Abstract: In particular embodiments, a system for managing a virtualization environment includes host machines, each of the host machines including a hypervisor, user virtual machines (UVMs) and a virtual machine controller. The virtualization environment also includes virtual disks comprising a plurality of storage devices, and being accessible by the virtual machine controllers. The virtual machine controllers conduct I/O transactions with the virtual disks. The system stores an entity-relationship graph representing elements in the virtualization environment. Each of the elements is represented by an entity-type node in the entity-relationship graph, and relationships between the elements are represented by edges between the nodes.

Abstract: One embodiment relates to an apparatus for creating and managing security policies for data leakage prevention. The apparatus includes a database which stores three layers of objects comprising digital assets, content templates, and security policies, and a user interface configured to access said database so as to provide for input and editing of said three layers of objects. The security policies may include at least a target element, an action element, and a condition element. A content template may be used to form the condition element. Content templates may include compliance templates which are configured to satisfy specific regulatory requirements and other templates to protect specified types of information. Other embodiments, aspects and features are also disclosed.

Abstract: One embodiment relates to an apparatus configured to match a list of keywords against a target document. The apparatus includes data storage configured to store computer-readable instruction code and data, and a processor configured to access the data storage and to execute said computer-readable instruction code. The apparatus further includes a keyword searcher and a keyword object generator. The keyword searcher is configured to receive the list of keywords and a textual string corresponding to the target document file, and search the textual string for instances of the keywords so as to generate a sequence of keyword instances. The keyword object generator implemented using the instruction code and configured to receive the sequence of keyword instances, and generate a keyword object, wherein the keyword object includes a range-dependent match function. Other embodiments and features are also disclosed.

Abstract: A document signature index and search system is disclosed. The logical structure of the signature index that includes search tables is defined. Also specified is a system of creating, managing and using the signature index. The system includes an index engine and search engine. The search tables are compact in disk usage and suitable for differential computation, making large scale deployment feasible. With the introduction of meta-data and an algorithm of multiple value dual binary searching, the search engine based on the search tables is very efficient in searching for signatures from large search tables which may store millions of signatures. Other embodiments, aspects and features are also disclosed.

Abstract: An automated method of matching an input document to a set of documents from a document repository. A signature database is stored, the signature database including a document identifier and signatures generated by a first signature generator for each of the set of documents. The input document is received and signatures are generated for the input document using a second signature generator, and the signature database is searched using the signatures generated for the input document. The first and second signature generators are configured such that different numbers of signatures are generated for a same document. Other embodiments, aspects and features are also disclosed.

Abstract: An automated method of matching an input document to a set of documents from a document repository. A signature database is stored, the signature database including a document identifier and signatures generated by a first signature generator for each of the set of documents. The input document is received and signatures are generated for the input document using a second signature generator, and the signature database is searched using the signatures generated for the input document. The first and second signature generators are configured such that different numbers of signatures are generated for a same document. Other embodiments, aspects and features are also disclosed.