Abstract: A method of preparing hydrophobicizing leather treatment compositions includes the steps of a) free-radically initiated copolymerization of i) at least one ethylenically unsaturated carboxylic acid or its derivatives, and ii) at least one (meth)acrylate of a primary saturated C8 to C22 alcohol, b) mixing the reaction mixture obtained after step a) with water, c) salting at least some of the carboxyl groups of the reaction mixture obtained after step b) with a base, and d) shearing the reaction mixture obtained after step c) to an average particle size of 0.05-10 ?m, wherein step a) is carried out in oil as reaction medium and wherein the atmosphere in step a) contains less than 0.1% by volume of an oxidizing gas.

Abstract: A method of preparing hydrophobicizing leather treatment compositions includes the steps of a) free-radically initiated copolymerization of i) at least one ethylenically unsaturated carboxylic acid or its derivatives, and ii) at least one (meth)acrylate of a primary saturated C8 to C22 alcohol, b) mixing the reaction mixture obtained after step a) with water, c) salting at least some of the carboxyl groups of the reaction mixture obtained after step b) with a base, and d) shearing the reaction mixture obtained after step c) to an average particle size of 0.05-10 ?m, wherein step a) is carried out in oil as reaction medium and wherein the atmosphere in step a) contains less than 0.1% by volume of an oxidizing gas.

Abstract: A method of estimating power consumption of one or more network connected devices configured within an information technology (IT) architecture includes monitoring network events occurring within the IT architecture over a defined time period; correlating the monitored network events with predetermined power profile operating point data associated with the one or more network connected devices, wherein the power profile operating point data is based on possible network event occurrences within the IT architecture; and based on the correlating, generating an estimated energy usage of the one or more network connected devices for the defined time period.

Abstract: At least one anomaly associated with at least one actual hardware element in a computer system having a plurality of hardware elements is addressed. The anomaly is detected, and, responsive to the detection, a virtualization layer is inserted between (i) an operating system of the computer system, and (ii) the plurality of hardware elements. Hardware emulation and/or selective hardware activation/deactivation are performed on the at least one actual hardware element by the virtualization layer. The insertion of the virtualization layer is accomplished in an on-the-fly manner.

Abstract: Mechanisms are provided for automatic address range detection for an IP network. Flow data is obtained comprising one of the source and destination IP addresses for the flow and one of (a) the other of the source and destination IP addresses and (b) direction data indicative of the flow direction across the network boundary. A tree data structure is generated representing the IP addresses in the flow data. IP addresses with initial portions in common are represented in the tree with at least one node in common. Weights are assigned to nodes in the tree in dependence on occurrences of the represented IP addresses in at least a subset of the flow data. The IP address range of the network is then detected by identifying, in dependence on the assigned weights, the node associated with the last initial address portion common to all IP addresses in the network.

Abstract: Mechanisms are provided for automatic address range detection for an IP network. Flow data is obtained comprising the source or destination IP addresses for the flow and one of: the other of the source or destination IP addresses; or direction data identifying the flow direction across the network boundary. A tree is generated representing IP addresses in the flow data. IP addresses with initial portions in common are represented in the tree with a node in common. Weights are assigned to nodes in the tree based on occurrences of the represented IP addresses in the flow data. The IP address range of the network is detected by identifying, based on the assigned weights, the node associated with the last initial address portion common to all IP addresses in the network. A device is automatically configured with the IP address range to differentiate IP addresses inside and outside the network.

Abstract: A firewall system adapted for location outside the client machine, preferably in the same data processing device as the client machine but outside a virtual machine containing the client machine. Control logic of the firewall system receives incoming and outgoing connections from the network and client machine respectively. In response to a connection request initiating a connection between respective endpoints in the network and client machine, the control logic performs a security assessment comprising obtaining from at least one of the network and client machine information indicative of the security state of the endpoint therein, and allows or inhibits the connection in dependence on the result of the security assessment. The security assessment may be performed in accordance with a security policy of the system, and different security assessments may be performed for different connection requests in accordance with the security policy.

Abstract: A method, article of manufacture, and system for indicating underutilized network devices that provide services in a data communications network. The method includes: receiving network traffic data; filtering the network traffic data to eliminate data for predefined connections; producing, from the filtered network traffic data, a graph representing a connection between a first device and a second device within the data communications network; analyzing the graph to identify a set of interconnected nodes that is outside the data communications network; and indicating an underutilized network device by producing an output dependent on traffic rate data associated with a link to the identified set of interconnected nodes that is outside the data communications network.

Abstract: A method for protecting the integrity of a set of memory pages to be accessed by an operating system of a data processing system, includes running the operating system in a virtual machine (VM) of the data processing system; verifying the integrity of the set of memory pages on loading of pages in the set to a memory of the data processing system for access by the operating system; in response to verification of the integrity, designating the set of memory pages as trusted pages and, in a page table to be used by the operating system during the access, marking non-trusted pages as paged; and in response to a subsequent page fault interrupt for a non-trusted page, remapping the set of pages to a region of the data processing system memory which is inaccessible to the virtual machine.

Abstract: A first virtualization layer is inserted between (i) an operating system of a computer system, and (ii) at least first and second hardware devices of the computer system. Data is communicated between the first hardware device and the second hardware device, via the first virtualization layer, without exposing the data to the operating system.

Abstract: Mechanisms are provided for automatic address range detection for an IP network. Flow data is obtained comprising the source or destination IP addresses for the flow and one of: the other of the source or destination IP addresses; or direction data identifying the flow direction across the network boundary. A tree is generated representing IP addresses in the flow data. IP addresses with initial portions in common are represented in the tree with a node in common. Weights are assigned to nodes in the tree based on occurrences of the represented IP addresses in the flow data. The IP address range of the network is detected by identifying, based on the assigned weights, the node associated with the last initial address portion common to all IP addresses in the network. A device is automatically configured with the IP address range to differentiate IP addresses inside and outside the network.

Abstract: Embodiments of the present disclosure provide for processes for manufacture of a dry strength paper, methods for imparting dry strength to paper using a cationic starch graft polymer, and the like.

Abstract: A method for protecting the integrity of a set of memory pages to be accessed by an operating system of a data processing system, includes running the operating system in a virtual machine (VM) of the data processing system; verifying the integrity of the set of memory pages on loading of pages in the set to a memory of the data processing system for access by the operating system; in response to verification of the integrity, designating the set of memory pages as trusted pages and, in a page table to be used by the operating system during the access, marking non-trusted pages as paged; and in response to a subsequent page fault interrupt for a non-trusted page, remapping the set of pages to a region of the data processing system memory which is inaccessible to the virtual machine.

Abstract: Mechanisms are provided for automatic address range detection for an IP network. Flow data is obtained comprising one of the source and destination IP addresses for the flow and one of (a) the other of the source and destination IP addresses and (b) direction data indicative of the flow direction across the network boundary. A tree data structure is generated representing the IP addresses in the flow data. IP addresses with initial portions in common are represented in the tree with at least one node in common. Weights are assigned to nodes in the tree in dependence on occurrences of the represented IP addresses in at least a subset of the flow data. The IP address range of the network is then detected by identifying, in dependence on the assigned weights, the node associated with the last initial address portion common to all IP addresses in the network.

Abstract: A method, article of manufacture, and system for indicating underutilized network devices that provide services in a data communications network. The method includes: receiving network traffic data; filtering the network traffic data to eliminate data for predefined connections; producing, from the filtered network traffic data, a graph representing a connection between a first device and a second device within the data communications network; analyzing the graph to identify a set of interconnected nodes that is outside the data communications network; and indicating an underutilized network device by producing an output dependent on traffic rate data associated with a link to the identified set of interconnected nodes that is outside the data communications network.

Abstract: A method and system for verifying authenticity of an application in a computing-platform operating in a Trusted Computing Group (TCG) domain is provided. The method includes computing one or more integrity measurements corresponding to one or more of the application, a plurality of precedent-applications, and an output file. The output file includes an output of the application, the application is executing on the computing-platform. Each precedent-application is executed before the application. The method further includes comparing one or more integrity measurements with re-computed integrity measurements. The re-computed integrity measurements are determined corresponding to one or more of the application, the plurality of precedent-applications, and the computing-platform.

Abstract: Operating a computer system includes determining, for each of a plurality of electronic units in a computer system, at least one upcoming process being assigned to a specific electronic unit. An anticipated workload for the specific electronic unit is identified based upon the at least one upcoming process. At least one control signal is generated based upon a plurality of anticipated workloads for the plurality of electronic units. A flow of cooling fluid to each of a plurality of cooling units in the computer system is controlled based upon the at least one control signal. Each of the plurality of cooling units are respectively associated with an electronic unit of the plurality of electronic units.

Abstract: A cationic starch graft copolymer is prepared by polymerization of monomers a) to d) a) 20-80% by weight of acrylamide, methacrylamide or mixtures thereof, b) 3-20% by weight of at least one basic or cationic vinyl monomer; c) 0.005-1.5% by weight of at least one bifunctional or higher-functional crosslinking agent, d) 0-10% by weight of at least one nonionic or anionic vinyl monomer which differs from the monomers mentioned under a) to c) in the presence of a grafting base e) e) 15-70% by weight of at least one starch or one starch derivative, the sum of a) to e) being 100% by weight.

Abstract: A cationic starch graft copolymer is prepared by polymerization of monomers a) to d) a) 20-80% by weight of acrylamide, methacrylamide or mixtures thereof, b) 3-20% by weight of at least one basic or cationic vinyl monomer; c) 0.005-1.5% by weight of at least one bifunctional or higher-functional crosslinking agent, d) 0-10% by weight of at least one nonionic or anionic vinyl monomer which differs from the monomers mentioned under a) to c) in the presence of a grafting base e) e) 15˜70% by weight of at least one starch or one starch derivative, the sum of a) to e) being 100% by weight.

Abstract: A method for visually presenting inherited members in object-oriented languages includes displaying an aggregated view of actual members and inherited members of a current class in a single location.