Abstract: Example embodiments of the present invention provide a method, an apparatus, and a computer program product for authenticating a request from a first domain to access a resource in a second domain according to credentials in the first domain. The method includes receiving, from the first domain, an assertion in the second domain and generating, according to the assertion, a token configured to be redeemed by a client in the first domain to access the resource in the second domain. The token then may be provided to the first domain.

Abstract: There is disclosed a laminated, nonwoven fabric and a process for producing such a laminated, nonwoven fabric having desirable fluid holding and fluid release characteristics. The process provides that two sheets of meltblown fiber fabric are produced on forming wire assemblies, cooled at a cooling area, and are then laminated on opposite sides of a sheet of spunbonded fibers using to form the laminated, nonwoven fabric.

Abstract: A distributed security information and event management system comprises a centralized portion and a plurality of remote portions, with the remote portions being implemented in respective applications within information technology infrastructure. Each of the remote portions comprises one or more remote components inserted into the corresponding application. At least a subset of the remote components of the remote portion are configured for interaction with one or more corresponding centralized components of the centralized portion of the system. The remote components may each be configured to process one or more specified eXtensible Access Control Markup Language (XACML) Obligations or other constructs.

Abstract: There is disclosed a laminated, nonwoven fabric and a process for producing such a laminated, nonwoven fabric having desirable fluid holding and fluid release characteristics. The process provides that two sheets of meltblown fiber fabric are produced on forming wire assemblies, cooled at a cooling area, and are then laminated on opposite sides of a sheet of spunbonded fibers using to form the laminated, nonwoven fabric.

Abstract: There is disclosed a laminated, nonwoven fabric and a process for producing such a laminated, nonwoven fabric having desirable fluid holding and fluid release characteristics. The process provides that two sheets of meltblown fiber fabric are produced on forming wire assemblies, cooled at a cooling area, and are then laminated on opposite sides of a sheet of spunbonded fibers using to form the laminated, nonwoven fabric.

Abstract: A processing device comprises a processor coupled to a memory and implements an obligation management system for information technology infrastructure, with the obligation management system being configured to process a plurality of obligations on behalf of a relying party to verify implementation of corresponding controls in information technology infrastructure of a claimant. A given one of the obligations has an associated obligation fulfiller that is inserted or otherwise deployed as a component within the information technology infrastructure of the claimant and is configured to provide evidence of the implementation of one or more of the controls responsive to an obligation assertion so as to establish an associated trust aspect of the claimant. The information technology infrastructure may comprise distributed virtual infrastructure of a cloud service provider. The claimant may comprise the cloud service provider and the relying party may comprise a tenant of the cloud service provider.

Abstract: An information processing system comprises one or more processing devices of at least one processing platform. In one embodiment, the system comprises cloud infrastructure that is configured to validate an externally-generated security token issued to a user, to extract one or more claims from the validated externally-generated security token, and to create a session object to hold the extracted claim or claims. The cloud infrastructure issues an internally-generated security token based on the session object that allows the user to be identified to a protected resource. The internally-generated security token is validated in conjunction with a request from the user for access to the protected resource, and information associated with at least one extracted claim is selectively released responsive to validation of the internally-generated security token. Access of the user to the protected resource is granted or denied based on the selectively-released information.

Abstract: Information technology infrastructure comprises a computing environment shared by multiple tenants of a service provider, and a secure assessment environment separate from the shared computing environment. An evidence collection module associated with the shared computing environment collects compliance evidence from the shared computing environment for storage in the secure assessment environment. A tenant assessment interface to the secure assessment environment is provided, through which the tenants can access the compliance evidence as stored in the secure assessment environment in a manner that does not undermine security of the shared computing environment. The compliance evidence may include, for example, information sufficient to allow a tenant to verify that the shared computing environment is configured in accordance with a specified security policy.

Abstract: Cloud infrastructure of a cloud service provider comprises a processing platform implementing a security policy enforcement framework. The security policy enforcement framework comprises a policy analyzer that is configured to identify at least one security policy associated with at least one tenant of the cloud service provider, to analyze the security policy against configuration information characterizing the cloud infrastructure of the cloud service provider, and to control execution of one or more applications of said at least one tenant within the cloud infrastructure in accordance with the security policy, based at least in part on one or more results of the analysis of the security policy. The security policy enforcement framework may be implemented in a platform-as-a-service (PaaS) layer of the cloud infrastructure, and may comprise a runtime controller, an operating system controller, a hypervisor controller and a PaaS controller.

Abstract: Sound insulation core material is made by melt-blowing a polypropylene resin having a hydroxystearamide wax additive to produce a fibrous mass having improved loft. The core material is encased between outer layers of spun-bond polyethylene fibers by longitudinal seams and transverse seams to form a product suitable for use in dishwashers.

Abstract: Sound insulation core material is made by melt-blowing a polypropylene resin having a hydroxystearamide wax additive to produce a fibrous mass having improved loft. The core material is encased between outer layers of spun-bond polyethylene fibers by longitudinal seams and transverse seams to form a product suitable for use in dishwashers.