Abstract: A stealth firewall. The stealth firewall can include a first network interface to an external network; a second network interface to an internal network; a packet filter for restricting access to the internal network, the packet filter ignoring requests from the external network to access the internal network; and, a state machine. Importantly, the state machine can be pre-configured to transition across one or more internal states conditioned upon receiving particular requests to access the internal network. The state machine further can include at least one state transition reachable through a pre-specified sequence of states which causes the packet filter to permit access to the internal network.

Abstract: Methods, systems, computer program products, and methods of doing business by caching dynamic content fragments in a distributed cache and assembling requested content using these fragments. The disclosed techniques are non-invasive, and enable the benefits of distributed fragment caching to be extended to more applications, without regard to the programming model used when designing the application. An application developer specifies dependencies among content creating components (or, in alternative embodiments, it may be possible to infer this information), and if one of these components may be called upon to generate a content fragment dynamically, correlator data is programmatically created and attached to a message that references the component. A subsequent content generation request to the component then automatically carries the correlator data, and that data is programmatically restored.

Abstract: Under the present invention, a system, method, and program product are provided for reducing the overhead of cache invalidations in a shared cache by transmitting a hashed code of a key to be invalidated. The method for shared cache invalidation comprises: hashing a key corresponding to an object in a first cache that has been modified or deleted to provide a hashed code of the key, wherein the first cache forms part of a shared cache; transmitting the hashed code of the key to other caches in the shared cache; comparing the hashed code of the key with entries in the other caches; and dropping any keys in the other caches having a hash code the same as the hashed code of the key.

Abstract: Controlling a cache of distributed data is provided by dynamically determining whether and/or where to cache the distributed data based on characteristics of the data, characteristics of the source of the data and characteristics of the cache so as to provide an indication of whether to cache the data. The data may be selectively cached based on the indication.

Abstract: A method, system and program product maintains consistency of data across a hierarchy of caches. Under the present invention, each data entry in the hierarchy of caches is assigned its own dependency identifier as well as the dependency identifiers of any data entries on which it depends. Thus, the present invention allows corresponding data entries to be linked for automatic invalidation.

Abstract: The present invention provides methods of preventing and/or treating cancers (including tumors). In one preferred embodiment, the invention is practiced to induce regression of an existing cancer or tumor and/or to prevent metastasis and/or to prevent growth of metastatic nodules. In other preferred embodiments, the invention may be used as a prophylaxis to prevent the development of primary cancers through a childhood or adult vaccination program against specific tumor antigens for cancers with high incidences. In an alternate preferred embodiment, the present invention provides methods of establishing an immune response against a universal artificial tumor antigen through a childhood or adult vaccine program, thus providing a long-term immune response that can be utilized at any point to treat any cancer which develops later in life. The present invention also provides cancer and tumor cells stably expressing an artificial antigen, preferably an artificial cell-surface antigen.

Abstract: Methods, systems, computer program products, and methods of doing business by caching dynamic content fragments in a distributed cache and assembling requested content using these fragments. The disclosed techniques are non-invasive, and enable the benefits of distributed fragment caching to be extended to more applications, without regard to the programming model used when designing the application. An application developer specifies dependencies among content creating components (or, in alternative embodiments, it may be possible to infer this information), and if one of these components may be called upon to generate a content fragment dynamically, correlator data is programmatically created and attached to a message that references the component. A subsequent content generation request to the component then automatically carries the correlator data, and that data is programmatically restored.

Abstract: A method, system and program product for maintaining data consistency across a hierarchy of caches is provided. Under the present invention, each data entry in the hierarchy of caches is assigned its own dependency identifier as well as the dependency identifiers of any data entries on which it depends. Thus, the present invention allows corresponding data entries to be linked for automatic invalidation.

Abstract: A method, system, and computer program product, by which portions of the session information that page-content is dependent upon are “pushed” to the client from the origin server in a way such that auxiliary servers, e.g. other application servers and edge-servers, have access to the session information and fragment dependancy data to generate auxiliary-server cache-IDs for the custom pages. This enables distribution of the load away from the origin server, allowing better application distribution and scalability through more effective caching.

Abstract: A stealth firewall. The stealth firewall can include a first network interface to an external network; a second network interface to an internal network; a packet filter for restricting access to the internal network, the packet filter ignoring requests from the external network to access the internal network; and, a state machine. Importantly, the state machine can be pre-configured to transition across one or more internal states conditioned upon receiving particular requests to access the internal network. The state machine further can include at least one state transition reachable through a pre-specified sequence of states which causes the packet filter to permit access to the internal network.