Abstract: Meta-Rules are a special set of business rules whose purpose is to enable business rules selection and subsequent rule invocation by a business rules manager. Contained within a Meta-Rule are business policy and other information that enables the selection of a business rule used by a business application. Meta-rules allow the system to dynamically select and identify specific business rules to be executed within a given business application. By enabling a higher level of abstraction, and relying on rules to resolve specific business rule selection and invocations, Meta-rules further separate the binding of business knowledge and practice from application programming logic. The application programmer is freed from having specific knowledge of the business rule; all that is required is an assertion that a rule is to be used.

Abstract: Accessing shared sensitive information in a managed container environment is provided. Each worker node in a plurality of worker nodes has access to shared sensitive application data located in a secure enclave within the plurality of worker nodes using a data encryption key. Each worker node in the plurality of worker nodes protects the data encryption key of each respective worker node using a sealing key that is unique to the secure enclave on a respective worker node.

Abstract: An example operation may include one or more of receiving a network request from a client device, detecting that a pre-established policy of a cloud tenant has been triggered based on content included in the received network request, identifying a locale of the client device, retrieving, at runtime, a tenant message in response to the triggered policy and a custom translation of the tenant message based on the identified locale, and transmitting the custom translation of the tenant message to the client device.

Abstract: One embodiment provides for a method including processing transactional operations on a key used to determine whether existing data is found for that key. A first time index is updated using unique keys and a start time field of a first appearance of each key from the transactional operations. A deferred update of prior versions of the key is performed for non-recent data upon determining that recent data in the transactional operations is found for the key.

Abstract: Systems and methods for selective stack trace generation during Java exception handling are disclosed. In embodiments, a method includes determining, by a Java virtual machine (JVM) of a computing device, that an exception object escapes a catch block of Java bytecodes; setting, by the JVM of the computing device, an escaped flag based on the determining that the exception object escapes the catch block; walking, by the JVM of the computing device, a call stack to locate an applicable catch block for the exception object, wherein the applicable catch block is the catch block; determining, by the JVM of the computing device, that the escaped flag is set in response to locating the applicable catch block; and creating, by the JVM of the computing device, a stack trace based on the determining that the escaped flag is set.

Abstract: Embodiments of the invention include computer-implemented methods, computer program products and systems for live video anomaly detection. The embodiments include detecting live stream data, determining an activity from the live stream data, and receiving contextual data associated with the live stream data. The embodiments also include prompting a user to redirect the live stream data from a first channel based on the activity and the contextual data, and redirecting, responsive to the prompt, the live stream data to a different channel and simultaneously maintaining the live stream data on the first channel.

Abstract: Managing container applications by providing a registry of managed container base images, each managed container base image wrapped to include an injection point, determining that a managed container base image includes a vulnerability, and creating a patch script to address the vulnerability. Managing container applications further includes inserting the patch script at the injection point and issuing a pull command for an application using the managed container base image, to a container orchestration tool.

Abstract: A method to protect sensitive information during a single sign-on (SSO) process flow initiated from a client and directed to an authorization server configured to issue an access token upon verification of a credential. The technique leverages a first proxy that monitors a packet flow issued from the authorization server, and a second proxy that monitors a redirect packet flow issued from the client (in response to the packet flow). A message that includes the access token is modified by the first proxy to include a data string, and the modified message is delivered to the client; concurrently, the first proxy provides the data string/access token pair to the second proxy. When the client receives the modified message, it issues a response (that includes the data string) back to a resource server. As the response traverses the second proxy, it removes the data string and re-inserts the access token, and the resulting modified response is forwarded to the resource server.

Abstract: Provided are embodiments for a semiconductor device that includes a bottom contact; a multi-layer bottom electrode formed over the bottom contact; a magnetic tunnel junction stack formed over the multi-layer bottom electrode; and a top electrode formed over the magnetic tunnel junction stack. Also provided are embodiments for forming the semiconductor device described herein.

Abstract: A distributed system is provided that includes member nodes and a leader node. Each member node stores a database and updates the database by performing common ones of a plurality of transactions. The leader node generates a batch, to be executed by each member node, which includes two or more transactions lacking an access conflict from among the plurality of transactions. The leader node includes: a section that generates an access set as a set of database entries to be accessed by each transaction to be executed; a section that generates the batch, based on the access set of each transaction to be executed; and a leader-side section that performs a consensus process for the batch among the leader and member nodes. Each member node includes the database; a member-side section that performs a consensus process for the batch; and a section that performs parallel execution of batch transactions.

Abstract: A method to detect anomalous behavior in an execution environment. A set of system events captured from a monitored computing system are received. Using the received system events, a model is then trained using machine learning. The model is trained to automatically extract one or more features for the received set of system events, wherein a system event feature is determined by a semantic analysis and represents a semantic relationship between or among a grouping of system events that are observed to co-occur in an observation sample. An observation sample is associated with an operating scenario that has occurred in the execution environment. Once trained, and using the features, the model is used to detect anomalous behavior. As an optimization, prior to training, the set of system events are pre-processed into a reduced set of system events. The modeler may comprise a component of a malware detection system.

Abstract: A computer system includes a text editor controller that receives input data, determines column location data indicating a location of at least one column for vertically organizing at least a portion of the input data based at least in part on the input data, and renders the input data as proportional font. A display device is configured to display a text area interface generated by the computer system, and to display the rendered proportional font in the text area interface in a vertically aligned manner based at least in part on the column location data.

Abstract: The method includes identifying, by one or more computer processors, a live file. The method further includes identifying, by one or more computer processors, a snapshot that corresponds to the live file. The method further includes amending, by one or more computer processors, data corresponding to the identified live file to include tracking data for the identified snapshot. The method further includes amending, by one or more computer processors, data corresponding to the identified snapshot of the live file to include tracking data for the identified live file. The method further includes determining, by one or more computer processors, a difference in the data between the identified live file and the identified snapshot. The method further includes amending, by one or more computer processors, the identified snapshot to include only the determined difference in data between the identified live file and the identified snapshot.

Abstract: A tool for distress management. The tool determines a level of distress associated with a user. The tool identifies a next action to be performed by the user. The tool determines a level of distress associated with the next action. The tool determines whether the associated level of distress exceeds a predetermined threshold. Responsive to a determination that the associated level of distress exceeds the predetermined threshold, the tool alerts the user of an impact to the level of distress associated with the user.

Abstract: A system, method and computer program product for augmenting, in real-time, queries/questionnaires administered to a subject by coupling the physiological response of the subject for a given question-answer pair. Further, a method/system augments/annotates answers to questionnaires/surveys/etc. with automatically detected physiological or emotional reactions of the person answering the question/survey/etc. In an embodiment, methods are implemented to: create an augmented representation of question-answer-emotion (i.e., annotating questions/answers from assessments to physiological reactions); and consider the augmented representation and the user profile to suggest actions based on such associations.

Abstract: A method, computer system, and computer program product for using self-driving autonomous vehicles to form traffic barriers. The method may include receiving, by a processor, an identification of a location of an event. The method may identify a vehicle from an inventory of autonomous vehicles based on one or more criteria. The criteria may include a vehicle location criterion, a vehicle size criterion, a vehicle fuel criterion, or a vehicle availability criterion. The method may include transmitting to the vehicle an instruction to move to a first location. The method may include identifying a perimeter encompassing the location of the event. The method may include identifying a subset of vehicles in the first position and instructing the subset of vehicles to move to a second position. The method may include instructing the subset of vehicles in the second position to move back to the first position.

Abstract: A method includes acquiring a first data column output from a plurality of sensors, generating a model for estimating data from the plurality of sensors on the basis of the first data column, acquiring a second data column output from the plurality of sensors, obtaining an estimated data column corresponding to the second data column based on the model by using regularization for making an error between the second data column and the estimated data column sparse, and identifying a sensor in which a change occurred between the first data column and the second data column on the basis of the error between the second data column and the estimated data column. A corresponding computer program product and apparatus are also disclosed herein.

Abstract: Embodiments for namespace management between storage systems by a processor. Events, containing metadata associated with an operation, from a plurality of heterogeneous storage systems may be received such that the events are indexed into a common repository according to the metadata to maintain a single namespace for data in the plurality of heterogeneous storage systems.

Abstract: A method for operating translation look-aside buffers, TLBs, in a multiprocessor system. A purge request is received for purging one or more entries in the TLB. When the thread doesn't require access to the entries to be purged the execution of the purge request at the TLB may start. When an address translation request is rejected due to the TLB purge, a suspension time window may be set. During the suspension time window, the execution of the purge is suspended and address translation requests of the thread are executed. After the suspension window is ended the purge execution may be resumed. When the thread requires access to the entries to be purged, it may be blocked for preventing the thread sending address translation requests to the TLB and upon ending the purge request execution, the thread may be unblocked and the address translation requests may be executed.

Abstract: A method, apparatus, system, and computer program product for generating an audio communication. An urgency for a user is determined by a computer system in response to detecting a trigger event in a verbal communication from the user. A frequency modulator is selected by the computer system from a plurality of frequency modulators based on the urgency determined to form a selected frequency modulator. A frequency of words in an audio communication is modulated by the computer system using the selected frequency modulator to form a modulated audio communication, wherein the modulated audio communication comprises a natural language response generated in response to the trigger event. The modulated audio communication is sent by the computer system to an audio output device.