Abstract: Methods and systems for securing communications with an enterprise from a remote computing system are disclosed. One method includes initiating a secured connection with a VPN appliance associated with an enterprise using service credentials maintained in a secure applet installed on a remote computing device, and initiating communication with an authentication server within an enterprise via the secured connection. The method also includes receiving specific credentials from the authentication server, terminating the secured connection with the VPN appliance, and initiating a second secured connection with the VPN appliance using the specific credentials, the specific credentials providing access to one or more computing devices within the enterprise being within a same community of interest as the remote computing device and obfuscating one or more other computing systems within the enterprise excluded from the community of interest.

Abstract: Methods of communicatively connecting first and second endpoints are disclosed. One method includes transmitting from a first endpoint to a second endpoint a connection request, the connection request including an IP address of the second endpoint. The method further includes, based at least in part on the IP address of the second endpoint, selecting IPsec from among a plurality of available security protocols to first attempt to use in forming a tunnel between the first and second endpoints, and forming the tunnel between the first and second endpoints based on the connection request.

Abstract: Systems and methods for establishing a VLAN or a subinterface on a computing system using a single configuration statement are disclosed. Embodiments may include modifying a configuration statement that configures a NIC coupled to the computing system to include a new field which indicates if a VLAN should be created on the NIC port. Embodiments may also include receiving a configuration statement that includes the new field. Embodiments may further include creating a VLAN on an Ethernet computer network or a subinterface on an InfiniBand computer network based on the received configuration statement that includes the new field.

Abstract: A machine of console includes a processor and a machine readable medium accessible by the processor. The processor being adapted to execute instructions including categorizing incidents based on parameters of the incidents; identifying solutions, at least partially, based on the categorization of the incidents; measuring mean time to restoration; monitoring post-restoration incidents over a period of time; and storing effective solutions into a database corresponding to the category.

Abstract: Apparatuses, systems, and methods that generate a model file with a plurality of components. In one embodiment, a method includes reading, by a processor, an input model file. The method includes extracting, by the processor, at least one input component from the input model file. The method includes generating, by the processor, at least one output component using the at least one input component. The method includes storing, by the processor, the at least one output component in an output model file.

Abstract: A client system may be configured to request a single sign on authentication, in which an identity certificate is provided by the client system and stored by a server system. The stored certificate may be used to later authenticate a secure connection between the client system and the server system, after validating that the user represented by the certificate is a legitimate registered user of the server. The secure connection validated by the stored certificate may be, for example, a secure sockets layer/transport layer security (SSL/TLS) connection.

Abstract: A method includes determining, by a processor, whether a program check condition exists. The method further includes determining, by the processor, whether a lock descriptor of a lock in a file lock table satisfies an unlocking condition. The method further includes releasing, by the processor, the lock by setting the lock descriptor's host identifier as zero. The method further includes determining, by the processor, whether any lock in the file lock table satisfies a lock conflict condition. The method further includes determining, by the processor, whether the file lock table includes any lock descriptor that satisfies a locking condition. The method further includes creating, by the processor, a new lock using the lock descriptor that satisfies the locking condition.

Abstract: A method and system for scanning a computing system network for dark matter computing systems and computing devices. The method includes establishing a communication link between a master server and at least one target scanning agent that has at least one network computing system coupled thereto, creating a scanning job for the target scanning agent, building a scanning job command based on the scanning job, sending the scanning job command to the target scanning agent, receiving scanning job results from the target agent, parsing through the received scanning job results for identifying information of hosts in the network computing system detected during the scanning job, determining which detected hosts are known hosts and which detected hosts are unknown hosts based on the identifying information, and comparing the identifying information of the unknown hosts to reference identifying information to determine which of the unknown hosts are dark matter.

Abstract: Methods and systems for operating a remote desktop client from a computing system hosting a secure boot device. In some embodiments, a method comprises initiating execution of an operating system from the computing system hosting the secure boot device, the computing system communicatively connected within a secure enterprise network, the computing system being untrusted within the secure enterprise network and based on verification of received authentication credentials, booting an operating system from the secure boot device and establishing a secure communication tunnel with a service appliance.

Abstract: Embodiments described herein combine both glyph technologies and cryptography technologies by encrypting data with a private key of an entity tasked with issuing controlled documents, and then converting the resulting encryption as a visual glyph, such as a QR code. This permits validation of the printed document by scanning the QR code using a smartphone and decrypting using the issuing entity's public key. In some embodiments, a purpose-built software application executed by the smartphone may automatically recognize QR codes on a document presented for review and then automatically decrypt the QR code using the public key of the issuing entity. A user performing the validation may then compare the document's content with the decrypted data on the smartphone.

Abstract: A method and system for providing a plurality of host systems shared access to data files from a file server. The method includes monitoring a control file for updates, the control file located within a corresponding host directory located within the file server; receiving a request for access to a data file stored on the file server, the access request being written to the control file, the access request including a requested data file operation; performing the requested data file operation in response to the control file being updated with the access request; creating a status file in the host directory in which the requested data file operation was performed upon completion of the requested data file operation; writing status data in the status file, the status data including a result of the performance of the requested data file operation; and allowing access to the host directory in which the requested data file operation was performed in response to the status data being written to the status file.

Abstract: Systems and methods that include receiving a plurality of programs, wherein each of the plurality of programs performs at least one function. The systems and methods further include parsing the plurality of programs. The systems and methods further include generating control statements configured to create an executable file. The executable file is configured to perform the functions performed by the plurality of programs.

Abstract: A method and system for notifying a database administrator of a database deadlock, error or other critical event during a database data exchange data transformation process. The method includes receiving and saving data exchange subscription information associated with a data exchange operation between a source database and a target database, and receiving and saving notification information associated with at least one computing device of a database administrator. The method also includes capturing a critical event as the critical event occurs during the database data exchange data transformation process. The method also includes providing notification of the captured critical event, and sending a critical event notification.

Abstract: A method and system for containerized Internet of Things (IoT) devices. The method includes receiving by a computing platform IoT device sensor data. The method also includes receiving by the computing platform at least one container image script. The method also includes loading into the computing platform at least one container, which is based on the at least one container image script received by the computing platform. The method also includes processing at least a portion of the IoT device sensor data within the at least one container to generate processed IoT device data. The method also includes transmitting from the computing platform at least a portion of the processed IoT device data. The method also includes removing the at least one container from the computing platform in response to at least a portion of the processed IoT device data being transmitted from the computing platform.

Abstract: Methods and systems for operating a remote desktop client from a computing system hosting a secure boot device. In some embodiments, a method comprises initiating execution of an operating system from the computing system hosting the secure boot device, the computing system communicatively connected within a secure enterprise network, the computing system being untrusted within the secure enterprise network and based on verification of received authentication credentials, booting an operating system from the secure boot device and establishing a secure communication tunnel with a service appliance.

Abstract: A system and method for generating database independent input test data. The system includes a source database having an input and an output, a plurality of target databases each having an input and an output, a test data generator coupled to the input of the source database, and a data exchanger coupled between the output of the source database and the input of each of the target databases. The test data generator generates input test data that is database independent, and sends the generated input test data to the source database. The source database sends the input test data to the data exchanger. The data exchanger transforms the input test data into a database format compatible with at least one of the plurality of target databases. The data exchanger sends the transformed input test data to the target database for which the transformed input test data is compatible.

Abstract: A logistics management system (LMS) may include receiving, at a server, a reservation request from a requestor for an allotment on an air carrier's cargo hold for a designated route and date range; assigning, by the server, an allotment category for the requested allotment; generating, by the server, an allotment rate for the requested allotment based, at least in part, upon the designated route and the allotment category; and communicating, from the server to the requestor, the generated allotment rate.

Abstract: A system and method for processing database transactions wherein the need for a DBMS server to convert data provided by the client from a text format to the raw storage format of the database is eliminated, thereby increasing the efficiency of the DBMS.

Abstract: A SCD includes a processor configured to establish operating functions of the SCD. The SCD further includes a computer-readable medium including a setup volume and a storage volume. The setup volume is configured to store information that is decrypted. The storage volume is configured to store information that is encrypted. The setup volume includes instructions that establish at least one authentication process. The encrypted information stored in the storage volume is decrypted after completing the at least one authentication process. The SCD further includes a universal serial bus (USB) connector configured to transmit information stored in the computer-readable medium to a host or a user. The SCD further includes a battery that powers the SCD.

Abstract: Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Virtual machines may be automatically provisioned with configuration information, such as the encryption keys, when the virtual machine is started. The provisioning information may be created based on a template stored on a configuration server.