Abstract: Methods and apparatus for automated adaptive reprovisioning of servers under security assault. The method comprises detecting a security assault or a possible security assault on a first server, and reprovisioning by automatically creating a new server instance with a desired new server configuration to perform at least one of the tasks performed by said server.

Abstract: A physical token is provided that is used to assign an activity or role to a specific device by virtue of a physical relationship with the device. By associating the token with a device, through electrical connection or by mere proximity relative to the device, an administrator informs the device of the intended role for the device in an enterprise. In conjunction with some bootstrapping or other appropriate software on the computing device, the act of placing the token in the proper physical relationship with the device is all that is necessary to configure and deploy the device in a data center. A device may be assigned roles from a plurality of tokens. Computing devices may also be assigned roles based upon their proximity to other devices. Roles may also include a concept of seniority, wherein one device may be assigned a more senior role to another device.

Abstract: In one aspect this invention provides a computer program embodied on a computer readable medium that is executed by at least one data processor of a policy management system. The computer program includes first computer program instructions for implementing a user interface and second computer program instructions for implementing a policy manager that is coupled to the user interface via a policy repository for introducing a new attribute, using the first computer program instructions, into a policy for a policy-managed system, without requiring a change to (e.g., without having to re-write or re-compile) the second computer program instructions.

Abstract: A system and method for providing real-time, dynamic switching between first and second service providers each capable of providing a service for users over a communications network. The method includes steps of: establishing switching criterion for deciding when to switch service provision between the first service provider and second service provider; maintaining state information associated with a user's use of the service provided by a first service provider; switching between the first and second service provided over the communications network based on satisfaction of the switching criterion; and, migrating any state information maintained up to the time of switching to the second service. Preferably, the dynamic switching occurs in a manner substantially transparent to the user.

Abstract: System, method and program product for detecting malicious software within or attacking a computer system. In response to a system call, a hook routine is executed at a location of the system call to (a) determine a data flow or process requested by the call, (b) determine another data flow or process for data related to that of the call, (c) automatically generate a consolidated information flow diagram showing the data flow or process of the call and the other data flow or process. After steps (a-c), a routine is called to perform the data flow or process requested by the call. A user monitors the information flow diagram and compares the data flow or process of steps (a) and (b) with a data flow or process expected by said user. If there are differences, the user may investigate the matter or shut down the computer to prevent damage.

Abstract: Disclosed is a performance prediction system and service that uses acquired knowledge of queries that are received to make predictions concerning the future performance of certain entities, such as business entities. By analyzing query patterns and the actual or predicted performance of business entities, the performance prediction service is enabled to observe correlations between queries, query patterns and performance that can be used to facilitate the prediction of future performance.

Abstract: An improved plug and cable combination for connecting information appliances to an information socket and to a power socket, comprising a power conductor for transferring power from the power socket to the information appliance. The power conductor having a power plug at a first end, the power plug adapted to connect to the power socket. An information conductor for transferring information from the information socket to the information appliance. The information conductor having an information plug at a first end, the information plug adapted to connect to the information socket. A second end of the power conductor and a second end of the information conductor terminate at the information appliance. The information plug and the power plug having a plug joining means disposed thereon, wherein the plug joining means being capable to integrate the information plug and the power plug into an integrated plug.