Abstract: Embodiments of the disclosure enable resource access for secure application containers. In accordance with one embodiment, a method is provided that comprises identifying a tracing wrapper for an application to be executed by a process. The tracing wrapper to track an event associated with an interaction of the application with one or more system resources. An instance of the application is executed by the process using an application account having access to the system resources. A first system resource of the system resources is determined to be used by the application in view of the tracing wrapper. The application is then copied to a secure container to be executed by the process using a container account of the secure container. The secure container is isolated from access to the one or more system resources. Thereupon, the container account is provided access to the first system resource.

Abstract: The subject matter of this specification can be implemented in, among other things, a method that includes receiving, by a processing device in a platform-as-a-service (PaaS) system, package metadata including one or more attributes for each of a plurality of packages. Each of the plurality of packages includes one or more components of one or more applications to execute on the PaaS system. The method further includes receiving threat metadata including one or more attributes for each of a plurality of threats. The method further includes storing the package metadata or the threat metadata in one or more data stores. The method further includes comparing, by the processing device, the attributes of the packages to the attributes of the threats to determine that at least one package among the packages includes at least one threat from the threats.

Abstract: Embodiments of the disclosure enable resource access for secure application containers. In accordance with one embodiment, a method is provided that comprises identifying a tracing wrapper for an application to be executed by a processing system. The tracing wrapper to track an event associated with an interaction of the application with one or more system resources. An instance of the application is executed by the processing system using an application account having access to the system resources. A first system resource of the system resources is determined to be used by the application in view of the tracing wrapper. The application is then copied to a secure container to be executed by the processing system using a container account of the secure container. The secure container is isolated from access to the one or more system resources. Thereupon, the container account is provided access to the first system resource.

Abstract: A method, system and computer program product for ensuring that archival data deleted in a source table is already stored in a target table. An external data source sets a flag in the first table to identify the row in the source table to be deleted. An application sets a flag in a second table for each row of the source table that is marked to be deleted according to the first table. The application performs uncommitted read operations on the source table for each row corresponding to the distinct primary key values stored in the first table. The application inserts the data read into the corresponding rows of the target table. The application deletes the rows in the source table indicated to be deleted by the second table. In this manner, the archival data deleted from the source table is ensured to already be stored in the target table.

Abstract: A method, system and computer program product for performing synchronization between source and target tables. An external data source inserts a new row in a first table as it modifies or creates a row in the source table where each new row in the first table includes a primary key value associated with the modified/created row in the source table. An application copies the distinct values for the primary keys listed in the first table and inserts them in a second table. The application performs uncommitted read operations on the source table for each row corresponding to the primary key values stored in the second table. The application inserts the data read into the corresponding rows of the target table. In this manner, a platform agnostic application may be able to synchronize the relational source and target tables in an efficient manner while minimizing the contention at the source table.

Abstract: A cache is configured as a hybrid disk-overflow system in which data sets generated by applications running in a distributed computing system are stored in a fast access memory portion of cache, e.g., in random access memory and are moved to a slower access memory portion of cache, e.g., persistent durable memory such as a solid state disk. Each data set includes application-defined key data and bulk data. The bulk data are moved to slab-allocated slower access memory while the key data are maintained in fast access memory. A pointer to the location within the slower access memory containing the bulk data is stored in the fast access memory in association with the key data. Applications call data sets within the cache using the key data, and the pointers facilitate access, management and manipulation of the associated bulk data. Access, management and manipulation occur asynchronously with the application calls.

Abstract: A method for displaying events in a plurality of calendar systems. The Custom Calendar System Program (CCSP) herein allows a user to create a custom calendar system by changing the length and names of the year, month, week, or day of any calendar system. The Event Conversion Program (ECP) herein translates the date for an event into a generic date and stores the event with the generic date. When the user changes the displayed time period or calendar system, the Display Program (DP) herein displays the new calendar system and/or time period and determines which events occur on the displayed time period. The DP translates only the events which occur in the displayed time period into the displayed calendar system dates and displays those events on the displayed calendar. A date caching file allows the invention to minimize the number of translation calculations.

Abstract: A method for displaying events in a plurality of calendar systems. The Custom Calendar System Program (CCSP) herein allows a user to create a custom calendar system by changing the length and names of the year, month, week, or day of any calendar system. The Event Conversion Program (ECP) herein translates the date for an event into a generic date and stores the event with the generic date. When the user changes the displayed time period or calendar system, the Display Program (DP) herein displays the new calendar system and/or time period and determines which events occur on the displayed time period. The DP translates only the events which occur in the displayed time period into the displayed calendar system dates and displays those events on the displayed calendar. A date caching file allows the invention to minimize the number of translation calculations.

Abstract: A method, system and computer program product for ensuring that archival data deleted in a source table is already stored in a target table. An external data source sets a flag in the first table to identify the row in the source table to be deleted. An application sets a flag in a second table for each row of the source table that is marked to be deleted according to the first table. The application performs uncommitted read operations on the source table for each row corresponding to the distinct primary key values stored in the first table. The application inserts the data read into the corresponding rows of the target table. The application deletes the rows in the source table indicated to be deleted by the second table. In this manner, the archival data deleted from the source table is ensured to already be stored in the target table.

Abstract: A method, system and computer program product for performing synchronization between source and target tables. An external data source inserts a new row in a first table as it modifies or creates a row in the source table where each new row in the first table includes a primary key value associated with the modified/created row in the source table. An application copies the distinct values for the primary keys listed in the first table and inserts them in a second table. The application performs uncommitted read operations on the source table for each row corresponding to the primary key values stored in the second table. The application inserts the data read into the corresponding rows of the target table. In this manner, a platform agnostic application may be able to synchronize the relational source and target tables in an efficient manner while minimizing the contention at the source table.

Abstract: A method for displaying events in a plurality of calendar systems. The Custom Calendar System Program (CCSP) herein allows a user to create a custom calendar system by changing the length and names of the year, month, week, or day of any calendar system. The Event Conversion Program (ECP) herein translates the date for an event into a generic date and stores the event with the generic date. When the user changes the displayed time period or calendar system, the Display Program (DP) herein displays the new calendar system and/or time period and determines which events occur on the displayed time period. The DP translates only the events which occur in the displayed time period into the displayed calendar system dates and displays those events on the displayed calendar. A date caching file allows the invention to minimize the number of translation calculations.

Abstract: Under the present invention, audio characteristics of computer audio files are analyzed (measured). Based on the analysis, baseline ratings are determined. Final ratings are then determined by scaling each baseline rating relative to one another to fit within a fixed range. A setting can then be established for a playing device so that only computer audio files having a final rating that meets the established setting will be played.