218 results about "Event manager" patented technology

A computer implemented method of profiling cyber threats detected in a target environment, comprising: receiving, from a Security Information and Event Manager (SIEM) monitoring the target environment, alerts triggered by a detected potential cyber threat, and, for each alert: retrieving captured packet data related to the alert; extracting data pertaining to a set of attributes from captured packet data triggering the alert; applying fuzzy logic to data pertaining to one or more of the attributes to determine values for one or more output variables indicative of a level of an aspect of risk attributable to the cyber threat.

One or more SLA-specified service-level monitors and / or one or more provider-owned service-level management monitors are used by the invention to monitor one or more quality measures of one or more QoS-assured service systems and to generate one or more service-level monitoring events when the monitored system does not conform to the respective quality measures. The invention includes a cross-SLA event manager that receives the monitoring events and determines which one or more SLA contracts are affected by the events. Then one or more SLA management objects (SMOs) track the SLA-specific events generated by the event manager according to each of the respective SLA contracts. The SMOs also determine how to allocate / deallocate / configure SLA management resources and / or to determine the effect of these changes on the service system operation to assure the contracted quality of service. A cross-SLA resource manager handles the SMOs' resource allocation requests and optimizes the allocation of available resources per the service provider's SLA management objectives. Finally, a SMO manager manages the execution of SMOs and facilitates the integration and management of service system testing-time and production-time activities.

A method and a system for the off site monitoring / diagnostics, command / control, alarm / event management, historical / trend analysis, and configuration / administration of building automation systems through an event manager for use in a facilities monitoring system having network-level and protocol-neutral communication with a physical device. The method includes managing a non internet protocol-based physical device, including coupling a device gateway with the physical device, wherein the device gateway is configured to expose the physical device as a networked device on a server. The method also includes receiving event information from the coupled physical device, wherein the event information includes an event and a device identifier; responsive to a determination that the event information includes an actionable event, processing the event, the device identifier, and the actionable event to determine a responsible process; and notifying the responsible process of the event.

An embodiment includes a computer system for detecting and monitoring network intrusion events from log data received from network service devices in a computer network. An embodiment may include an event parser in communication with multiple network service devices. The event parser may parse information to create corresponding event objects concerning intrusion events. The system may include an event manager in communication with the event parser. The event manager may be configured to evaluate the event objects according to at least one predetermined threshold condition. The system may include an event broadcaster in communication with the event manager for receiving event objects designated by the event manager for broadcast. The event broadcaster may be able to transmit the event objects in real time. The system may also include means for alerting the user that a network intrusion event has occurred.

An automation server interfaces with broadcast scheduling systems of various types to automatically synchronize the behavior of interactive applications relative to various broadcast programs, such as television shows and commercials, so as to maintain the appropriate interactive application for whatever broadcast program is airing. This allows for television shows which have an associated interactive application, but which are segmented by commercials (which may have their own interactive applications) to have their interactive application displayed while the television show in on, but not during commercials, while maintaining any state information that has been created during execution of the interactive application. The automation server includes multiple channel interfaces, each having a translator and an event manager. The translator translates native control signals from the scheduling system into a fixed set of atomic commands which represent the lifecycle behavior of a broadcast program. The event manager receives these atomic commands and uses them to determine the appropriate state for any interactive application that is associated with the broadcast program. The event manager transmits commands to a broadcast server which directly manages the interactive applications by transmitting code, data, and commands to broadcast receivers that controls the execution of the interactive applications in response to the event manager's commands.

The present invention generally relates to log message processing such that events can be detected and alarms can be generated. For example, log messages are generated by a variety of network platforms (e.g., Windows servers, Linux servers, UNIX servers, databases, workstations, etc.). Often, relatively large numbers of logs are generated from these platforms in different formats. A log manager described herein collects such log data using various protocols (e.g., Syslog, SNMP, SMTP, etc.) to determine events. That is, the log manager may communicate with the network platforms using appropriate protocols to collect log messages therefrom. The log manager may then determine events (e.g., unauthorized access, logins, etc.) from the log data and transfer the events to an event manager. The event manager may analyze the events and determine whether alarms should be generated therefrom.

A computer system for detecting and monitoring network intrusion events from log data received from network service devices in a computer network, the computer system having discrete modules associated with a function performed on the log data received, the computer system having an event parser in communication with at least one network service device, the event parser being able to receive log data in real time from the device, the log data including information detailing a network intrusion event received from the network service device if an intrusion has occurred, the event parser being able to parse the information to create a corresponding event object concerning the intrusion event. The compute system also includes an event manager in communication with the event parser, the event parser being able to receive the event object, the event manager being configured to evaluate the event object according to at least one predetermined threshold condition such that, when the event object satisfies the predetermined threshold condition, the event manager designates the event object to be broadcast in real time, and an event broadcaster in communication with the event manager for receiving event objects designated by the event manager for broadcast, the event broadcaster being able to transmit the event object in real time as an intrusion alarm. The computer system may use a graphical user interface in communication with the event broadcaster, the graphical user interface having a display screen for displaying an intrusion alarm and the information contained within the corresponding event object received from the event broadcaster. The graphical user interface may be configured to allow a user to initiate queries and communicates with a report servlet coupled to the graphical user interface, the report servlet recalling stored event objects in response to user queries from the graphical user interface and displaying recalled event objects on the graphical user interface display screen. An application reporter coupled to the report servlet receives and processes user queries and performs searches of stored event objects within a database accessible by the application reporter. The database is configured to recall event objects in response to searches executed by the application reporter.

An automation server interfaces with broadcast scheduling systems of various types to automatically synchronize the behavior of interactive applications relative to various broadcast programs, such as television shows and commercials, so as to maintain the appropriate interactive application for whatever broadcast program is airing. This allows for television shows which have an associated interactive application, but which are segmented by commercials (which may have their own interactive applications) to have their interactive application displayed while the television show in on, but not during commercials, while maintaining any state information that has been created during execution of the interactive application. The automation server includes multiple channel interfaces, each having a translator and an event manager. The translator translates native control signals from the scheduling system into a fixed set of atomic commands which represent the lifecycle behavior of a broadcast program. The event manager receives these atomic commands and uses them to determine the appropriate state for any interactive application that is associated with the broadcast program. The event manager transmits commands to a broadcast server which directly manages the interactive applications by transmitting code, data, and commands to broadcast receivers that controls the execution of the interactive applications in response to the event manager's commands.

A computer-implemented system for managing security event data collected from a computing network. The system employs an event managing software module that can reside on a computing network that is being monitored with security devices. The event managing software collects security event data from security devices located in the monitored computing network and can process the security event data. In processing the security event data, the event manager module can format the data and create manageable summaries of the data. The event manager also supports storage of the security event data and the results of any processing performed on the data. Security event data can be identified by the event manager for use in responding to a security event.

A request event manager for a network of consumer electronic devices. In one embodiment, the request event manager maintains a database of home network services, and allows the home network services to be scheduled for execution over time. Home network services herein refer to high-level abstractions of a consumer electronic device's functionalities, and also content that is available from the consumer electronic device. The request event manager of the present invention also creates and maintains a service request list (SRL) which details the service actions in a hierarchical fashion. By maintaining a database of home network services, the request event manager of the present invention allows user applications to specify and schedule concatenated or hierarchical events such that different network activity across interconnected heterogeneous consumer electronic devices can be synchronized without requiring complicated logic to be implemented. The request event manager of the present invention may be implemented as part of a middleware infrastructure for a home network, and may reside within a home server.

An advanced intelligence engine (AIE) for use in identifying what may be complex events or developments on one or more data platforms or networks from various types of structured or normalized data generated by one or more disparate data sources. The AIE may conduct one or more types of quantitative, correlative, behavioral and corroborative analyses to detect events from what may otherwise be considered unimportant or non-relevant information spanning one or more time periods. Events generated by the AIE may be passed to an event manager to determine whether further action is required such as reporting, remediation, and the like.

An incident response system and method for tracking data security incidents in enterprise networks is disclosed. An Incident Manager application (IM) stores incident objects and incident artifacts (IAs) created in response to the incidents, where the incident objects include the information for the incident and the IAs are associated with data resources (e.g. IP addresses and malware hashes) identified within the incident objects. In response to creation of the IAs, the IM issues queries against one or more external threat intelligence sources (TISs) to obtain information associated with the IAs and augments the IAs with the obtained information. In examples, the IM can identify known threats by comparing the contents of IAs against TIS(s) of known threats, and can identify potential trends by correlating the created incident objects and augmented IAs for an incident with incident objects and IAs stored for other incidents.

According to some embodiments, a wearable medical device capable of treating a patient presenting with syncope is provided. The wearable medical device includes a memory storing event profile information, a battery, at least one treatment electrode coupled to the battery, at least one processor coupled to the memory and the at least one treatment electrode, and an event manager executed by the at least one processor. The event manager is configured to detect an event associated with syncope; store, in the memory, data descriptive of the event in association with an indication that the data includes data descriptive of a syncopal event; and address the to event.

An advanced intelligence engine (AIE) for use in identifying what may be complex events or developments on one or more data platforms or networks from various types of structured or normalized data generated by one or more disparate data sources. The AIE may conduct one or more types of quantitative, correlative, behavioral and corroborative analyses to detect events from what may otherwise be considered unimportant or non-relevant information spanning one or more time periods. Events generated by the AIE may be passed to an event manager to determine whether further action is required such as reporting, remediation, and the like.

A monitoring system for monitoring agent telephonic interactions with customers and a method thereof is provided. The system may comprise a voice logger to receive and record audio of a telephone call received by the agent, a screen logger to receive and record video screen data associated with interactions of the agent with a computer during the telephone call and an event manager to determine whether the interactions meet at least one predefined monitoring condition.

A gateway has a stack with a bearer adaptation layer and an HTTP client. The gateway may be connected by an HTTP link to an origin server and by a bearer interface to a mobile network. It may also be connected by an HTTP link to a WTA server. A context manager is a user on the stack and supports interfaces to allow access to external entities in a versatile manner. An event manager captures events including billing events and writes to an event log and to a billing log. A management entity provides overall control and sets configurations for the event manager.

A system and method is provided for evaluating security threats to an enterprise network. The relative severities of security threats are determined, based in part, on the context of each threat within the enterprise network and in relation to the operation of a business. As a result, it is possible to prioritize security threats having the greatest magnitude and also threats that are directed against the most valuable business network devices. The invention comprises a plurality of network agents operating on a plurality of network devices for generating event messages. The event messages contain security data and are forwarded to an event manager for analysis. The event manager comprises an event correlator and an asset context manager. The event correlator detects security threats from the interrelationships between the security data contained in the event messages. In addition, the asset context manager utilizes business context knowledge specific to a particular business or business unit to determine a threat priority based on the importance of the threatened network device to the operation of the business.

A radio frequency identification (“RFID”) application system for use with an RFID system adapted to apply an RFID tag to a product and method of operating the same. In one embodiment, the RFID application system includes a printer applicator controller configured to manage an operation of a printer applicator of the RFID system. The RFID application system also includes a compliance manager configured to coordinate RFID compliance data to derive a unique identification number for the RFID tag. The RFID application system still further includes an event manager configured to coordinate an operation of the printer applicator controller to facilitate proper placement of the RFID tag on the product.

The present method relates to the automated indexing of event images for distribution. The automated indexing can use automated facial recognition to determine which people are in each image. The images indexed in this fashion can be presented in a gallery, ordered by characteristics of the people in the images such as their name or room number, so as to facilitate the selection of the images by the people. The identification of the people in the images can be assisted by security or other information regarding the people that may be available to the event manager. Furthermore, the closeness of the relationships of two people can be inferred from the degree to which the people are in the same images, allowing the people in the images to be placed into groups, which can be hierarchical and / or overlapping, and which can assist in the organization of images being presented to the people, either in a gallery or electronic display format.

The present invention is a system for and method of providing a flexible means of using and storing file configuration metadata in a RAID network, so that the memory system does not restrict the metadata to exact format or location in memory. A RAID controller includes software applications, an operating system, and RAID controller hardware. The software applications of the RAID controller include a graphical user interface, a common information module object manager, a software application layer, a logic library layer, a system manager, a software watchdog, a persistent data manager, an event manager, and a battery backup. The operating system includes a kernel and a file system. The method of the present invention includes the steps of powering up the memory device, determining whether the memory device is new and, optionally, building a file system and, optionally, determining appropriate configuration, communicating configuration data to the RAID controller, operating normally, determining whether a configuration update is needed and, optionally, updating the configuration file of the memory device, and determining whether to shut down the RAID controller.

The present invention relates to a method and system for monitoring and evaluating multimedia telephonic and computer-communication interactions. The multimedia quality monitoring system may include an event manager, which may receive a notification associated with a communication between an agent and a customer and recording servers, which record data associated with the communication.

A system, method and related software architecture are disclosed as a platform for developing and deploying RFID-enabled software applications. The platform is a framework between these applications and their connected physical RFID devices. The runtime version of this platform can be thought of as a logical RFID device. The platform allows RFID-enabled applications securely communicate with physical RFID devices to monitor their status and to access their tag data. The platform includes externalized APIs for accessing tag data, an event manager to alert applications of events coming from RFID devices and tags, data manager to filter and reconcile data returned from physical RFID readers before relaying them to applications, device manager to monitor the RFID device status for network management, and secured communication channels with data encryption. The deployed RFID-enabled applications can recognize user identification via the RFID tags then access data of selected RFID tags within a secured infrastructure.

The invention relates to an inter-core communication and scheduling system and an inter-core communication and scheduling method based on a heterogeneous multi-core processor, which relate to the computer field. The inter-core task communication and scheduling system applied to the heterogeneous multi-core processor is designed by adoption of the symmetrical communication and scheduling method according to the characteristics of the heterogeneous multi-core processor; various inter-core communication messages and events are defined in the unified way through an inter-core event manager, and relationships among the inter-core messages, the inter-core events and inter-core tasks are established; and inter-core message data from a communication interface and a shared memory is processed, the events are set, task scheduling is triggered, and other operations are performed by an inter-core communication scheduler. The inter-core communication and scheduling system and the inter-core communication and scheduling method solve the problems of the communication efficiency for inter-core communication of different types of messages and task scheduling of the heterogeneous multi-core processor in the aspects of communication and scheduling, and solve the problem of complexity caused by the master-slave scheduling method.

A computer includes, among other things, local modules contained within a module container of a same application; a message producer unit to communicate with a data server over the i / o interface; a message consumer unit configured to communicate with the data server over the i / o interface; and a local event manager unit. There is a pre-defined sequence of processing events between the local event manager unit, the local modules within the same application of the same module container, remote modules, the message producer unit, and the message consumer unit.

In one embodiment, the present invention includes a method for receiving at a transceiver from a baseband processor digital control information that includes both event and schedule information, storing the digital control information in a storage of the transceiver, and operating the transceiver according to the event and schedule information.

The invention provides a distributed event notification mechanism that allows distributed applications to communicate with each other by generating events and receiving events through a distributed event notification service. An event manager coordinates activities between respective applications to ensure distribution regardless of the physical location of network elements. A naming service provides details of application location and configuration.

A system and method for confirming that emergency resources are available to be used at a particular location, communicating to the incident manager at that location and estimated time of arrival of the resource, and tracking the resource during transit to the location for updating the estimated time of arrival.

Collaborative social event planning and execution is disclosed. The embodiments herein relate to event planning and, more particularly, to collaborative event planning. In existing event planning schemes do not satisfy the requirements of users as there are no means to personalize the planning to suite the requirements of the user. They have a predefined template for each event and anything other than the template cannot be implemented. The collaborative social event planning mechanism provides a mechanism wherein users may plan any kind of event as per his choice. The method allows flexible planning environment to create event plans, create templates to suit user's requirement and also share it with others. The content and templates are community generated. Also, allows for multi-device mobile access. There is dynamic collaboration among event managers and collaborator teams. In addition, the method provides a unique monetization model and facilitates sponsors, advertisers to display their content.

An automation server interfaces with broadcast scheduling systems of various types to automatically synchronize the behavior of interactive applications relative to various broadcast programs, such as television shows and commercials, so as to maintain the appropriate interactive application for whatever broadcast program is airing. This allows for television shows which have an associated interactive application, but which are segmented by commercials (which may have their own interactive applications) to have their interactive application displayed while the television show in on, but not during commercials, while maintaining any state information that has been created during execution of the interactive application. The automation server includes multiple channel interfaces, each having a translator and an event manager. The translator translates native control signals from the scheduling system into a fixed set of atomic commands which represent the lifecycle behavior of a broadcast program. The event manager receives these atomic commands and uses them to determine the appropriate state for any interactive application that is associated with the broadcast program. The event manager transmits commands to a broadcast server which directly manages the interactive applications by transmitting code, data, and commands to broadcast receivers that controls the execution of the interactive applications in response to the event manager's commands.