Abstract: A method, system and apparatus for assembling and publishing frequent malware signature definition updates through the use of additive or “streaming” definition packages is provided. Embodiments of the present invention provide such functionality by publishing not only full malware signature definition updates on a long periodicity but also streaming malware signature definition updates containing newly certified signature definitions on a short periodicity. As newly-certified malware signature definitions are received, those newly-certified signature definitions are incorporated not only in the full signature definition file but also in a streaming signature definition update that contains only newly-certified signature definitions received during a streaming update period. At the end of the streaming update period, a streaming signature definition file is made available by publication to anti-malware clients.

Abstract: A method and apparatus comprising a replication appliance that is coupled to a backup media server. The media server communicates with the replication appliance via either an in-band communication or an out-of-band communication that informs the replication appliance of the completion of a backup within backup software. Upon receiving the notification of the event, the replication appliance will replicate the change data forming a replicated image of that data for storage either locally or remotely from the replication appliance. This replicated image may be used for archival purposes.

Abstract: A method and apparatus for recovering a volume to a first recovery point using bitmap information is described. In one embodiment, the method comprises processing bitmap information associated with at least one recovery point, wherein the bitmap information comprises at least one bitmap that represents at least one changed block since a first recovery point of the at least one recovery point, wherein the first recovery point is associated with a backup image and restoring the at least one changed block from the backup image to a volume.

Abstract: A method, system, computer system and computer program product to enable a single interface to be used to prepare and present messages in a variety of different formats. For example, the single interface can be used to prepare, receive or display messages in different languages, such as English or Japanese, which require different character sets. Furthermore, the single interface supports preparing, sending, and receiving messages in multiple text formats, such as plain text, rich text, and Multiple Internet Mail Extension (MIME) format. A message can be received in a native format, and a format for providing a response to the message can be dynamically selected. The response is provided in the dynamically-selected format.

Abstract: A method and apparatus for achieving high availability in a computer cluster is provided. In one embodiment, a method for failing over a software application to a virtual machine from a physical computing environment comprises processing at least one virtual machine file at a backup computer, wherein the at least one virtual machine file is preconfigured with a software application that is hosted by a computer cluster and in response to an occurrence a fault at the computer cluster, accessing the at least one virtual machine file to operate the software application.

Abstract: Improved efficiencies of data mining clustering techniques are provided by preprocessing a sample set of data points taken from a complete data set to provide seeds for centroid calculations of the complete data set. Such seeds are generated by selecting a uniform sample set of data points from a set of multi-dimensional data and then seed values for the cluster determination calculation are determined using a centroid analysis on the sample set of data points. The number of seeds calculated corresponds to a number of data clusters expected in the set of multi-dimensional data points. Seed values are determined using subsample elimination techniques.

Abstract: A method and apparatus of uniquely tagging a computer system that is provisioned using a provisioning server. The unique tag is hidden within the computer system by exploiting select characteristics of the computer system to ensure that the tag is both hidden and semi-immutable. The tag may be embedded by manipulating such characteristics as the INODE differentials, the disk sector differentials, or the directory order. The tag may encode the unique identifier for the provisioned computer, as well as other information about the provisioning server, such as serial number, version number of the software, or any other information that is pertinent to identifying or monitoring the use of the software.

Abstract: The method and system of the present invention include recording a first transition by an agent interface between a first session and a second session of a plurality of sessions in a communication utility. The first transition is recorded in a transition record. Responsive to receipt of a request to initiate a third session by the communication utility, a transition frequency is determined using the transition record. Whether to accept the request to initiate the third session is determined using the transition frequency, and the request to initiate the third session is accepted.

Abstract: Method and apparatus for simultaneous comparison of multiple backup sets maintained in a computer system are described. A plurality of backup sets of data maintained in a computer system including a hierarchy of objects is managed. In some examples, a graphical user interface (GUI) is displayed on a display coupled to the computer, the GUI having views configured show a first group of backup sets from the plurality of backup sets. Individual objects of a selected backup set in the first group of backup sets are pinned in a pinned view of the views in response to a first command. A second group of backup sets from the plurality of backup sets is shown in the views in response to a second command by sliding individual objects of at least one backup set in the plurality of backup sets across at least one unpinned view of the views with respect to the individual objects of the selected backup set in the pinned view.

Abstract: A method and system for fast link failover is disclosed. According to one embodiment, a method is provided in which a failure of a first link between a network element and an upstream portion of a communications network is detected, and a second link or group of links between the network element and a downstream portion of the communications network is responsively disabled to maintain a communications channel between the downstream and upstream portions of the communications network.

Abstract: A method and apparatus for scheduling a backup operation for a computer is described. The method includes searching a database for at least one record possessing an absence indicia. The method further includes scheduling an operation to be performed during a time period associated with the at least one record.

Abstract: A method and system for improving performance with single-instance-storage volumes by leveraging data locality is provided. A client provides a set of fingerprints generated from data segments to be saved to a single-instance storage volume and receives the information on whether a data segment exists on the single-instance storage volume and where it is stored if a data segment exists. Based on its received information, the client determines if a number of non-sequential accesses of a computer-readable medium for the set of segments from the single-instance-storage volume exceeds a predetermined threshold. If so, the client provides the whole set of data segments for storage within the single-instance storage volume regardless of whether or not the data segments are duplicate data segments. These sent data segments will be stored contiguously within the single-instance storage volume while the duplicates will be removed from their previous stored locations.

Abstract: A method of creating backup files having less redundancy. The method creates a backup file by creating an overhead segment for each file that is to be backed up and creating a data segment containing the data that is to be backed up for each file. After creating the overhead segment and the data segment, the overhead segment is placed into an overhead stream data segment is stored in memory. The overhead segment is also positioned in the overhead stream with a pointer that identifies the data segment within the memory. For backups of subsequent servers or the same server at a later time, the backup software will create a separate overhead stream. However, a plurality of overhead streams may contain pointers to the same data segments such that redundant data segments do not need to be stored in a backup server.

Abstract: Stored product management information in a first format for use by a first computerized system is transformed to readily make the stored product management information available for use in a second computerized system that utilizes a second format in a cost-efficient and time-efficient manner.

Abstract: Various methods and systems for performing data deduplication when encrypting data for storage on an untrusted storage system are disclosed. One method involves generating an encryption key for use in encrypting data and generating an identifier for the data. Generation of the encryption key is based upon a hash of the data to be encrypted. Similarly, generation of the identifier is based upon the hash of the data to be generated. For example, the identifier can be generated by hashing the encryption key. The method then involves detecting whether an encrypted copy of the data is already stored by a storage system, based upon the identifier, and selectively encrypting the data, based upon whether the encrypted copy of the data is already stored by the storage system.

Abstract: A method and apparatus for providing a catalog to optimize stream-based restoration is described. In one embodiment, a method for providing a catalog to optimize stream-based restoration includes processing a catalog that indicates at least one location of at least one data block on backup media, wherein the at least one data block are associated with at least one backup for at least one object and accessing at least one data block using the catalog to create a data stream for restoring the at least one object.

Abstract: Enhanced functionality is provided in memory devices by enhancing the control logic to recognize predetermined data sequences. Standard (legacy) device operations are used to communicate the predetermined data sequences, thereby allowing existing device drivers to be used with the enhanced devices.

Abstract: A method and apparatus for resolving volumes identifiers and drive letters associated with a virtual machine is described. In one embodiment, the method comprises correlating system registry information with at least one virtual drive configuration associated with a virtual machine image to produce a correlation result and mapping a volume identifier to at least one virtual drive based on the correlation result.

Abstract: A method for providing access to data via a voice interface. In one embodiment, the system includes a voice recognition unit and a speech processing server that work together to enable users to interact with the system using voice commands guided by navigation context sensitive voice prompts, and provide user-requested data in a verbalized format back to the users. Digitized voice waveform data are processed to determine the voice commands of the user. The system also uses a “grammar” that enables users to retrieve data using intuitive natural language speech queries. In response to such a query, a corresponding data query is generated by the system to retrieve one or more data sets corresponding to the query. The user is then enabled to browse the data that are returned through voice command navigation, wherein the system “reads” the data back to the user using text-to-speech (TTS) conversion and system prompts.

Abstract: Various systems and methods for monitoring an application or service group within one cluster as a resource of another cluster are disclosed. In one embodiment, a method involves detecting an error indication generated by a first cluster (e.g., the error indication can be generated by a cluster controller or service group within the first cluster). The first cluster is implemented on a cluster resource (e.g., a virtual machine) of a second cluster. In response to detecting the error indication, restart of the cluster resource is initiated.