Abstract: Described are mutant human cytomegalovirus (HCMV) pentamer complex polypeptides, methods of making them, and their use in HCMV protein complexes and compositions. In particular, the use of the modified HCMV polypeptides to stabilize HCMV complexes or unmask a pentamer epitope is described.

Abstract: Described are mutant human cytomegalovirus (HCMV) pentamer complex polypeptides, methods of making them, and their use in HCMV protein complexes and compositions. In particular, the use of the modified HCMV polypeptides to stabilize HCMV complexes or unmask a pentamer epitope is described.

Abstract: Embodiments of the present systems and methods may provide additional security mechanisms inside an operating system kernel itself by executing system calls in a dedicated address space to reduce the amount of shared resources that are visible to and thus exploitable by a malicious application. For example, in an embodiment, a method implemented in a computer may comprise a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor, the method may comprise: when a user process makes a system call, switching to kernel mode and using a system call page table for the user process to execute a system call handler, when the system call handler attempts to access unmapped kernel space memory, generating a page fault, and handling the page fault by determining whether the attempted access to unmapped kernel space memory is allowed.

Abstract: Embodiments of the present systems and methods may provide additional security mechanisms inside an operating system kernel itself by isolating parts of the kernel to protect them from attacks. For example, in an embodiment, a computer-implemented method implemented in a computer comprising a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor, the method may comprise: creating a namespace in an operating system kernel-space in the memory of the computer, creating an address space for the namespace that maps only kernel objects owned by the namespace, and providing access to kernel objects owned by the namespace only to the least one user process using the combined page table.

Abstract: Embodiments of the present systems and methods may provide additional security mechanisms inside an operating system kernel itself by isolating parts of the kernel to protect them from attacks. For example, in an embodiment, a computer-implemented method implemented in a computer comprising a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor, the method may comprise: creating a namespace in an operating system kernel-space in the memory of the computer, creating an address space for the namespace that maps only kernel objects owned by the namespace, and providing access to kernel objects owned by the namespace only to the least one user process using the combined page table.

Abstract: Embodiments of the present systems and methods may provide additional security mechanisms inside an operating system kernel itself by executing system calls in a dedicated address space to reduce the amount of shared resources that are visible to and thus exploitable by a malicious application. For example, in an embodiment, a method implemented in a computer may comprise a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor, the method may comprise: when a user process makes a system call, switching to kernel mode and using a system call page table for the user process to execute a system call handler, when the system call handler attempts to access unmapped kernel space memory, generating a page fault, and handling the page fault by determining whether the attempted access to unmapped kernel space memory is allowed.

Abstract: A method, system and computer program product for a VPN for containers and VMs implemented on different network node. A number of network hardware nodes have containers and VMs running on them. The containers and VMs are aggregated into VPNs assembled across the hardware nodes. Each hardware node has a network edge programmable switch configured to route packets to containers and VMs only inside a particular VPN. The switch detects a number of the VPN inside the packet header, replaces this number by a standard broadcast header number and multi-casts the packet to the containers and the VMs inside the VPN.

Abstract: A method, system and computer program product for a VPN for containers and VMs implemented on different network node. A number of network hardware nodes have containers and VMs running on them. The containers and VMs are aggregated into VPNs assembled across the hardware nodes. Each hardware node has a network edge programmable switch configured to route packets to containers and VMs only inside a particular VPN. The switch detects a number of the VPN inside the packet header, replaces this number by a standard broadcast header number and multi-casts the packet to the containers and the VMs inside the VPN.

Abstract: A method, system and computer program product for a VPN for containers and VMs implemented on different network node. A number of network hardware nodes have containers and VMs running on them. The containers and VMs are aggregated into VPNs assembled across the hardware nodes. Each hardware node has a network edge programmable switch configured to route packets to containers and VMs only inside a particular VPN. The switch detects a number of the VPN inside the packet header, replaces this number by a standard broadcast header number and multi-casts the packet to the containers and the VMs inside the VPN.

Abstract: An absorbent, flushable, bio-degradable, and medically-safe nonwoven fabric suitable for use as wraps, wipes, absorbent pads, etc., is composed of from 2% to 10% by weight of untreated, water-soluble polyvinyl alcohol (PVA) fibers that are heat-bonded to a matrix of absorbent fibers. The use of PVA fibers in low amounts provides softness, while sufficient wet strength is provided by heat bonding the PVA fibers completely to the other fibers in a two-stage heating process. The resulting nonwoven fabric has a high wet-to-dry tensile strength ratio, good drape softness, and high fluid absorptive capacity. In a method for producing the nonwoven fabric, the PVA fibers are blended with the absorbent fibers, the blended fibers are carded onto a moving web, sufficient water is added to wet the PVA fibers while maintaining web integrity, then the web is heated in two stages, the first with heating cylinders at 40.degree. C. to 80.degree. C., then the second with heating cylinders of 60.degree. C. to 100.degree. C.

Abstract: An absorbent, flushable, bio-degradable, and medically-safe nonwoven fabric suitable for use as wraps, wipes, absorbent pads, etc., is composed of from 2% to 10% by weight of untreated, water-soluble polyvinyl alcohol (PVA) fibers that are heat-bonded to a matrix of absorbent fibers. The use of PVA fibers in low amounts provides softness, while sufficient wet strength is provided by heat bonding the PVA fibers completely to the other fibers in a two-stage heating process. The resulting nonwoven fabric has a high wet-to-dry tensile strength ratio, good drape softness, and high fluid absorptive capacity. In a method for producing the nonwoven fabric, the PVA fibers are blended with the absorbent fibers, the blended fibers are carded onto a moving web, sufficient water is added to wet the PVA fibers while maintaining web integrity, then the web is heated in two stages, the first with heating cylinders at 40.degree. C. to 80.degree. C., then the second with heating cylinders of 60.degree. C. to 100.degree. C.