Abstract: The present disclosure relates to a method for data communication between nodes and storage devices via a networking device of a network, wherein data access to a storage device of the network by a node is performed in accordance with a data access mode being a normal data access mode. The networking device is configured to share available resources of the networking device between the data links. The method comprises: determining that a network congestion may occur in the network. At least one data link defined by a node and a storage device may be identified. The data access mode may be switched for the identified data link from the normal data access mode to a compressed data access mode. The compressed data access mode enables exchange of compressed data via the identified data link, thereby increasing available resources of the networking device.

Abstract: The present disclosure relates to a method for data communication between nodes and storage devices via a networking device of a network, wherein data access to a storage device of the network by a node is performed in accordance with a data access mode being a normal data access mode. The networking device is configured to share available resources of the networking device between the data links. The method comprises: determining that a network congestion may occur in the network. At least one data link defined by a node and a storage device may be identified. The data access mode may be switched for the identified data link from the normal data access mode to a compressed data access mode. The compressed data access mode enables exchange of compressed data via the identified data link, thereby increasing available resources of the networking device.

Abstract: Provided are techniques for collecting capacity data of virtual machines by leveraging agent data. A list of one or more virtual machines for which capacity data is to be retrieved is obtain from an asset server, where the one or more virtual machines are identified using a licensing measurement. Infrastructure data and hypervisor data are obtained from an infrastructure server. For each of the one or more virtual machines, the infrastructure data and the hypervisor data are used to request, from a capacity scanner on each of the one or more virtual machines, capacity data for that virtual machine. The capacity data for each of the one or more virtual machines is sent to the asset server, and the asset server performs load balancing of software that is to be executed on the one or more virtual machines using the capacity data.

Abstract: Systems and methods for managing access to data in a network are provided. In embodiments, a method includes: receiving, by a computer device, a search request regarding data of a participant, the search request including participant parameters associated with the participant; generating, by the computer device, a record of data associated with the participant based on the search request; sending, by the computer device, a request for data to third party nodes of a blockchain system based on the search request and the record; receiving, by the computer device, results from the blockchain system, the results including at least one set of data from a first node of the third party nodes; and determining, by the computer device, that the set of data requires updating based on the results.

Abstract: A computer-implemented method, system and computer program product for applying a unified governance and integration platform to social media data. Data integration definitions for managing and protecting social media data are received. After receiving the data integration definitions for social media data, data integration externalization, governance catalog externalization or lineage externalization may be performed. For example, social media data may be extracted from a database system by a governance and integration unit (“unit”) using the data integration definitions. The extracted social media data is then transformed and loaded to the social media data system via a connector linking the data from the unit to the social media data system. In another example, social media data is extracted from the social media data system by the unit, such as via the connector, using the data integration definitions and then transformed and loaded to the database system for analysis.

Abstract: Applying data owner-defined data protection policies for identity data security within a blockchain environment is provided. A data sharing request for an identity data attribute corresponding to a data owner is received from a data consumer. A data protection policy defined by the data owner that corresponds to the identity data attribute requested by the data consumer is retrieved from a blockchain. The data protection policy is applied to the identity data attribute requested by the data consumer to determine amount of data sharing with the data consumer.

Abstract: When a system receives sensitive data, it can request an encryption key from an encryption/decryption unit. A central processing unit (CPU) of the system can encrypt the sensitive data using the encryption key before writing the sensitive data to memory. Thus, the sensitive data is encrypted when written to memory.

Abstract: Methods, computer program products, and systems are presented. The method computer program products, and systems can include, for instance: (a) obtaining grooming operation scheduling data specifying a schedule of grooming operations performed by at least first and second layers of the plurality of layers; (b) identifying, using data of grooming operation scheduling data, at least one gap in the execution of scheduled operations performed by the storage system; (c) moving an execution time of one or more grooming operation of the grooming operations into said at least one gap; and (d) repeating steps (a) to (c) to adapt to a changing usage pattern of said storage system.

Abstract: Automatically extracting lineage data for distributed file systems and databases by generating a file folder including data and having a file path, generating a data table associated with the data and the file path, tracking the lineage of data into the file folder and the lineage of data from the data table, and recording an overall lineage comprising the lineage of data into the file folder and from the data table.

Abstract: An approach is provided in which a storage system detects that an extent residing on a first one of a set of physical storage devices requires relocation. The storage system identifies a set of backend connection properties of each of a set of backend connections between the storage system and the set of physical storage devices. The set of backend connection properties includes at least a connection bandwidth between the storage system and at least one of the physical storage devices. In turn, the storage system relocates the extent from the first physical storage device to a second one of the set of physical storage devices based at least in part, on the set of backend connection properties.

Abstract: An approach is provided in which a storage system detects that an extent residing on a first one of a set of physical storage devices requires relocation. The storage system identifies a set of backend connection properties of each of a set of backend connections between the storage system and the set of physical storage devices. The set of backend connection properties includes at least a connection bandwidth between the storage system and at least one of the physical storage devices. In turn, the storage system relocates the extent from the first physical storage device to a second one of the set of physical storage devices based at least in part, on the set of backend connection properties.

Abstract: A method, computer system, and a computer program product for scanning a shared resource in a network is provided. The present invention may include, assigning, to a set of active nodes of a network, a list of stored files associated with identifying software signatures in a shared resource of the network in a first scan cycle. The present invention may also include, receiving, from the set of active nodes of the network, a set of software signatures identified in the shared resource of the network, based on the assigned list of stored files. The present invention may further include, in response to at least one performance benchmark value associated with the set of active nodes of the network, adjusting the assigned list of stored files to optimize utilization of the set of active nodes for identifying software signatures in the shared resource in a subsequent scan cycle.

Abstract: Approaches presented herein enable restricting access to a locked computing resource in a web browser with a user-tailored CAPTCHA. More specifically, a request for a CAPTCHA is obtained from a web browser of a user attempting to access a resource. A set of terms associated with the user are selected from a pool of terms collected from an environment of the user within a pre-determined time period. A familiarity value of the selected terms indicating a recognizability of the terms by the user is determined. A CAPTCHA of the selected set of terms is generated having a level of graphic noise corresponding to the familiarity value. The generated CAPTCHA is then sent to the web browser. When a response to the CAPTCHA is received from the web browser, it is analyzed to determine whether the response matches the selected set of terms. If so, the web browser is instructed to grant the user access to the resource.

Abstract: A method, computer system, and a computer program product for scanning a shared resource in a network is provided. The present invention may include, assigning, to a set of active nodes of a network, a list of stored files associated with identifying software signatures in a shared resource of the network in a first scan cycle. The present invention may also include, receiving, from the set of active nodes of the network, a set of software signatures identified in the shared resource of the network, based on the assigned list of stored files. The present invention may further include, in response to at least one performance benchmark value associated with the set of active nodes of the network, adjusting the assigned list of stored files to optimize utilization of the set of active nodes for identifying software signatures in the shared resource in a subsequent scan cycle.

Abstract: An approach is provided in which a storage system detects that an extent residing on a first one of a set of physical storage devices requires relocation. The storage system identifies a set of backend connection properties of each of a set of backend connections between the storage system and the set of physical storage devices. The set of backend connection properties includes at least a connection bandwidth between the storage system and at least one of the physical storage devices. In turn, the storage system relocates the extent from the first physical storage device to a second one of the set of physical storage devices based at least in part, on the set of backend connection properties.

Abstract: An approach is provided in which a storage system detects that an extent residing on a first one of a set of physical storage devices requires relocation. The storage system identifies a set of backend connection properties of each of a set of backend connections between the storage system and the set of physical storage devices. The set of backend connection properties includes at least a connection bandwidth between the storage system and at least one of the physical storage devices. In turn, the storage system relocates the extent from the first physical storage device to a second one of the set of physical storage devices based at least in part, on the set of backend connection properties.

Abstract: Embodiments are disclosed for managing a multi-tiered storage system. The techniques include generating a heat map for numerous data extents in the multi-tier storage system. The techniques also include generating a queue comprising a plurality of candidates of the data extents. The queue is generated by determining deduplication link counts associated with the candidates, sorting the candidates based on the heat map, and sorting the heat map sorted candidates based on the link counts. The techniques also include moving one or more of the candidates from the first tier of the multi-tier storage system to the second tier of the multi-tier storage system based on the queue.

Abstract: Approaches presented herein enable restricting access to a locked computing resource in a web browser with a user-tailored CAPTCHA. More specifically, a request for a CAPTCHA is obtained from a web browser of a user attempting to access a resource. A set of terms associated with the user are selected from a pool of terms collected from an environment of the user within a pre-determined time period. A familiarity value of the selected terms indicating a recognizability of the terms by the user is determined. A CAPTCHA of the selected set of terms is generated having a level of graphic noise corresponding to the familiarity value. The generated CAPTCHA is then sent to the web browser. When a response to the CAPTCHA is received from the web browser, it is analyzed to determine whether the response matches the selected set of terms. If so, the web browser is instructed to grant the user access to the resource.

Abstract: Embodiments are disclosed for managing a multi-tiered storage system. The techniques include generating a heat map for numerous data extents in the multi-tier storage system. The techniques also include generating a queue comprising a plurality of candidates of the data extents. The queue is generated by determining deduplication link counts associated with the candidates, sorting the candidates based on the heat map, and sorting the heat map sorted candidates based on the link counts. The techniques also include moving one or more of the candidates from the first tier of the multi-tier storage system to the second tier of the multi-tier storage system based on the queue.

Abstract: Systems and methods for managing access to data in a network are provided. In embodiments, a method includes: receiving, by a computer device, a search request regarding data of a participant, the search request including participant parameters associated with the participant; generating, by the computer device, a record of data associated with the participant based on the search request; sending, by the computer device, a request for data to third party nodes of a blockchain system based on the search request and the record; receiving, by the computer device, results from the blockchain system, the results including at least one set of data from a first node of the third party nodes; and determining, by the computer device, that the set of data requires updating based on the results.