Abstract: A computer-implemented system and method, referred to as a Service State Discovery Engine (SSDE), continuously ingests data (such as netflow data) related to a network application service. The SSDE aggregates the ingested data and evaluates the data to identify a state and corresponding nature (e.g., scale) of the network application service. The SSDE identifies changes in the state, and scale of the state, of the network application service over time.

Abstract: An authentication arrangement comprises a first security protocol server configured to manage authenticators for log in to a first set of hosts managed by the first security protocol server and a second security protocol server. The hosts are adapted to accept access requests based on information on authenticators. The first security protocol server is configured to transfer authenticators used to log in to the first set of hosts to the second security protocol server. The hosts in the first set of hosts then use information stored on the second security protocol server for accepting access requests.

Abstract: Systems, methods, apparatus, computer readable media and other implementations provide host directory synchronization and management in which a master host directory system constructs, maintains and updates a master host list of all hosts that are identified and managed by constituent host directory systems in a computing environment. The master host directory system obtains host data from the constituent host directory systems through encrypted file transfers between the master and constituent host directory systems. In addition to creating and maintaining the master list of host identities, the master host directory system can also assist in defining and enforcing security measures affecting host creation, operation, updating and termination.

Abstract: Access control rules can be defined for target applications of an enterprise system independent of a runtime of the target applications. The access control rules can then normalized into decision tables. These decision tables can then be used to reconcile authorization information with the target applications via user provisioning. This process can enable comprehensive reporting and analysis of enterprise access control rules without requiring direct integration of the target applications at runtime.

Abstract: Access control rules can be defined for target applications of an enterprise system independent of a runtime of the target applications. The access control rules can then normalized into decision tables. These decision tables can then be used to reconcile authorization information with the target applications via user provisioning. This process can enable comprehensive reporting and analysis of enterprise access control rules without requiring direct integration of the target applications at runtime.