Abstract: Example embodiments of the present invention provide a method, an apparatus, and a computer program product for message based security audit logging. The method includes receiving an event notification related to an event in a storage resource management service, processing the event notification according to a messaging fabric and an ontology model, and, according to the processed event notification, persisting an audit log entry corresponding to the event.

Abstract: A processing device comprises a processor coupled to a memory and implements a secure container for accessing data over a network. The secure container is configured to interact with backend infrastructure of an enterprise in order to provide secure access to enterprise data at the processing device. The secure container may be configured in accordance with an access model that implements multiple-factor authentication in combination with active directory authentication. The backend infrastructure may comprise, for example, a threat management gateway and an application control engine coupled to the threat management gateway and configured to support the multi-factor authentication, as well as additional components such as an active directory, a data loss prevention engine adapted to process communications between the backend infrastructure and the secure container, and a proxy server providing access to a content adaptation server configured to filter communications received from the processing device.

Abstract: A method and system for recovering a corrupt storage system is discussed. A request to recover the system may be received. A backup snapshot for the last point-in-time the system was stable may be synthesized. A difference may be identified between that backup snapshot and the current system. The difference may be transmitted to the corrupt system to recover the data.

Abstract: A method and apparatus for managing network attached storage that includes detecting frequency of access from a client to a data item that is in a first server in the network attached storage, a global namespace of the network attached storage indicating an access address for accessing the data item, the access address including a first address of the data item in the first server; in response to the frequency being higher than a predetermined threshold, copying the data item from the first server to a second server in the network attached storage which is proximate to the client, so as to form a data image; and updating the global namespace so as to add to the access address a second address of the data image in the second server whereby the data access efficiency of the network attached storage can be considerably improved.

Abstract: An integration engine is provided for communications between source and target applications. A message is sent from a source application to a target application, by processing a header element to route the message to the target application; transforming a message format of the message to a different message format; storing the message payload using a Claim-Check Enterprise Application Integration (EAI) pattern; and providing the transformed message to the target application. Transport adapters optionally transform a message format of the message to a different message format, such as a message format of the source application being transformed to a message format of the target application. The header element is optionally updated using a channel interceptor to update a next endpoint in a flow based on one or more business rules applied to the message payload. The header element can be processed by a header-based router that routes the message to a next endpoint in a flow.

Abstract: A key-value store is provided having one or more key-value storage interfaces. A key-value store on at least one compute node comprises a memory for storing a plurality of key-value pairs; and an abstract storage interface comprising a software interface module that communicates with at least one persistent storage device providing a key-value interface for persistent storage of one or more of the plurality of key-value pairs, wherein the software interface module provides the one or more key-value pairs to the at least one persistent storage device in a key-value format. The abstract storage interface optionally processes one or more batch operations on the plurality of key-value pairs. A distributed embodiment for a partitioned key-value store is also provided.

Abstract: Improved multi-tier data storage is provided using inclusive/exclusive burst buffer caching techniques based on reference counts. An exemplary multi-tier storage system comprises at least first and second storage tiers for storing data, wherein at least one of the first and second storage tiers comprises at least one cache, and wherein the data is retained in the at least one cache as a given cached data item based on a reference count indicating a number of expected requests for the given cached data item. The number of expected requests for the given cached data item in a given cache is based, for example, on a number of nodes serviced by the given cache. A burst buffer appliance is also provided for implementing the cache retention policies described herein.

Abstract: Embodiments are described for systems and methods that transparently virtualize SCSI transport endpoints for management purposes between Fiber Channel base nodes and virtual nodes. An N_Port ID Virtualization mapping component maps multiple endpoints to a single physical port. The endpoints are abstract objects that have attributes can be moved around the system. This allows virtual port management (e.g., port migration, moving ports, removing ports, adding ports, etc.) to be performed on many virtual ports in a unified manner. This allows storage area network to be configured with virtual endpoints that span both base and virtual ports.

Abstract: Composable action flows are disclosed. In various embodiments, a definition of one or more processing steps comprising an action flow is received. A definition of one or more transitions between processing steps comprising the action flow is received. The processing step and transition definitions are used to generate programmatically application code to implement the action flow.

Abstract: A service to invoke a companion application or service is disclosed. In various embodiments, an indication to invoke a companion application is received in the context of a display page of a calling application. A service a call comprising a filtered set of data values derived from the display page is sent to an external service. A request associated with the companion application is received from the external service and used to invoke the companion application.

Abstract: A method and system for maintaining granular backups is discussed. Backup windows may be defined, and policies may be associated with those windows. Journal and backup files may be retained or deleted in accordance with those policies.

Abstract: A system method and program product for data replication comprising based on metadata, creating a mapping of pending IO to a logical storage medium and changing a mapping of the logical storage medium to tiered storage mediums to optimize the pending IO to the logical storage medium.

Abstract: A System, Computer Program Product, and Computer-executable method for managing cache de-staging on a data storage system wherein the data storage system provides a Logical Unit (LU), the System, Computer Program Product, and Computer-executable method including dividing the LU into two or more extents, analyzing each of the two or more extents, creating a cache de-staging policy based on the analysis, and managing cache de-staging of the LU based the cache de-staging policy.

Abstract: In general, embodiments of the technology relate to writing data to storage appliances. More specifically, embodiments of the technology are directed to writing data to storage media using a push-based mechanism in which clients provide the data to write to the storage media and then subsequently provide a command to write the data to the storage media.

Abstract: Polymorphic application of a policy is disclosed. An indication is received that a retention policy is to be applied with respect to an object. A rule is evaluated associated with the retention policy, in light of a circumstance of the object, to determine a manner in which the retention policy is to be configured to behave with respect to the object.

Abstract: Ideogram character analysis includes partitioning an original ideogram character into strokes, and mapping each stroke to a corresponding stroke identifier (id) to create an original stroke id sequence that includes stroke identifiers. A candidate ideogram character that has a candidate stroke id sequence within a threshold distance to the original stroke id sequence is selected. One or more embodiments may create new phrase by replacing the original ideogram character with the candidate ideogram character in a search phrase. One or more embodiments perform a search using the search phrase and the new phrase to obtain a result, and present the result. One or more embodiments may replace an original ideogram character in a character recognized document with the candidate ideogram character and store the character recognized document.

Abstract: Containerized security is disclosed. An indication is received that a content item included in a body of managed content is associated with a container. A security measure is associated with the content item, based at least in part on the association of the content item with the container, that causes access to the content item by a user who is not associated with the container but who otherwise would have access to the content item within the body of managed content to be denied.

Abstract: An improved technique involves delivering asynchronous notifications of state changes of components of a data storage system by querying a database whose entries contain event descriptors along with a sequentially generated identifier value. In response to a state change of a component, a database server receives a state change indication and updates an entry in the database by recording the state change and generating a new identifier value. A management server running management software then detects state changes by noting the largest generated identifier value from a previous query and queries all entries in the database having an identifier value larger than that previous value. The layers of the management software that subscribe to state change indications of various components may then access those entries as needed.

Abstract: A method, system, and computer program product for intercepting communication between a virtual machine and an encrypted replication data stored on a storage medium and redirecting the communication to a remote replication appliance and using a key stored on the remote replication appliance to enable the virtual machine to facilitate communication with the encrypted replication data stored on the storage medium, wherein facilitating communication enables the virtual machine to interact with the encrypted replication data as unencrypted data.

Abstract: A method, system and program product for enabling migration of Virtual Machines with concurrent access to data across two geographically disperse sites to enable load balancing across the two geographically disperse sites, by presenting over a network a read writable logical volume at a first site, presenting over a network a read writable logical volume at a second geographically disparate site; wherein the first volume and the second volume are configured to contain the same information, and enabling read write access to the volume at the first site or the volume at the second site for a first virtual machine while keeping the data consistent between the two sites to enable transparent migration of the virtual machine to load balancing across the two sites according to at least one load balancing metric.