Abstract: A method for managing application migration includes: inferring dependencies and connectivity among applications executing on a system; generating a target infrastructure node (IN) configuration template based on the inferred dependencies and connectivity; making a determination that a configuration of a target IN does not satisfy the template, in which an application is executing on an IN, in which the application is not executing on the target IN; in response to the determination: obtaining a weight for each inferred parameter in the template, in which the inferred parameters comprises the inferred dependencies and connectivity, in which the weight for each inferred parameter is configured by a user; executing, based on the weights, a model to obtain a deviation score for a second target IN; generating, based on the deviation score, a migration recommendation specifying the second target IN; and initiating a display of the migration recommendation to the user.

Abstract: A storage device non-fatal error debug system includes a storage device including a storage device chassis, storage device subsystems housed in the storage device chassis, and a non-fatal error debug subsystem provided in the storage device chassis and coupled to each of the storage device subsystems. The non-fatal error debug subsystem provides a counter system for each of a plurality of data path stages performed by the storage device subsystems to provide data path(s) in the storage device, and monitors each counter system during the execution of commands by the storage device subsystems via the performance of the data path stages. When the non-fatal error debug subsystem determines that a counter system provided for a data path stage performed by a storage device subsystem to provide a data path in the storage device indicates a non-fatal error, it collects debug information associated with that data path stage.

Abstract: A multi-zone temperature testing system includes a test device having components, a multi-zone temperature testing device that is coupled to the test device and that includes a first thermoelectric module that is located adjacent a first subset of the components and a second thermoelectric module that is located adjacent a second subset of the components, and a temperature control subsystem that is coupled to the multi-zone temperature testing device. The temperature control subsystem controls the first thermoelectric module in the multi-zone temperature testing device to produce a first heat flux that provides a testing temperature for the first subset of the components, and controls the second thermoelectric module in the multi-zone temperature testing device to produce a second heat flux that is different than the first heat flux and that provides the testing temperature for the second subset of the components.

Abstract: Persistence can be enabled in a volatile secure workspace. A management service may be configured to provide a managed application image containing a managed application to a host agent on a user computing device. When a secure workspace is deployed on the user computing device, the host agent can attach the managed application image to the secure workspace to create an injected volume. The host agent can also provide image details of the managed application image to a file system filter in the secure workspace. The file system filter may cause the managed application to be loaded from the managed application image and may then redirect I/O performed by the managed application to the injected volume which in turn will cause such I/O to be persisted in the managed application image. In this way, the managed application, any files it creates or modifies, and any state will be persisted even though the secure workspace is volatile.

Abstract: A method for use in a storage system, comprising: identifying snapshot storage space consumption information that corresponds to a snapshot storage space; identifying a snapshot management metric that is associated with the snapshot storage space, the snapshot management metric being identified based on the snapshot storage space consumption information; and outputting an indication of the snapshot management metric for presentation to a user.

Abstract: Architectures and techniques are described that can translate permissions from a first storage system to a second storage system. Such can be applied during a data migration operation that migrate storage data from the first storage system to the second storage system. A directory tree structure of the storage data can be explored to identify one or more target directories that can be used to leverage an inheritance property. Permissions can be translated based on the identification of the target directories.

Abstract: Methods and systems for managing data processing systems are disclosed. Data processing systems may be managed by monitoring for failure of a storage device. The storage device may be monitored by obtaining use data and diagnostic data for a storage device. The use data may be obtained to generate predicted future use data. The use data and the predicted future use data may be used to generate a use quantification. The use quantification and the diagnostic data may be ingested in a predictive algorithm to obtain a prediction of the operation of a storage device. The prediction may indicate the likelihood for failure of the storage device.

Abstract: Methods and systems for managing the operation of data processing systems are disclosed. To manage the operation of data processing systems, diagnostic data may be collected. The diagnostic data may include information regarding the operation of the data processing systems usable to diagnose issues impacting the operation of the data processing systems. The diagnostic data may also include sensitive data that may be undesirable to disclose to third parties. To manage risk associated with distribution of the diagnostic data, the diagnostic data may be subjected to partial redaction and/or dual encryption to manage access to the sensitive data included therein. By redacting and/or dual encrypting portions of the sensitive data, access to the sensitive data after the diagnostic data is distributed may be prevented and/or limited to those parties to which an operator of a data processing system elects to provide decryption data.

Abstract: An apparatus comprises a processing device configured to receive a request to perform validation of a compatibility of a gateway device, the request specifying one of a plurality of different communication protocols for use in communicating with the gateway device as part of the validation. The processing device is also configured to select, from a database, a dataset for use in validating the compatibility of the gateway device, to convert the selected dataset to the specified communication protocol, and to operate the gateway device utilizing the selected dataset converted to the specified communication protocol. The processing device is further configured to validate the compatibility of the gateway device based at least in part on monitoring operation of the gateway device utilizing the selected dataset converted to the specified communication protocol.

Abstract: Methods and systems for identifying areas of interest in an image and management of images are disclosed. To manage identification of areas of interest in an image, subject matter expert driven processes may be used to identify the areas of interest. The identified areas of interest may be used to establish plans to guide subsequent use of the image. The identified areas of interest may also be used to establish plans to cache portions of the image to speed subsequent use of the image.

Abstract: An apparatus comprises a processing device configured to obtain an information density matrix characterizing information density of feature points in an input visual stimulus, and to analyze content of the input visual stimulus utilizing the information density matrix to identify in the input visual stimulus. The processing device is also configured to evaluate cognitive measures of each of the objects in the input visual stimulus and to estimate a likelihood of a user viewing the input visual stimulus to fixate attention on respective ones of the objects in the input visual stimulus based at least in part on the cognitive measures. The processing device is further configured to modify a design of the input visual stimulus to adjust the estimated likelihood of the user viewing the input visual stimulus to fixate attention on at least one of the objects in the input visual stimulus.

Abstract: A method of provisioning a self-provisioning computer system is disclosed. The method includes executing code in a secure base activation image to perform various functions. This includes executing an identification process, using a cryptographically created identifier included in the base activation image, with an activation service to confirm an identity of the computer system with the activation service. This further includes confirming system integrity of the computer system with the activation service. Based on confirming the identity of the computer system and confirming system integrity of the computer system, The computer system is unlocked for load installation. Load installation is performed by providing capabilities for the computer system to the activation service and receiving the load based on the provided capabilities.

Abstract: Intelligent recovery of managed devices can be provided in a multi-tenant cloud environment. A recovery service can be employed to maintain management server details and device details for managed devices across multiple tenants. When a managed device loses connectivity to its management server, an agent on the managed device can access the recovery server to obtain management server details which have been associated with device details of the managed device. The agent can then use the management server details to regain connectivity to the management server.

Abstract: Snapshots with integrity can be taken of secure workspaces having distributed cache. When a snapshot of a secure workspace is to be taken, a host agent executing external to the secure workspace can instruct a workspace agent running inside the secure workspace to lock a filesystem and flush the cache within the secure workspace. The host agent can then lock the filesystem and flush the cache outside the secure workspace. The host agent may then create a snapshot of the secure workspace. After the snapshot is created, the host agent can unlock the filesystem outside the secure workspace and instruct the workspace agent to unlock the filesystem inside the secure workspace.

Abstract: Real-time event detection is performed on nodes in an environment using position data that is not available to a node in real time but is delayed. A node performs real time event detection by predicting a position of the node based at least in part on delayed position data. The delayed position data is aligned to other sensor data. Aligning the position data may include predicting a position based on dead reckoning and/or a machine learning model. One or more collections of data, each collection including sensor data and predicted position data, is input to a model that performs event detection.

Abstract: A Ransomware Activity Detection System (RADS) characterizes historic read/write IO activity on a storage volume, and also characterizes historic data characteristics of the storage volume, such as the percentage reducibility of the data held in the storage volume. The RADS monitors the storage volume to identify differences between current read/write IO activity and historic read/write IO activity, as well as difference between current data characteristics of the storage volume and historic data characteristics of the storage volume. When the RADS detects a significant difference in read/write IO activity on a storage volume, that is coupled with a significant changes to the data characteristics of the storage volume, the RADS protects the storage volume and generates an alert of the possible occurrence of a ransomware attack. Protection may occur prior in connection with any bulk read operation to proactively protect storage volumes against ransomware attacks.

Abstract: Selective packing of small block write operations is implemented prior to compression, to improve compression efficiency and hence reduce bandwidth requirements of a Remote Data Replication (RDR) facility. Compression characteristics of write IO operations are forecast, and write IO operations with similar forecast compression characteristics are pooled. Write IO operations are also grouped according to extent, device, and storage group. Write operations from a given compression pool are then preferentially selected from the extent-level grouping, next from the device-level grouping, and then from the SG-level grouping, to create an IO package. The IO package is then compressed and transmitted on the RDR facility. By creating an IO package prior to compression, it is possible to achieve greater compression than would be possible if each individual write IO operation were to be individually compressed to thereby reduce network bandwidth of the RDR facility.

Abstract: Edge security is disclosed. Hosts included in a distributed infrastructure are equipped with data processing units that may be centrally managed using a control plane. Security policies can be selectively distributed to the hosts and localized at the hosts. Reactions to security violations can be initiated at the hosts in substantially real-time. The security policies may take various forms, including rule-based security policies and inference mode-based security policies.

Abstract: Last resort access to backups is disclosed. An encrypted backup associated with a first system or vault is stored in the backup associated with another system. If a key needed to decrypt a backup in the first vault is unavailable, an encrypted copy of a backup in the second vault may be used for the recovery operation. Incremental backups from the first and/or second vault, which may be difference incremental backups and may be unencrypted, may be used in the recovery operation.

Abstract: A method for manufacturing networking devices includes providing circuit boards each having an NPU mounted to that circuit board, and respective cable connectors mounted to that circuit board and coupled to that NPU. First networking devices are manufactured by providing one of the circuit boards in a chassis in each first networking device, and cabling at least some of the cable connectors on that circuit board to first subsystem(s) in that first networking device in order to configure that first networking device to perform first functionality. Second networking devices are manufactured by providing a respective one of the circuit boards in a chassis in each second networking device, and cabling at least some of the cable connectors on that circuit board to second subsystem(s) in that second networking device in order to configure that second networking device to perform second functionality that is different than the first functionality.