Abstract: A computer implemented method, system and computer program product for observing a mobile device's interaction with a set of resources in a geographic location, and creating a usage profile for the set of resources based on the mobile device's interactions with the resources. The usage profile includes a prediction of a subset of resources that will be used at a second geographic location in order to migrate the subset of resources to the second geographic location when the mobile device moves to the second geographic location.

Abstract: A computer implemented method, system and computer program product enabling cloud service providers to register in a cloud book is presented. The cloud book includes a profile for each cloud service provider of the cloud service providers including the services and terms of service for each cloud service provider. Consumers register in the cloud book; users are able to connect to each other; and the users are able to browse the cloud service providers' connection to consumers. Each consumer is enabled to compare the services and terms of service to determine which service provider has services that match the consumer.

Abstract: Implementations are provided herein for the migration of known infrastructure services, such as those existing on a private cloud infrastructure, to a public cloud environment, that enables private cloud operators to migrate their applications and data to a public cloud environment that meets the same trust, security, and resiliency standards currently employed in the private cloud environment. In one implementation, a private cloud can communicate an infrastructure services manifest to a public or hybrid cloud provider, which highlights the application and the data that will be moved to the public or hybrid cloud. The public or hybrid cloud can then use the infrastructure services manifest to establish an optimum virtualized environment containing the infrastructure services detailed in the infrastructure services manifest.

Abstract: Implementations are provided herein for the migration of known infrastructure services, such as those existing on a private cloud infrastructure, to a public cloud environment, that enables private cloud operators to migrate their applications and data to a public cloud environment that meets the same trust, security, and resiliency standards currently employed in the private cloud environment. In one implementation, a private cloud can communicate an infrastructure services manifest to a public or hybrid cloud provider, which highlights the application and the data that will be moved to the public or hybrid cloud. The public or hybrid cloud can then use the infrastructure services manifest to establish an optimum virtualized environment containing the infrastructure services detailed in the infrastructure services manifest.

Abstract: A computer implemented method, system and computer program product comprising observing a mobile device's interaction with a set of resources, and creating a usage profile for the set of resources based on the mobile devices interactions with the resources; wherein the resources are ranked by the type an frequency of interactions with the mobile device; wherein the usage profile dictates what resources of the set of resources are to be migrated to a new location when the mobile device moves to a new location.

Abstract: A computer implemented method, system and computer program product enabling cloud service providers to register in a cloud book; wherein the cloud book includes a profile for each cloud service provider of the cloud service providers including the services and terms of service for each cloud service provider of the cloud service providers; and enabling consumers to register in the cloud book; wherein the users are able to connect to each other; wherein the users are able to browse the cloud service providers' connection to consumers; wherein each consumer is enabled to compare the services and terms of service to determine which service provider has services that match the consumer; further wherein the cloud book enables a first consumer to sign up for services with a first cloud service provider.

Abstract: A request for network access is received from a client device at a network entry device of a network infrastructure. The network infrastructure determines a physical location of the client device and determines authorization of the client device based on the physical location. The approach can include providing the physical location along with other user credentials to an authorizing device. The method can also include determining a level of service based on the physical location. Communication for the approach can make use of the IEEE 802.1X protocol.

Abstract: The intrusion detection function monitors for and reports detected intrusion signatures. The dynamic intrusion signatures function determines whether reported intrusion signatures exist in a library of signatures associated with a particular intrusion detection function. If the reported signature does not exist in the library, the library is updated. Detected intrusion signatures are reported to similarly enabled devices for library analysis and updating, if necessary. The related method includes the steps of monitoring for intrusion signatures or other triggering events, analyzing the events and updating IDS signature libraries as necessary.

Abstract: A method of determining a physical location of a device connected to a data network infrastructure including a plurality of connection points at different physical locations, the method including establishing a connection with the data network infrastructure via a cable-based transmission medium, wherein a communication signal passes via the cable-based transmission medium including at least one of the plurality of connection points. A connection point identifier is determined based, at least in part, upon the at least one of the plurality of connection points. A signal characteristic of the communication signal passing via the cable-based transmission medium between the device and the data network infrastructure through the at least one of the plurality of connection points is measured.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: A system that associates physical locations with network-linked devices in a network to which such devices are connected. This system employs a variety of techniques for establishing device location. The system configuration can vary and can include any type of data network, including LANs, MANs, Wide Area Networks (WANs), Personal Area Networks (PANs), and Home Networks. The system provides location information for particular devices to the network devices and management, and may be used in any of a variety of ways to improve configuration accuracy, control, and security. The location information may also be used to control or secure a device itself.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Abstract: A connector assembly, configured to releasably couple a socket assembly, includes zero or more data conductors. An optical pathway is configured to: receive an optical signal from an optical light source positioned within the socket assembly; and provide at least a portion of the optical signal to an optical light target positioned within the socket assembly.

Abstract: One or more trusted network devices within a data network infrastructure determine a physical location of a client device requesting access to the data network infrastructure. A trusted physical location is generated and associated with the client device. The approach can include determining whether a candidate network device is a trusted network device based on a likelihood that the candidate network device can be modified to provide false physical location data. The approach also can include determining a response for an access request by the client and controlling network resources provided to the client based on the trusted physical location.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Abstract: A connector assembly, configured to releasably couple a socket assembly, includes zero or more data conductors. An optical pathway is configured to: receive an optical signal from an optical light source positioned within the socket assembly; and provide at least a portion of the optical signal to an optical light target positioned within the socket assembly.

Abstract: A connector assembly, configured to releasably couple a socket assembly, includes zero or more data conductors. An optical pathway is configured to: receive an optical signal from an optical light source positioned within the socket assembly; and provide at least a portion of the optical signal to an optical light target positioned within the socket assembly.

Abstract: A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.