Abstract: A method, computer system, and a computer program product for one-time virtual private network (OTVPN) tunneling is provided. The present invention may include receiving an authentication request from a client to access a private network for a pre-defined transaction. The present invention may also include validating the client for the pre-defined transaction. The present invention may also include granting a temporary access for the client to perform the pre-defined transaction in the private network. The present invention may also include terminating the temporary access granted to the client to the private network responsive to a policy configuration associated with the pre-defined transaction.

Abstract: A computer-implemented method, according to one approach, includes: initiating, by an operating system and based at least in part on information received from an application, a single task mode. The single task mode is configured to: suspend all programs and subsystems running on a computer, and subsequently reactivate a subset of the suspended programs and subsystems. The subset of the suspended programs and subsystems that are reactivated enables completion of a sensitive task. A dedicated single task mode scheduler also schedules the sensitive task using the reactivated subset of the programs and subsystems, and the sensitive task is completed. Furthermore, the single task mode is ended by the operating system based at least in part on additional information received from the application.

Abstract: DNS request obfuscation includes generating decoy domain name system (DNS) requests for obfuscating DNS request activity being handled by a private DNS server for an organization, and sending the decoy DNS requests to external DNS server(s) for resolution, receiving a DNS request seeking a DNS lookup for a client device, obfuscating the DNS request by sending, to an external DNS server of the external DNS server(s), the DNS request interspersed with at least some of the generated decoy DNS requests sent to the external DNS server, receiving, from the external DNS server, a DNS response to the sent DNS request, and providing the DNS response to a source of the DNS request.

Abstract: Embodiments of the present invention provide an approach for applying cognitive diagnostic modeling (CDM) and deep learning algorithms to improve knowledge transfer (KT) progress. Specifically, the approach aims to improve the process of transferring knowledge by breaking down a learning task into smaller subtasks that are related to a specific learning goal. The provided responses for each subtask are then evaluated using a deep learning algorithm, which generates a continuous score based on the difference between the provided response and the expected response. Each continuous score is then converted into a binary value to obtain a set of binary values. Based on the set of binary values, a diagnostic report is generated that reflects the progress of knowledge transfer for the assigned learning task. This approach allows for a more detailed and accurate assessment of the learning process, which can help to identify areas where further improvement is needed.

Abstract: DNS request obfuscation includes generating decoy domain name system (DNS) requests for obfuscating DNS request activity being handled by a private DNS server for an organization, and sending the decoy DNS requests to external DNS server(s) for resolution, receiving a DNS request seeking a DNS lookup for a client device, obfuscating the DNS request by sending, to an external DNS server of the external DNS server(s), the DNS request interspersed with at least some of the generated decoy DNS requests sent to the external DNS server, receiving, from the external DNS server, a DNS response to the sent DNS request, and providing the DNS response to a source of the DNS request.

Abstract: Techniques for privacy centric data security. A request to permit a data processor to access private data associated with a user is received at a cloud data privacy service. The request includes a request for a data access block relating to the private data, and a data filter describing one or more access parameters. The cloud privacy data service generates the first data access block, based on the private data and the data filter. The first data access block is transmitted from the cloud privacy service to a user device, which is configured to transmit the first data access block to the first data processor. The cloud data privacy service receives a request for the private data that includes the first data access block. The cloud data privacy service determines that the first data access block is valid, and grants the first data processor access to the private data.

Abstract: Optimizing containerized applications includes receiving managed runtime code, creating a first container within a managed runtime environment, and executing the managed runtime code in the first container within the managed runtime environment. Responsive to a determination that the managed runtime environment has performed at least one optimization of the managed runtime code to create optimized managed runtime code during a first lifetime of the managed runtime environment, the first container is checkpointed into a first memory image to create a first checkpointed container including the optimized managed runtime code. The first checkpointed container is stored.

Abstract: Techniques for privacy centric data security. A request to permit a data processor to access private data associated with a user is received at a cloud data privacy service. The request includes a request for a data access block relating to the private data, and a data filter describing one or more access parameters. The cloud privacy data service generates the first data access block, based on the private data and the data filter. The first data access block is transmitted from the cloud privacy service to a user device, which is configured to transmit the first data access block to the first data processor. The cloud data privacy service receives a request for the private data that includes the first data access block. The cloud data privacy service determines that the first data access block is valid, and grants the first data processor access to the private data.

Abstract: An approach is provided in which the approach uses a scrolling agent to detect when a browser application requests a set of content from a content provider in response to the browser application receiving a request from a user. The scrolling agent issues a number of browser scroll commands to the browser application and receives sets of next content from the content provider accordingly. The approach searches the sets of next content based on a request invoked by the user and generates a set of search results that the approach provides to the user.

Abstract: An approach is provided in which the approach uses a scrolling agent to detect when a browser application requests a set of content from a content provider in response to the browser application receiving a request from a user. The scrolling agent issues a number of browser scroll commands to the browser application and receives sets of next content from the content provider accordingly. The approach searches the sets of next content based on a request invoked by the user and generates a set of search results that the approach provides to the user.

Abstract: Optimizing containerized applications includes receiving managed runtime code, creating a first container within a managed runtime environment, and executing the managed runtime code in the first container within the managed runtime environment. Responsive to a determination that the managed runtime environment has performed at least one optimization of the managed runtime code to create optimized managed runtime code during a first lifetime of the managed runtime environment, the first container is checkpointed into a first memory image to create a first checkpointed container including the optimized managed runtime code. The first checkpointed container is stored.

Abstract: The illustrative embodiments provide a computer implemented method, apparatus, and computer program product for accelerating execution of a program, written in an object oriented programming language, in an emulated environment. In response to receiving a request for an accelerated communications session from a guest virtual machine in the emulated environment, a native virtual machine is initiated external to the emulated environment but within the computing device hosting the emulated environment. Thereafter, an accelerated communications link is established between the guest virtual machine and the native virtual machine. The accelerated communications link enables a transfer of managed code between the guest virtual machine and the native virtual machine. The managed code is then executed by the native virtual machine.

Abstract: The illustrative embodiments provide a computer implemented method, apparatus, and computer program product for accelerating execution of a program, written in an object oriented programming language, in an emulated environment. In response to receiving a request for an accelerated communications session from a guest virtual machine in the emulated environment, a native virtual machine is initiated external to the emulated environment but within the computing device hosting the emulated environment. Thereafter, an accelerated communications link is established between the guest virtual machine and the native virtual machine. The accelerated communications link enables a transfer of managed code between the guest virtual machine and the native virtual machine. The managed code is then executed by the native virtual machine.

Abstract: A phase change material, including multiple phase change materials of different formulations, is placed in heat transfer association with an electronics enclosure (e.g., a sealed enclosure) deployed in an environment that causes the electronics and the phase change material to experience periods of heating and periods of cooling. During the periods of heating, the phase change material absorbs heat and changes at least partially from a first state to a second state to maintain the temperature of the electronics at a desirable level. During the periods of cooling, the phase change material reverts at least partially back to the first state for future heat absorption. The phase change material is cooled by a thermally cooler body such as the night sky. The electronics enclosure and phase change material may be placed in a second enclosure covered with a paint having a paint additive that reflects solar radiation.

Abstract: A locking mechanism for use in a multi-thread environment supporting self-modifying code in which modifications to the code are made at runtime. The locking mechanism having associated helper code accessed by a call from the first instruction address in the code block. The helper code calculating the binary encoding for the call instruction and using an atomic compare and exchange instruction to compare the calculated binary encoding with the actual contents of the first instruction address. Where there is a match, a self loop instruction is written to the first instruction address to lock the specified code block for subsequent threads. The helper code contains instructions to resolve the references in the specified block. The last such instruction is an atomic store operation to replace the self loop instruction at the first instruction address with the appropriate modified instruction.

Abstract: The stack mapper of the present invention seeks to determine the shape of the stack at a given program counter. This is accomplished by locating all start points possible for a given method, that is, at all of the entry points for the method and all of the exception entry points, and trying to find a path from the beginning of the method to the program counter in question. The mapper first tries to locate a linear path from the beginning of the method, and then iteratively processes the sequence of bytes at each branch until the destination program counter is reached. Once the path is found, a simulation is run of the stack through that path, which is used as the virtual stack for the purposes of the garbage collector.

Abstract: A backplane in a power distribution shelf has power outputs connected to corresponding primary card slots and adjacent card slots. Power distribution cards are seated in the card slots. A maintenance card can be configured to selectively provide redundant power to the power outputs of a failed power distribution circuit card via an adjacent power distribution circuit card and a maintenance connection.

Abstract: A locking mechanism for use in a multi-thread environment supporting self-modifying code in which modifications to the code are made at runtime. The locking mechanism having associated helper code accessed by a call from the first instruction address in the code block. The helper code calculating the binary encoding for the call instruction and using an atomic compare and exchange instruction to compare the calculated binary encoding with the actual contents of the first instruction address. Where there is a match, a self loop instruction is written to the first instruction address to lock the specified code block for subsequent threads. The helper code contains instructions to resolve the references in the specified block. The last such instruction is an atomic store operation to replace the self loop instruction at the first instruction address with the appropriate modified instruction.

Abstract: In typical Java and other interpreted programming language environments, the code is stored in ROM in a semi-processed state, .class files containing byte codes. When the device is turned on, a virtual machine resolves references and links the .class file in RAM to permit desired applications to be run. In the invention, the .class files are further pre-processed to select the data which will not change or require updating. This data is packaged into memory image files containing internal data pre-linking this data. The memory image files are stored in ROM and are accessible from ROM by the virtual machine at runtime. Only elements that will be updated, such as the objects themselves, must be instantiated in RAM at runtime. This reduces the amount of RAM needed to run the application. In an environment with memory constraints, the reduction in RAM requirements permits more RAM to be made available for application use.

Abstract: A passive cooling system for cooling an enclosure containing electronic components. A hollowed portion of the enclosure is formed as an integral heat pipe containing a working fluid. The hollowed portion has an evaporator section located at the top and a condenser section located at the bottom. The enclosure also has hollowed side walls which serve as passage ways for the working fluid to flow through in between the evaporator and condenser sections. Gravity and the pressure of evaporation force the working fluid down to the condenser section. A wick is provided for returning the working fluid to the evaporator section by capillary action. Additionally, an ultrasonic transducer driven by the heat rejected from the condenser section may be used to help return the working fluid to the evaporator section. Finally, a check valve may be employed before the evaporator section for the working fluid to flow through.