Abstract: Techniques are disclosed for decentralized data management using a geographic location-based consensus protocol in a network of computing resources such as, by way of example, a highly distributed system. For example, at a given consensus node of a consensus network comprising a plurality of consensus nodes configured to participate in a consensus protocol wherein at least a portion of the consensus nodes are mobile, a list is obtained of at least a subset of the plurality of consensus nodes that are predicted to be currently available to participate in the consensus protocol based on geographic location information. A message comprising a transaction to be validated is sent from the given consensus node to the subset of the plurality of consensus nodes in the obtained list. Techniques are also disclosed for adjusting a data protection policy based on the number of computing nodes, some of which are mobile, available to participate.

Abstract: Systems, methods, and articles of manufacture comprising processor-readable storage media are provided for implementing security for a network environment using a centralized smart security system. For example, a method includes implementing a network comprising a plurality of network devices which collectively generate data that is utilized by a computing system to execute an application, and implementing a centralized security system as a computing node within the network to manage security operations within the network and to establish secured and trusted communications between the network devices and the computing system. The network devices may comprise wireless sensor devices operating in a wireless sensor network, wherein the computing system executes an IoT (Internet of Things) application which processes the data that is generated by the wireless sensor devices.

Abstract: In a system environment comprising a plurality of computing resources, wherein at least a portion of the computing resources are mobile, a method maintains a decentralized messaging network of interconnected messaging nodes and a decentralized data network of interconnected data nodes. Each of the plurality of computing resources is associated with a given messaging node and a given data node. The method manages transfer of a data set between the plurality of computing resources in association with the decentralized messaging network and the decentralized data network. Managing transfer of the data set comprises inserting a policy file into the decentralized data network specifying one or more policies for managing the transfer of the data set and inserting a message into the decentralized messaging network instructing implementation of the one or more policies.

Abstract: Systems, methods, and articles of manufacture comprising processor-readable storage media are provided for implementing security for a network environment using a centralized smart security system. For example, a method includes implementing a network comprising a plurality of network devices which collectively generate data that is utilized by a computing system to execute an application, and implementing a centralized security system as a computing node within the network to manage security operations within the network and to establish secured and trusted communications between the network devices and the computing system. The network devices may comprise wireless sensor devices operating in a wireless sensor network, wherein computing system executes an IoT (Internet of Things) application which processes the data that is generated by the wireless sensor devices.

Abstract: Example embodiments of the present invention relate to methods, a system, and a computer program product for performing governed replay for compliance applications. The method includes maintaining a repository and executing an audit, including a control and one or more processes, to determine compliance of a state of the cloud infrastructure environment. The method further includes storing in the repository a control metadata object including content addresses to the processes for the audit as an immutable control and process objects, respectively, storing in the repository input metadata and output metadata identifying inputs to and outputs from the control and the processes as immutable input metadata objects and output metadata objects, respectively, and storing a timestamp metadata object, including a timestamp and content addresses to the control object, the process objects, the input objects, and the output objects, as an immutable metadata object in the repository.

Abstract: A value is obtained from a set of values respectively assigned to a set of characteristics of a first control associated with at least one trust dimension attributable to a given infrastructure, wherein the given infrastructure comprises one or more elements. An infrastructure trust index is computed based at least on the obtained value, wherein the infrastructure trust index characterizes a trustworthiness attributable to the given infrastructure.

Abstract: Techniques for determining and representing the veracity of data stored in a data repository and results of queries directed to the stored data by utilizing information lineage that is indicative of the veracity of the stored data. For example, in one example, one or more data repositories are maintained. The one or more data repositories comprise metadata representative of the veracity of one or more data sets stored in the one or more data repositories. In response to a query to at least one data set of the one or more data sets stored in the one or more data repositories, a result of the query for the at least one data set is returned in combination with corresponding metadata representing the veracity of the at least one data set.

Abstract: An apparatus in one embodiment comprises a processing platform implementing an Internet of Things (IoT) distributed management system accessible to a plurality of user devices over at least one network. The processing platform is configured to determine IoT infrastructure for a given IoT deployment in at least one particular usage context, to control placement of multiple workflow processes for the IoT deployment over a plurality of distributed locations within the IoT infrastructure, and to manage execution of the workflow processes at the distributed locations in accordance with one or more constraints of the particular usage context. The IoT deployment comprises one or more IoT platforms each configured to interact with a different set of IoT devices. The placement of multiple workflow processes over the plurality of distributed locations illustratively provides a designated distribution of data, services, applications and analytics for the IoT deployment in the particular usage context.

Abstract: An apparatus comprises an Internet of Things (IoT) platform configuration and deployment system accessible to a plurality of user devices over at least one network. The IoT platform configuration and deployment system comprises a configuration and deployment controller, and a multi-tiered adaptive service catalog associated with the controller. The configuration and deployment controller is configured to receive requirements input for respective ones of a plurality of requested IoT platforms from one or more of the user devices and to determine corresponding sets of resources for implementation of the respective IoT platforms based at least in part on one or more services selected from the multi-tiered adaptive service catalog. The IoT platforms are deployed utilizing the respective sets of resources determined by the configuration and deployment controller. Each of the deployed IoT platforms is illustratively configured to interact with a different set of IoT devices.

Abstract: Systems, methods, and articles of manufacture comprising processor-readable storage media are provided for detecting anomalies in a computing system based on power consumption of network devices of the computing system. For example, a method includes receiving power consumption data from a computing device operating within a network, wherein the power consumption data indicates reported power usage by the computing device operating within the network, processing the power consumption data to detect anomalous behavior of the computing device operating in the network, and preventing the computing device from transmitting data within the network, when anomalous behavior of the computing device is detected.

Abstract: One or more trust characteristics are obtained. The one or more trust characteristics are attributable to a storage infrastructure from which one or more data sets stored in one or more data repositories are obtained. The one or more trust characteristics attributable to the storage infrastructure are associated with the one or more data sets such that the one or more data sets are characterized as having a trustworthiness reflective of the one or more trust characteristics. The one or more trust characteristics and the association with the one or more data sets are stored as metadata in the one or more data repositories.

Abstract: Metadata respectively associated with one or more input data sets processed by one or more analytic applications is obtained. The metadata for each data set is indicative of at least one of trust and veracity associated with the data set. The one or more analytic applications generate analytic results based on the one or more input data sets. A governed placement is determined for at least the analytic results based on at least a portion of the obtained metadata.

Abstract: Techniques are disclosed for governed or constrained deployment of one or more applications on trusted infrastructure of a cloud infrastructure environment. For example, a repository of metadata (e.g., metadata lake) is maintained. The metadata repository includes metadata associated with applications, metadata associated with content associated with the applications, and metadata associated with a cloud infrastructure environment in which the applications are deployable. A deployment is determined for a given application on a trusted infrastructure within the cloud infrastructure environment based on at least a subset of the metadata maintained in the metadata repository. The determination of the deployment of the given application based on the subset of the metadata includes mapping trust-based criteria associated with the given application with a portion of infrastructure of the cloud infrastructure environment that satisfies the trust-based criteria.

Abstract: Metadata respectively associated with one or more input data sets processed by one or more analytic applications is obtained. The metadata for each data set is indicative of at least one of trust and veracity associated with the data set. The one or more analytic applications generate analytic results based on the one or more input data sets. A governed placement is determined for at least the analytic results based on at least a portion of the obtained metadata.

Abstract: The present invention relates to compliance rules analytics systems and methods for facilitating compliance, such as the compliance of an investment portfolio or a set of investment portfolios, with a rule or a set of rules.

Abstract: A method and system for automatically assembling a complete machine readable description of a process by observing and filtering digital messages executing on one or more message bus and that relate to the process. Message details are stored and a tracker record published in a common format. The stored message details are processed into a set of service execution path descriptions, which in turn are processed into the complete machine readable description of the process, using a suitable process design language. The invention automates the capture and documentation of a process, regardless of the complexities of the underlying messaging environment, and produces a complete and unambiguous description of the end-to-end process, free of errors, omissions and interpretation, thereby addressing a key need in any process re-engineering project, including the delivery of SOA implementations and other forms of agile and adaptable systems.

Abstract: The present invention relates to compliance rules analytics systems and methods for facilitating compliance, such as the compliance of an investment portfolio or a set of investment portfolios, with a rule or a set of rules.

Abstract: The present invention relates to compliance rules analytics systems and methods for facilitating compliance, such as the compliance of an investment portfolio or a set of investment portfolios, with a rule or a set of rules.

Abstract: A method and system for automatically assembling a complete machine readable description of a process by observing and filtering digital messages executing on one or more message bus and that relate to the process. Message details are stored and a tracker record published in a common format. The stored message details are processed into a set of service execution path descriptions, which in turn are processed into the complete machine readable description of the process, using a suitable process design language. The invention automates the capture and documentation of a process, regardless of the complexities of the underlying messaging environment, and produces a complete and unambiguous description of the end-to-end process, free of errors, omissions and interpretation, thereby addressing a key need in any process re-engineering project, including the delivery of SOA implementations and other forms of agile and adaptable systems.

Abstract: The present invention relates to compliance rules analytics systems and methods for facilitating compliance, such as the compliance of an investment portfolio or a set of investment portfolios, with a rule or a set of rules.