Abstract: A system and method related for performing lookup operations for objects distributed among different nodes in a peer-to-peer network are disclosed. Various nodes in the peer-to-peer network may store objects. Objects stored on a given node may be accessed by other nodes in the peer-to-peer network. To access an object, a node may first perform a lookup operation to determine where the object is stored, i.e., to determine which node in the peer-to-peer network stores the object. The peer-to-peer network may utilize a method to improve the performance of object lookup operations. In one embodiment, the method may allow object lookup operations to be performed with a latency on the order of one hop.

Abstract: Systems and methods for filtering spam messages utilizing a URL filtering module are described. In one embodiment, the method includes detecting, in an incoming message, data indicative of a URL and comparing the URL from the incoming message with URLs characterizing spam. The method further includes determining whether the incoming message is spam based on the comparison of the URL from the incoming message with the URLs characterizing spam.

Abstract: Systems and methods for fault handling are presented. In one embodiment, a fault handling method includes: performing an information collection process, wherein the information collection process includes collecting information regarding guest operating system files of a virtual machine; performing a selective replication region identification process, wherein the selective replication region identification process includes identifying regions associated with a selective amount of the guest operating system files; and performing a replication process based upon result of the replication region identification process. In one embodiment, the selective replication region identification process includes identifying regions associated with files of interest. The selective replication region identification process can include identifying regions associated with temporary files.

Abstract: Systems and methods for fault handling are presented. In one embodiment, a fault handling method includes: performing an error type detection process including determining if an error is a media error or a connectivity error; performing a detachment determination process to establish an appropriate detachment scenario, wherein the appropriate detachment scenario includes not detaching any mirrors if the connectivity error involves all mirrors; and returning an application write with a failure. In one embodiment, the detachment determination process detaches a mirror in accordance with results of a read-write-back process. In one exemplary implementation, the detachment determination process includes a connectivity status inquiry and mirrors are detached in accordance with results of the connectivity status inquiry. In one exemplary implementation, the connectivity status inquiry includes a SCSI connectivity inquiry.

Abstract: Techniques for backing up distributed data are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for backing up distributed data comprising identifying one or more sources of distributed data targeted for backup, identifying two or more backup storage locations, determining which one or more backup storage locations of the two or more identified backup storage locations to utilize for a backup job based at least in part on one or more specified preferences, and configuring, for at least one of the sources of distributed data, the backup job using the one or more backup storage locations.

Abstract: A method of determining an indication of an invalid request, the method including the steps of, in a processing system: receiving data at step 100, comparing at least a portion of the received data to predetermined criteria at step 110, determining an indication of an invalid request included in the data at step 120, and generating a notification in accordance with the determined invalid request at step 140.

Abstract: A method and apparatus of detecting executable software in alternate data streams to secure operation of a computer comprises processing information regarding a file requested for execution and determining an alternate data stream associated with the file, wherein the alternate data stream comprises executable software.

Abstract: Various techniques for performing off-host cataloging of backup information are disclosed. One method involves initiating, subsequent to the closure of a backup window, generation of at least a portion of a catalog. The catalog identifies contents of a set of backup information received during the backup window. The generation of the portion of the catalog is performed by a backup computing device and does not involve the host computing device from which the backup information was received. Prior to completion of generation of the catalog, a request to access the catalog is received from a user. In response, information included in the catalog is dynamically displayed to the user.

Abstract: Techniques for recovering data from cold images are disclosed. In one particular exemplary embodiment, the techniques may be realized as a computer implemented method for recovering data from cold images comprising searching storage associated with a target recovery device, identifying one or more data structures on the storage, parsing the one or more identified data structures, and recovering one or more portions of the one or more parsed data structures.

Abstract: Embodiments in accordance with the invention permit a virtualization application to interact with a SuperFetch feature of an operating system so that on creation of a virtualization layer the SuperFetch feature is provided the opportunity to act on the newly available file system objects of the virtualization layer. Further, when the virtualization layer is removed, embodiments in accordance with the invention remove the file system objects associated with the virtualization layer from utilization by the SuperFetch feature.

Abstract: A computer-implemented method for determining whether to perform a computing operation that is optimized for a specific storage-device-technology type may comprise: 1) performing at least one proximate read operation by accessing a control location on a storage device and then accessing a test location on the storage device that is logically proximate to the control location, 2) performing at least one remote read operation by accessing a test location on the storage device that is logically remote from the control location, 3) determining, by comparing a length of time to access the proximate test location with a length of time to access the remote test location, a technology type of the storage device, and then 4) determining, based on the technology type of the storage device, whether to perform the computing operation. Corresponding systems and computer-readable media are also disclosed.

Abstract: System and method for tracking changes to a volume. A write request to write data to a first location in the volume may be received. It may be determined if the first location is overlapping with or adjacent to one or more locations of earlier write requests to the volume. First location information may be stored in a data structure in response to determining that the first location is overlapping with or adjacent to one or more second locations of earlier write requests to the volume. The first location information may identify the first location and the one or more second locations. Second location information may be removed from the data structure, where the second location information identifies the one or more second locations of earlier write requests to the volume. The data may be written to the first location in the volume in response to the write request.

Abstract: A method, apparatus and system for improving failover within a high-availability computer system are provided. The method includes obtaining one or more parameters associated with at least one resource of any of the first cluster, second cluster and high-availability computer system. The method also includes detecting, as a function of the parameters, one or more anomalies of any of the first cluster, second cluster and high-availability computer system, wherein the at least one anomaly is a type that impacts the failover. These anomalies may include anomalies within the first and/or second clusters (“intra-cluster anomalies”) and/or anomalies among the first and second clusters (“inter-cluster anomalies”). The method further includes generating an alert in response to detecting one or more of the anomalies.

Abstract: A method and system for creating bulk filters are described. In one embodiment, the method includes receiving probe email messages indicative of spam, grouping similar probe email messages, and creating a bulk filter for each group having at least a predefined number of probe email messages without human interaction. The method further includes distributing the resulting bulk filters to clients for detection of bulk email messages at the clients.

Abstract: Various methods and systems for updating a search engine index based on a file change log are disclosed. One method involves accessing a file, which stores a file change log maintained by a file system. The file change log identifies one or more recently modified files. The method also involves updating an index, based on a recently-modified file identified in the file change log. The index is used to search files maintained by the file system. An application external to the file system accesses the file storing the file change log and updates the index.

Abstract: A method and system for multi-staged recovery of a distributed computer system. The method includes receiving a failure event notification from at least one node of the distributed computer system and executing a plurality of recovery stages upon receiving the failure event notification by using a recovery manager, wherein each of the plurality of recovery stages performs a defined recovery task. The progress of recovery is tracked by using at least one state machine executed by the recovery manager, wherein the state machine reflects progress of each of the recovery stages. The progress of recovery is monitored to a completion by using the state machine and the recovery manager.

Abstract: A method and apparatus for archiving a call terminating at a client device are provided. In an example, a command or packet associated with a protocol for setting up the call is intercepted. In response to the interception, the call is associated with a call ID. An information associated with the call is retrievably stored in an archive using the call ID. The information is at least partially determined via replicating at least one of a device input signal associated with an outbound call content and a device output signal associated with an inbound call content. In an example, a call capture agent resident on the client device is controlled by a call archive administration service, and performs the replication by forming respective loopbacks corresponding to the at least one of the device input signal and the device output signal. In an example, the respective loopbacks are virtual loopbacks.

Abstract: Global, location-aware security information is generated, and used to provide location-aware computer security to portable computing devices. A global, location-aware security system receives local, location-aware security information from a large number of portable devices. The local information from each device comprises their locations at the times of detection of threat indicators. The global system transforms the received local information into global information, and maps detected threat indicators to specific locations. Each device monitors activity occurring thereon, detects threat indicators and current locations, and builds local information, which is periodically transmitted to the global system. When a device is activated or moved to a new location, it determines its current location, and requests global information concerning that location from the global system.

Abstract: Systems and methods for repairing a failed component within a data storage subsystem without interruption of service. A client device is coupled to a data storage cluster comprising a plurality of data storage locations addressable as rows and columns in an array. Each column of the array comprising a separate computer interconnected to other columns via a network. After both detecting a failure of a first column in the array and detecting a predetermined time threshold has elapsed, a predetermined reconstruction column coordinates reconstructing data storage locations within the reconstruction column. For a second row in the array, a predetermined coordinating column coordinates the execution of a received memory access requests from the client corresponding to the second row. In this manner, a column coming back online after a failure is able to repair without halting the servicing of read and write requests.

Abstract: Systems, methods, and computer-readable memory media for performing various computer configuration tasks are disclosed. One such configuration task is dissimilar system restore (DSR). Another such task is software deployment. In various embodiments, these configuration tasks operate on a target computer system using a utility operating system to perform detection of certain target system devices, determination of critical device classes on the source computer system, and updating of target computer configuration settings. Other tasks may be performed upon a computer system such as a backup server. These tasks include locating device drivers for the target operating systems and the installing utility operating system, as well as creating device driver packages that are usable to install device drivers for a plurality of devices.