Abstract: Aspects relate to contribution management for quantifying the contribution of solution owners to digital ecosystems based on the growth progress of the digital ecosystem. A contribution management device for managing a contribution of a solution owner in a digital ecosystem, including a data collection unit to collect a first set of solution performance metrics for a first digital solution and a set of ecosystem key performance indicators, a contribution measurement unit to calculate a first contribution score for the first digital solution, and a suggestion unit to generate a set of recommended actions for increasing growth of the digital ecosystem. The contribution measurement unit further includes a growth assessment unit to generate a set of growth progress data for the digital ecosystem and a dynamic weight calculation unit to calculate the first set of metric weights.

Abstract: Example implementations described herein are directed to systems and methods to create authorization rules and configurations automatically for each microservice, each of which rules are built from the front-end use case. The example implementations involve a public facing environment on a public cloud system, and a test environment deployed on a private cloud system that is isolated from the public cloud system that mirrors the public cloud system functionality for testing deployment of applications.

Abstract: Example implementations described herein are directed to systems and methods to create authorization rules and configurations automatically for each microservice, each of which rules are built from the front-end use case. The example implementations involve a public facing environment on a public cloud system, and a test environment deployed on a private cloud system that is isolated from the public cloud system that mirrors the public cloud system functionality for testing deployment of applications.

Abstract: Example implementations are directed to a system and method to reduce deployment cost of data analytics application by designing both an application deployment plan and data integration plan, implementing the plans into an application template automatically and deploying application components and data in accordance with the desired implementation. Through example implementations, the need for separate terminals for a data engineer and an application engineer can be eliminated.

Abstract: A storage system selects from a plurality of physical areas constituting a physical address space as copy source physical areas, one or more non-additionally recordable physical areas each including a fragmented free area, and also selects a recordable physical area as a copy destination physical area. The storage system then writes one or more pieces of live data from the selected one or more copy source physical areas to the free area of the selected copy destination physical area on a per-strip or per-stripe basis, sequentially from the beginning of the free area. If the size of the write target data is such that it is not possible to write the write target data to the free area on a per-strip or per-stripe basis, then the storage system pads the write target data, and writes the padded write target data to the free area on a per-strip or per-stripe basis.

Abstract: A service performance, such as a responsiveness and throughput, is improved in a distributed system including system components distributed over a plurality of regions. A route resolution system, is coupled to a distributed system including a plurality of components which configure the system and which are distributed over a plurality of regions, converts a measured value of a processing performance between the components into a standard value independent from network performance information, derives, upon receiving a route inquiry request from a component to which a request from a client terminal has been forwarded, a plurality of routes being coupled the plurality of the components for processing the request, calculates an estimated value of performance information required for processing the request, for each of the plurality of routes based on the standard value of the same request, and determines an optimal route based on the calculated estimated value.

Abstract: Example implementations described herein involve a system, which can involve a first apparatus having a memory, configured to manage a plurality of rules and a plurality of sub-rules for merging requests; and a processor, configured to receive a plurality of requests, each of the plurality of requests comprising header information and body information; select a rule from the plurality of rules in the memory for the plurality of requests, based on the header information of the plurality of requests; select a sub-rule from ones of the plurality of sub-rules corresponding to the selected rule in the memory for the plurality of requests, based on the body information of the plurality of requests; generate a merged request from an execution of a merger operation on the plurality of requests based on the selected rule and the selected sub-rule; and transmit the merged request to a second apparatus.

Abstract: Example implementations are directed to a system and method to reduce deployment cost of data analytics application by designing both an application deployment plan and data integration plan, implementing the plans into an application template automatically and deploying application components and data in accordance with the desired implementation. Through example implementations, the need for separate terminals for a data engineer and an application engineer can be eliminated.

Abstract: A storage system selects from a plurality of physical areas constituting a physical address space as copy source physical areas, one or more non-additionally recordable physical areas each including a fragmented free area, and also selects a recordable physical area as a copy destination physical area. The storage system then writes one or more pieces of live data from the selected one or more copy source physical areas to the free area of the selected copy destination physical area on a per-strip or per-stripe basis, sequentially from the beginning of the free area. If the size of the write target data is such that it is not possible to write the write target data to the free area on a per-strip or per-stripe basis, then the storage system pads the write target data, and writes the padded write target data to the free area on a per-strip or per-stripe basis.

Abstract: A service performance, such as a responsiveness and throughput, is improved in a distributed system including system components distributed over a plurality of regions. A route resolution system, is coupled to a distributed system including a plurality of components which configure the system and which are distributed over a plurality of regions, converts a measured value of a processing performance between the components into a standard value independent from network performance information, derives, upon receiving a route inquiry request from a component to which a request from a client terminal has been forwarded, a plurality of routes being coupled the plurality of the components for processing the request, calculates an estimated value of performance information required for processing the request, for each of the plurality of routes based on the standard value of the same request, and determines an optimal route based on the calculated estimated value.

Abstract: The present invention efficiently displays in a tree structure form a file operation history. A file storage identifier, an operation identifier, and a count are stored as additional meta-information in an alternate data stream with respect to each file stored in a client terminal file system. The operation identifier manages a number of operations (operation generations). The count manages copy frequencies. This meta-information is also sent to a management apparatus, and used for displaying the file operation history in a tree structure form.

Abstract: In the configuration performing a data processing by a hardware processing circuit (accelerator), to provide a technology capable of improving a poorness of processing efficiency by multiple accesses to the data, the following solving means are provided. A network data processing accelerator of the present network data processing apparatus comprises processing units corresponding to each processing of an encryption/decryption, a message authentication, and a checksum, and in the data processing including a combination of each processing, accesses for the same data of the memory and the like through a bus I/F unit and the like is collected together into one time, and a pipeline processing is performed using the least common multiple of the data processing unit of each processing.

Abstract: The content of operations is identified and an alert is generated to an operation having a high risk of information leakage. An agent monitors, for example, operations performed with respect to a dialogue displayed on a client PC. If a file is selected by an operation performed with respect to the displayed dialogue, the agent assigns an identifier indicating a source for the file to the file. If the file is sent as an attached file, the agent identifies an output destination for the attached file as well as the source for the attached file; and if the output destination for the attached file is an external Web server and the source for the attached file is a mail server, the agent generates an alert by determining that an unauthorized operation has been executed; and then sends the generated alert to a management server.

Abstract: With a plurality of computer apparatuses connected to a network, operation log information, including an operation type and an output destination of a file, and acquisition source information indicating an acquisition source of the file are recorded based on a user's input/output operation; the acquisition source information is managed by relating it with an access authority over the acquisition source of the file; when the operation log information for the user's output operation exists in the operation log information, a range of the access authority over the acquisition source of an output target file, which is a target of the user's output operation, and an addressee user who can access an output destination of the output target file are specified; whether or not the addressee user belongs to the range of the access authority over the acquisition source of the output target file is judged; and if a negative judgment result is obtained, risk information indicating that the user's output operation is an out

Abstract: A client computer detects a user operation for transmitting data to a server or a storage device, determines whether the detected user operation is a fraudulent manipulation, and, if the determination is a positive result, performs security processing which is processing related to security of data to be transmitted. If the data is data within a group to which the user belongs and a destination of the data is a server or a storage device outside the group, the determination is a positive result.

Abstract: The present invention provides a system for detecting and recording a user operation with respect to a web application. This system extracts from an application screen both a character string input element for the user to input a character string and an execution instruction element for instructing the web application to execute a prescribed operation. This system infers the role of the character string input element and execution instruction element in the web application. This system associates the character string input element with the execution instruction element, and extracts an inputted character string, which is inputted to the character string input element. This system creates user operation record data, which is recorded with a user operation, based on template data and the inputted character string.

Abstract: The DMA controller includes a peripheral device read unit to read states of peripheral devices, a state comparator, a transfer unit, a register, and a peripheral device write unit to write data in the peripheral devices according to the contents in the register when the DMA transfer is executed, an interrupt select unit selects one of plural interrupt signals to determine whether the peripheral device read unit, the state comparator and the transfer unit are at a timing to execute operations. Based on these operations the state comparator determines whether to start the DMA transfer, and the transfer unit executes data transfer between the peripheral devices.

Abstract: This arithmetic logical unit outputs data to be used in checking the final result of an AES unit that encrypts a plain text block into an encrypted text block based on AES operation, and includes an arithmetic unit for computing parity data created based on XOR operation from an encryption key to be used as a key during AES encryption, parity data created based on XOR operation from a plain text block, and an AES operation halfway result output from the AES unit, and outputting a value that is equivalent to parity data created based on XOR operation from the final result of the AES unit.

Abstract: The DMA controller includes a peripheral device read unit to read states of peripheral devices, a state comparator, a transfer unit, a register, and a peripheral device write unit to write data in the peripheral devices according to the contents in the register when the DMA transfer is executed, an interrupt select unit selects one of plural interrupt signals to determine whether the peripheral device read unit, the state comparator and the transfer unit are at a timing to execute operations. Based on these operations the state comparator determines whether to start the DMA transfer, and the transfer unit executes data transfer between the peripheral devices.

Abstract: An embodiment of this invention detects an improper operation to a file in a computer of a monitoring target in a computer system including a plurality of computers connected via a network. The monitoring target computer receives a file. The computer receives acquisition source information on the file transmitted from a different computer. The computer refers to information on improper operation requirements to determine whether transmission of the file meets the improper operation requirements or not, based on a combination of the acquisition source of the file indicated by the acquisition source information and a transmission destination of the file and if the improper operation requirements are met, it determines that the transmission of the file is an improper operation.