Abstract: A strategy is described for assessing and mitigating vulnerabilities within a data processing environment. The strategy collects access data that reflects actual log-in behavior exhibited by users in the environment. The strategy also collects rights data that reflects the rights possessed by one or more administrators within the environment. Based on the access data and rights data, the strategy identifies how a user or other entity that gains access to one part of the environment can potentially compromise additional parts of the environment. The strategy can recommend and implement steps aimed at reducing any identified vulnerabilities.

Abstract: In order to constitute a domain name system obtained by providing and utilizing a DNS service by using a self-supporting (not rented) DDNS server in a dynamic IP address environment, a DDNS server inside a network of a central site and routers which are DDNS clients inside networks of other sites are provided. The DDNS server includes: a means for registering a relationship between domain names of the DDNS clients and global addresses of the DDNS client; a means for responding to a request for resolving a name from the DDNS client; and a means which, at a time when a global address of the DDNS server is updated, notifies DDNS server information including the global address of the DDNS server to the DDNS client. Moreover, the DDNS client includes: a means for registering (updating) the global address of the DDNS server when the DDNS server information is notified; and a means for issuing a request for resolving a name to the DDNS server.

Abstract: A method for adapting a session timeout period of an application comprising one or more parts, each part of the application having a corresponding predetermined session timeout period for receiving an input from a user connected to a part of the application, comprising the steps of determining the rate of timed out sessions for the part of the application after the number of connections to the part has reached a predetermined level; comparing the rate of timed out sessions of the part of the application with a predetermined threshold value of the rate of timed out sessions; adapting the predetermined session timeout period of that part (400) of the application based on the comparison to give rise to an adapted session timeout period.

Abstract: A resource distribution method capable of lending surplus resources among a plurality of services and reducing the maintenance cost of the surplus resources is provided. Computer resources in the standby system have a dead standby state in which at least an application is not installed. A plurality of services or a plurality of users share the computer resources in the standby system. As a result, improvement of the utilization factor of idle computer resources and server integration are implemented, and the cost required to maintain the computer resources is reduced. Furthermore, load prediction is conducted as regards individual services by using past operation history. Idle computer resources secured from services having surplus and maintained are thrown in according to a result of the prediction.

Abstract: An administrator system provided according to an aspect of the present invention facilitates efficient provisioning of servers for specific software sets. In an embodiment containing clusters of servers requiring execution of corresponding set of software, an administrator system selects a server from a free server pool and installs on the selected server only those of the required set of softwares that are not already installed on the selected server. As a result, the selected server can quickly be added to a desired cluster. Such a feature is particularly useful in an environment where different application environments are provided in different cluster of systems and many servers are available in the form of free server pools for addition to the desired clusters.

Abstract: A method of routing messages to multiple consumers comprises determining a probability function defining message classification probabilities for each of a plurality of consumer sets, receiving a plurality of messages, classifying each message, storing each message in a queue, receiving notification of a consumer available to process a message, ascertaining the consumer set to which the available consumer belongs, accessing the probabilities for the ascertained consumer set, selecting a message classification according to the accessed probabilities, and transmitting a message, of the selected classification, to the available consumer.

Abstract: In connection management by a conventional server apparatus using IDs, a client apparatus cannot know an attribute of a connection corresponding to an ID. A server apparatus (10) is an AV server apparatus that distributes content to a client apparatus requesting content data. A communication unit (11) receives a logical connection establishment request or a physical connection establishment request from the client apparatus. A content data distribution unit (14) establishes a physical connection for distributing the content data to the client apparatus, when the physical connection establishment request is received. A connection information management unit (15) establishes a logical connection, when the logical connection establishment request is received or as a result of the establishment of the physical connection.

Abstract: In a network monitoring system according, first, a data acquisition section acquires a plurality of packets flowing on a network. Then, a data analysis section acquires action explanation information for explaining a single action from the plural packets acquired by the data acquisition section. Then, a display-information generation section displays the single action on the network on the single screen based on the action explanation information acquired by this data analysis section.

Abstract: A method and system for providing the centralized collection of click-through traffic information. The method includes receiving a DNS query for a domain name at a third party auditing service from a requesting computing resource. The domain name is configured to include click-through information as a subdomain, and wherein a URL associated with the domain name provides content. The click-through information is parsed from the domain name without establishing a connection between said third party auditing server and any web server providing the content. An IP address for the web server associated with the domain name is sent to the requesting computing resource.

Abstract: An administration system is defined that provides an interface between a subscriber and resources on a provider network. The subscriber, via the administration system, has access to and control over certain of the resources on the provider network. The subscriber may have access to and control over only those resources on the provider network related to the services provided to his network. Also, the subscriber may not be capable of altering resources on the provider network in a way that affects the services provided to another subscriber. Because the administration system allows a user to control resources on the provider network that relate to services provided to his network, the amount of support required by the provider to administer those resources is reduced.

Abstract: A methodology for dynamic (i.e., run-time) uploading and execution of applications and drivers between devices (e.g., between “client” device and one or more (host) devices), in a fully automated manner, is described. The device which is to be hosted (e.g., the “client” device) initially probes its environment to determine which device or devices it is attached to (e.g., the “host” device(s)). Once it has correctly discerned the relevant host or target device(s), the client device includes the capability of immediately sending out (i.e., uploading) a particular driver or application (i.e., object or file of interest) for placement, and ultimately execution, at the host device. Once the particular object or file of interest has been “injected” into the host device and is executing, the client device may simply revert to a “listening mode” in which it waits to be told what to do (i.e., receive commands from the application or driver which is now executing at the host device).