Abstract: Techniques for time-dependent storage management with a portable application programming interface are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for time-dependent storage management. The method may comprise interfacing with a host and a storage system having one or more storage devices. The method may also comprise intercepting all write commands that the host issues to the storage system. The method may additionally comprise performing a copy-on-write operation for each intercepted write command, wherein copy-on-write data and metadata associated with each intercepted write command are recorded, the metadata including at least a timestamp associated with each intercepted write command.

Abstract: Systems and methods consistent with the present invention provide an address that does not conflict with other addresses. In one embodiment, a method includes receiving, at a first processor, a first packet; determining as a function of a multidimensional space for representing addresses processed by a set of data processors, a first address for the first packet; forwarding the first packet based on the determined first address.

Abstract: A backup computer storage system that protects and/or recovers data on a primary computer storage system is disclosed. The backup computer system may be used to backup databases, files, and/or applications. In some embodiments, the backup system may be used to backup an image of the primary computer system. In other embodiments, the backup system may be used to backup one or more databases. In some embodiments of the present invention, the backup system replicates an image of data that is on a primary computer system. The backup system may also be used to restore data from the backup system to the primary computer system. In some embodiments, the backup system may restore data to a database while non-affected portions of the database are available and can be used. In some embodiments, the backup system records all transactions in real time without overwriting any previously stored backup data.

Abstract: A determination is made as to whether there is a correlation between a user's security risk profile and a personalized threat profile of an actual or spreading threat. If there is a correlation, a personalized reactive alert is issued in the case of an actual threat. The personalized reactive alert informs the user of specific suspected data that may have been compromised by the threat and the specific non-computer related action that the user should take. Further, if there is a correlation, a personalized proactive alert is issued and/or personalized proactive protective action taken in the case of a spreading threat. The personalized proactive alert informs the user of the spreading threat that the user and/or the user's host computer system is particularly susceptible to. Further, the personalized proactive protective action taken provides automated risk mitigation.

Abstract: Systems, methods, apparatus and software can make use of standard input/output (I/O) interface commands to make information about virtual storage devices available to clients of those virtual storage devices. Where the storage virtualization is carried out using a switch, router, or other storage network appliance, the information about virtual devices is stored (and in many cases determined and/or processed) local to the device. Applications operating on the storage clients can conveniently access the information using I/O interface commands and need not have access to some or all of the software or functionality that virtualizes the storage.

Abstract: Detecting network threats through dynamic depth inspection is disclosed. A mandatory threat detection procedure is performed on data received via a network. It is determined probabilistically whether to perform an optional threat detection procedure on at least a portion of the data. The optional threat detection procedure is then performed if it is determined that it should be performed.

Abstract: A computer system or memory medium with instructions executable by a computer system to use a single allocator to coordinate volume transformations across virtualization layers. In one embodiment, the computer system creates a first storage object, wherein the first storage object is created to have a property. The computer system creates a second storage object out of the first storage object, wherein the second storage object depends on the property of the first storage object. The computer system then modifies the first storage object, wherein the modified first storage object maintains the property upon which the second storage object depends.

Abstract: The present invention discloses a user interface for creating a dynamic computing environment using allocateable resources. The interface enables the fast, efficient selection and configuration of resources for the computing environment. The resources are fully selectable and allocable by a system architect. In a first embodiment, the ability is provided that allows a customer or system architect to design a system by allocating resources and specifying how the resources are to be used. The system architect may create a computing environment from a remotely accessible user interface such as a web page on the Internet. Thus, the system architect can create, modify and operate the environment from anywhere in the world.

Abstract: Security sensor data from intrusion detection system (IDS) sensors, vulnerability assessment (VA) sensors, and/or other security sensors is used to enhance the compliancy determination in a client compliancy system. A database is used to store the security sensor data. In one particular embodiment, a list of device compliance statuses indexed by corresponding identifiers (e.g., IP/MAC addresses) combined from IDS, VA, and/or other security sensing technologies is made available as a non-compliance database for query, so that clients and other compliancy authentication elements can tell that a particular client appears to be out of compliance. A client-side self-policing compliance system is enabled, and can be used in conjunction with automated endpoint compliance policy configuration to reduce system administrator burden.

Abstract: During an initial scan of a journal inbox, journal reports are modified so that the Internet Message ID in the text body appears as a custom message ID value in a new custom message ID MAPI property created on the journal reports. Further, the message class value of the message class MAPI property on the journal reports is modified to a journal part. During a secondary scan of the journal inbox, related journal parts are grouped together based on the custom message ID value and message content. Also, the message class value is modified to prevent the journal reports from being considered in subsequent initial or secondary scans. One of the journal reports of each group is selected as a master copy. A new custom related journal parts MAPI property is created on the master copy that includes a related journal parts value which is a list of identifiers that can be used to locate the other related journal parts of the group.

Abstract: A technique is disclosed for identifying network traffic. The traffic data is converted into a wave vector. The wave vector is compared with a wave template. It is determined whether the wave vector is substantially similar to the wave template. If it is determined that the wave vector is substantially similar to the wave template, the traffic data is identified as being associated with a protocol with which the wave template is associated.

Abstract: A publisher uses a toolbox to graphically define web forms, by selecting and configuring components such as buttons, text boxes, menus, etc. Underlying code for the web forms (such as Extensible Markup Language, or XML) is automatically generated. The publisher defines transforms (such as Extensible Stylesheet Markup Language Transforms, or XSLTs) that process the exchange of data between the front end and the backend web service. The transforms and the code underlying the web forms is automatically combined into a frontend to the web service. The web based frontend is published on a user site, such that users can access the backend web service through the frontend.

Abstract: Malicious code detection code is executed by an information handling system. The malicious code detection code includes detection routines. The detection routines are applied to executable code under investigation. The detection routines associate weights to respective code under investigation in response to detections of a valid program or malicious code as a function of the detection routines. It is determined whether code under investigation is a valid program or malicious code as a function of the weights associated by the detection routines.

Abstract: Various embodiments of systems and methods for providing external device support for a device driver abstraction layer are disclosed. Some embodiments of a method may involve: accessing attribute information associating each of several keys with a respective device attributes, where each of the keys identifies a respective device; and configuring an interface to a device driver for communication with a device dependent on which device attributes the attribute information associates with the key that identifies the device. Configuring the interface may configure the interface to include one or more of interface features. Each of the interface features may support a respective device attribute.

Abstract: Backup and restore operations in a distributed data system are described. In one embodiment of a backup operation, a computing system includes a media server, and two or more distributed data sources. The media server is configured to establish a first connection with an agent executing on the first data source and receives control information specifying one or more additional data sources to contact to continue the backup operation. Agents on the additional data sources pass control information and/or backup data via each respective connection until the backup operation is complete. In some embodiments, two or more concurrent connections may be established between the media server and distributed data sources. In this manner, a backup operation may be performed for distributed data using control information supplied by the distributed data sources.

Abstract: A system or method for reestablishing data consistency between data volume P and its real time or near real time copy volume S. When volumes P and S enter a state of data inconsistency, data consistency can be restored through use of roll-back and/or roll-forward logs. The roll-forward log stores new data to be written to volume P. The roll-back log stores existing data of volume S before the existing data of volume S is overwritten with new data. As will be more fully described below, the roll-back log can be used to incrementally restore volume S to a prior data state in reverse chronological order, while a roll-forward log can be used to incrementally restore volume S in forward chronological to equal the data state of volume P.

Abstract: A plurality of data objects may be replicated across a plurality of computing nodes coupled to a network. The network may include a first node operable to initiate an update operation to update a plurality of replicas of a first object. If one or more of the replicas are not reachable then the update operation may update a subset (e.g., a quorum) but not all of the replicas. For each node on which one of the replicas was updated in the update operation, the node may add the object to a list of incoherent objects. The list of incoherent objects may subsequently be used to bring the lagging replicas in sync with the replicas that were updated. In another embodiment, a plurality of replicas of an object may be stored on a plurality of nodes, similarly as described above. A first node that stores a replica of the object may store a first timestamp associated with the replica on the first node.

Abstract: Various systems and methods are disclosed for storing one or more point-in-time images of data stored in a block device in a sparse file. In one embodiment, a method involves identifying a block of data within a block device and copying the block of data to a sparse file. The block of data is identified in response to being modified. The sparse file stores an incremental image of data stored in the block device. In addition to storing an incremental image, sparse files can be used to store full images. Furthermore, a sparse file can store multiple images (full and/or incremental) of data stored in a block device.

Abstract: Techniques for efficient restoration of granular application data are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for restoring one or more portions of application data comprising virtualizing one or more backup files of the application data into a specified staging area, running a recovery process for the one or more backup files, virtualizing the one or more backup files and the one or more recovery files, instantiating an instance of an application utilizing the virtualized one or more backup files and the virtualized one or more recovery files, and recovering one or more portions of the application data.

Abstract: A server is disclosed for filtering e-mail messages. The server receives requests to retrieve e-mail messages on behalf of a client and then retrieves e-mail messages from a mail server on behalf of the client. The server then filters the e-mail messages based on one or more rules and transfers the filtered e-mail messages to the client. In addition, the server continues to filter the e-mail messages after the client has disconnected from the server. In one embodiment of the invention the e-mail message recipient is sent a notification by the server indicating that messages have been filtered. The recipient is then able to scan the filtered messages and insure that the messages have been filtered correctly. In another embodiment, a third party scans the e-mail messages on behalf of the e-mail user to make this determination. Also disclosed is an e-mail filter comprising an application programming interface and a plurality of dynamically loaded rule modules adapted to interface with the API.