Abstract: Data privacy information pertaining to particular data hosted by a first workload provisioned to a first location can be received. The first workload can be monitored to determine whether the first workload is accessed by a second workload, determine whether the second workload is indicated as being authorized, in the data privacy information, to access the particular data hosted by first workload, and determine whether the second workload has access to the particular data hosted by the first workload. If so, the first workload can be automatically provisioned to a second location to which provisioning of the first workload is allowed based on the data privacy information.

Abstract: Techniques are provided for selectively granting access credentials through the use of a machine learning model. Embodiments include collecting data from one or more sources related to user access of an information technology (IT) infrastructure. Based on the collected data, a machine learning model is created for authenticating a request from a client device to access the computer system within the IT infrastructure based on the collected data, based on the machine learning model. An access credential is generated upon processing the user identifier as an input to the machine learning model, and the access credential is provided to the client device.

Abstract: A coated foodstuff is made using two starch components. One is a spray cooked agglomerated waxy corn starch as having a peak time to hydration viscosity of between about 5.5 and about 7.5 minutes. The snack has unique expansion and hardness properties compared to coatings made from other corn starches, in embodiments the snack has a coating that expands to between about 1.7 and about 2.6 mm, a hardness of between about 3000 and about 3750 grams, or a hardness-to-expansion ratio of about 1200:1 to about 2200:1 g/mm.

Abstract: Data privacy information pertaining to particular data hosted by a first workload provisioned to a first location can be received. The first workload can be monitored to determine whether the first workload is accessed by a second workload, determine whether the second workload is indicated as being authorized, in the data privacy information, to access the particular data hosted by first workload, and determine whether the second workload has access to the particular data hosted by the first workload. If so, the first workload can be automatically provisioned to a second location to which provisioning of the first workload is allowed based on the data privacy information.

Abstract: The present invention provides diagnostic assays for identifying thyroid cancer in a biological sample, including a fine needle aspirate, as well as related compositions and kits useful in practicing the methods of the invention.

Abstract: A system for trading goods over a computer network based on image processing includes an image processor that analyzes a picture received from a user to build a description of entities in the picture and correlations among the entities, a description interpreter that analyzes the description to determine an underlying message in the picture and detect information regarding the user's interests, emotions and affinities to goods and services, wherein the information is stored with the user's profile, the user's list of items to trade, and the user's past transaction history, and a trade matching component that uses the user's profile and produces a ranked list of other users with items to trade, or intermediary trade steps, when another user initiates a new trading transaction.

Abstract: A system, method and program product for controlling allocation of user assignments to server systems managed by a shared resource manager of a service provider. User request parameters are received from a first user for identifying a desired server resource. User assignment alternatives are calculated based on migration of user assignments of a second user to make the desired server resource available to the first user. User migration parameters are received from the second user that identify conditions for migrating the current user assignment of the second user from a first server to a second server in accordance with one of the user assignment alternatives. A new configuration of user assignments of the first user and the second user are calculated and communicated to the shared resource manager based on the first user and the second user accepting a user assignment alternative. The server systems are reconfigured in accordance with the new configuration of user assignments.

Abstract: Methods, systems, and program products for analyzing cyber-attacks on computing systems of a business are disclosed. The methods may include detecting each of the plurality of cyber-attacks. The plurality of cyber-attacks may target information systems stored on at least one information technology (IT) component of an infrastructure of the computing system of the business. The methods may also include determining cyber-attack data relating to the plurality of cyber-attacks, identifying a business impact on the business for each of the plurality of cyber-attacks. The identified business impact on the business for the plurality of cyber-attacks may be based on predetermined business impact data and the determined cyber-attack data. Additionally, the method may include prioritizing the plurality of cyber-attacks attempted on the computing system based on the identified business impact on the business for each of the plurality of cyber-attacks.

Abstract: The present invention is a system and method for evaluating an IT change request system based on cognitive and machine learning technologies. The system includes a computing device having a change request evaluator based on a machine learning trained model and in digital communication with a server. A historical database stores change records and a definitions database stores a definition for words appearing in the change records. A change request is received at the change request evaluator, which finds a model change record by comparing the change request to the change records in the historical database and identifying definitions common to both the change request and the change record. A business mapping tool interfaces with the change request evaluator and determines a business impact of the model change record and associates the business impact with the change request. The change request evaluator approves or rejects the change request.

Abstract: A system, method and program product for applying interventions to allocated resources intervention impacts identified and minimized. After receiving a change request requesting changes involving shared resources, elements affected by implementing the requested change are identified. Individual impacts to elements in each layer are determined moment by moment during a selected time frame, and overall impact to client activity is determined from individual impacts for the entire time frame. From the overall impact, a time may be identified within the time frame that has a minimum overall impact for implementing the requested change.

Abstract: As disclosed herein a computer-implemented method includes determining an initial workload configuration corresponding to a workload and requesting a new custom monitoring agent and a new custom monitoring profile corresponding to the initial workload configuration, and determining updated monitor tuning information corresponding to the workload. The method further includes updating one or more monitoring thresholds according to updated monitor tuning information responsive to determining the workload configuration has changed, requesting a new monitoring agent that includes a monitor corresponding to a changed workload configuration, and installing the new monitoring agent in the workload. Also disclosed herein a computer-implemented method includes receiving a request from a requester for a new monitoring agent corresponding to a workload, and creating the new monitoring agent according to a custom monitoring profile. The method further includes providing the new monitoring agent to the requester.

Abstract: A system, method and program product for controlling allocation of user assignments to server systems managed by a shared resource manager of a service provider. User request parameters are received from a first user for identifying a desired server resource. User assignment alternatives are calculated based on migration of user assignments of a second user to make the desired server resource available to the first user. User migration parameters are received from the second user that identify conditions for migrating the current user assignment of the second user from a first server to a second server in accordance with the user assignment alternatives. A new configuration of user assignments of the first and second user are calculated and communicated to the shared resource manager based on the first and second user accepting a user assignment alternative. The server systems are reconfigured in accordance with the new configuration of user assignments.

Abstract: The present invention provides dignostic assays for identifying thyroid cancer in a biological sample, including a fine needle aspirate, as well as related compositions and kits useful in practicing the methods of the invention.

Abstract: A system for trading goods over a computer network based on image processing includes an image processor that analyzes a picture received from a user to build a description of entities in the picture and correlations among the entities, a description interpreter that analyzes the description to determine an underlying message in the picture and detect information regarding the user's interests, emotions and affinities to goods and services, wherein the information is stored with the user's profile, the user's list of items to trade, and the user's past transaction history, and a trade matching component that uses the user's profile and produces a ranked list of other users with items to trade, or intermediary trade steps, when another user initiates a new trading transaction.

Abstract: A system, method and program product for applying interventions to allocated resources intervention impacts identified and minimized. After receiving a change request requesting changes involving shared resources, elements affected by implementing the requested change are identified. Individual impacts to elements in each layer are determined moment by moment during a selected time frame, and overall impact to client activity is determined from individual impacts for the entire time frame. From the overall impact, a time may be identified within the time frame that has a minimum overall impact for implementing the requested change.

Abstract: A computer server may be monitored, and a request that requires executing an action on the computer server is received. Server configuration associated with the computer server is determined. Based on the server configuration, a technology associated with executing the action is determined. The action may be broken down into sub-activities and dependencies. A user profile database is searched to identify candidate users having a skill set associated with the technology. Availability, location and a skill level of the candidate users are determined. Based on historical data, a duration the candidate users would take to execute an activity on the computer server is predicted. Based on at least the duration, the availability, the location and the skill level of the candidate users, at least one user from the candidate users is determined to execute the activity on the computer server. A temporary access credential is provided for allowing access to the computer server during a specified duration.

Abstract: A router system includes a router, a memory storing a client program, and a processor configured to execute the client program. The client program is configured to enable a user to transfer a file from a source to a destination, determine whether data within the file includes sensitive information, determine a probability that transmission of the data from the source to the destination would violate a policy, send normal data packets to the router based on the file, and send a stop data packet to the router when the probability exceeds a threshold. The router forwards the normal data packets to the destination until the router receives the stop data packet.

Abstract: A coated foodstuff is made using two starch components. One is a spray cooked agglomerated waxy corn starch as having a peak time to hydration viscosity of between about 5.5 and about 7.5 minutes. The snack has unique expansion and hardness properties compared to coatings made from other corn starches, in embodiments the snack has a coating that expands to between about 1.7 and about 2.6 mm, a hardness of between about 3000 and about 3750 grams, or a hardness-to-expansion ratio of about 1200:1 to about 2200:1 g/mm.

Abstract: One or more processors validate consistency between a policy-based service and operational data of a managed IT environment. One or more processors collect information for a component of a baseline, wherein the component of the baseline is at least one of an IT device and an application within the managed IT environment. One or more processors determine the policy-based service to be applied to the component of the baseline. One or more processors collect information to access operational data associated with a provider of the policy-based service. One or more processors generate a policy based on the information for the component of the baseline and the policy-based service to be applied to the component of the baseline, and one or more processors perform a validation of consistency based on a comparison between the policy and the operational data associated with the provider of the policy-based service.

Abstract: For migrating a workload, a workload running in a first system is scanned, wherein the scanning is prior to migrating the workload to a second system and detects features installed in the first system for the workload, including service management features. How the features for the workload are configured is determined responsive to the scanning detecting features installed in the first system for the workload. An identity record is created that identifies the detected features and defines how the detected features are configured in the first system. The identity record is sent to a second system. The second system is sent a request for migrating the workload to the second system, wherein the request specifies for the second system to provision a workload configured with features specified in the identity record.