Abstract: A given policy file is obtained at a publishing node of a decentralized system of nodes, wherein the given policy file defines a policy that applies to at least a subset of nodes in the decentralized system of nodes. The given policy file is sent to a decentralized storage network for storage therein. Storage metadata is received from the decentralized storage network, wherein the storage metadata represents address information associated with storage of the given policy file in the decentralized storage network. The publishing node generates policy file retrieval metadata based on the storage metadata received from the decentralized storage system. The policy file retrieval metadata is sent to a blockchain network for storage therein. One or more querying nodes of the decentralized system of nodes access the blockchain network to obtain the policy file retrieval metadata in order to then retrieve the policy file from the decentralized storage network.

Abstract: In a system environment comprising a plurality of computing resources, wherein at least a portion of the computing resources are mobile, a method manages a transfer of one or more portions of a data set between at least a subset of the plurality of computing resources in accordance with a data distribution process. The data distribution process comprises computing one or more probability values to estimate whether or not a given mobile computing resource that is seeking at least a portion of the data set will be in a vicinity of at least one other computing resource that currently has or can obtain the portion of the data set, and based on the computation step, causing a transfer of the portion of the data set to the given mobile computing resource over a communication link locally established between the two computing resources when in the vicinity of one another.

Abstract: Techniques are disclosed for decentralized data management using a geographic location-based consensus protocol in a network of computing resources such as, by way of example, a highly distributed system. For example, at a given consensus node of a consensus network comprising a plurality of consensus nodes configured to participate in a consensus protocol wherein at least a portion of the consensus nodes are mobile, a list is obtained of at least a subset of the plurality of consensus nodes that are predicted to be currently available to participate in the consensus protocol based on geographic location information. A message comprising a transaction to be validated is sent from the given consensus node to the subset of the plurality of consensus nodes in the obtained list. Techniques are also disclosed for adjusting a data protection policy based on the number of computing nodes, some of which are mobile, available to participate.

Abstract: Described are methods, apparatus and computer programs for managing persistence within a data processing system such as a messaging system, database system or file system. The method for managing persistence includes a deferred evaluation (230,330,430) of at least one criterion associated with costs and/or benefits of saving to persistent storage, instead of persistence behaviour being fully predefined. The evaluation may be performed when a disk write is about to be performed (240,340,440), or at various times during processing of a data update and at various points within a data processing network. In a messaging solution, the method for managing persistence includes a dynamic evaluation (230,330,430) of costs and/or benefits of saving to persistent storage, with the evaluation being performed at various points in the messaging network after the message has been created and sent by the originating entity.

Abstract: Private information is frequently made public or semi-public, often without foresight as to the consequences of such a divulgence. Additionally, intentionally divulged information that is intended to be maintained as private is routinely sold to advertisers and information brokers. Example embodiments of the present invention relate to a method, an apparatus and a computer-program product for encrypting privacy-related information in a data stream. The method includes receiving a data stream transmitted from a source. A contextual analysis is then performed on the content of privacy-related portions of the data stream. The privacy-related portions of the data stream are then encrypted according to the contextual analysis before being forwarded to the intended destination.

Abstract: In a system environment comprising a plurality of computing resources, wherein at least a portion of the computing resources are mobile, a method maintains a decentralized messaging network of interconnected messaging nodes and a decentralized data network of interconnected data nodes. Each of the plurality of computing resources is associated with a given messaging node and a given data node. The method manages transfer of a data set between the plurality of computing resources in association with the decentralized messaging network and the decentralized data network. Managing transfer of the data set comprises inserting a policy file into the decentralized data network specifying one or more policies for managing the transfer of the data set and inserting a message into the decentralized messaging network instructing implementation of the one or more policies.

Abstract: In a multi-cloud computing environment comprising a plurality of cloud platforms with each cloud platform comprising one or more nodes, a method maintains a decentralized metadata database framework, wherein each node comprises a decentralized metadata database component operatively coupled to each other decentralized metadata database component of the framework and wherein each of at least two of the decentralized metadata database components stores a set of metadata records corresponding to protected data stored across the plurality of cloud platforms. Further, the method manages one or more access requests directed to the protected data through one or more of the decentralized metadata database components of the framework.

Abstract: Techniques are disclosed for automated data management. In one example, a method maintains a set of machine-readable data definition files corresponding to a set of data assets. At least one machine-readable data definition file specifies code for implementing at least one goal state associated with at least one corresponding data asset. The at least one machine-readable data definition file is executed to effectuate the at least one goal state.

Abstract: Example embodiments of the present invention relate to methods, a system, and a computer program product for performing governed replay for compliance applications. The method includes maintaining a repository and executing an audit, including a control and one or more processes, to determine compliance of a state of the cloud infrastructure environment. The method further includes storing in the repository a control metadata object including content addresses to the processes for the audit as an immutable control and process objects, respectively, storing in the repository input metadata and output metadata identifying inputs to and outputs from the control and the processes as immutable input metadata objects and output metadata objects, respectively, and storing a timestamp metadata object, including a timestamp and content addresses to the control object, the process objects, the input objects, and the output objects, as an immutable metadata object in the repository.

Abstract: A computer implemented method, system and computer program product for observing a mobile device's interaction with a set of resources in a geographic location, and creating a usage profile for the set of resources based on the mobile device's interactions with the resources. The usage profile includes a prediction of a subset of resources that will be used at a second geographic location in order to migrate the subset of resources to the second geographic location when the mobile device moves to the second geographic location.

Abstract: Example embodiments of the present invention relate to a method, a system, and a computer program product for creating a dynamically composed compute node. The method includes receiving an application characteristic and generating an infrastructure allocation request according to the application characteristic. The infrastructure allocation request then may be forwarded to a management system associated with a disaggregated infrastructure.

Abstract: A computer implemented method, system and computer program product enabling cloud service providers to register in a cloud book is presented. The cloud book includes a profile for each cloud service provider of the cloud service providers including the services and terms of service for each cloud service provider. Consumers register in the cloud book; users are able to connect to each other; and the users are able to browse the cloud service providers' connection to consumers. Each consumer is enabled to compare the services and terms of service to determine which service provider has services that match the consumer.

Abstract: Example embodiments of the present invention provide a method, an apparatus, and a computer program product for correlating privacy-related portions of a data stream with information indicative of a privacy policy. The method includes receiving privacy-related portions of a data stream transmitted from a source intended for a destination and receiving information indicative of a privacy policy associated with the destination. The privacy-related portions of the data stream then may be correlated with the information indicative of the privacy policy. According to this correlation, the privacy-related portions of the data stream may be forwarded to the destination.

Abstract: Example embodiments of the present invention relate to a method, a system, and a computer program product for creating a dynamically composed compute node. The method includes receiving an application characteristic and generating an infrastructure allocation request according to the application characteristic. The infrastructure allocation request then may be forwarded to a management system associated with a disaggregated infrastructure.

Abstract: Example embodiments of the present invention relate to a method, a system, and a computer program product for creating a dynamically composed compute node. The method includes receiving an application characteristic and generating an infrastructure allocation request according to the application characteristic. The infrastructure allocation request then may be forwarded to a management system associated with a disaggregated infrastructure.

Abstract: A method is used in managing input/output (I/O) operations based on application awareness. An I/O operation directed to storage is received. The storage is provisioned in accordance with an application and the provisioning includes selecting one or more default options in accordance with best practices of the application. Based on the provisioning in accordance with the application, an evaluation is performed of the acceptability of an I/O operation.

Abstract: Described are techniques for performing data storage system management of a data storage system. Using an active element manager component, a data storage system management operation in connection with a data storage device of the data storage system is performed, and context information is collected and provided to a target location in an external environment having connectivity to the data storage. The active element manager component provides for automatically connecting a current session associated with the data storage system management operation to the target location and receives one or more communications from the external environment.

Abstract: A method and system for use in evaluating system performance is disclosed. In at least one embodiment, the method and system comprises collecting system performance, management operations, and system events data for a computer system; correlating the management operations and the system events data with the performance data; and based on the correlation, providing a graphical user interface for enabling performance evaluations of the computer system by graphically displaying the management operations and the system events data overlaying the performance data.

Abstract: Implementations are provided herein for the migration of known infrastructure services, such as those existing on a private cloud infrastructure, to a public cloud environment, that enables private cloud operators to migrate their applications and data to a public cloud environment that meets the same trust, security, and resiliency standards currently employed in the private cloud environment. In one implementation, a private cloud can communicate an infrastructure services manifest to a public or hybrid cloud provider, which highlights the application and the data that will be moved to the public or hybrid cloud. The public or hybrid cloud can then use the infrastructure services manifest to establish an optimum virtualized environment containing the infrastructure services detailed in the infrastructure services manifest.

Abstract: Example embodiments of the present invention relate to a method, an apparatus, and a computer program product for privacy audit support via provenance-aware systems. The method includes associating a first identifier with a first data object and associating a second identifier with a second data object derived from the first data object according to a control object. Metadata for the second data object identifying the first data object and identifying the control object then may be stored.