Abstract: A method for automatically detecting and diagnosing problems in computer system functioning includes determining changed objects from computer system monitoring data, calculating temporal correlations from errors and changes sequences for each changed object, identifying and ranking suspicious computer system behavior patterns from the temporal correlations, and outputting said ranked suspicious computer system behavior patterns.

Abstract: A system and method are provided for direct manipulation of a triangular distribution of information. The system includes a graphical user interface for receiving user inputted values. The system further includes a data calculator for generating estimates based on the user inputted values, and for generating curves for display on a grid based on at least one of, the user inputted values and the estimates. The graphical user interface respectively receives the user inputted values based at least on a current position of a pointer on the grid. The graphical user interface is capable of applying a direct manipulation to at least one of the user inputted values and the estimates, such that a result of the direct manipulation is displayed on the grid and enters triplets corresponding to an expected value, an upper bound for the expected value, and a lower bound for the expected value.

Abstract: A method for automatically detecting and diagnosing problems in computer system functioning includes determining changed objects from computer system monitoring data, calculating temporal correlations from errors and changes sequences for each changed object, identifying and ranking suspicious computer system behavior patterns from the temporal correlations, and outputting said ranked suspicious computer system behavior patterns.

Abstract: A system and method are provided for direct manipulation of a triangular distribution of information. The system includes a graphical user interface for receiving user inputted values. The system further includes a data calculator for generating estimates based on the user inputted values, and for generating curves for display on a grid based on at least one of, the user inputted values and the estimates. The graphical user interface respectively receives the user inputted values based at least on a current position of a pointer on the grid. The graphical user interface is capable of applying a direct manipulation to at least one of the user inputted values and the estimates, such that a result of the direct manipulation is displayed on the grid and enters triplets corresponding to an expected value, an upper bound for the expected value, and a lower bound for the expected value.

Abstract: Method and system for determining estimation variance associated with project planning are provided. In one aspect, information associated with a project is obtained and initial estimations for the tasks in the project are determined using available information. The tasks are performed and actual measurements are obtained from the completed tasks. The actual measurements are used to revise the estimates of the remaining tasks. The revised estimates are used to compute a project level estimate and a variance on that estimate, and to enable better project management.

Abstract: Method and system for determining estimation variance associated with project planning are provided. In one aspect, information associated with a project is obtained and initial estimations for the tasks in the project are determined using available information. The tasks are performed and actual measurements are obtained from the completed tasks. The actual measurements are used to revise the estimates of the remaining tasks. The revised estimates are used to compute a project level estimate and a variance on that estimate, and to enable better project management.

Abstract: A system, method and computer program product for detecting leadership in a socio-technical environment based on the chronologic distribution of artifacts. The system and method captures and makes use of chronologic information as a predictor of causality in the dissemination of artifacts. A measure of leadership is based in part on the amount of relevant artifacts generated as a result, and temporal causality is used to detect this. The system method and computer program product further determines the patterns of behavior that govern a socio-technical context. By defining a set of patterns and comparing them with the interactions observed within a socio-technical network issues are discoverable.

Abstract: A method and system for detecting a source-related risk and generating an alert concerning the source-related risk are disclosed. Criteria of the source-related risk are defined. Thresholds associated with the source-related risk are defined. Every operation on an object is detected. If an operation on an object satisfies a criterion among the criteria or if the operation causes to exceed a threshold among the thresholds, an alert is generated for the operation.

Abstract: A method for minimizing total cost of interaction among components of a computer program, each of the components being characterized by at least one implementation property includes steps of: a) carrying out at least a partial run of the program; b) monitoring the at least partial run of the program to measure an amount of interaction between each pair of components; c) determining a cost of interaction between each pair of interacting components; d) determining a choice of implementation properties which minimizes total cost of the at least partial run; and e) assigning that choice of implementation properties to the components for a subsequent at least partial run of the program.

Abstract: A method and system for dynamically providing a composite source information report whenever source information of a composite object is updated. The system includes a subscription handler for receiving a subscription request and generating a subscription query, a means for determining whether source information of an element in a composite object has been edited (added, deleted and/or modified), a source information determining handler for automatically determining source information of an element in a composite object and a composite source information report generation handler for generating a composite source information report and providing the report to users. The system further comprises an authentication handler, an editing handler, an editing monitor, a source information recording handler, subscription source information retrieving handler and a server database.

Abstract: A method for detecting undesirable emails combines input from two or more spam classifiers to provide improved classification effectiveness and robustness. The method includes obtaining a score from each of a plurality of constituent spam classifiers by applying them to a given input email. The method further includes obtaining a combined spam score from a combined spam classifier that takes as input the plurality of constituent spam classifier scores, the combined spam classifier being computed automatically in accordance with a specified false-positive vs. false-negative tradeoff. The method further includes identifying the given input email as an undesirable email if the combined spam score indicates that the input e-mail is undesirable.

Abstract: A system, method, and computer readable medium, for automatically improving performance of, and optimizing, a program based on on-line profile data of the program and profile data (302) collected across multiple runs of the program and stored in a persistent off-line repository (114). The method includes executing a program in an execution environment. Profile data (302) is collected for the program across multiple runs thereof. The performance of the program is improved, such as by optimization of the program, based on on-line profile data of the executing program and the collected profile data in the persistent off-line repository.

Abstract: A method is provided for characterizing objects generated during an initial run of a program, each object being characterized by a number of alternative properties which can be chosen. The method includes steps of instrumenting an initial run of program to determine characterization information about each of objects, then determining a desirable property for each object, then determining a correlation between the desirable property and the characterization information for each of the objects. This correlation is then used to select a property for an object that is subsequently created during a run of the program based only upon characterization information about the subsequently created object.

Abstract: A method and system for detecting a source-related risk and generating an alert concerning the source-related risk are disclosed. Criteria of the source-related risk are defined. Thresholds associated with the source-related risk are defined. Every operation on an object is detected. If an operation on an object satisfies a criterion among the criteria or if the operation causes to exceed a threshold among the thresholds, an alert is generated for the operation.

Abstract: A method for detecting undesirable emails combines input from two or more spam classifiers to provide improved classification effectiveness and robustness. The method includes obtaining a score from each of a plurality of constituent spam classifiers by applying them to a given input email. The method further includes obtaining a combined spam score from a combined spam classifier that takes as input the plurality of constituent spam classifier scores, the combined spam classifier being computed automatically in accordance with a specified false-positive vs. false-negative tradeoff. The method further includes identifying the given input email as an undesirable email if the combined spam score indicates that the input e-mail is undesirable.

Abstract: Method and system for determining estimation variance associated with project planning are provided. In one aspect, information associated with a project is obtained and initial estimations for the tasks in the project are determined using available information. The tasks are performed and actual measurements are obtained from the completed tasks. The actual measurements are used to revise the estimates of the remaining tasks. The revised estimates are used to compute a project level estimate and a variance on that estimate, and to enable better project management.

Abstract: A method and system for dynamically providing a composite source information report whenever source information of a composite object is updated. The system includes a subscription handler for receiving a subscription request and generating a subscription query, a means for determining whether source information of an element in a composite object has been edited (added, deleted and/or modified), a source information determining handler for automatically determining source information of an element in a composite object and a composite source information report generation handler for generating a composite source information report and providing the report to users. The system further comprises an authentication handler, an editing handler, an editing monitor, a source information recording handler, subscription source information retrieving handler and a server database.

Abstract: A method for minimizing total cost of interaction among components of a computer program, each of the components being characterized by at least one implementation property includes steps of: a) carrying out at least a partial run of the program; b) monitoring the at least partial run of the program to measure an amount of interaction between each pair of components; c) determining a cost of interaction between each pair of interacting components; d) determining a choice of implementation properties which minimizes total cost of the at least partial run; and e) assigning that choice of implementation properties to the components for a subsequent at least partial run of the program.

Abstract: Libraries and individual program components are provided with a common interface and a number of alternative implementations (e.g. hash table, tree, compressed) which can be selected. The component is instrumented to measure a cost of each of its alternative implementations, both independent of and in the context of the interaction of that component with other components of the computer program. Based on measured cost, the desired implementation is chosen for the component by an external controller that is generic to the computer program or by an application program that interfaces with the library or component.

Abstract: A system and method for minimizing total cost of interaction among components of a computer program which are each characterized by at least one implementation property. A implementation property may, for example, be a choice of string representation (e.g. ASCII, UNICODE, EBCDIC or choice of data structure (e.g. hash, tree, compressed). The method comprises the steps of: carrying out a run of the program; monitoring that run to measure an amount of interaction between each pair of components; determining a cost of interaction between each pair of interacting components; determining a choice of implementation properties which minimizes total cost of the run; and assigning choices of implementation properties to said components for a future run of the program.