Abstract: A method for connecting a computing device to a computing arrangement. A proxy system determines, based on an address in a message specifying the computing arrangement, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement. Establishing the new secure connection includes instantiating a container and initiating an establishment of the secure connection by a protocol entity deployed within the container. The container is a virtual software object that encompasses all of the elements that are needed for an application to run within an operating system, which enables isolation of the container from one or more additional containers running within an operating system.

Abstract: Methods and systems for preventing phishing attacks using the domain name system are disclosed. A method includes: receiving, by a computing device, a domain name system (DNS) request comprising a domain name; determining, by the computing device, at least one domain name that is similar to the domain name; and sending, by the computing device, the at least one domain name that is similar to the domain name as a response to the DNS request.

Abstract: An access control method for controlling access to data requested from an electronic information system. The method comprises receiving a request for the data, determining a user identity associated with the request; gathering the requested data from one or more data sources by an orchestrator for input to a cognitive engine; analyzing the requested data; based on results of analyzing the requested data, deciding on whether the user identity can be allowed to access the requested data; providing feedback by the user identity; and updating a learning module based on the feedback.

Abstract: A method for connecting a computing device to a computing arrangement. A proxy system determines, based on an address in a message specifying the computing arrangement, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement. Establishing the new secure connection includes instantiating a container and initiating an establishment of the secure connection by a protocol entity deployed within the container. The container is a virtual software object that encompasses all of the elements that are needed for an application to run within an operating system, which enables isolation of the container from one or more additional containers running within an operating system.

Abstract: A method and associated system for connecting a computing device to a computing arrangement. A message from the computing device is received. The message includes an address specifying the computing arrangement. The proxy system is a computer system. It is determined, based on the address, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to the determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement.

Abstract: Techniques are disclosed for validating a ticket based on biometric data provided by a ticket holding user. A ticket controller device broadcasts an inquiry frame specifying a request for authentication data for a ticket user requesting access to a service hosted by the ticket controller. A mobile device may receive the inquiry frame and generate a response frame encapsulating a ticket identifier and biometric data associated with a user. The ticket controller receives the response frame including the ticket identifier and the biometric data. Upon determining that the ticket identifier and the biometric data encapsulated in the response frame matches a stored ticket identifier and biometric data, the ticket controller grants the user access to the service.

Abstract: Methods and systems for preventing phishing attacks using the domain name system are disclosed. A method includes: receiving, by a computing device, a domain name system (DNS) request comprising a domain name; determining, by the computing device, at least one domain name that is similar to the domain name; and sending, by the computing device, the at least one domain name that is similar to the domain name as a response to the DNS request.

Abstract: An access control method for controlling access to data requested from an electronic information system. The method comprises receiving a request for the data, determining a user identity associated with the request; gathering the requested data from one or more data sources by an orchestrator for input to a cognitive engine; analyzing the requested data; based on results of analyzing the requested data, deciding on whether the user identity can be allowed to access the requested data; providing feedback by the user identity; and updating a learning module based on the feedback.

Abstract: A method and associated system for connecting a computing device to a computing arrangement. A message from the computing device is received. The message includes an address specifying the computing arrangement. The proxy system is a computer system. It is determined, based on the address, that a secure connection between the proxy system and the computing arrangement does not exist. The secure connection is dedicated for secure communication between the computing device and the computing arrangement. In response to the determining that the secure connection does not exist, a new secure connection is established between the proxy system and the computing arrangement.

Abstract: Techniques are disclosed for validating a ticket based on biometric data provided by a ticket holding user. A ticket controller device broadcasts an inquiry frame specifying a request for authentication data for a ticket user requesting access to a service hosted by the ticket controller. A mobile device may receive the inquiry frame and generate a response frame encapsulating a ticket identifier and biometric data associated with a user. The ticket controller receives the response frame including the ticket identifier and the biometric data. Upon determining that the ticket identifier and the biometric data encapsulated in the response frame matches a stored ticket identifier and biometric data, the ticket controller grants the user access to the service.

Abstract: A solution for updating at least one software product installed on a virtual machine, including providing a software image of at least one new virtual disk storing a new level of the software product together with new metadata including an indication of at least one new activation procedure of the new level of the software product, and replacing a current level of the software product with the new level of the software product, the current level of the software product being stored in at least one current virtual disk of the virtual machine together with current metadata including current activation information of the current level of the software product, where the replacing includes removing at least one current virtual disk from the virtual machine; adding at least one new virtual disk to the virtual machine; and running at least one new activation procedure according to the current activation information.

Abstract: A solution for updating at least one software product installed on a virtual machine, including providing a software image of at least one new virtual disk storing a new level of the software product together with new metadata including an indication of at least one new activation procedure of the new level of the software product, and replacing a current level of the software product with the new level of the software product, the current level of the software product being stored in at least one current virtual disk of the virtual machine together with current metadata including current activation information of the current level of the software product, where the replacing includes removing at least one current virtual disk from the virtual machine; adding at least one new virtual disk to the virtual machine; and running at least one new activation procedure according to the current activation information.

Abstract: A solution for updating at least one software product installed on a virtual machine, including providing a software image of at least one new virtual disk storing a new level of the software product together with new metadata including an indication of at least one new activation procedure of the new level of the software product, and replacing a current level of the software product with the new level of the software product, the current level of the software product being stored in at least one current virtual disk of the virtual machine together with current metadata including current activation information of the current level of the software product, where the replacing includes removing at least one current virtual disk from the virtual machine; adding at least one new virtual disk to the virtual machine; and running at least one new activation procedure according to the current activation information.

Abstract: A system, method and/or software for using overlap between a first website area-of-interest map, associated with a first website, and a searcher area-of-interest map to help prioritize the websites returned by a search engine search. The area-of-interest maps are made up of geographic pixels respectively assigned with area-of-interest values. Overlap area is determined by comparing, on a pixel-by-pixel basis, corresponding pixels of the searcher area-of-interest map and the first website area-of-interest map to determine overlap pixels where the following conditions hold: (i) the first website area-of-interest map has a non-zero interest value, and (ii) the searcher area-of-interest map has a non-zero interest value.

Abstract: A solution for updating at least one software product installed on a virtual machine, including providing a software image of at least one new virtual disk storing a new level of the software product together with new metadata including an indication of at least one new activation procedure of the new level of the software product, and replacing a current level of the software product with the new level of the software product, the current level of the software product being stored in at least one current virtual disk of the virtual machine together with current metadata including current activation information of the current level of the software product, where the replacing includes removing at least one current virtual disk from the virtual machine; adding at least one new virtual disk to the virtual machine; and running at least one new activation procedure according to the current activation information.

Abstract: A system, method and/or software for using overlap between a first website area-of-interest map, associated with a first website, and a searcher area-of-interest map to help prioritize the websites returned by a search engine search. The area-of-interest maps are made up of geographic pixels respectively assigned with area-of-interest values. Overlap area is determined by comparing, on a pixel-by-pixel basis, corresponding pixels of the searcher area-of-interest map and the first website area-of-interest map to determine overlap pixels where the following conditions hold: (i) the first website area-of-interest map has a non-zero interest value, and (ii) the searcher area-of-interest map has a non-zero interest value.

Abstract: A method, computer program product, and apparatus for managing a user interface. In one illustrative embodiment, a number of tags associated with a group of fields is identified for display in the user interface responsive to receiving a request to display the user interface. A number of policies for displaying fields in the user interface comprising a priority for a tag in the number of tags is identified. The fields are displayed according to the priority for the tag in the number of tags identified in the number of policies.