure includes a bottom electrode. The memory device further includes a magnetic tunnel junction stack located above the bottom electrode, a dielectric filling layer surrounding the magnetic tunnel junction stack, one or more connecting vias extending through the dielectric filling layer and the interconnect dielectric material until a top portion of the first metal layer, and one or more dummy vias located between the one or more connecting vias and the magnetic tunnel junction stack for conducting an external magnetic field around the memory device.

Abstract: The subject disclosure is directed towards layered substrate structures with aligned optical access to electrical devices formed thereon for laser processing and electrical device tuning. According to an embodiment, a layered substrate structure is provided that comprises an optical substrate having a first surface and a second surface and a patterned bonding layer formed on the second surface that comprises a bonding region and an open region, wherein the open region exposes a portion of the second surface. The layered substrate structure further comprises a device chip bonded to the patterned bonding layer via the bonding region and comprising at least one electrical component aligned with the optical substrate and the open region. The at least one electrical component can include for example, a thin film wire, an air bridge, a qubit, an electrode, a capacitor or a resonator.

Abstract: A node in a blockchain network may receive an endorsed operation for a blockchain network, apply the operation; include a list comprising the operation in a subsequent block, and commit the subsequent block to a ledger of the blockchain network.

Abstract: Shared content privilege modification is provided. An electronic message is identified containing an address for accessing shared content, where the message is for communication to a set of recipients. Existing privileges are determined for the shared content for each recipient in the set of recipients. A requested action regarding the shared content is determined by analyzing the communication using natural language processing. Privileges for the shared content are modified for at least one recipient based on the existing privileges for the at least one recipient being insufficient to perform the requested action.

Abstract: According to one embodiment, a method, computer system, and computer program product for wireless network communication. The embodiment may include identifying a workflow among multiple industrial machines within an activity area. Performance of the workflow requires wireless communication among the multiple industrial machines. The embodiment may include identifying communication requirements and communication capabilities of the multiple industrial machines. In response to determining a wireless network is not available within the activity area, the embodiment may include deploying one or more relay computing devices to deployment locations within the activity area based on the workflow, the communication requirements, and the communication capabilities. The embodiment may include instructing the one or more relay computing devices to create a wireless network which enables wireless communication among the multiple industrial machines.

Abstract: Method and apparatus for transferring a data signal including receiving a digital data signal by a first data input of a transmitter multiplexer; inverting the digital data signal by a first inverter, thereby providing an inverted digital data signal; receiving the inverted digital data signal by a first inverted data input of the transmitter multiplexer; counting, by a first counter, a clock signal; transmitting, by the first counter and in response to the first counter counting a threshold number of clock cycles, a first selection signal to a first selection signal input of the transmitter multiplexer; and alternately transmitting, in response to the first selection signal and by a first digital data signal output of the transmitter multiplexer, the digital data signal and the inverted digital data signal as the transmitter output signal to a receiver, the receiver and the digital data signal output operably coupled to a data link.

Abstract: Embodiments for providing enhanced endpoint multicast emulation in a computing environment. One or more multicast operations may be executed on an overlay network using endpoint multicast emulation by using an overlay layer or a virtual extensible LAN (“VXLAN”) layer to maintain control over one or more multicast groups.

Abstract: An apparatus for tin whisker isolation and detection includes a substrate having a plurality of pads for connecting to an electronic component placed on the substrate, and a shield placed on a surface of the substrate. The shield includes a plurality of cavities aligned over the plurality of pads. A plurality of sensing components each associated with one of the plurality of cavities are configured for sensing an electrically conductive growth from a corresponding pad of the plurality of pads. A plurality of circuit connections are each configured to connect one of the sensing components to detection circuitry. The detection circuitry is configured to receive one or more sensing signals from one or more of the sensing components and detect an electrically conductive growth from the corresponding pad based on the one or more sensing signals.

Abstract: A method, computer program product, and computer system for proactive microservice migration prior to server failure. A directed acyclic graph representing a microservice-based application and including nodes representing microservices is received. Multiple execution paths passing through the nodes are identified. Multiple unique servers configured to provide the microservices are identified. A Continuous Time Markov Chain model generated for each unique server is characterized by a failure rate and a repair rate of each unique server. A weight is computed for each unique server. A failure probability of each execution path is computed in dependence on the weight, and both failure and repair rate, of the unique servers. One or more vulnerable paths are selected from the multiple execution paths, wherein the failure probability of each selected vulnerable path exceeds a specified failure probability threshold. All microservices on at least one vulnerable path are migrated to one or more other servers.

Abstract: A method, computer program product, and computer system are provided for recommending user role assignments. An action executed by a user from among a plurality of users on a network is identified. Data corresponding to the identified action is compiled and consolidated in a database of historical actions associated with the plurality of users. A trend or an anomaly is identified within the compiled and consolidated data based on a role and permissions associated with the user. A recommendation is generated for reassignment of new permissions or a new role associated with the user based on the identified trend or anomaly.

Abstract: Computer technology for use in a computer system including a database system including a database management sub-system, a primary database and a secondary database, with the secondary database being maintained at least approximately in synchronization with the primary database over time as changes are made to data of the primary database (for example, a database system that includes disaster recovery (DR) features). A statistics update is performed first on a standby database to determine whether query efficiency and/or query optimization really will be substantially improved by performance of the statistics update. If not, then statistics update on the primary database is postponed until a future time.

Abstract: A system comprises a plurality of regions, wherein ones of the plurality of regions are partitioned from others of the plurality of regions and at least one of the plurality of regions is a region under test. The system comprises at least one noise generator configured to generate noise in at least the region under test, and at least one noise monitor configured to monitor one or more effects of the noise generated in the region under test. The system comprises a test controller configured to: cause the at least one noise generator to generate the noise in at least the region under test; receive information from the at least one noise monitor indicative of the one or more effects of the noise generated in the region under test; and determine one or more conditions based on at least a portion of the received information.

Abstract: Electrical current flow in a ball grid array (BGA) package can be measured by an apparatus including an integrated circuit (IC) electrically connected to the BGA package. Solder balls connect the BGA package to a printed circuit board (PCB) and are arranged to provide a contiguous channel for a current sense wire. A subset of solder balls is electrically connected to supply current from the PCB through the BGA package to the IC. The current sense wire is attached to the upper surface of the PCB, within the contiguous channel, and surrounds the subset of solder balls. An amplifier is electrically connected to the current sense wire ends to amplify a voltage induced on the current sense wire by current flow into the BGA package. A sensing analog-to-digital converter (ADC) is electrically connected to convert a voltage at the output of the amplifier into digital output signals.

Abstract: A computer implemented method and related system control access to data based on query intent and result semantics in a cognitive search system, the method including receiving a query from a user at a location, wherein the query is configured to identify a set of results. The method also includes, identifying the location and validating the user is authorized to access one or more indexes. The method includes, determining an intent of the query, wherein the intent predicts how the user will use the set of results. The method includes, establishing a first intent geofence, wherein the intent geofence defines a first geographic area. The method includes obtaining a plurality of results from a first index, determining the location of the user is within the first intent geofence, and returning the plurality of results to the user.

Abstract: A federated learning method comprises creating a log of previously provided gradients from a plurality of workers, receiving updated gradients from the plurality of workers, calculating a vulnerability weight for each layer of a global machine learning model using the updated gradients, calculating an aggregated gradient using the vulnerability weight and the updated gradients, and updating the global machine learning model using the aggregated gradient. Some embodiments may also determine whether a Byzantine attack is occurring based upon the calculated aggregated gradient. An apparatus and computer program product may be used to implement the method.