Abstract: Mechanisms are provided to perform security incident disposition operations. A security incident is received that includes a security incident data structure comprising metadata describing properties of the security incident, and a corresponding security knowledge graph which includes nodes representing elements associated with the security incident and edges representing relationships between the nodes. The security incident data structure and security knowledge graph are processed to extract a set of security incident features corresponding to the security incident and input the extracted set of security incident features into a trained security incident machine learning model. The model generates a disposition classification output based on results of processing the extracted set of security incident features. The disposition classification output is output to the source of the security incident data structure.

Abstract: Mechanisms are provided to perform security incident disposition operations. A security incident is received that includes a security incident data structure comprising metadata describing properties of the security incident, and a corresponding security knowledge graph which includes nodes representing elements associated with the security incident and edges representing relationships between the nodes. The security incident data structure and security knowledge graph are processed to extract a set of security incident features corresponding to the security incident and input the extracted set of security incident features into a trained security incident machine learning model. The model generates a disposition classification output based on results of processing the extracted set of security incident features. The disposition classification output is output to the source of the security incident data structure.

Abstract: Visualization tools, and systems and software underlying such tools, for allowing user to visualize organizations of people. Members of an organization are represented by unabstracted nodes. In some embodiments, visualization diagrams are efficiently created by abstracting the unabstracted nodes in a manner that reduces the number of nodes needing to be rendered, while retaining the visual character of a similar diagram composed of the original, unabstracted nodes. In these embodiments, regions of abstraction diagrams can be selectively de-abstracted in response to a user's selection within the abstraction diagram. In response to such a selection, in some instances only a particular hierarchical reporting chain within the organization, or a portion thereof, is de-abstracted to allow the user to view unabstracted nodes within that chain. Also disclosed are other visualization tools, such as attribute-overlay tools, time-scrubbing tools, and geographic distribution tools, among others.

Abstract: A mechanism is provided in a network security subsystem in a virtual machine monitor for policy based load distribution among a plurality of packet processing units. Responsive to receiving a packet from a virtual machine, the network security subsystem compares the packet to rules in a load distribution policy in the network security subsystem. Responsive to the packet matching a rule in the load distribution policy, the network security subsystem identifies a packet processing unit list and an action in the matching rule. The network security subsystem distributes the packet to a selected packet processing unit from the packet processing unit list based on the action.

Abstract: Visualization tools, and systems and software underlying such tools, for allowing user to visualize organizations of people. Members of an organization are represented by unabstracted nodes. In some embodiments, visualization diagrams are efficiently created by abstracting the unabstracted nodes in a manner that reduces the number of nodes needing to be rendered, while retaining the visual character of a similar diagram composed of the original, unabstracted nodes. In these embodiments, regions of abstraction diagrams can be selectively de-abstracted in response to a user's selection within the abstraction diagram. In response to such a selection, in some instances only a particular hierarchical reporting chain within the organization, or a portion thereof, is de-abstracted to allow the user to view unabstracted nodes within that chain. Also disclosed are other visualization tools, such as attribute-overlay tools, time-scrubbing tools, and geographic distribution tools, among others.

Abstract: Visualization tools, and systems and software underlying such tools, for allowing user to visualize organizations of people. Members of an organization are represented by unabstracted nodes. In some embodiments, visualization diagrams are efficiently created by abstracting the unabstracted nodes in a manner that reduces the number of nodes needing to be rendered, while retaining the visual character of a similar diagram composed of the original, unabstracted nodes. In these embodiments, regions of abstraction diagrams can be selectively de-abstracted in response to a user's selection within the abstraction diagram. In response to such a selection, in some instances only a particular hierarchical reporting chain within the organization, or a portion thereof, is de-abstracted to allow the user to view unabstracted nodes within that chain. Also disclosed are other visualization tools, such as attribute-overlay tools, time-scrubbing tools, and geographic distribution tools, among others.

Abstract: A mechanism is provided in a network security subsystem in a virtual machine monitor for policy based load distribution among a plurality of packet processing units. Responsive to receiving a packet from a virtual machine, the network security subsystem compares the packet to rules in a load distribution policy in the network security subsystem. Responsive to the packet matching a rule in the load distribution policy, the network security subsystem identifies a packet processing unit list and an action in the matching rule. The network security subsystem distributes the packet to a selected packet processing unit from the packet processing unit list based on the action.

Abstract: Visualization tools, and systems and software underlying such tools, for allowing user to visualize organizations of people. Members of an organization are represented by unabstracted nodes. In some embodiments, visualization diagrams are efficiently created by abstracting the unabstracted nodes in a manner that reduces the number of nodes needing to be rendered, while retaining the visual character of a similar diagram composed of the original, unabstracted nodes. In these embodiments, regions of abstraction diagrams can be selectively de-abstracted in response to a user's selection within the abstraction diagram. In response to such a selection, in some instances only a particular hierarchical reporting chain within the organization, or a portion thereof, is de-abstracted to allow the user to view unabstracted nodes within that chain. Also disclosed are other visualization tools, such as attribute-overlay tools, time-scrubbing tools, and geographic distribution tools, among others.

Abstract: In hardware, performing computations on a stream typically requires handshaking signals to provide flow control. Many different handshaking protocols are available, and they are typically implemented in an ad hoc manner suited to the current design. An approach according to the invention uses a subset of the possible flow-control protocols in an effort to achieve a maximum amount of flexibility and reusability, while requiring only a moderate level of overhead when compared to manually-designed systems.

Abstract: In hardware, performing computations on a stream typically requires handshaking signals to provide flow control. Many different handshaking protocols are available, and they are typically implemented in an ad hoc manner suited to the current design. An approach according to the invention uses a subset of the possible flow-control protocols in an effort to achieve a maximum amount of flexibility and reusability, while requiring only a moderate level of overhead when compared to manually-designed systems.