Abstract: System, method, and computer program product to implement four factor authentication rule-based intelligent bank cards, by receiving valid authentication information for a card associated with an account, verifying that a captured image of a person presenting the card matches an image of an authorized user of the account, analyzing the captured image to detect an emotion of the person, and performing a predefined operation to control access to the account upon determining that the detected emotion satisfies an emotion rule associated with the account.

Abstract: A streams manager assesses the security risk of streaming communication and dynamically migrates operators of a streaming application based on the security risk. The streams manager may also dynamically change encryption of intranode communication between the operators to increase performance of the computer node. The streams manager includes a stream security module (SSM) with a monitor that monitors risk in the system and changes placement of operators and encryption between operators on a node depending on the risk. The stream security module may use security data and node profile data collected by the monitor or the system to determine the risk. The stream security module may provide recommendations to a customer for the customer to override changes in placement and encryption.

Abstract: A streams manager assesses the security risk of streams communication and when possible turns off encryption of intranode communication between operators of a streaming application on a computer node to increase performance of the computer node. The streams manager includes a stream security module (SSM) with a monitor that monitors risk in the system and changes encryption between operators on a node depending on the risk. The stream security module may use security data and node profile data collected by the monitor or the system to determine the risk. The stream security module may provide recommendations to a customer for the customer to override changes in encryption.

Abstract: A method, and a system are provided for implementing dynamic switching of network protocols for optimal performance for data being transmitted between nodes. An appropriate transport protocol between nodes is dynamically chosen based upon monitored system and network metrics.

Abstract: A method, and a system are provided for implementing dynamic switching of network protocols for optimal performance for data being transmitted between nodes. An appropriate transport protocol between nodes is dynamically chosen based upon monitored system and network metrics.

Abstract: A method and system are provided. The method includes transcribing into text, by a processor-based voice-to-text transcriber, voices uttered by two or more respective participants other than a user in each of one or more voice communications sessions occurring on multiple communication devices. The method further includes generating, for each of the one or more voice communication sessions, a respective prediction from the text of when a topic of interest to the user is likely to be brought up therein. The method also includes connecting the user to at least one of the one or more voice communications sessions, responsive to the respective prediction therefor such that the user participates in only a subset of an overall conversation in the at least one of the one or more voice communication sessions.

Abstract: A method and system are provided. The method includes automatically monitoring one or more voice communication sessions occurring on multiple communication devices to transcribe into text, by a processor-based voice-to-text transcriber, voices uttered by two or more respective participants other than a user in each of the voice communications sessions. The method further includes comparing, for each of the voice communication sessions, the topic of interest to conversation features derived from the text to detect a match there between. The method also includes providing the user with a summary of each of the voice communication sessions for which the match has been detected by said comparing step, the summary being based on the text. The method additionally includes automatically connecting the user to at least one of the voice communication sessions for which the summary thereof has been provided to the user.

Abstract: System, method, and computer program product to implement four factor authentication rule-based intelligent bank cards, by receiving valid authentication information for a card associated with an account, verifying that a captured image of a person presenting the card matches an image of an authorized user of the account, analyzing the captured image to detect an emotion of the person, and performing a predefined operation to control access to the account upon determining that the detected emotion satisfies an emotion rule associated with the account.

Abstract: A method, and a system are provided for implementing cloud based malware container protection. A container is provisioned for a user. The container is monitored, and when an abnormal activity is detected based upon historical metric data, a unikernel is provisioned and a user application is migrated to the unikernel while inspection occurs.

Abstract: Method to perform an operation, by, responsive to a request specifying to transition a state of a virtual machine in a cloud computing environment from a first state to a second state, allocating one or more system resources to the virtual machine during the transition from the first state to the second state, and, upon completion of the transition, releasing a portion of the allocated one or more system resources to a pool of available resources, so that the virtual machine is left with a remaining portion of the allocated one or more resources sufficient for operation during the second state.

Abstract: Disclosed aspects relate to asset management with respect to a shared pool of configurable computing resources. With respect to a set of assets which share a resource on a first compute node, a set of asset weight values is identified. The set of asset weight values indicates a set of utilization shares of the resource by the set of assets. A set of asset priority values is identified with respect to the set of assets on the first compute node. The set of asset priority values indicates a relative status arrangement for the set of assets. Using the set of asset weight values and the set of asset priority values, a determination is made to migrate a first asset of the set of assets from the first compute node to a second compute node. Accordingly, the first asset of the set of assets is migrated from the first compute node to the second compute node.

Abstract: Methods for managing an address on a switching device, managing an address on a network switch, and screening addresses in a cloud computing environment are provided. One embodiment is directed towards a computer-implemented method for managing an address on a switching device that is communicatively coupled to a plurality of virtual machines. The method includes accessing an address pool that includes an assigned address for each virtual machine from the plurality of virtual machines. The method includes determining, on the switching device, a used address for the virtual machine from the plurality of virtual machines. The method includes determining whether the used address is matching the assigned address for each virtual machine. The method also includes routing traffic from the virtual machine to a hypervisor in response to the used address matching the assigned address.

Abstract: Systems, methods, and computer program products to perform an operation, by, responsive to a request specifying to transition a state of a virtual machine in a cloud computing environment from a first state to a second state, allocating one or more system resources to the virtual machine during the transition from the first state to the second state, and, upon completion of the transition, releasing a portion of the allocated one or more system resources to a pool of available resources, so that the virtual machine is left with a remaining portion of the allocated one or more resources sufficient for operation during the second state.

Abstract: Methods for managing an address on a switching device, managing an address on a network switch, and screening addresses in a cloud computing environment are provided. One embodiment is directed towards a computer-implemented method for managing an address on a switching device that is communicatively coupled to a plurality of virtual machines. The method includes accessing an address pool that includes an assigned address for each virtual machine from the plurality of virtual machines. The method includes determining, on the switching device, a used address for the virtual machine from the plurality of virtual machines. The method includes determining whether the used address is matching the assigned address for each virtual machine. The method also includes routing traffic from the virtual machine to a hypervisor in response to the used address matching the assigned address.

Abstract: Disclosed aspects include managing network connectivity of a virtual machine related to a shared pool of configurable computing resources. The shared pool of configurable computing resources has a set of virtual machines connected with an integration bridge. Using the shared pool of configurable computing resources, the virtual machine is associated with the set of virtual machines and set of flow mapping data which identifies the virtual machine is determined. The set of flow mapping data is transmitted and the virtual machine is connected with the integration bridge. In embodiments, the virtual machine is disconnected from the integration bridge and a selection is made to connect the virtual machine based on the set of flow mapping data.

Abstract: Disclosed aspects include managing network connectivity of a virtual machine related to a shared pool of configurable computing resources. The shared pool of configurable computing resources has a set of virtual machines connected with an integration bridge. Using the shared pool of configurable computing resources, the virtual machine is associated with the set of virtual machines and set of flow mapping data which identifies the virtual machine is determined. The set of flow mapping data is transmitted and the virtual machine is connected with the integration bridge. In embodiments, the virtual machine is disconnected from the integration bridge and a selection is made to connect the virtual machine based on the set of flow mapping data.

Abstract: A host-side overcommit value is set upon a physical node that implements virtual machines (VM Node). The overcommit value is determined by receiving a selected enablement template that includes a selected computing capacity and a selected overcommit value. A user-side normalization factor is determined that normalizes the selected computing capacity against a reference data handling system. A comparable computing capacity of the VM Node is determined. A host-side normalization factor is determined that normalizes the comparable computing capacity against the reference data handling system. The host-side overcommit value is determined from the selected overcommit value, the user-side normalization factor, and the host-side normalization factor. The host-side overcommit value may indicate the degree the comparable computing capacity is overcommitted to virtual machines deployed upon heterogeneous VM Nodes as normalized against the reference system.

Abstract: A host-side overcommit value is set upon a physical node that implements virtual machines (VM Node). The overcommit value is determined by receiving a selected enablement template that includes a selected computing capacity and a selected overcommit value. A user-side normalization factor is determined that normalizes the selected computing capacity against a reference data handling system. A comparable computing capacity of the VM Node is determined. A host-side normalization factor is determined that normalizes the comparable computing capacity against the reference data handling system. The host-side overcommit value is determined from the selected overcommit value, the user-side normalization factor, and the host-side normalization factor. The host-side overcommit value may indicate the degree the comparable computing capacity is overcommitted to virtual machines deployed upon heterogeneous VM Nodes as normalized against the reference system.

Abstract: A mobile wireless device connects to a network of multiple wireless transceiver stations using a protocol in which a connection is established with a particular transceiver station. If the mobile device moves out of range of the original station, the connection is passed to another station, which then impersonates the original station, without dropping the connection. Preferably, the original station provides a virtual Media Access Control (MAC) address to identify itself when the connection is established, and this virtual MAC address is passed to any successor station. Preferably, the station monitors signal strength and automatically passes the connection by polling its neighbors upon determining that signal strength is getting weak.

Abstract: A host-side overcommit value is set upon a physical node that implements virtual machines (VM Node). The overcommit value is determined by receiving a selected enablement template that includes a selected computing capacity and a selected overcommit value. A user-side normalization factor is determined that normalizes the selected computing capacity against a reference data handling system. A comparable computing capacity of the VM Node is determined. A host-side normalization factor is determined that normalizes the comparable computing capacity against the reference data handling system. The host-side overcommit value is determined from the selected overcommit value, the user-side normalization factor, and the host-side normalization factor. The host-side overcommit value may indicate the degree the comparable computing capacity is overcommitted to virtual machines deployed upon heterogeneous VM Nodes as normalized against the reference system.