Abstract: Devices with low or no security are often added to networks. These devices have the ability to utilize the network and, accordingly, may pose a security risk. Systems and methods herein enable a device to be added to a network and, if the resulting new traffic matches a template, the device is established on an automatically created virtual local area network (VLAN) used solely for the new device. A router is automatically configured to allow traffic that matches the type of device that was newly added, but if other traffic is detected, the device may be treated as a threat and managed accordingly.

Abstract: Devices with low or no security are often added to networks. These devices have the ability to utilize the network and, accordingly, may pose a security risk. Systems and methods herein enable a device to be added to a network and, if the resulting new traffic matches a template, the device is established on an automatically created virtual local area network (VLAN) used solely for the new device. A router is automatically configured to allow traffic that matches the type of device that was newly added, but if other traffic is detected, the device may be treated as a threat and managed accordingly.

Abstract: A request is received to deploy a configuration on a computing resource. A compliance check on the configuration is performed according to a policy to determine whether deployment of the configuration on the computing resource is permitted. In response to determining that the deployment of the configuration on the computing resource is permitted, a deployer for the computing resource is controlled to deploy the configuration on the computing resource.

Abstract: Devices with low or no security are often added to networks. These devices have the ability to utilize the network and, accordingly, may pose a security risk. Systems and methods herein enable a device to be added to a network and, if the resulting new traffic matches a template, the device is established on an automatically created virtual local area network (VLAN) used solely for the new device. A router is automatically configured to allow traffic that matches the type of device that was newly added, but if other traffic is detected, the device may be treated as a threat and managed accordingly.

Abstract: A request is received to deploy a configuration on a computing resource. A compliance check on the configuration is performed according to a policy to determine whether deployment of the configuration on the computing resource is permitted. In response to determining that the deployment of the configuration on the computing resource is permitted, a deployer for the computing resource is controlled to deploy the configuration on the computing resource.

Abstract: Catalogs that describe respective offerings for fulfillment by respective applications, are aggregated to form an aggregate catalog. A request relating to at least one of the offerings is received based on content presented from the aggregate catalog. In response to the request, an orchestrated execution of an end-to-end process is performed to fulfill the request relating to the at least one offering, the executing of the end-to-end process comprising calling at least one of the applications.

Abstract: A representation of functions and features associated with respective functions is received, the representation being according to a model. Features of a plurality of the products are compared to the features of the functions. Based on the comparing, a check is made for an existence of a gap of at least one of the plurality of products relating to omission of a feature, an existence of an overlap of features between multiple products of the plurality of products, and an existence of a divergence in timings of release between dependent products of the plurality of products.

Abstract: A representation of functions and features associated with respective functions is received, the representation being according to a model. Features of a plurality of the products are compared to the features of the functions. Based on the comparing, a check is made for an existence of a gap of at least one of the plurality of products relating to omission of a feature, an existence of an overlap of features between multiple products of the plurality of products, and an existence of a divergence in timings of release between dependent products of the plurality of products.

Abstract: An orchestrator executes an end-to-end process across applications. The executing of the end-to-end process by the orchestrator comprises executing flow logic by the orchestrator, the flow logic according to a data model defining arguments to include in interactions between the orchestrator and each of the applications. A message broker exchanges information among the orchestrator and the applications.

Abstract: An orchestrator executes an end-to-end process across applications. The executing of the end-to-end process by the orchestrator comprises executing flow logic by the orchestrator, the flow logic according to a data model defining arguments to include in interactions between the orchestrator and each of the applications. A message broker exchanges information among the orchestrator and the applications.

Abstract: An orchestrator executes an end-to-end process across applications. An message broker exchanges information among the orchestrator and the processes of the applications. Adapters perform protocol and interface translations for information communicated between the message broker and the respective applications.

Abstract: An orchestrator executes an end-to-end process across applications. An message broker exchanges information among the orchestrator and the processes of the applications. Adapters perform protocol and interface translations for information communicated between the message broker and the respective applications.

Abstract: Catalogs that describe respective offerings for fulfillment by respective applications, are aggregated to form an aggregate catalog. A request relating to at least one of the offerings is received based on content presented from the aggregate catalog. In response to the request, an orchestrated execution of an end-to-end process is performed to fulfill the request relating to the at least one offering, the executing of the end-to-end process comprising calling at least one of the applications.

Abstract: A technique for evaluating service level agreement (SLA) violations occurring in a computing system with agreed-upon model for exemptions is provided. The technique includes storing in a memory a model of the SLA and identifying occurrence of an SLA violation in a computing system that is providing services under the SLA. Based on the stored model, the technique further determines if the SLA violation is exempted from a penalty.

Abstract: A method for minimizing risk of a service level agreement (SLA) is provided. Such a method can include creating a risk profile for a key performance indicator based on a collection of data, determining a service level objective (SLO) cost for a SLO by correlating the SLO with the risk profile, and computing a cost of a SLA by analyzing the SLO cost for the SLO associated with the SLA.

Abstract: A technique for evaluating service level agreement (SLA) violations occurring in a computing system with agreed-upon model for exemptions is provided. The technique includes storing in a memory a model of the SLA and identifying occurrence of an SLA violation in a computing system that is providing services under the SLA. Based on the stored model, the technique further determines if the SLA violation is exempted from a penalty.

Abstract: One embodiment of an interface request arbitration system comprises a queue for holding individual processing requests from at least one application process and an interface request arbiter which dynamically chooses to pass a request at the head of the queue to either a real-time interface of an external system that handles the request or a batch interface to the external system.