Abstract: A method, apparatus and computer program product for selectively storing network traffic data are described. Network traffic is stored according to a first packet filtering policy in a first repository. The stored network traffic is scanned in the first repository according to a second packet filtering policy to identify a subset of network traffic for archiving. The identified subset of network traffic identified by the second packet filtering policy are forensically interesting packets concerning a security issue. The identified subset of network traffic from the first repository is then stored in a second repository.

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

Abstract: Systems, methods and articles of manufacture allow adjusting the relative weighting associated with evaluation criteria associated with a unified view of dissimilar data. The operation generally includes collecting data regarding attributes of a user interacting with an application, where the collected data has associated evaluation criteria. The data is collectively represented according to the evaluation criteria. The systems, methods and articles of manufacture then allow dynamically modifying the evaluation criteria before evaluating and collectively representing the data according to the adjusted criteria.

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

Abstract: A method, apparatus and computer program product for selectively storing network traffic data are described. Network traffic is stored according to a first packet filtering policy in a first repository. The stored network traffic is scanned in the first repository according to a second packet filtering policy to identify a subset of network traffic for archiving. The identified subset of network traffic identified by the second packet filtering policy are forensically interesting packets concerning a security issue. The identified subset of network traffic from the first repository is then stored in a second repository.

Abstract: Business processes are implemented using a collection component for storing system knowledge comprising usage history and user input relative to activities within community of users, where the system knowledge comprises at least a folksonomy. At least one of a user client component interacts with the data collection component to enable a corresponding user to contribute user-derived information to the folksonomy and a monitoring component monitors activities associated with the community of users and interacts with the data collection component to contribute usage information to the system knowledge. Still further, a composition design application interacts with a user to build and/or modify processes built using services, wherein the composition design application recommends candidate services that can implement aspects of the business processes based upon information derived from the system knowledge.

Abstract: Systems, methods and articles of manufacture allow adjusting the relative weighting associated with evaluation criteria associated with a unified view of dissimilar data. The operation generally includes collecting data regarding attributes of a user interacting with an application, where the collected data has associated evaluation criteria. The data is collectively represented according to the evaluation criteria. The systems, methods and articles of manufacture then allow dynamically modifying the evaluation criteria before evaluating and collectively representing the data according to the adjusted criteria.

Abstract: Bandwidth allocation management includes determining current available bandwidth of a network within which a computer system is operating. The bandwidth allocation management also includes using the current available bandwidth and applied feature delivery settings to determine an adjustment in feature delivery to the computer system. At least a portion of the feature delivery settings is specified by an end user of the computer system.

Abstract: Systems, methods and articles of manufacture allow adjusting the relative weighting associated with evaluation criteria associated with a unified view of dissimilar data. The operation generally includes collecting data regarding attributes of a user interacting with an application, where the collected data has associated evaluation criteria. The data is collectively represented according to the evaluation criteria. The systems, methods and articles of manufacture then allow dynamically modifying the evaluation criteria before evaluating and collectively representing the data according to the adjusted criteria.

Abstract: A method, a system and a computer program product for selecting a further inquiry for a user to clarify a request for information from the user. One or more candidate answers to the request for information from the user are determined, and a score value is generated for each of one or more characteristics of each candidate answer, where at least one characteristic is associated with an inquiry for the user to clarify the request for information. A characteristic associated with an inquiry is determined that includes score values providing the greatest potential adjustment for the candidate answers in response to a clarification of the request for information, and the inquiry is selected that is associated with the determined characteristic for presentation to the user.

Abstract: Business processes are implemented using a collection component for storing system knowledge comprising usage history and user input relative to activities within community of users, where the system knowledge comprises at least a folksonomy. At least one of a user client component interacts with the data collection component to enable a corresponding user to contribute user-derived information to the folksonomy and a monitoring component monitors activities associated with the community of users and interacts with the data collection component to contribute usage information to the system knowledge. Still further, a composition design application interacts with a user to build and/or modify processes built using services, wherein the composition design application recommends candidate services that can implement aspects of the business processes based upon information derived from the system knowledge.

Abstract: A memory management system is implemented at an application server. The management system includes a configuration file including configuration settings for the application server and applications. The configuration settings include multiple memory management rules. The management system also includes a memory management framework configured to manage settings of resources allocated to the applications based on the memory management rules. The applications requests for the resources through one or more independently operable request threads. The management system also includes multiple application programming interfaces (APIs) configured to facilitate communication between the applications and the memory management framework. The management system further includes a monitoring engine configured to monitor an execution of the request threads and perform actions based upon the configuration settings.

Abstract: Business processes are implemented using a collection component for storing system knowledge comprising usage history and user input relative to activities within community of users, where the system knowledge comprises at least a folksonomy. At least one of a user client component interacts with the data collection component to enable a corresponding user to contribute user-derived information to the folksonomy and a monitoring component monitors activities associated with the community of users and interacts with the data collection component to contribute usage information to the system knowledge. Still further, a composition design application interacts with a user to build and/or modify processes built using services, wherein the composition design application recommends candidate services that can implement aspects of the business processes based upon information derived from the system knowledge.

Abstract: A method and system for enhancing problem resolution at a call center based on speech recognition of a caller includes, receiving an incoming call and generating call data based on speech recognition of the incoming call using a computer. The method generates and associates annotated metadata about the call data. A historical record is created which includes the call data and the annotated metadata. The historical record may be stored in a storage medium communicating with the computer. Context data is generated for the incoming call by analyzing the historical record to identify: a caller, a topic, a date and a stress level of the caller. The method compares the context data to historical records of previous calls. A topic probabilities analysis is conducted by comparing the context data to the historical records of previous calls, and a solution is determined for the topic based on the probabilities analysis.

Abstract: Information about security events detected by a group of protected web-connected resources is centrally managed in order to detect distributed attacks and slow paced attacks by providing to a plurality of web-connected resources a deployment component which couples to a native authorization service of each web-connected resource; receiving a plurality of security event reports from one or more of the deployment components by a command and control center computer; based on collected information from the plurality of security event reports, determining a threat level indicator across the plurality of web-connected resources using one or more analyses and metrics; and transmitting the threat level indicator to each of the web-connected resources.

Abstract: Determining and storing at least one validated results set in a global ontology database for future use by an entity that subscribes to the global ontology database. If global ontology data is stored in a global ontology database, attempt to determine a mapping between first and second ontologies. If a mapping between the first and second ontologies can be determined from the global ontology data, the mapping is validated and the validated mapping is defined as a validated results set. If global ontology data is not stored in a global ontology database or a mapping between the first and second ontologies can not be determined from global ontology data stored in the global ontology database, the first and second ontologies are unified by determining a mapping between the first and second ontologies, the mapping is validated and the validated mapping is defined as a validated results set.

Abstract: A digital asset is identified, and a copy of the digital asset to store in a repository. Program code tokenizes plaintext into a grammar, wherein the plaintext is associated with the digital asset. If the digital asset is an image the program code is instructed to identify colors and shapes within the image, and also relationships between the image and other digital assets stored in the repository. Contextual information corresponding to the digital asset is generated by utilizing the plaintext that is tokenized into the grammar, wherein the contextual information includes parameter values representing the colors, shapes, and relationships identified. The repository is queried to retrieve one or more copies of other digital assets having contextual information that matches with the contextual information corresponding to the digital asset that is identified. The computer annotates the copy of the digital asset within the repository to form searchable metadata.

Abstract: A memory management system is implemented at an application server. The management system includes a configuration file including configuration settings for the application server and applications. The configuration settings include multiple memory management rules. The management system also includes a memory management framework configured to manage settings of resources allocated to the applications based on the memory management rules. The applications requests for the resources through one or more independently operable request threads. The management system also includes multiple application programming interfaces (APIs) configured to facilitate communication between the applications and the memory management framework. The management system further includes a monitoring engine configured to monitor an execution of the request threads and perform actions based upon the configuration settings.