Abstract: Providing security for a network is disclosed. Network traffic associated with a host is monitored. If an activity pattern associated with a reboot of the host is observed, access by the host to the network is restricted based at least in part on the observed activity pattern.

Abstract: A mechanism is disclosed for enabling labeled containers on different host machines to share file system portions. Before a process in a first container on a first host machine is allowed to access a file in a file system contained within a second container on a second host machine, a check is performed to determine whether a first sensitivity label associated with the first container is either identical to or dominates a second sensitivity label associated with the second container. If either is true, access to the file is granted. If the first sensitivity label is neither identical to nor dominates the second sensitivity label, access to the file is denied. By controlling access in this way, it is ensured that only containers with identical or higher sensitivity labels will be allowed to access the file. This in turn allows files to be shared by multiple containers without compromising security.

Abstract: A system and method for providing video content to a client system is disclosed. The system includes a server and a computer coupled by a network. The server obtains operating environment information of the computer in response to a request for video content from the computer. The server selects a version of the requested video content for sending based on the obtained operating environment information. The selected video can be received by the computer at the computer's particular connection speed over the network and can be played by the computer using its particular video player. The server sends the selected video to the computer and causes the computer to automatically begin playing the video without requiring any overt interaction by the operator of the computer.

Abstract: An adapter layer architecture that provides a consistent protocol for interactions between client and server side code. The architecture, which is particularly well suited for an enterprise application development platform (EADP), isolates what function operates at what side of the request (“client” and “server”). The preferred embodiment of the invention provides a number of specific features. These include: 1. a uniform mechanism to pass data between client and server; 2. a server side mechanism to handle client requests; 3. a client side request handler; 4. a mechanism to provide interactive conversational sessions, with each client session able to maintain multiple concurrent conversations; 5. a mechanism to purge sessions; and 6. unit of work control. In addition, the adapter layer architecture of the invention allows some adjustment in practice for various implementations to meet the adapter requirements.

Abstract: A first device transmits messages to a second device. The first device keeps track of messages that have already been transmitted from the first device to the second device, experiences an interruption in transmission of messages at the first device, and resumes the transmission from the first device following the interruption. Resuming the transmission includes transmitting only messages that have not already been completely transmitted from the first device to the second device.

Abstract: A content acquisition method that ensures that the content acquisition device successfully receives attribute information of content data. By having an acquire/use information providing server, upon receiving a file request information sent from a client terminal send an acquire/use file, wherein the acquire/use file stores content data content identification information and attribute information in a portion where such information is not removed when passing through a proxy server which undertakes some of functions of the content receiving-side, to the client terminal via the proxy server, the present invention allows the acquire/use file to be sent via the proxy server without the attribute information contained in the file being removed, thereby allowing the client terminal to successfully receive attribute information.

Abstract: To provide a content delivery system, a content delivery server, an information processing terminal, a content delivery program and a content delivery method with which content can be delivered appropriately while accommodating variations in resource conditions. A content server receives a delivery request from an information processing terminal and a resource condition of that terminal, modifies content corresponding to the delivery request in accordance with the resource condition, and delivers the content. The information processing terminal extracts the resource condition, transmits the resource condition and/or a content delivery request to the content server, receives the content delivered from the content server, and executes the content.

Abstract: The present invention provides service processing used in a computer system comprising a plurality of computers, each of which receives a message and executes a Web service on the basis of the message and then outputs a message generated from the result of the execution. The computer system realizes a Web service by transmitting and receiving the message among the computers. A message including first information about the execution of the service, and second information about notification of progress information in the service, is received. The service is executed according to the first information, and then the second information is analyzed. After that, on the basis of the execution result of the service, a message is generated according to the second information, and the message is then transmitted to the computer that is identified by a destination of progress information notification included in the second information.

Abstract: A method, system, and computer program product are provided for determining whether a process identified utilizing a first proxy is associated with an additional proxy. In use, a process is identified, utilizing the first proxy. Further, it is determined whether the process is associated with the additional proxy. In addition, an action is conditionally performed based on the determination.

Abstract: Systems and methods according to the present invention address this need and others by providing images to a remote user through the use of instant messaging techniques.

Abstract: A method and system for remotely configuring a desktop mailbox manager. A mobile node operable to communicate within a wireless network includes a remote desktop controller to generate configuration messages for transmission to a home node at which the desktop mailbox manager is located. When reconfiguration is required, reconfiguration criteria are formulated, usually at the direction of the user. The reconfiguration criteria are then used by the remote desktop controller to create a reconfiguration message, which is addressed for delivery to the home node. A network connection is established, and the reconfiguration message is transmitted. A network server associated with the base station through which the mobile node is communicating with the network routes the message to a server associated with the home node, utilizing an appropriate gateway if necessary. The message is stored on the server until the home node establishes communication and then the message is downloaded to the home node.

Abstract: A method and system for determining hardware and software compatibility related to mobility of virtual servers. Upon receiving an inventory of properties of a managed server which are relevant for compatibility testing, mandatory and optional properties available for use in a compatibility policy for a WPAR instance running on the managed server are defined. Mandatory compatibility tests are selected based on the mandatory properties in the compatibility policy for the WPAR instance. Optional compatibility tests are selected based on the optional properties in the compatibility policy for the WPAR instance. The selected mandatory and optional compatibility tests are associated with the compatibility policy, wherein the selected tests are executed to compare a profile of a potential target system with the WPAR instance and to determine compatibility of the potential target system with the WPAR instance prior to performing a mobility operation of the WPAR instance.

Abstract: A method and apparatus for discovering applications having components distributed over a plurality of nodes in a network is disclosed. The method comprises the steps of obtaining information associated with at least one application, said information providing first and second instructions, executing processing associated with the first instructions, determining a tentative identification of at least one application based on responses associated with the processing of the first instructions, executing processing associated with the second instructions based on each of the tentatively identified applications, and confirming an identification of at least one application based on responses associated with the processing of the second instructions. In one aspect of the invention, the method further comprises the step of storing the application identification and characteristics in a representation of the application.

Abstract: A software architecture that permits for a unified mechanism for interfacing with multiple peer groups. The architecture includes multiple peer group interfaces, each facilitating communication between computing systems in a corresponding peer group. In addition, a perhaps configurable number and type of service modules are configured to use the peer group interfaces to facilitate communication between peer groups in a manner that facilitates the service. A peer community application program interface is configured to allow one or more peer applications to enlist the services of the plurality of services by interfacing with the peer community application program interface.

Abstract: An information processing apparatus connected to a peripheral device, including: a reception unit adapted to receive a network leaving message from the peripheral device; a first determination unit adapted to determine if a device driver corresponding to the peripheral device as a source of the network leaving message received by the reception unit meets a predetermined condition; and an uninstall unit adapted to uninstall the device driver corresponding to the peripheral device as the source of the network leaving message when the first determination unit determines that information of the device driver meets the predetermined condition.

Abstract: A system for ubiquitous network presence and access without cookies utilizes a unique customer ID that is created for a customer using a client device connected to the Internet and is stored on the device and by other server applications for future automatic authentication and login of the customer when accessing the variety of services available on a business network.

Abstract: With fast notification of changes to a clustered computing system, through which a number of events are published for system state changes, applications can quickly recover and sessions can quickly be rebalanced. When a resource associated with a service experiences a change in status, such as a termination or a start/restart, a notification event is immediately published. Notification events contain information to enable subscribers to identify, based on matching a session signature, the particular sessions that are affected by the change in status, and to respond accordingly. This allows sessions to be quickly aborted and ongoing processing to be quickly terminated when a resource fails, and allows fast rebalancing of work when a resource is restarted.

Abstract: Automatically notifying, in response to an event associated with a particular server and/or application on a network, only appropriate person(s) such as, for example, only the IT member(s) responsible for supporting the server and/or application. The work schedules and the work schedule exceptions of one or more persons may be taken into account when determining whom to notify of an event on a network. Event information may be received. In response, subscription information for a plurality of subscribers may be accessed, which may include any of: one or more applications for which the subscriber is responsible; one or more servers for which the subscriber is responsible; a work schedule of the subscriber for receiving notifications, and one or more exceptions to this schedule. At least one subscriber may be selected by comparing this information to the event information, and a notification may be sent to the at least one subscriber.

Abstract: Methods, apparatus, and systems for sharing resources across a plurality of computing platforms. Firmware provided on each platform is loaded for operating system runtime availability. Shared resources are presented to operating systems running on the platforms as local resources, while in reality they are generally hosted by other platforms. An operating system resource access request is received by a requesting platform and rerouted to another platform that actually hosts a target resource used to service the resource access request. Global resource maps are employed to determine the appropriate host platforms. Communications between the platforms is enabled via an out-of-band (OOB) communication channel or network. A hidden execution mode is implemented to effectuate data rerouting via the OOB channel such that the method is performed in a manner that is transparent to operating systems running on the platforms. The shared resources include storage, input, and video devices.

Abstract: A method and system for steganography and steganalytic techniques are provided for effecting embedded communications in a variety of communication environments. One aspect may include an embedded transmitter for inserting embedded data into a packet and an embedded receiver for receiving the packet via, for example, a packetized communication network such as the Internet. Various aspects of the present invention provide robust communications with optimized throughput and may include various error handlers to maximize performance and ensure transfer of incorrupt data. A method for identifying and blocking embedded communications is also provided.