Abstract: A cloud infrastructure security assurance service is enhanced to facilitate bursting of cloud applications into other cloud infrastructures. The security assurance service provides a mechanism to enable creation and management of secure application zones within a cloud infrastructure. When the security assurance service receives an indication that a workload associated with a cloud application triggers a cloud burst, the service is extended into a new cloud infrastructure. Once the security assurance service is instantiated in the new cloud infrastructure, it identifies the broad security requirements of the application, as well as the security capabilities of the new environment. Using this information, the security assurance service computes a minimal security environment needed by the cloud application for the burst operation.

Abstract: Various embodiments predict performance of a system including a plurality of server tiers. In one embodiment, a first set of performance information is collected for a base allocation of computing resources across multiple server tiers in the plurality of sever tiers for a set of workloads. A set of experimental allocations of the computing resources is generated on a tier-by-tier basis. Each of the set of experimental allocations varies the computing resources allocated by the base allocation for a single server tier of the multiple server tiers. A second set of performance information associated with the single server tier for each of the set of experimental allocations is collected for a plurality of workloads. At least one performance characteristic of at least one candidate allocation of computing resources across the multiple server tiers is predicted for a given workload based on the first and second sets of performance information.

Abstract: A photodiode device including a photosensitive diffusion junction within a single layer. The photodiode device further includes a resonant grating located within the single layer. The photosensitive diffusion junction is located within the resonant grating.

Abstract: According to one embodiment of the present invention, a system identifies and extracts data structures embedded within a data stream, and comprises a computer system including at least one processor. The system analyzes the data stream and identifies data structure definitions corresponding to analyzed data stream portions. The data structure definitions each define a structure of a corresponding data structure, and are configurable to accommodate various types of data structures within the data stream. The corresponding data structures within the data stream are generated by extracting information from the data stream in accordance with the data structure definitions. Embodiments of the present invention further include a method and computer program product for identifying and extracting data structures embedded within a data stream in substantially the same manner described above.

Abstract: A mechanism is provided for optimizing a language/media translation map. A user input is received comprising an input language/media selection, one or more output languages/medias selections, and a threshold for at least one of accuracy or throughput of one or more requested language/media translations. For each of the one or more requested language media translations, a determination is made as to whether an accuracy or throughput of a selected one of an automated translation system or a human resource translator is above the threshold for the at least one of accuracy or throughput. Responsive to the accuracy or throughput being above the threshold, either the selected one of the automated translation system or the selected one of the human resource translator is added to a multiple language/media translation map. An optimized multiple language/media translation map is then generated for use by a translation orchestration module in the data processing system.

Abstract: Provided are a method, system, and article of manufacture wherein at least a first zone is maintained in a fibre channel arbitrated loop system, and wherein a plurality of storage devices is included in the first zone. A determination is made that diagnostic operations have to be performed on a storage device that is included in the plurality of storage devices. A second zone is generated, wherein the second zone includes the storage device on which the diagnostic operations have to be performed, and wherein the storage device is removed from the plurality of storage devices in the first zone leaving a remaining set of storage devices in the first zone. Diagnostic operations are performed on the storage device in the second zone while other operations are performed on the remaining set of storage devices in the first zone.

Abstract: A digital transmission circuit and method providing selectable power consumption via multiple weighted driver slices improves the flexibility of an interface while reducing power consumption when possible. A cascaded series of driver stages is provided by a set of parallel slices and a control logic that activates one or more of the slices, which combine to produce a cascaded active driver circuit. The power consumption/drive level selectability of the slice combination provides a driver that can be fine-tuned to particular applications to provide the required performance at a minimum power consumption level.

Abstract: A method, system and computer program product for improving accuracy and experience of a game. Signals are sent from a computer system to appropriate sensors based on a player's or game object's position to activate connected light-emitting fibers that are blended with grass on a playing field. The light-emitting fibers are activated in such a manner to display light to indicate an infraction (e.g., a player was in an offside position), a successful play (e.g., team made a first down), appropriate maneuvers, boundaries for a play, etc., thereby ensuring the game is fair and accurate and enhancing the experience of the game.

Abstract: A method for debugging a process in a workflow engine, wherein the process includes a plurality of activity points, includes steps of: attaching to a running business process being controlled by the workflow engine; initiating a debugging session; receiving a set of breakpoints to be inserted into designated points in the process; stopping the running of the process at one or more of the breakpoints; and presenting a user with information relating to where the process has stopped and the status of the process flow.

Abstract: An improved solution for extracting and identifying key terms in content is provided. In the solution, one or more documents can be obtained and one or more candidate terms can be obtained from the content of each document. Subsequently, one or more exclusion conditions can be used to filter the candidate terms thereby generating a set of key terms. In particular, all common terms and/or all near duplicate candidate terms can be excluded from the set of key terms. The set of key terms can be used in translating the content, generating a glossary/index for the content, detecting and/or correcting incorrect terms and usages of terms in the content, building a terminology repository, and/or the like. In one embodiment, the key term extraction is performed to facilitate the translation of product documentation into a second language in order to release the product in one or more nations.

Abstract: A high frequency connector utilizes flex strip signal/reference conductor pairs extending in channels formed in a dielectric connector body between terminations at connector ends. The flex strips are formed as signal and reference conductor traces separated by a flexible dielectric wherein the impedance can be influenced by the width of the signal and reference traces and the thickness and selected material of the dielectric separating the adjoining conductor traces. Design of the flex strip assemblies is used to vary the capacitance which enables the connector impedance to match the impedance of the circuits and/or cables connected to the connector and mitigate any discontinuities among the sequence of circuit paths. The close proximity of signal and reference traces within the pair and the separation of signal lines in the connector body reduces cross talk by minimizing mutual inductance between signal lines.

Abstract: A mechanism is provided for securing cryptographic functionality within a host system such that it may only be used when a system administrator physically allows it via a hardware security token. In addition, a hardware security unit is integrated into a data processing system, and the hardware security unit acts as a hardware certificate authority. The hardware security unit may be viewed as supporting a trust hierarchy or trust framework within a distributed data processing system. The hardware security unit can sign software that is installed on the machine that contains the hardware security unit. Server processes that use the signed software that is run on the machine can establish mutual trust relationships with the hardware security unit and amongst the other server processes based on their common trust of the hardware security unit.

Abstract: A system and method for enforcing a usage control for a document, including: receiving an encrypted message, the encrypted message including a first key and a usage information authorization for the document, the encrypted message responsive to a second key to extract the first key and the usage information authorization; accepting an encrypted device datastream and securely decrypting the encrypted device datastream using the first key by a device, the device manager: generating a decrypted device datastream derived from the encrypted device datastream, transmitting the decrypted device datastream to the device without writing the decrypted device datastream to a user-accessible memory; and using the second key to access a datastore and to update a usage record for the document with the usage information authorization and a device status signal, the serializer providing the device manager with the print authorization signal when a device request is consistent with the usage record.

Abstract: Two way communication is provided in a one to many pub/sub environment. A community of users admitted to the community by subscription authorization receive messages (preferably Instant Messages) published from a requesting user. The request message is sent to a robot user (program application) that represents the community of users but appears to the community as simply another user. The robot user publishes the request message (using a pub/sub service) to the community of users. A user in the community of users receives messages to the community according to his personal message filter. The user responds to the requesting user with a response message. The response message includes information identifying the request message.