| 发明名称 | Security-aware admission control of requests in a distributed system | ||
| 摘要 | Techniques for security-aware admission control of requests in a distributed system. A method includes identifying a request dropped by a first application component in a distributed system, determining one or more actions to take with respect to the dropped request, said determining comprises identifying one or more policies of the first application component responsible for the dropped request and identifying one or more additional application components in the distributed system to be affected based on the identified one or more policies, and executing said one or more actions to control admission of one or more requests associated with the dropped request at the one or more additional application components. | ||
| 申请公布号 | US9231970(B2) | 申请公布日期 | 2016.01.05 |
| 申请号 | US201313790040 | 申请日期 | 2013.03.08 |
| 申请人 | International Business Machines Corporation | 发明人 | Kundu Ashish;Mohindra Ajay;Sahu Sambit |
| 分类号 | G06F21/55;H04L29/06;G06F21/62;G06F21/60 | 主分类号 | G06F21/55 |
| 代理机构 | Ryan, Mason & Lewis, LLP | 代理人 | Ryan, Mason & Lewis, LLP |
| 主权项 | 1. A method comprising: identifying a request dropped by a first application component in a distributed system; determining one or more actions to take with respect to the dropped request, said determining comprises: identifying one or more policies of the first application component responsible for the dropped request; andidentifying one or more additional application components in the distributed system to be affected based on the identified one or more policies; executing, at each of the one or more additional application components, a distinct one of said one or more actions to temporarily preclude admission of all requests of a given type associated with the dropped request at each of the one or more additional application components subsequent to a predetermined number of multiple instances of the request dropped by the first application; enacting a change to the identified one or more policies of the first application component, wherein the change renders the request dropped by the first application component allowable by the first application component; and transmitting a notification to the one or more additional application components to allow admission of one or more requests associated with the dropped request; wherein at least one of the steps is carried out by a computer device. | ||
| 地址 | Armonk NY US | ||