Abstract: Systems and methods relate to indexing of performance and cost of workloads in a computing environment. The computing environment may include a virtualized computing environment. According to some embodiments, a performance index relating to a plurality of workloads executing in the computing environment may be generated, where the performance index is based at least in part on performance and cost of use of one or more resources in the computing environment by the plurality of workloads. The index may be normalized. If the performance or cost of a particular workload departs from an expected performance or cost determined from the average performance and/or cost in the computing environment, resources may be reallocated to the workloads such that the performance or cost of the workload is closer to its expected performance or cost based on the performance index.

Abstract: Embodiments of systems and methods are described for instant provisioning (e.g., cloning, copying, replicating, migrating, backing up, restoring, etc.) of virtual machines, virtual machine files, or other types of files (e.g., database files). In some implementations, a cloned virtual machine file can present an illusion to multiple applications accessing the cloned file that the cloned file contains all the appropriate data (e.g., a file system volume), even while the clone file is still being filled with relevant data. In some embodiments, the systems and methods use a file system filter driver to intercept and redirect certain input/output (I/O) requests to the cloned file. The file system filter driver may use a data structure (e.g., a bitmap) to determine which logical units of the clone file have already been filled with data. In some embodiments, the systems and methods use the operating system to handle cached I/O requests, which may improve efficiency.

Abstract: Techniques for notification of reassembly-free file scanning are described herein. According to one embodiment, a first request for accessing a document provided by a remote node is received from a client. In response to the first request, it is determined whether a second request previously for accessing the document of the remote node indicates that the requested document from the remote node contains offensive data. If the requested document contains offensive data, a message is returned to the client, without accessing the requested document of the remote node, indicating that the requested document is not delivered to the client.

Abstract: A system, method, and computer-readable medium for extracting the samples from big data to extract most information about the relationships of interest between dimensions and variables in the data repository. More specifically, extracting information from large data repositories follows an adaptive process that uses systematic sampling procedures derived from optimal experimental designs to target from a large data set specific observations with information value of interest for the analytic task under consideration. The application of adaptive optimal design to guide exploration of large data repositories provides advantages over known big data technologies.

Abstract: A system, method, and computer-readable medium are disclosed performing an optimization operation. The optimization operation optimizes continuous processes by identifying process states associated with specific ranges for a limited subset of control parameter inputs. In certain embodiments, the optimization operation states comprise clear, stable, and robust process states. Such an optimization operation provides a simpler and cost effective means to optimize continuous processes. Additionally, such an optimization operation is applicable more rapidly to a wider range of real-world operational issues as they occur regularly in continuous process scenarios.

Abstract: A method of controlling distribution of content in a message sent by a message sender comprises receiving an indication from the message sender that the message is to be protected, identifying content in the message to be protected, adding the identified content to a database of protected content, and determining whether subsequently received content in a subsequently received message is associated with the identified content. A system for controlling distribution of content in a message sent by a message sender comprises a processor configured to receive an indication from the message sender that the message is to be protected, identify content in the message to be protected, add the identified content to a database of protected content, and determine whether subsequently received content in a subsequently received message is associated with the identified content.

Abstract: In one embodiment, a method is performed on a computer system comprising computer hardware. The method includes inserting, at an instrumentation point of a target program, an event generator comprising an instrumentation identifier. The method further includes registering the instrumentation identifier in instrumentation records. The instrumentation records link the instrumentation identifier to a dynamically variable event handler. In addition, the method includes, responsive to an event generated by the event generator, receiving a callback comprising the instrumentation identifier. Further, the method includes, using the instrumentation identifier, identifying in the instrumentation records the dynamically variable event handler. Additionally, the method includes invoking the dynamically variable event handler. Also, the method includes collecting data related to execution of the target program using the invoked dynamically variable event handler.

Abstract: In one embodiment, a method includes maintaining a domain information cache. The method further includes receiving credentials from a client system. The credentials correspond to a user of the client system. The method also includes storing the credentials in a security cookie. In addition, the method includes, based, at least in part, on the domain information cache, resolving the credentials to an authentication server associated with a domain of the user. Also, the method includes authenticating, using the credentials, an identity of the user with the authentication server. Additionally, the method includes, responsive to successful authentication, building a list of groups and users to which the user belongs. Moreover, the method includes compiling a list of authorized resources to which the user has access. In addition, the method includes providing the list of authorized resources to the client system.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter uses a local copy of an access control data base to determine whether an access request is made by a user. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to access policies which define access in terms of the user groups and information sets. The first access filter in the path performs the access check, encrypts and authenticates the request; the other access filters in the path do not repeat the access check. The interface used by applications to determine whether a user has access to an entity is now an SQL entity. The policy server assembles the information needed for the response to the query from various information sources, including source external to the policy server.

Abstract: A system, method, and computer-readable medium for consolidating all the currently used areas to the beginning of the datafile by performing a datafile reorganization operation. With this consolidation, more space can be recovered from the datafile. More specifically, with the consolidation, because each used area can contain extents related to several different segments, locating all the segments that have extents in a used area and relocate these segments to lower addresses in the datafile can be challenging.

Abstract: A method and apparatus for centralized policy programming and distributive policy enforcement is described. A method comprises centrally maintaining a plurality of policy definitions for one or more subscribers, generating policy configurations using the plurality of policy definitions, each of the policy configurations being specific to one of the plurality of policy definitions, and disseminating the policy configurations to the appropriate ones of the subscribers' networks.

Abstract: A system, method, and computer-readable medium for performing a predictive caching operation in which a hit rate is improved by pre executing statements that are predicted based upon previous use patterns. More specifically, by analyzing a stream of statements provided to a server, such as a database server, patterns of usage are detected and based upon these patterns, statements provided to the server are executed before the actual application executes the predicted statements. Thus the application executes faster because the data requested is already cached based upon the predictive execution.

Abstract: In one embodiment, a method includes initiating execution of an application, the application utilizing a hash table data structure to map a plurality of keys to a plurality of values. The method further includes, the application checking a memory for a cached hash table capacity indicator from a previous run of the application. In addition, the method includes, responsive to no cached hash table capacity indicator being found in the memory: creating a first hash table with an initial capacity; populating the first hash table with a plurality of runtime entries; determining an improved hash table capacity based, at least in part, on a quantity of the plurality of runtime entries; creating a second hash table with the improved hash table capacity; copying the plurality of runtime entries to the second hash table; and the application using the second hash table in place of the first hash table.

Abstract: In one embodiment of the present invention, a data-backup method includes partitioning a fingerprint namespace among a cluster of backup servers, the fingerprint namespace comprising fingerprints for representing units of data, each backup server of the cluster of backup servers managing units of data having fingerprints corresponding to an assigned partition of the fingerprint namespace. The method further includes receiving backup information from a client computing device for a block of data comprising units of data, the backup information including at least a fingerprint for each of the units of data and client-specific backup information. In addition, the method includes, utilizing the fingerprint for each of the units of data, deduplicating the units of data in parallel at the cluster of backup servers in accordance with the partitioning step, the deduplicating step comprising identifying ones of the units data already stored by the cluster of backup servers.

Abstract: A method and an apparatus request web pages and content rating information thereof have been disclosed. In one embodiment, the method includes receiving a request from a user for a web page, retrieving content rating of the web page in response to the request, and fetching the web page substantially simultaneously with the retrieving of the content rating in response to the request. Other embodiments have been claimed and described.

Abstract: A system, method, and computer-readable medium for dynamically partitioning a directory list to limit recipients to an appropriate context. More specifically, in certain embodiments the dynamic partitioning includes a first component which describes a priori categories. In certain embodiments, the a priori categories could include “inner circle” or “trusted advisors” categories. Other categories could include “friends of the DL” who only want occasional but relevant messages. In certain embodiments, these categories are created by a DL owner. However, in certain embodiments, members (e.g., recipients) could also change their own category. For example, a DL could have categories: All, Required participants, FYI participants, Managers.

Abstract: In one embodiment, a method includes maintaining, by a computer system, a plurality of data and at least one classification for each of the plurality of data. Each data of the plurality of data is aggregated from a plurality data sources and is abstracted into one or more of a plurality of standardized formats based on a type of the data. The computer system has executing thereon a plurality of classification engines. The plurality of classification engines include an a priori classification engine, an a posteriori classification engine, and a heuristics engine. Each at least one classification is generated by one of the plurality of classification engines. In addition, the method includes receiving query input from a user. Further, the method includes querying at least a portion of the plurality of data responsive to the query input.

Abstract: A system and method are disclosed for improving a statistical message classifier. A message may be tested with a machine classifier, wherein the machine classifier is capable of making a classification on the message. In the event the message is classifiable by the machine classifier, the statistical message classifier is updated according to the reliable classification made by the machine classifier. The message may also be tested with a first classifier. In the event that the message is not classifiable by the first classifier, it is tested with a second classifier, wherein the second classifier is capable of making a second classification. In the event that the message is classifiable by the second classifier, the statistical message classifier is updated according to the second classification.

Abstract: In one embodiment, a method includes receiving a request for data visualization. The request specifies input data, at least one user query, and a data-visualization type. The method further includes inferring at least one additional query based on a user-interface (UI) range of freedom associated with the request. In addition, the method includes causing a map-reduce framework to process the input data according to the at least one user query and the at least one additional query. The causing yields resultant data. Further, the method includes storing in a cache a portion of the resultant data that relates to the at least one additional query. The method also includes generating the requested data visualization based on a portion of the resultant data that relates to the at least one user query.

Abstract: In one embodiment, a method includes maintaining, by a computer system, a plurality of data and at least one classification for each of the plurality of data. Each data of the plurality of data is aggregated from a plurality data sources and is abstracted into one or more of a plurality of standardized formats based on a type of the data. The computer system has executing thereon a plurality of classification engines. The plurality of classification engines include an a priori classification engine, an a posteriori classification engine, and a heuristics engine. Each at least one classification is generated by one of the plurality of classification engines. In addition, the method includes receiving query input from a user. Further, the method includes querying at least a portion of the plurality of data responsive to the query input.