Abstract: Embodiments of the invention are directed to detecting changes to a firebreak line in an environment. Aspects include obtaining a reference aerial image of an area of interest and a current aerial image of the area of interest and identifying, based on the reference aerial image, one or more firebreak lines in the area of interest. Aspects also include identifying, based on a comparison of the reference aerial image and the current aerial image, an anomaly in at least one of the one or more firebreak lines. Aspects further include transmitting an alert, based on detecting the anomaly, the alert including an indication of the detected anomaly.

Abstract: Embodiments of the invention are directed to detecting changes to a firebreak line in an environment. Aspects include obtaining a reference aerial image of an area of interest and a current aerial image of the area of interest and identifying, based on the reference aerial image, one or more firebreak lines in the area of interest. Aspects also include identifying, based on a comparison of the reference aerial image and the current aerial image, an anomaly in at least one of the one or more firebreak lines. Aspects further include transmitting an alert, based on detecting the anomaly, the alert including an indication of the detected anomaly.

Abstract: Deduplication of encrypted data using multiple keys includes responding to a request to store a predetermined set of data in an electronic data store by receiving a hash corresponding to the predetermined set of data, receiving encrypted data generated by encrypting the predetermined set of data using an encryption key, and receiving a key index corresponding to the encryption key. The hash may be determined to match a previously stored hash, the previously stored hash indicating that a previously encrypted version of the predetermined set of data is stored at a physical location in the electronic data store. Based on determining that the hash matches a previously stored hash, the hash, encrypted data, and key index are discarded.

Abstract: Virtual memory address space is divided according to areas of the virtual memory address and allocating some areas to low-cost volatile memory (such as RAM) when the memory areas are not required by an application to be stored in non-volatile memory, such as NVDIMM. A loader mechanism creates and maintains a layout address table in non-volatile memory for recovery from an unexpected reset.

Abstract: A technique for mitigating against return-oriented programming (ROP) attacks that occur during execution of an application includes receiving source code to compile into an executable application. During a compilation of the source code, one or more functions within the source code that are associated with gadgets in an ROP attack are determined, each of the one or more functions is assigned to one or more protected pages of memory for the executable application, and a tag is assigned to each of the one or more functions. The tag for each function maps to the protected page of memory to which the function is assigned.

Abstract: A service request for an automobile is detected. The service request includes a service version number. A first integrated circuit of the automobile is verified. The verification of the first integrated circuit is in response to detecting the service request. A component version number of the first integrated circuit is determined in response to verifying the first integrated circuit. The service version number is compared to the component version number of the first integrated circuit. The comparison is based on the determining the component version number. A service operation regarding the automobile is performed. The service operation is performed based on the comparing the service version number to the component version number.

Abstract: Techniques for detecting a possible health issue in a user are described. Data related to social media activity for a user is received over a communications network from one or more computing devices. A user analysis profile is generated for the user using a first machine learning model. The user analysis profile includes a personality profile and a mood score. A weighted score associated with potential health issues for the user is determined by classifying the user analysis profile using a second machine learning model. The weighted score exceeds a pre-determined threshold, and electronic notification is provided to a pre-designated person regarding the potential health issue.

Abstract: Embodiments of the present invention include receiving, by an operating system, a request from an application to reserve a subset of a memory allocated to the application for mirroring. The request specifies a size of the subset. A first portion of the specified size and a second portion of the specified size of the memory are reserved by the operating system for the mirroring. Data to write to the first portion of the memory is received from the application. The operating system writes the data to the first portion of the memory and initiates a background write-back process of the data to the second portion of the memory.

Abstract: Embodiments of the present invention provide a computer system, a computer program product, and a method that comprises identifying at least a first physical sensor and a second physical sensor within a computing device, wherein each physical sensor is associated with a respective count; performing a predetermined operation within the computing device; authenticating the received command of at least the first physical sensor and the second physical sensor identified within the computing device; and automatically halting the operation of the computing device.

Abstract: Deduplication of encrypted data using multiple keys includes responding to a request to store a predetermined set of data in an electronic data store by receiving a hash corresponding to the predetermined set of data, receiving encrypted data generated by encrypting the predetermined set of data using an encryption key, and receiving a key index corresponding to the encryption key. The hash may be determined to match a previously stored hash, the previously stored hash indicating that a previously encrypted version of the predetermined set of data is stored at a physical location in the electronic data store. Based on determining that the hash matches a previously stored hash, the hash, encrypted data, and key index are discarded.

Abstract: A computer-implemented method comprises receiving a request to write to a file and, in response to the request, determining that the file exists in a storage device. In response to the determination that the file exists, the method further comprises mapping the file into a region of a non-volatile dual in-line memory module (NVDIMM); initiating a transaction to write to the mapped file in the NVDIMM without acquiring a speculative lock on the mapped file; and determining whether a conflict occurred in writing to the mapped file in the NVDIMM. In response to a determination that a conflict occurred, the method comprises restarting the transaction to write to the mapped file in the NVDIMM without acquiring the speculative lock on the mapped file. In response to a determination that no conflict occurred, the method comprises committing changes made to the mapped file to the file in the storage device.

Abstract: Embodiments of the present invention provide a computer system, a computer program product, and a method that comprises identifying at least a first physical sensor and a second physical sensor within a computing device, wherein each physical sensor is associated with a respective count; performing a predetermined operation within the computing device; authenticating the received command of at least the first physical sensor and the second physical sensor identified within the computing device; and automatically halting the operation of the computing device.

Abstract: In an approach for pouring control, a processor recognizes that a user requests material from a dispenser with a container. A processor evaluates the container via one or more sensors. A processor determines that the user is allowed to receive the material. A processor, in response to determining that the user is allowed to receive the material, triggers the dispenser to pour the material into the container. A processor monitors the dispenser pouring the material. A processor determines that an anomaly is detected during pouring the material. A processor, in response to determining that the anomaly is detected during pouring the material, signals the dispenser to stop the pouring.

Abstract: Memory management that includes allocating physical memory having an append-only permission associated therewith to requesting user space applications is described. If a page frame is append-only, then data written to the page frame cannot be overwritten. Rather, any new data written to an append-only page frame must be written beginning at the next available write location within the page frame. An MMU determines whether a write request is requesting an append-only page frame, in which case, the MMU reserves the append-only page frame for the write request and consults a corresponding entry in a page table append to determine whether an offset associated with the write request is larger than a stored value in the entry that indicates the next available write location in the page frame. If so, the write request is executed and the data is written to the page frame beginning at the next available write location.

Abstract: Embodiments include method, systems and computer program products for providing entropy to generate random numbers.

Abstract: Embodiments are disclosed for managing a non-volatile dual in-line memory module (NVDIMM) storage system. The techniques include loading an executable to a volatile random access memory. The techniques also include in response to a store operation attempted by the executable, determining that a target address of the store operation is not mapped from an address in the random access memory to an address in an NVDIMM. The techniques further include mapping the target address from the address in the volatile random access memory to the address in the NVDIMM. Additionally, the techniques include performing the store operation in the address in the NVDIMM based on the mapping.

Abstract: An approach for allocating mainframe resources in a networked computing environment (e.g., a cloud computing environment) is provided. In an embodiment, each workload that executes on a mainframe system is classified into one or a plurality of workload classes. Each workload class has workloads that share a common objective. A historical allocation of initiators for each workload class over time is analyzed. Based on this analysis, a number of allocation selections, which each assign a number of initiators to each workload class, are generated based on the historical utilization data. The allocation selection that is ultimately implemented is selected from these allocation selections based on KPI factors.

Abstract: In an approach for pouring control, a processor recognizes that a user requests material from a dispenser with a container. A processor evaluates the container via one or more sensors. A processor determines that the user is allowed to receive the material. A processor, in response to determining that the user is allowed to receive the material, triggers the dispenser to pour the material into the container. A processor monitors the dispenser pouring the material. A processor determines that an anomaly is detected during pouring the material. A processor, in response to determining that the anomaly is detected during pouring the material, signals the dispenser to stop the pouring.

Abstract: A technique for mitigating against return-oriented programming (ROP) attacks that occur during execution of an application includes receiving source code to compile into an executable application. During a compilation of the source code, one or more functions within the source code that are associated with gadgets in an ROP attack are determined, each of the one or more functions is assigned to one or more protected pages of memory for the executable application, and a tag is assigned to each of the one or more functions. The tag for each function maps to the protected page of memory to which the function is assigned.

Abstract: Virtual memory address space is divided according to areas of the virtual memory address and allocating some areas to low-cost volatile memory (such as RAM) when the memory areas are not required by an application to be stored in non-volatile memory, such as NVDIMM. A loader mechanism creates and maintains a layout address table in non-volatile memory for recovery from an unexpected reset.