Abstract: An improved technique involves including implicit feedback inferred from a fraud analyst's actions into a fraud detection model tuning process. Along these lines, as part of a tuning process, an authentication server sends electronic transactions carrying a certain amount of risk to a case management center in which fraud analysts investigate the electronic transactions to verify whether the transactions are fraudulent or non-fraudulent. In addition to receiving this explicit feedback from the case management center, however, the authentication server also receives implicit feedback indicative of attributes of the fraud analysts themselves. The authentication server then inputs these implicit feedback parameter values into a fraud detection model tuning engine that tunes the fraud detection model.

Abstract: In general, in one aspect, the invention relates to a method for servicing requests. The method includes receiving, from a client system, a request comprising a query, where the query includes a first plurality of terms. The method further includes generating, using a thesaurus library, a related query including a second plurality of terms, where at least one term in the second plurality of terms is present in the first plurality of terms. The method further includes issuing the query to a content repository to obtain a first result, issuing the related query to the content repository to obtain a second result, processing the first result and the second result to generate a final result, and providing the final result to the client system.

Abstract: Data sets are synchronized between two or more clusters of nodes that support different versions of files (e.g., stub files) within a distributed file storage system. Moreover, the distributed file storage system employs a tiered cloud storage architecture. In one aspect, for stub files having versions that are not commonly supported by the two or more clusters, an application protocol interface (API) is utilized that employs a deep-copy process wherein cloud-backed data referenced by a stub file is retrieved from a cloud storage (e.g., public cloud) and sent by a primary cluster to one or more secondary clusters. Moreover, the API can determine an optimal synchronization process on a per-file basis.

Abstract: A method for controlling wear level operations in solid state memory. The method includes receiving a request to write to a memory location identified by a write address of the solid state memory, and making a first determination that the writing to the memory location results in a duplicate write to the memory location. The method further includes, based on the first determination, making a second determination that a number of encountered duplicate writes has reached an adaptively controlled maximum number of duplicate writes, and based on the second determination, performing a wear level operation.

Abstract: Inter-zone network traffic generated during deletion of a data chunk that has been replicated by employing geographically distributed (GEO) erasure coding is reduced. In one aspect, if a data chunk is to be deleted, partial coding chunks are generated by a source zone and provided to destination zones that store complete coding chunks for updating the complete coding chunks based on combining them with the received partial coding chunks. In another aspect, if a first data chunk is to be deleted and a second data chunk is to be replicated, partial coding chunks are generated by the source zone for each data chunk. Further, the partial coding chunks created for different data chunks can be combined to generate transforming chunks, which can then be transferred to the destination zones. The destination zones can then update the complete coding chunks based on combining them with the received transforming chunks.

Abstract: Systems and methods for migrating backups are disclosed. A backup can be transferred from a standalone backup system and incorporated into the backups maintained by a centralized backup system.

Abstract: In one example, a method is directed to defining and applying policies for backing up virtual machines in a cluster environment. One or more user input parameters are used to define a set of policies for a backup, and the policies in turn form the basis for development of a backup workflow which can then be scheduled and implemented according to the schedule.

Abstract: Systems and method for performing backup. A layered file system is provided that is configured to detect all transactions with a physical file system. Based on an analysis of the transactions, records are selectively entered into a change log. A backup agent is able to generate a backup based on the change log, which reflects data that has changed or that needs to be backed up relative to the previous backup.

Abstract: Transferring an application from a first site to a second site includes determining that the second site is a destination site for the application, causing writes by the application at the first site to be propagated synchronously to the second site, transferring storage data from the first site to the second site, suspending operation of the application on the first site, and resuming operation of the application on the second site. The application may be a virtual machine or a host cluster capable of transitioning applications between cluster nodes. The virtual machine may be transferred from the first site to the second site by transferring an image of the virtual machine from the first site to the second site. The destination site may be selected by a user. The second site may be located remotely from the first site across an asynchronous distance.

Abstract: Server selection for optimized malware scanning on network-attached storage systems is provided herein. A data storage system as described herein can include a memory that stores computer executable components and a processor that executes computer executable components stored in the memory. The computer executable components can include a load determination component that determines respective available capacities of anti-malware servers based on loading information obtained from the anti-malware servers and a task assignment component that assigns a malware scan task to a selected anti-malware server of the anti-malware servers based on the respective available capacities of the anti-malware servers.

Abstract: Example embodiments of the present invention relate to a method, an apparatus and a computer-program product for implementing digital disappearing ink. An example method includes receiving portions of a data stream transmitted from a source and analyzing the portions of the data stream. Based on the analysis, the method includes performing an action with respect to an object tag according to the analysis.

Abstract: Aggregate socket resource management is presented herein. A system can comprise a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising: determining a present aggregate amount of data associated with processing requests from a socket; setting a defined aggregate data limit on the present aggregate amount of data; and in response to determining changes in a difference between the defined aggregate data limit and the present aggregate amount of data, modifying a defined data capacity limit on a data capacity of a receive buffer of the socket. In an example, the determining of the changes in the difference between the defined aggregate data limit and the present aggregate amount of data comprises reducing/increasing the defined data capacity limit in response to the difference being determined to be decreasing/increasing.

Abstract: A method, article of manufacture, and apparatus for managing a cloud computing environment. In some embodiments, this includes modifying an object or a component of an object at runtime and storing the modified object or modified component of an object in a storage device. In some embodiments, components of an object such as data structures are modified. In some embodiments, objects may have more than one version.

Abstract: Systems and methods for granularly recovering a backup are provided. An image of a backup is mounted as a file system such that the files can be granularly restored. Image-level recovery and file-level recovery can be achieved from the same backup. The backup may also be de-duplicated.

Abstract: Systems and methods for securing objects in a computing environment. Objects are encrypted using keys that are also encrypted after encrypting the objects. In order to access the objects, a master key that is unknown to the service storing the objects and/or managing the keys is used to decrypt the keys so that the objects can be decrypted with the decrypted key. Thus, a key is needed to access the key needed to access the object. The master key is typically maintained separately from all of the encrypted objects and corresponding encrypted keys.

Abstract: Deleting objects in a computing system. Information management can be used to provide disposition services including the deletion of selected objects. The categorization process of information management can also be used to assign categories to objects such that an entity understands what the objects are. Understanding what the objects are may include the application of logic, including user-defined logic, to examine the objects. The results of the logic can then be used to assign categories to the objects. The policies of a user, which often define how objects should be treated are implemented by mapping the categories to the appropriate data disposition services. Once the specific disposition services, which include file deletion, are known, a workflow may be initiated to provide a period of review prior to physical deletion of the objects from the computing environment.

Abstract: Virtual repository management is disclosed. An indication is received that a content management functionality is desired to be available with respect to one or more external content items. A reference object is created for each for the one or more external content items that represents the external content item and enables the content management functionality to be performed with respect to the external content item.

Abstract: A system for automatic setting of system security comprises an input interface and a processor. The input interface is configured to receive an indication to set a secure mode. The processor is configured to: determine whether the indication to set the secure mode comprises an indication to set a certificate mode; in the event that the indication to set the secure mode comprises an indication to set a certificate mode: 1) detect one or more connected systems for which to set the certificate mode; 2) select one or more certificates for the certificate mode; 3) update initialization files for the certificate mode; and 4) reinitialize local and one or more connected systems.

Abstract: Techniques to determine an execution path in a distributed environment are disclosed. A call to a method or function of a component of the distributed system is received, in connection with a request from a user of the distributed system. A unique correlation identifier that includes data that identifies the component, the request, and the method of function called is generated for the call.

Abstract: In a block-based backup system, a technique allows indexing changed files between backups so that files not changed are not re-indexed. Block identifiers specifying backed-up blocks are received. A file table record is accessed to determine a location of a file table zone. Records in the file table store last modified timestamps for files associated with the records. The file table zone location is compared with the block identifiers to select a subset of records. Each record in the subset is associated with a block from the file table zone that corresponds to a block identified by the block identifiers. The subset is parsed to extract timestamps. The timestamps are compared with a next-to-last backup date. If the associated file was modified after the next-to-last backup date, a determination is made that the file blocks were backed up in the last backup and the file should be indexed.