Abstract: Embodiments for storing digital data in DNA storage by receiving input file data, encoding the input file data into an oligonucleotide sequence to produce sequence data through a transformation of text to binary to Base_3 encoding, organizing the Base_3 sequence data into chunks of a defined chunk size, and storing the chunks in a block of a blockchain. The oligonucleotide sequence may comprise metadata for the input file data that refers to actual data stored in the DNA storage, where the actual data is formed by synthesizing the oligonucleotide sequence in a DNA synthesis process. The chunks may be stored in the blockchain only if the block agrees with a smart contract defined for the oligonucleotide sequence.

Abstract: One example method includes collecting, in a closed network, raw network traffic from one or more devices in the closed network, extracting metadata from the raw network traffic, processing the metadata, analyzing the metadata after the metadata has been processed, and based on the analyzing, determining whether or not an actual attack or attack threat is present in the closed network. If an attack or threat of attack is determined to exist, one or more remedial actions may then be taken.

Abstract: An access object service receives a communication of a stream of fingerprints, corresponding to segments of a file, from a source of the file, and identifies sequential fingerprints in the stream of fingerprints as a group of fingerprints. The access object service identifies a similarity group identifier for the group of fingerprints. The access object service communicates the group of fingerprints to a deduplication service associated with a range of similarity group identifiers that include the similarity group identifier. The deduplication service identifies fingerprints in the group of fingerprints which are missing from fingerprint storage. The deduplication service communicates the identified fingerprints to the access object service, which communicates a request for segments of the file, corresponding to the identified fingerprints, to the source of the file. The deduplication service receives a communication of the requested segments from the source of the file and stores the requested segments.

Abstract: Methods and systems for backing up and restoring data on a worker node are described. According to some embodiments, the method includes using a job controller to spin up one or more backup jobs in the worker node. The method further includes utilizing, by the backup jobs, mount propagation to access one or more persistent volumes of a pod on the worker node. The method further includes performing, by the backup jobs, backup tasks on the persistent volumes. The method further includes applying a set of rules used by a scheduler to determine a location of the pod in order to ensure the backup jobs are scheduled on a same worker node. The method further includes storing, by the backup jobs, backup artifacts generated by the backup tasks, wherein the backup artifacts include deduplicated data.

Abstract: The described technology is generally directed towards fine-grained data expiration to reduce storage capacity used in a streaming data storage system. Segments of events are scanned, with each event's payload evaluated to determine whether that event is expired or unexpired. For example, for a log event, an expiration period can be determined based on the event creation time and the event logging level, both of which are typically within the log event's payload. Unexpired events are copied to a new destination segment that replaces the original, scanned source segment; the expired events are deleted when the source segment is deleted, reclaiming storage capacity used by the expired events. Also described is maintaining and using segment and chunk metadata to bypass individual event processing when the metadata indicates that the chunk contains only expired events and can be safely deleted.

Abstract: Techniques perform sample selection. Such techniques involve: in response to receiving a query time range for samples input by a user, obtaining a plurality of groups of samples from a sample set, each group of samples being collected within a corresponding time range. Such techniques further involve: determining a relationship between the query time range and time ranges corresponding to the plurality of groups of samples. Such techniques further involve: determining, based on the determined relation and from the plurality of groups of samples, a group of samples with a corresponding time range matching the query time range. Accordingly, these sets of samples may be presented accurately and efficiently to the user in a selective manner.

Abstract: Described is a system (and method) for specialized data management when performing incremental backups to a cloud-based object storage. When backing up client data, the server may utilize incremental backups to conserve the amount of storage space required on the object storage. However, the server may implement a configuration that enables full reconstruction of the client data at the time of recovery. To provide such capabilities, the server may leverage a specialized metadata database. The metadata database may be an embedded database maintained by the server. The server may leverage the metadata database to provide further storage efficiencies by storing certain incremental backup data exclusively within the metadata database. Accordingly, the server may implement a data management configuration as part of a backup service that conserves storage usage, and as a result, storage costs when using on a third-party cloud-based object storage.

Abstract: One example method includes receiving data from a node of a data confidence fabric, in response to receipt of the data, creating an annotation bookmark that (i) identifies a storage node at which the data was received and that (ii) uniquely identifies the data, annotating a copy of the data with the annotation bookmark, and storing, at the storage node, the copy of the data in association with the annotation bookmark.

Abstract: One example method includes transcribing a portion of the audio component to create a transcription file that includes text, searching the text of the transcription file and identifying information in the text that may include personal information, defining a textual window that includes the information, evaluating the text in the textual window to identify personal information, and masking the personal information in the audio component of the recording. The personal information may be masked with information of a non-personal nature.

Abstract: A method and system is used in managing deduplication of data in storage systems. A first digest for a deduplication candidate is received. At least one stream associated with the deduplication candidate is detected. At least one neighboring digest segment of a first loaded digest segment associated with the at least one stream is loaded. Whether the digest is located in the at least one neighboring digest segment is determined. If the digest is not located in the at least one neighboring digest segment, the digest is processed.

Abstract: One example method includes receiving at a dedupe system, from a client, a request that comprises a set of fingerprints, where each fingerprint in the set corresponds to a particular data segment, filtering, at the dedupe system, the set of fingerprints into a set of unique fingerprints and a set of non-unique fingerprints, reading, at the dedupe system, from a container where copies of the non-unique fingerprints are stored, an additional set of non-unique fingerprints, sending, from the dedupe system to the client, a single response that comprises both the set of unique fingerprints and the additional set of non-unique fingerprints, and receiving from the client, at the dedupe system, data segments that respectively correspond to the unique fingerprints in the set of unique fingerprints, but no data segments corresponding to the non-unique fingerprints in the set of non-unique fingerprints are received by the dedupe system from the client.

Abstract: Techniques described herein relate to a method for deploying workflows. The method may include receiving, by a platform controller of a domain, a workflow portion from a service controller of a federated controller, provisioning a set of devices in the domain to the workflow portion based on a first fit, generating, by the platform controller, a workflow fingerprint based on the provisioning of the set of devices and based on the workflow portion, executing the workflow portion in the domain using the set of devices, making a determination that the workflow portion requires additional resources, based on the determination, provisioning additional resources of the domain to the workflow portion to obtain an updated execution resource set, and updating the workflow fingerprint based on the updated execution resource set to obtain an updated workflow fingerprint, and executing the workflow portion using the updated execution resource set.

Abstract: A method, a device, and a computer program product for data management are provided in embodiments of the present disclosure. A method for data management comprises: acquiring, from a storage system, a torrent file associated with downloading of a target file, the target file being stored in the storage system, and the torrent file comprising at least a plurality of data digests of a plurality of data blocks of the target file; generating metadata for the plurality of data blocks based on the torrent file, the metadata being in a format supported by a unified management system, and the unified management system being configured for data access across the storage system and at least one other storage system; and storing the metadata for data-block-level access to the plurality of data blocks through the unified management system.

Abstract: One example method includes performing dynamic access control in a computing network. A computing environment is configured such that an application can access a service without specifying secrets. The secrets needed to access the service are obtained and stored in a credential store. The secrets can be obtained using the service mesh in a manner that isolates the application from the secrets.

Abstract: Embodiments of the present disclosure relate to a method for storage management, an electronic device, and a computer program product. According to an example implementation of the present disclosure, a method for storage management is provided, which comprises receiving an access request for target metadata from a user at a node among a plurality of nodes included in a data protection system, wherein the access request includes an identification of the target metadata; based on the identification, acquiring target access information corresponding to the identification from a set of access information for the user, wherein the target access information records information related to access to the target metadata; and if the target access information is acquired, determining the target metadata based on the target access information.

Abstract: Described is a system for managing backup data stored on a cloud-based object storage irrespective of the storage provider. The system may include a server (or gateway) that provides a backup service, and acts as an intermediary between a client device and object storage. To provide such capabilities, the system may manage an application programming interface (API) that provides a uniform set of methods to a client device irrespective of the destination object storage provider. A function library may include provider-specific functions that invoke corresponding storage-layer operations provided by the destination object storage. The server may also manage an operation pool to schedule operations and saturate bandwidth to the object storage. The server may also implement a specialized metadata database to provide further storage efficiencies by storing certain backup data exclusively within the metadata database.

Abstract: Methods, devices, and computer program products for authenticating a peripheral device are provided in embodiments of the present disclosure. In one method, a peripheral device sends, to an edge device, a first authentication request for at least the peripheral device to use resources of the edge device, the first authentication request comprising at least a first identifier associated with the peripheral device and location information of the peripheral device. Then, the peripheral device receives an authentication success or failure indication from the edge device. In this way, effective authentication of a peripheral device can be realized with a less complicated authentication process, so that the security of access of the peripheral device to a virtual desktop can be improved while ensuring good user experience.

Abstract: A method, apparatus, and system for managing backup resource on a cloud for a plurality of backup servers is disclosed. A resource configuration for each cloud storage is received. The resource configuration includes allocated cloud resource amount and duration. Cloud operation utilization is calculated for each cloud storage. The cloud operation utilization is compared with the resource configuration to determine a total cloud operation utilization for each cloud storage. A plurality of rules is applied in view of the total cloud operation utilization to determine a plurality of cloud storage operational states. The cloud storage is configured to be in one of the plurality of cloud storage operational states based on the plurality of rules to limit an amount of data to be transmitted to and stored in the cloud storage within a predetermined period of time.

Abstract: At least one identity for a given entity is established in accordance with a decentralized identity management system maintained in accordance with a distributed ledger, wherein the identity of the given entity and a set of attributes relating to the identity are defined by a secure token file. The secure token file is referenced in the distributed ledger enabling two or more computing resource systems (e.g., storage systems) to at least one of authenticate and authorize the given entity in accordance with the secure token file.

Abstract: Techniques are provided for microservice configuration information retrieval and storage using a generation-based cache. One method comprises obtaining, by a first microservice, a data item from a second microservice with a corresponding generation counter; maintaining, by the first microservice, the data item in a cache with the corresponding generation counter; invalidating, by the first microservice, one or more entries in the cache having a lower generation counter value than a current generation counter; and in response to a request for the data item, performing, by the first microservice: processing the requested data item, if the requested data item is in the cache after the invalidation; and if the requested data item is not in the cache after the invalidation: (i) retrieving the requested data item from the second microservice, (ii) processing the retrieved data item and (iii) placing the retrieved requested data item in the cache with a corresponding generation counter value.