Abstract: File system based risk profile transfer is disclosed. A request to access an object stored in memory is received from a requesting service, application, or other process. An object risk profile associated with the object, which profile comprises data indicating a level of risk associated with a prior service, application, or other process that previously created or modified the stored object, is accessed. The level of risk reflected in the object risk profile is factored into a process risk profile associated with the requesting service, application, or other process. A security measure to protect the requesting service, application, or other process is deployed based at least in part on the process risk profile.

Abstract: A method and apparatus for single sign-out from one or more application servers in a distributed computing environment. A user accesses at least one second application server via a first application server. The user is able to sign-out from all the application servers to which he is connected via the first application server by signing out of any one of the signed in application servers. The single sign out procedure ensures the user does not inadvertently remain signed into the application servers when the user does not explicitly sign out of each signed in application server.

Abstract: Outbound network traffic originating from a client is filtered, to check for files targeted for upload to remote sites. When a file targeted for upload to a remote site is detected, a remote storage location at which the client's backup data is stored is checked for a copy of the detected file. If a copy of the file is located at the remote backup site, that copy is substituted for the client copy in the network transmission to the target remote site. By uploading online copies of files when available, the client upload experience is much faster, and local bandwidth is preserved for other tasks.

Abstract: In the field of communications technology, a method and a system for forwarding data between private networks are provided, which can enable terminals in different private networks to securely communicate with each other by using private network addresses. The method includes the following steps. A Secure Socket Layer (SSL) tunnel to an SSL Virtual Private Network (VPN) device in another private network is established. Address allocation information of the another private network is received through the SSL tunnel. The address allocation information and a mapping relation between the address allocation information and a public network IP address of the SSL VPN device transmitting the address allocation information and a session ID of the SSL tunnel transmitting the address allocation information are saved.

Abstract: A Bayesian spam filter calculates multiple handicap values, each of which is mapped to a selectable error tolerance level. Users operate a user interface component such a slider to select a desired error tolerance level. The Bayesian spam filter utilizes the corresponding handicap value for its filtering operations. Thus, the users of the anti-spam program can adjust their error tolerance levels up and down as desired.

Abstract: One method of redirecting an in-process backup operation to a new storage device involves receiving a request to perform a backup from a backup application. In response to reception of the request, the method causes backup information generated by the backup application to be stored on a first storage device. The first storage device is monitored in order to detect how much free space is available. If the amount of space available on the first storage device drops below a threshold amount prior to completion of the backup, the backup is redirected by causing any subsequent backup information generated by the backup application to be stored on a second storage device. Metadata associated with the backup identifies that information associated with the backup is stored on both the first storage device and the second storage device.

Abstract: Various methods and systems for implementing agents that facilitate end user searches of a backup catalog via a desktop search tool are disclosed. One method involves: receiving a search request from a desktop search tool, which is configured for use by an end user of a backup system; searching a backup catalog, maintained by the backup system, in response to the search request; and providing a result of searching the backup catalog to the desktop search tool.

Abstract: A method, system, and computer program product are provided to update file change log data to indicate that a change to a file in a file system has occurred. The file change log data are accessible for read access using a file system-independent operating system function. Applications can read, open, close, and seek data in the file change log using file system-independent operating system functions. The file change log data can be read by multiple applications simultaneously, even when data are being written to the file change log. Operations such as writing data to the file change log and renaming or deleting the file change log file itself are prevented when performed by an application rather than the file system. These prohibitions protect the file change log.

Abstract: The tracking control module is adapted to track time usage (e.g., during a user's subscription to a particular service) on a disconnected client over a period of time with limited server interaction in a manner that is not likely to be affected by system clock changes. The module is designed to take an initial read when an executable associated with the service starts. As the program runs, the running time during the service life can be tracked by the module based on computer cycles that occur over the service life rather than on the system clock. In some embodiments, the system clock is only relied upon to track the time between service lives during which the program is asleep, thus minimizing the affect any system clock changes would have on the accuracy of the time estimate. The module adjusts the time left in the service period according to the time determinations.

Abstract: A method and apparatus for modifying the context of messages based on a selected rule set are provided. The method comprises selecting a rule set from the database, scanning the message while comparing content of a textual message to the rule set, and determining textual modifications to the textual message based on the selected rule set to define a modified message having content that is different from the textual message.

Abstract: Techniques for restoring file system resources are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for restoring file system resources comprising determining source configuration information of one or more file system resources, modeling a source configuration based at least in part on the source configuration information, determining target configuration information, modeling a target configuration based at least in part on the target configuration information, generating restoration instructions to map the source configuration to the target configuration, and executing the restoration instructions to restore the one or more file system resources of the source configuration to the target configuration.

Abstract: A method may include receiving a request to install a second version of a software product over a first version of the software product, installing the second version of the software product in a dormant state while the first version of the software product is running, and swapping the first and second versions of the software product by activating the second version of the software product and deactivating the first version of the software product. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: In distributed storage environments, nodes may send replicated writes for temporal volumes and may be configured to request on-demand consistency intervals in order to allow multiple nodes to transition between timestamps for temporal data in a uniform and coordinated manner. In response to a request from a node for a consistency interval transition, a consistency interval coordinator may end a current consistency interval and start another and may provide coordination to various nodes to enable the nodes to transition from one timestamp to another, and thus from one temporal version to another, while prevent data corruption or inconsistency between the temporal versions. Additionally, periodic consistency intervals may be utilized to provide consistent and coordinated transitions between temporal timestamps. In some embodiments, replicated writes including temporal timestamp information may be stored persistent spillover logs allowing offline updating and versioning of data to temporal volumes.

Abstract: Disclosed herein are systems and methods providing for autonomous extraction of original natural language strings from source code and insertion of translated strings therein. Some of the examples described herein additionally utilize a database suitable for containing translations of user -viewable material and for accessing that material from developer project sandboxes. Individual developer projects may provide for the extraction of natural-language strings from source code to a shared translations database. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Abstract: The inventions relate generally to layered computing systems that provide public access to the content of the layers. Also disclosed herein are prioritization schemes usable in a layered computing system, including prioritization by layer type, by assigned priority weights, by access type, by sub-layers and by read-write indicators. Processes may further be associated to layers from which they originate, and priority given to associated layers thereby. Association may also be provided for installer services, thereby depositing an applications updates into its layer. Layers may also contain file reference information including exclusion or inclusion entries indicating what files may be written thereto. Paths recorded in layers may also embed variables to true paths on a layered system. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Abstract: In one embodiment, a system comprises a plurality of nodes. On each node, a storage virtualization component may receive the I/O operations generated from local applications on the node. The storage virtualization component may transmit the I/O operation, and detect any failures that occur in the I/O operations. If a failure is detected, the storage virtualization component may cooperate with other storage virtualization components on other nodes to successfully complete an I/O operation that experiences a failure. In one embodiment, if the I/O operation is successful on a remote node, the storage virtualization component may migrate the application that sourced the I/O operation to the remote node. In other embodiments, the storage virtualization component may monitor I/O operations and migrate the application after a pattern of local failures and successes on the remote node.

Abstract: A self access management system allows users to self-grant access rights to resources. An access policy specifies which users have what levels of access to which resources. In addition to specifying conventional access rights, the access policy specifies that at least one user has self management rights to at least one resource. A request from a user to access a resource to which the user does not have conventional access rights is received. The access policy is consulted, to determine whether the user has self management rights to the resource. If so, it is further determined whether criteria specified by the self management rights for accessing the resource are met. Responsive to the criteria being met, the access policy is updated to grant the user access rights to the resource, according to the terms of the self management rights.

Abstract: System and method for discovering Storage Area Network (SAN) fabrics and mapping switches to the fabrics. Embodiments may collect switch information from one or more sources and examine the collected switch information to determine interconnections among the switches. From this information, one or more SAN fabrics of which the switches are components may be determined, and the switches mapped to the SAN fabrics of which they are components. Embodiments may use an out-of-band protocol such as SNMP to collect switch information for all switches that can be discovered, either from individual switches or from a central switch management server, and then traverse the switch information to construct a map of how the switches are connected. From the map, one or more SAN fabrics, and which switches are connected in the same fabric(s), may be determined.

Abstract: Preventing continued distribution of a software update that is causing problems in computers is a challenging problem, particularly where the update causes a catastrophic failure such that the problem cannot be reported by the computer since the computer has been completely disabled. To manage this problem, when an update is delivered for installation, it first installs a program and configures it to execute at a specified reporting time. When that time is reached, the program sends a positive operations notification to the update server indicating that the program is okay or sends a notification that the program is okay so far, but the user is now shutting down the computer. The number of notifications received is tracked by the system in comparison to the number of software updates sent.

Abstract: The disclosure is directed to a method of tracing processing of software instructions associated with a transaction. The method includes writing an access data stream addressed to a receiving application on a remote application server and writing a transaction identifier to the end of the access data stream. The receiving application is configured to read the access data stream and the transaction identifier when an instrumented version of the receiving application is implemented on the remote application server.