Abstract: Aspects of the present invention disclose a method, computer program product, and system for monitoring a health status of a computing system. The method includes one or more processors deploying a respective monitoring prediction agent in each of a plurality of worker nodes of a computing system. The method further includes determining, for each of the plurality of worker nodes by the respective monitoring prediction agent, a single binary health status value by comparing a time-dependent function of performance metric data values of the respective worker node to upper and lower threshold values. The method further includes receiving the binary health status values together with respective identity information from each of the plurality of worker nodes. The method further includes generating a dataset indicative of a health status of the computing system by feeding the received respective identity information to hash functions of a Counting Bloom Filter.

Abstract: A computer-implemented method for execution of a service in a distributed environment, the method comprising performing a speculative execution of a service and storing a related result, wherein a decision whether the speculative execution of the service is performed is dependent on a dynamically changing score value and receiving a request for an execution of the service at a request proxy. Additionally, the method comprises upon determining that a valid result of the execution of the service is available from an earlier speculative execution of a comparable service, returning the valid result by the request proxy, and upon determining that a valid result of the execution of the service is not available from an earlier speculative execution of a comparable service, executing the service in a non-speculative manner, and returning a received non-speculative result by the request proxy.

Abstract: Techniques for privacy centric data security. A request to permit a data processor to access private data associated with a user is received at a cloud data privacy service. The request includes a request for a data access block relating to the private data, and a data filter describing one or more access parameters. The cloud privacy data service generates the first data access block, based on the private data and the data filter. The first data access block is transmitted from the cloud privacy service to a user device, which is configured to transmit the first data access block to the first data processor. The cloud data privacy service receives a request for the private data that includes the first data access block. The cloud data privacy service determines that the first data access block is valid, and grants the first data processor access to the private data.

Abstract: Aspects of the present invention disclose a method, computer program product, and system for monitoring a health status of a computing system. The method includes one or more processors deploying a respective monitoring prediction agent in each of a plurality of worker nodes of a computing system. The method further includes determining, for each of the plurality of worker nodes by the respective monitoring prediction agent, a single binary health status value by comparing a time-dependent function of performance metric data values of the respective worker node to upper and lower threshold values. The method further includes receiving the binary health status values together with respective identity information from each of the plurality of worker nodes. The method further includes generating a dataset indicative of a health status of the computing system by feeding the received respective identity information to hash functions of a Counting Bloom Filter.

Abstract: A computer-implemented method for controlling state updates in a cloud service environment may be provided. The method includes maintaining a set of state provider definitions, wherein each state provider definition comprising a set of required input variable definitions, a set of output variable definitions and related metadata. The method also includes determining a set of input variable definitions required by an invoked service, receiving the determined set of input variable definitions by the state provider management service, selecting a state provider definition, wherein the selected state provider definition is to be compatible with the received set of input variable definitions, determining a set of matching state provider services matching the selected state provider definition, scoring the determined set of state provider services, invoking the highest scoring state provider service, and passing the state data to the invoked service.

Abstract: A processor may execute an asynchronous operation of the program code, hibernate a process related to the asynchronous operation, and free-up related cloud runtime platform excluding the related system memory. Additionally, the processor may execute the asynchronous operation during the hibernation of the process, intercept an initiated completion function to the process after a completion of the asynchronous operation, inject at least one of additional program code and data into the completion function, un-hibernating the process and reallocate freed-up cloud runtime platform related resources of the process, and execute the completion function returning result data of the asynchronous operation and the at least one of additional program code and data to the process.

Abstract: Techniques for privacy centric data security. A request to permit a data processor to access private data associated with a user is received at a cloud data privacy service. The request includes a request for a data access block relating to the private data, and a data filter describing one or more access parameters. The cloud privacy data service generates the first data access block, based on the private data and the data filter. The first data access block is transmitted from the cloud privacy service to a user device, which is configured to transmit the first data access block to the first data processor. The cloud data privacy service receives a request for the private data that includes the first data access block. The cloud data privacy service determines that the first data access block is valid, and grants the first data processor access to the private data.

Abstract: A computer-implemented method for controlling state updates in a cloud service environment may be provided. The method includes maintaining a set of state provider definitions, wherein each state provider definition comprising a set of required input variable definitions, a set of output variable definitions and related metadata. The method also includes determining a set of input variable definitions required by an invoked service, receiving the determined set of input variable definitions by the state provider management service, selecting a state provider definition, wherein the selected state provider definition is to be compatible with the received set of input variable definitions, determining a set of matching state provider services matching the selected state provider definition, scoring the determined set of state provider services, invoking the highest scoring state provider service, and passing the state data to the invoked service.

Abstract: A method for enhancing a service delivery system with a multi-staged broker may be provided. The multi-staged broker may be suited for a placement of a service. The delivery system accesses at least two infrastructure systems offering services for deploying service resources. The at least two infrastructure systems are operated by different service providers. The method comprises collecting static and dynamic capabilities of the two infrastructure computing systems, combining the static capabilities and the dynamic capabilities for determining a first most suitable infrastructure system for deploying a service requiring a computing environment satisfying attribute values of a service capability profile, deploying the service on the first most suitable infrastructure system.

Abstract: Placement of instances of virtual machine (VM) images in a cloud computing environment is optimized. A request is received to deploy a new VM image instance. VM resource usage profiles are read that indicate predicted resource consumption data of the VM image. Resource pool profiles for multiple resource pools are read that indicate predicted resource consumption data for the resource pools. For each of the resource pools, the VM resource usage profile is aligned with the respective resource pool profile. An aggregated resource consumption profile is calculated as an aggregation of the predicted resource consumptions of the aligned profiles. A determination is made of one of multiple resource pools with the least predicted aggregated resource consumption, and the VM image is instantiated on the determined one of the multiple resource pools with the least predicted aggregated resource consumption over time.

Abstract: The present embodiment may include a computing system that may extract a plurality of metadata from a service contract (human readable document) that was signed between the cloud infrastructure provider and a service owner before the service is deployed on the service delivery system of the cloud infrastructure provider. The present embodiment may compile the plurality of metadata into a control component that is an executable program that may be compiled with the service and adopted for auditing and enforcing the service contract of the service. The present embodiment may cause the service owner to compile the service with the control component, where the control component enabling auditing and enforcing the service contract signed for the service and monitors the service at runtime for compliance with the service contract.

Abstract: The present embodiment may include a computing system that may extract a plurality of metadata from a service contract (human readable document) that was signed between the cloud infrastructure provider and a service owner before the service is deployed on the service delivery system of the cloud infrastructure provider. The present embodiment may compile the plurality of metadata into a control component that is an executable program that may be compiled with the service and adopted for auditing and enforcing the service contract of the service. The present embodiment may cause the service owner to compile the service with the control component, where the control component enabling auditing and enforcing the service contract signed for the service and monitors the service at runtime for compliance with the service contract.

Abstract: A method for enhancing a service delivery system with a multi-staged broker may be provided. The multi-staged broker may be suited for a placement of a service. The delivery system accesses at least two infrastructure systems offering services for deploying service resources. The at least two infrastructure systems are operated by different service providers. The method comprises collecting static and dynamic capabilities of the two infrastructure computing systems, combining the static capabilities and the dynamic capabilities for determining a first most suitable infrastructure system for deploying a service requiring a computing environment satisfying attribute values of a service capability profile, deploying the service on the first most suitable infrastructure system.

Abstract: Provided are a method, system, and computer program product for handling locale and language in a cloud management system, in which a first composite values list of applicable locales and matching languages combinations is generated from at least one language installed on a service management system and at least one locale supported by said service management system. A second composite values list of applicable locales and matching languages combinations is generated as a fall back list based on at least one base language of said service management system and at least one matching locale formed from said at least one base language, if said first composite values list of applicable locales and matching languages is empty. A resulting composite values list of valid locales and languages combinations is provided for further processing.

Abstract: Placement of instances of virtual machine (VM) images in a cloud computing environment is optimized. A request is received to deploy a new VM image instance. VM resource usage profiles are read that indicate predicted resource consumption data of the VM image. Resource pool profiles for multiple resource pools are read that indicate predicted resource consumption data for the resource pools. For each of the resource pools, the VM resource usage profile is aligned with the respective resource pool profile. An aggregated resource consumption profile is calculated as an aggregation of the predicted resource consumptions of the aligned profiles. A determination is made of one of multiple resource pools with the least predicted aggregated resource consumption, and the VM image is instantiated on the determined one of the multiple resource pools with the least predicted aggregated resource consumption over time.

Abstract: Provided are a method, system, and computer program product for handling locale and language in a cloud management system, in which a first composite values list of applicable locales and matching languages combinations is generated from at least one language installed on a service management system and at least one locale supported by said service management system. A second composite values list of applicable locales and matching languages combinations is generated as a fall back list based on at least one base language of said service management system and at least one matching locale formed from said at least one base language, if said first composite values list of applicable locales and matching languages is empty. A resulting composite values list of valid locales and languages combinations is provided for further processing.

Abstract: Provided are a method, system, and computer program product for handling locale and language in a cloud management system, in which a first composite values list of applicable locales and matching languages combinations is generated from at least one language installed on a service management system and at least one locale supported by said service management system. A second composite values list of applicable locales and matching languages combinations is generated as a fall back list based on at least one base language of said service management system and at least one matching locale formed from said at least one base language, if said first composite values list of applicable locales and matching languages is empty. A resulting composite values list of valid locales and languages combinations is provided for further processing.

Abstract: Placement of instances of virtual machine (VM) images in a cloud computing environment is optimized. A request is received to deploy a new VM image instance. User-specific and generic VM resource usage profiles are read that include resource consumption data. Resource pool profiles for multiple resource pools are read that include resource consumption data for the resource pools. For each of the resource pool profiles, a selected VM resource usage profile is analyzed and aligned with the resource pool profiles. An aggregated resource consumption profile is calculated. A determination is made of one of multiple resource pools with the least aggregated resource consumption.

Abstract: A method is provided which defends a computer program against attacks independently of the complexity of the program. A request to invoke the application is received. A process execution state is set to indicate a first execution. The application is executed in response to the request, and application data and control information calculated by the application is stored while the application is executed. The process execution state is set to indicate a subsequent execution. At least part of the application is executed for at least one subsequent time. Application data and control information calculated by the application during subsequent executions is compared with the data/information stored during first execution. The comparison is done by operation system services which are responsive to the process execution state. When the comparison shows a discrepancy in the compared application data and control information, appropriate error handling takes place.

Abstract: Provided are a method, system, and computer program product for handling locale and language in a cloud management system, in which a first composite values list of applicable locales and matching languages combinations is generated from at least one language installed on a service management system and at least one locale supported by said service management system. A second composite values list of applicable locales and matching languages combinations is generated as a fall back list based on at least one base language of said service management system and at least one matching locale formed from said at least one base language, if said first composite values list of applicable locales and matching languages is empty. A resulting composite values list of valid locales and languages combinations is provided for further processing.