Abstract: Systems and methods for a multi-tenant and fully automated Virtual Private Data Center (VPDC) provisioning. Examples include user interfaces for drag-and-drop configuration of a customer/user/tenant's network, validation checks on design choices, and automated provisioning of validated designs. The tenant may specify certain Quality of Service (QoS) choices along with the design structure, and various physical components and partitions of available and/or shared resources may be provisioned automatically for the tenant/customer.

Abstract: In a threat management system and method for managed systems, leveraging of identifications and/or assessments of common threats, and/or valuation of assets which may be susceptible to common threats, can be applied to facilitate monitoring of customer compliance with policies needed to guard against threats to customer assets. Threat identification and response in managed systems may be tailored for different customers, in some instances without having to parse individual customer details, such as assets at risk and types of threats to those assets.

Abstract: Methods, systems, and protocols are described for securing data in transit over networks. A communication session is initiated between a client and a server. One or more communication channels can be set up between the client and the server. Each established communication channel may have zero or more intermediary nodes that are selected by the client or by the server to process information exchanged between the client and the server via the communication channels.

Abstract: In a threat management system and method for managed systems, leveraging of identifications and/or assessments of common threats, and/or valuation of assets which may be susceptible to common threats, can be applied to facilitate monitoring of customer compliance with policies needed to guard against threats to customer assets. Threat identification and response in managed systems may be tailored for different customers, in some instances without having to parse individual customer details, such as assets at risk and types of threats to those assets.

Abstract: In a policy management system and method, managed services customer policies may be handled on a group or individual basis while taking advantage of information from monitoring and/or auditing of policies for similarly situated managed services customers. The policies may involve compliance standards in varied industries, such as the health care or financial industries. In one aspect, the policies may involve information technology (IT) security standards. In another aspect, the policies may involve both compliance standards and IT security standards.

Abstract: Systems and methods for providing disaster recovery services to enterprise customers of virtual computing services are described. Disaster recovery services may be provided in data centers that also provide primary computing services to enterprise customers. Disaster recovery services may be distributed across the data centers, such that no dedicated disaster recovery site exists. In addition, disaster recovery services may be provided such that each of the enterprise customers receiving primary services at a given data center may be distributed across the remaining data centers for disaster recovery purposes.

Abstract: Data files are distributed across a plurality of computers. The computers may form a network such as a content delivery network (CDN) or a peer-to-peer network. The network may operate as a TCP/IP network such as the Internet. Data files may represent may represent digital messages, images, videos or audio signals. For content—data items or files in the system—a name is obtained (or determined), where the name is based, at least in part, on a given function of the data in a data item or file. The given function may be a message digest or hash function, and it may be MD4, MD5, and SHA. A cony of a requested file is only provided to licensed (or authorized) parties. The system may check one or more computers for unauthorized or unlicensed content. Content is served based on a measure of availability of servers.

Abstract: A method and system for determining a route for a packet traveling over at least one system from a source to a destination is disclosed. A first geographic area corresponds to the source and a second geographic area corresponds to the destination. The destination further has an address which does not indicate the second geographic area. In this aspect, the method and system include associating an address for the destination with the second geographic area to allow selection of the route for the data packet based on the second geographic area and selecting the route based on a second geographic area. In a second aspect, the method and system include providing a direct link having a controllable amount of traffic and selecting the direct link as at least a portion of the route when a data packet to the destination is to be routed. The method and system also facilitate selection of a route for a data packet. In this aspect, the method and system include obtaining information relating to an autonomous system.

Abstract: Methods and apparatus are disclosed for dynamically discovering and utilizing an optimized network path through overlay routing for the transmission of data. A determination whether to use a default network path or to instead use an alternate data forwarding path through one or more overlay nodes is based on real-time measurement of costs associated with the alternative paths, in response to a user request for transmission of message data to a destination on the network. Cost metrics include delay, throughput, jitter, loss, and security. The system chooses the best path among the default forwarding path and the multiple alternate forwarding paths, and implements appropriate control actions to force data transmission along the chosen path. No modification of established network communication protocols is required.