Abstract: A method and system for implementing enhanced indexing in a backup system as well as manage file recovery. The method implemented at a backup server receives backup meta data from a client over a network. The backup meta data is checked to determine whether the backup meta data is directory data or node data and the directory data and node data from the received backup meta data is committed to a set of databases as received during the backup process.

Abstract: Described are techniques that identify problematic workloads. Measured response times for workloads associated applications are received. Each of the applications has one of the workloads resulting in one of the measured response times for the application. The applications share a set of one or more resources. In accordance with a first set of one or more criteria, it is determined whether there is an occurrence of abnormal performance with respect to performance of the applications. Responsive to determining the occurrence of abnormal performance with respect to performance of the applications, second processing is performed that includes determining, using the measured response times and in accordance with a second set of one or more criteria, an application set of one or more of the applications having an associated workload causing the occurrence of abnormal performance. A remediation may also be taken to address or alleviate the abnormal performance.

Abstract: Application supervised access to managed content is disclosed. In some embodiments, a free form ACL is defined to delegate to one or more users and/or groups of users an access right or restriction a content manage system is not configured to understand and/or enforce. In some embodiments, if a user requests that an application perform an operation with respect to a content item, the application queries a content management system to determine whether the user has been granted the right to perform the requested operation with respect to the content item. The authoring application then allows or disallows the requested operation based at least in part on the information provided by the content management system.

Abstract: There is disclosed a technique for use in memory allocation. In one embodiment, the technique comprises a method. The method comprises the step of determining the size of an item. The method also comprises the step of determining whether to allocate the item to stack or heap memory based on the size of the item.

Abstract: A method and system for executing database queries in parallel using a shared metadata store. The metadata store may reside on a master node, and the master node may distribute this metadata with query plans to worker nodes. The worker nodes may request additional metadata from the master node when necessary.

Abstract: A cluster file system comprises a burst buffer appliance coupled to a plurality of object storage servers via a network. The burst buffer appliance is configured to implement storage tiering control functionality for at least first and second storage tiers comprising respective disjoint subsets of the plurality of object storage servers. The burst buffer appliance implements a coordinated movement of data between the first and second storage tiers to pre-fetch at least one additional portion of a single logical file that is stored across a plurality of said object storage devices from another of said plurality of object storage devices. The burst buffer appliance optionally implements the coordinated movement of data between the first and second storage tiers such that substantially all portions of a single logical file that are stored across a plurality of said object storage devices in said cluster file system are stored in only one of said storage tiers at a given time.

Abstract: Improved techniques involve transferring data into a target device using bar codes. Along these lines, suppose that someone wants to send a message to the target device via a source device. For some messages, the source device may encode the message into a single bar code that the target computer may decode back into the message. However, for a sufficiently large message, the source device breaks the message into a series of message portions, encodes each of the portions into a distinct bar code, and outputs the bar codes, e.g., on sheets of paper using a laser printer. From these sheets, an operator scans each bar code into the target device. The target computer then decodes the scanned bar codes back into message portions and reassembles them into the message.

Abstract: Multi-server one-time passcode verification is provided for respective high order and low order passcode portions. A user is authenticated by receiving an authentication passcode generated by a token associated with the user; and authenticating the user based on the received authentication passcode using at least a first authentication server and a second authentication server, wherein the first authentication server verifies a high-order portion of the received authentication passcode and wherein the second authentication server verifies a low-order portion of the received authentication passcode. The received authentication passcode is based on, for example, at least two protocodes PR,t and PB,t generated by the token and/or pseudorandom information RA,t. A codebook Ct, based on the pseudorandom information RA,t, can be used to embed additional auxiliary information into the authentication passcode.

Abstract: A technique for supporting failover between SPs at different physical sites includes operating a distributed data manager (DDM) in an IO stack of both a first SP at a first site and a second SP at a second site. The DDMs of the first and second SPs cooperatively function to provide LUN virtualization that preserves virtual LUN IDs such that the first SP and the second SP can each access the same virtualized LUNs using the same virtual LUN IDs. In the event of a failure at the first site, the second SP at the second site may access the virtualized LUNs originally accessed by the first SP, including those storing configuration and site-specific data for the first site, as if those LUNs were local to the second SP.

Abstract: Information processing techniques for managing data center configurations. In one example, a method comprises the following steps. A registry is maintained corresponding to at least one of products and services offered by a provider entity for use in providing a data center for a customer entity. A central interface is provided for presenting information maintained in the registry and for presenting one or more features operative to allow the customer entity to create and/or change a configuration of the data center. The central interface comprises one or more features for obtaining at least one of the data center products and services, one or more features for configuring the obtained one of the data center products and services, and one or more features for managing the configured one of the data center products and services. Accordingly, the customer obtains a customized data center configuration through the central interface and the registry.

Abstract: A system and method are disclosed for providing efficient data storage. A plurality of data segments is received in a data stream. The system determines whether a data segment has been stored previously in a low latency memory. In the event that the data segment is determined to have been stored previously, an identifier for the previously stored data segment is returned.

Abstract: A processing device comprises a processor coupled to a memory and is configured to obtain a credential associated with a particular access control interval, to insert information derived from the credential into one or more messages of a remote management interface protocol, to transmit the one or more messages to a managed device, and to remotely control the managed device responsive to a successful authentication based at least in part on the inserted information. The one or more messages of the remote management interface protocol are illustratively compliant with a designated Intelligent Platform Management Interface (IPMI) specification. The credential associated with the particular access control interval may be generated based at least in part on a corresponding intermediate value of a hash chain. For example, the credential may be generated based at least in part on a message authentication code and the corresponding intermediate value of a hash chain.

Abstract: A method, article of manufacture, and apparatus for managing data. In some embodiments, this includes an initial instruction for a file stored in a first storage system, determining that the initial instruction is not supported by the first storage system, identifying a combination of instructions to the first storage system after determining that the initial instruction is not supported by the first storage system, wherein the combination of instructions is based on the initial instruction, performing the identified combination of instructions on the file stored in the first storage system, and storing results of the performed identified combination of instructions.

Abstract: A technique performs user authentication. The technique involves generating a first usage pattern from a first set of mobile device communications performed during a first period of time. The technique further involves generating a second usage pattern from a second set of mobile device communications performed during a second period of time. The technique further involves performing a comparison between the first and second usage patterns to determine whether a human provider of the first usage pattern and a human provider of the second usage pattern are the same person. Accordingly, a malicious person who steals a mobile device or operates a mock mobile device would nevertheless be identified as different from the legitimate user because the malicious person does not behave the same way as the legitimate user (e.g., does not have the same phone call behavior, does not have the same text messaging behavior, etc.).

Abstract: A technique provisions a mobile device (e.g., a smart phone, a tablet, a personal digital assistant, etc.) with a security application on the fly. The technique involves providing, by processing circuitry of the mobile device, an initial access request to an enterprise gateway which is operated by an enterprise. The technique further involves receiving, by the processing circuitry, an enterprise response message from the enterprise gateway in response to the initial access request. The enterprise response message denies access to a set of enterprise resources of the enterprise. The technique further involves automatically prompting, by the processing circuitry, the mobile device to install a mobile security application from an application server in response to the enterprise response message denying access to the set of enterprise resources of the enterprise.

Abstract: A method includes (1) receiving, by a mobile computing device (MCD), user-specific data from a user, (2) processing (a) a user share of a cryptographic key, the user share being fixed based on the received user-specified data, and (b) a local share of the cryptographic key to recreate the cryptographic key, wherein the local share was created by applying a secret splitting algorithm to the cryptographic key and the user share to yield a set of non-fixed shares including the local share, the user share and the set of non-fixed shares making up a set of shares of the cryptographic key, the cryptographic key being recreatable from a strict subset of the set of shares, and (3) decrypting encrypted data stored on the MCD using the recreated cryptographic key, thereby providing access, using the decrypted encrypted data, to the resource.

Abstract: Exemplary methods for monitoring and improving performance at a storage system include analyzing storage performance statistics collected during operations of a storage system. In one embodiment, the methods include in response to determining storage performance satisfies a predetermined condition based on the analyzed storage performance statistics, determining one or more storage configuration suggestions that will likely improve the storage performance based on the analysis. In one embodiment, the methods include transmitting a first set of alerts to a user of the storage system indicating storage performance is poor under a current set of configurations based on the analysis, wherein at least one or more of the first set of alerts includes the one or more storage configuration suggestions to allow the user of the storage system to modify the current set of configurations in an attempt to improve the storage performance of the storage system.

Abstract: A method for information management comprises intercepting an output from an application; distributing packets according to a routing scheme, wherein the packets are associated with the output, and wherein distributing the packets may occur when the application is associated with a first operating system, and may also occur when the application is associated with a second operating system; and storing the packets.

Abstract: Methods and apparatuses to determine similarity among data lifecycles of data sets protected via a backup store having one or more storage devices are described. Each data set may be associated with one data lifecycle indicating a schedule to store one or more copies of the data set in the storage devices. The backup store can have one or more polices. Each life cycle may be specified in one of the policies. Two or more of the policies may be consolidated into one single policy specifying an updated data lifecycle. In one embodiment, the updated data lifecycle and data lifecycles of the two or more polices may be similar according to the similarity determined. A particular one of the data set may be associated with one of the data lifecycles of the two or more polices. The storage device may be configured to back up the particular data set according to the updated data lifecycle of the one single policy.

Abstract: Reconciling data is disclosed. It is determined whether a state of a first backup application is consistent with a state of a second backup application. In the event the state of the first backup application is not consistent with the state of the second backup application, the state of the first backup application is updated to be consistent with the state of the second backup application.