Abstract: Mechanisms for identifying a pattern of computing resource activity of interest, in activity data characterizing activities of computer system elements, are provided. A temporal graph of the activity data is generated and a filter is applied to the temporal graph to generate one or more first vector representations, each characterizing nodes and edges within a moving window defined by the filter. The filter is applied to a pattern graph representing a pattern of entities and events indicative of the pattern of interest, to generate a second vector representation. The second vector representation is compared to the one or more first vector representations to identify one or more nearby vectors, and one or more corresponding subgraph instances are output to an intelligence console computing system as inexact matches of the temporal graph.

Abstract: Adversarial input detection and purification (AIDAP) preprocessor and deep learning computer model mechanisms are provided. The deep learning computer model receives input data and processes it to generate a first pass output that is output to the AIDAP preprocessor. The AIDAP preprocessor determines a discriminative region of the input data based on the first pass output and transforms a subset of elements in the discriminative region to modify a characteristic of the elements and generate a transformed input data. The deep learning computer model processes the transformed input data to generate a second pass output that is output to the AIDAP preprocessor which detects an adversarial input or not based on a comparison of the first pass and second pass outputs. If an adversarial input is detected, a responsive action that mitigates effects of the adversarial input is performed.

Abstract: For multipathing using a network of overlays, a set of virtual network interfaces (VNICs) corresponding to a physical network interface (PNIC) is created in a first data processing system. A first virtual network interface (VNIC) from the set of VNICs is bound to a virtual machine (VM) executing in a first data processing environment across a data network from the first data processing system. During a data communication with a second data processing system, data is divided into a first portion and a second portion, the first portion using a first path from the first VNIC to the first VM to the second data processing system, and the second portion using a second path from the PNIC to the second data processing system.

Abstract: Mechanisms for identifying a pattern of computing resource activity of interest, in activity data characterizing activities of computer system elements, are provided. A temporal graph of the activity data is generated and a filter is applied to the temporal graph to generate one or more first vector representations, each characterizing nodes and edges within a moving window defined by the filter. The filter is applied to a pattern graph representing a pattern of entities and events indicative of the pattern of interest, to generate a second vector representation. The second vector representation is compared to the one or more first vector representations to identify one or more nearby vectors, and one or more corresponding subgraph instances are output to an intelligence console computing system as inexact matches of the temporal graph.

Abstract: Systems and methods for capturing images of a target area that include controlling an image sensor mounted to a gimbal to capture images of the target area over time and controlling the gimbal using an elevator algorithm to adjust the orientation of the image sensor.

Abstract: A computing system includes a plurality of physical hosts; a first application of a first tenant and a second application of a second tenant distributed over the plurality of physical hosts; and a plurality of virtual switches with a plurality of ports, each switch associated with a corresponding one of the physical hosts. A first virtual network couples the plurality of first application components and a second virtual network, isolated from the first virtual network, couples the plurality of second application components. A cloud management dashboard coupled to a software defined network controller is configured to receive an application performance monitoring request from a tenant and instruct the software defined network controller to turn on port mirroring on at least a portion of those of the plurality of ports corresponding to the application of the requesting tenant, to mirror corresponding packets to a packet data repository.

Abstract: Adversarial input detection and purification (AIDAP) preprocessor and deep learning computer model mechanisms are provided. The deep learning computer model receives input data and processes it to generate a first pass output that is output to the AIDAP preprocessor. The AIDAP preprocessor determines a discriminative region of the input data based on the first pass output and transforms a subset of elements in the discriminative region to modify a characteristic of the elements and generate a transformed input data. The deep learning computer model processes the transformed input data to generate a second pass output that is output to the AIDAP preprocessor which detects an adversarial input or not based on a comparison of the first pass and second pass outputs. If an adversarial input is detected, a responsive action that mitigates effects of the adversarial input is performed.

Abstract: Systems and methods for capturing images of a target area that include controlling an image sensor mounted to a gimbal to capture images of the target area over time and controlling the gimbal using an elevator algorithm to adjust the orientation of the image sensor.

Abstract: An embodiment includes a method for autonomous healing of an application comprising a plurality of microservices. The method comprises the steps of detecting a performance degradation of at least a portion of the application; and responsive to detecting the performance degradation, downgrading at least one of the plurality of microservices within the application. The downgrading comprises deploying a prior version of the at least one of the plurality of microservices; and routing at least a portion of traffic to the prior version instead of a current version of the at least one of the plurality of microservices.

Abstract: An approach is disclosed that receives, at a wearable sensing element worn by a user, sensor data that pertains to the user's physiological functions. Physiological states pertaining to the user are calculated from the received sensor data, with the physiological states including both physical states and mental states. The calculated physiological state is matched to an environmental action states, and environmental actions are responsively performed to change a physical environment of the user.

Abstract: Systems and methods are provided for scheduling homogeneous workloads including batch jobs, and heterogeneous workloads including batch and dedicated jobs, with run-time elasticity wherein resource requirements for a given job can change during run-time execution of the job.

Abstract: Systems and methods are provided for scheduling homogeneous workloads including batch jobs, and heterogeneous workloads including batch and dedicated jobs, with run-time elasticity wherein resource requirements for a given job can change during run-time execution of the job.

Abstract: A scheduling system and method for high-performance computing (HPC) applications includes a network management component stored in physical memory and executed by a processor. The management component is configured to transform HPC resources into a schedulable resource catalog by transforming multi-dimensional HPC resources into a one dimension versus time resource catalog with a dependent graph structure between resources such that HPC resources are enabled to be provisioned into a service environment with predictable provisioning using the resource catalog. A graphical user interface component is coupled to the network management component and configured to provide scheduling visibility to entities and to enable a plurality of different communication modes for scheduling and communication between entities.

Abstract: A system for extending application programming interfaces provided by web service providers to interface with web services includes an application programming interface extender; a plurality of application programming interface extensions; and a catalog of the application programming interface extensions. The catalog logically links the application programming interface extensions with the application programming interfaces and provides an interface to first developers who upload the application programming interface extensions to the platform and second developers who develop applications which access the web services via the application programming interface extensions. The application programming interface extender receives requests to access given ones of the application programming interface extensions and routes at least some of the requests to the application programming interface extensions.

Abstract: A system and method for scheduling resources includes a memory storage device having a resource data structure stored therein which is configured to store a collection of available resources, time slots for employing the resources, dependencies between the available resources and social map information. A processing system is configured to set up a communication channel between users, between a resource owner and a user or between resource owners to schedule users in the time slots for the available resources. The processing system employs social mapping information of the users or owners to assist in filtering the users and owners and initiating negotiations for the available resources.

Abstract: For multipathing using a network of overlays, a set of virtual network interfaces (VNICs) corresponding to a physical network interface (PNIC) is created in a first data processing system. A first virtual network interface (VNIC) from the set of VNICs is bound to a virtual machine (VM) executing in a first data processing environment across a data network from the first data processing system. During a data communication with a second data processing system, data is divided into a first portion and a second portion, the first portion using a first path from the first VNIC to the first VM to the second data processing system, and the second portion using a second path from the PNIC to the second data processing system.

Abstract: Systems and methods for storing in a first database a user personal profile, storing in a second database per-restaurant profiles for a plurality of restaurants, enabling the user to connect to a cognitive computer, enabling the user to interact with the cognitive computer for generating a personalized recipe based on user culinary selections and the user profile in the first database, the personalized recipe including a first list of ingredients, determining by the cognitive computer whether there are one or more first type candidate restaurants for preparing the personalized recipe based on the per-restaurant profiles in the second database, the first type candidate restaurant being determined to be able to prepare the personalized recipe with the first list of ingredients, receiving a selection of a selected restaurant from the first type candidate restaurant and contracting out the preparation of the personalized recipe to the selected restaurant.

Abstract: A learning-based computer network security system may include a service delivery controller executing on one or more of hardware processors that receives requests for transmitting network flows to one or more destination machines via a communication network. The service delivery controller may group the network flows into one or more similarity groups, and direct the network flows in a particular similarity group to a learning-based security appliance instance designated for the particular similarity group. Based on receiving feedback from the security appliance instance, the service delivery controller may regroup the similarity groups, and/or redirect the network flows, and/or redistribute the training results between the appliances, and/or modify assignment of appliances to similarity groups.

Abstract: For multipathing using a network of overlays, a set of virtual network interfaces (VNICs) corresponding to a physical network interface (PNIC) is created in a first data processing system. A first virtual network interface (VNIC) from the set of VNICs is bound to a virtual machine (VM) executing in a first data processing environment across a data network from the first data processing system. During a data communication with a second data processing system, data is divided into a first portion and a second portion, the first portion using a first path from the first VNIC to the first VM to the second data processing system, and the second portion using a second path from the PNIC to the second data processing system.

Abstract: Systems and methods are provided for resiliency testing microservice-based applications. For example, a method for resiliency testing an application includes receiving a test script that specifies a failure scenario in a distributed microservice-based application comprising a plurality of microservices, and an asserted behavioral expectation of at least one microservice of the distributed microservice-based application in response to the specified failure scenario. The specified failure scenario is translated into fault injection rules. The fault injection rules are utilized to execute fault injection operations on messages that are exchanged between at least a first microservice and a second microservice of the distributed microservice-based application, to stage the specified failure scenario during the failure recovery testing of the distributed microservice-based application.