Abstract: Various systems, methods and apparatuses for coordinating the sharing of cache data between cluster nodes operating on the same data objects. One embodiment involves a first node in a cluster receiving a request for a data object, querying a global lock manager to determine if a second node in the cluster is the lock owner of the data object, receiving an indication identifying the second node as the lock owner and indicating that the data object is available in the second node's local cache, requesting the data object from the second node, and then receiving the data object from the second node's local cache. Other embodiments include determining whether the lock is a shared lock or an exclusive lock, and either pulling the data object from the local node of the second cache or receiving the data object that is pushed from the second node, as appropriate.

Abstract: Various systems and methods use advisory metadata to track the status of file system objects. For example, one method can involve accessing a first item of advisory metadata, which is associated with a namespace-visible parent directory and identifies a first transaction and a first time, and accessing a second item of advisory metadata, which is also associated with the namespace-visible parent directory and identifies a second transaction and a second time. The namespace visible parent directory includes multiple namespace-hidden directories. The method can then select a time value of the advisory metadata for the namespace-visible parent directory, based upon the first item and the second item. The method can be performed by a computing device implementing a file system.

Abstract: Techniques for data access statistics management are disclosed. In one particular embodiment, the techniques may be realized as a method for data access statistics management comprising determining that a portion of data has been deduplicated, and modifying access statistics of the portion of data for each reference to the portion of data.

Abstract: A computer-implemented method for mitigating write-back caching failures may include (1) detecting a failure that impairs at least one write-back cache that temporarily caches updates for individual files stored on a storage device, (2) identifying an attribute of an individual file stored on the storage device in response to the failure that impairs the write-back cache, (3) determining that at least a portion of the individual file is obsolete based at least in part on the attribute of the individual file, and then (4) performing at least one mitigating action with respect to the individual file to address the obsolete portion of the individual file. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Caching metadata that identify hot blocks at a per local cache level are tracked. Tracked caching metadata are maintained so as to be persistent and shared across nodes of the cluster. Local caches are pre-warmed by using maintained caching metadata, responsive to detecting specific node level events. Such events can result in hot blocks being absent from a local cache, such as a failover between nodes or an unexpected failure local to a specific node. Another event example is the access of shared storage content, such as opening a file or mounting a file system by a specific node, in response to which the associated local cache can be pre-warmed using the tracked caching metadata for the specific file, or for each file of the file system. To pre-warm a local cache, hot blocks of stored content identified by corresponding caching metadata are loaded into the local cache.

Abstract: A computer-implemented method for enabling write-back-cache aware snapshot creation may include (1) identifying a cache that implements write-back caching to selectively store at least one write to a backing store, (2) receiving, while the write is stored within the cache, a request to create a snapshot of the backing store, and (3) creating, in response to the request, the snapshot of the backing store by (a) determining that the write is stored within the cache and (b) tracking, in response to the determination, the write stored within the cache to ensure that the write is included in the snapshot of the backing store. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A system and method is disclosed for optimizing supply chain planning problems associated with a supply chain network. The system includes a supply chain planner coupled with one or more supply chain entities. The supply chain planner determines a supply chain plan for managing the flow of one or more items through the supply chain network.

Abstract: A computing device receives data access records and determines a user data access behavior pattern for a user based on the data access records. The computing device receives new data access records and identifies any deviation from the user data access behavior pattern based on the new data access records. Upon identifying deviation from the user data access behavior pattern, the computing device generates an alert indicating that the user has deviated from the user data access behavior pattern.

Abstract: Techniques for evicting cached files may be realized as a method including: maintaining a file system cache storing selected files from a file storage; for files that are above a threshold size, selectively storing chunks of the files; for each file that is stored, associating an access bit and a size bit with that file; for each file that is stored selectively as file chunks, associating an access bitmap to the file having an access bit associated with each file chunk; when a file is accessed, setting the access bit associated with the file and file chunk to indicate recent access; at set intervals, periodically clearing the access bits to not indicate recent access; and carrying out a cache eviction process comprising evicting at least one file or file chunk associated with an access bit that does not indicate recent access.

Abstract: A system and method is disclosed for optimizing supply chain planning problems associated with a supply chain network. The system includes a supply chain planner coupled with one or more supply chain entities. The supply chain planner determines a supply chain plan for managing the flow of one or more items through the supply chain network.

Abstract: A region of memory is logically divided into a number of segments, each of which is logically divided into a number of blocks. Blocks are allocated sequentially. A head pointer and a tail pointer demarcate the section of allocated blocks. As allocated blocks are added, the tail pointer is moved so that it remains at the end of the section of allocated blocks. If the tail pointer is within a threshold distance of the head pointer, then the head pointer is moved from its current position to a new position, and the allocated blocks between the current and new positions are freed (deallocated and/or erased). Thus, writes to the memory can be performed sequentially, and blocks can be freed in advance of when they are actually needed.

Abstract: Data loss prevention systems and methods begin protecting data upon the creation of the data. One such method involves detecting a file system operation targeting data on a storage device. The file system operation creates or modifies the data or a set of permissions associated with the data. In response to detecting the file system operation, the method prevents unauthorized access to the data. The method begins preventing unauthorized access after the detection of the file system operation and before any subsequent read access to the data via the file system.

Abstract: Various systems and methods for placing a virtual machine on one of a plurality of candidate physical machines. For example, one method can involve generating a list that comprises entries for a virtual machine. Each entry in the list indicates a portion of data that is associated with the virtual machine. The method then involves calculating a number of common entries between the list and each of a plurality of candidate lists, where a common entry is an entry that is included in the respective candidate list and in the list. Each candidate list is associated with a computing device. In response to detecting which candidate list has the most common entries, the method involves assigning the virtual machine to the computing device associated with that candidate list.

Abstract: A computing device receives a file. The computing device determines whether the file has previously been scanned for violations of a data loss prevention policy. If the file was previously scanned, a result of the previous scan is used to decide whether or not the file violates the data loss prevention policy. If the file was not previously scanned, the file is scanned to decide whether or not the file violates the data loss prevention policy.

Abstract: A computer-implemented method for providing caching for applications with solid-state storage devices may include (1) identifying a plurality of solid-state drives that are available for caching input/output operations, (2) detecting at least one distinguishing hardware property of at least one solid-state drive within the plurality of solid-state drives, (3) determining at least one attribute of an application, and (4) selecting the solid-state drive for caching at least one input/output operation of the application based at least in part on the attribute of the application in combination with the distinguishing hardware property of the solid-state drive. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method and apparatus for detecting malicious software activity, using at least one processor, based on an Internet resource information database in memory is described. In one embodiment, a method for detecting malicious software activity, using at least one processor, based on an Internet resource information database in memory includes processing Internet activity to determine source and time information associated with at least one application download, comparing the Internet resource information database with the source and time information associated with the at least one application download to identify at least one suspicious application, and monitoring execution of the at least one suspicious application.

Abstract: A method of partitioning directory. Accesses, e.g., shared/exclusive, and/or waiting requests, e.g., shared/exclusive, to access one or more files with a directory are monitored, e.g., incrementing/decrementing respective counters. The waiting requests are queued to be granted at a later time. The directory is determined to be primed for partitioning if a number of waiting requests to access the directory is greater than a threshold value of a plurality of heuristics and optionally further based on satisfying the condition for at least a programmable time threshold period. A trigger signal is automatically generated if the directory is primed for partitioning. The trigger signal causes a file system to partition the directory. It is appreciated that the plurality of heuristics is user programmable.

Abstract: Various systems and methods for performing write-back caching in a cluster. For example, one method can involve a first node detecting that no failover nodes are available. A determination is made whether the first node should use write-back caching or not. If the first node is to continue using write-back caching, a first local cache identifier and a global cache identifier are both updated.

Abstract: A method of reading data from a partitioned directory incident to a serialized process. A first read and an offset value are received. A first data block in a modeled fully partitioned directory is identified based on the offset value and a predetermined number of entries associated with a buffer. It is determined whether the first data block in the fully partitioned directory is present in the actual partitioned directory. Zeros are written in the buffer if the first data block in the fully partitioned directory is not present in the actual partitioned directory otherwise the first data block associated with the actual partitioned directory is written to the buffer. A second data block is similarly read by a second read operation and written. The second data block is associated with a second subdirectory, selected based on a horizontal node traversal at a node level of said first subdirectory.

Abstract: A computer-implemented method for reclaiming storage space from virtual machine disk images may include (1) identifying a virtual machine that uses a virtual machine disk image as a virtual disk for storage, the virtual machine disk image being stored on a thin-provisioned volume within a host file system, (2) determining that a portion of the virtual machine disk image represents a portion of the virtual disk that is unused by a file system of the virtual machine, (3) based on determining that the portion of the virtual machine disk image represents the portion of the virtual disk that is unused by the file system of the virtual machine, marking the portion of the virtual machine disk image for reclamation from the thin-provisioned volume, and (4) reclaiming the marked portion of the virtual machine disk image from the thin-provisioned volume. Various other methods, systems, and computer-readable media are also disclosed.