Abstract: A method, system, computer system, and computer program product to specify the particular characteristics of hardware to acquire to enable a logical volume to be maintained in accordance with the purpose for which the logical volume was created. In response to a command to perform an operation on a logical volume, existing storage that can be used to perform the operation is identified. If the existing storage is insufficient to perform the operation, a specification is developed for the additional storage to acquire to enable the operation to be performed successfully. Connectivity of the additional storage is also specified to storage objects in the existing logical volume so that the newly-acquired resources can be used for their intended purpose when acquired.

Abstract: A system and method for re-mapping location-independent addresses in a computer network. A first node may send a first message addressed to a location-independent address, where the first message comprises a request to host an instance of the location-independent address. A second node with which the location-independent address is associated may receive the first message, possibly after the first message was propagated through a path of intermediate nodes. The second node may send a response message to the first node, where the response message indicates whether the second node is granting permission to the first node to host an instance of the location-independent address. The response message may also specify whether the second node is giving up its own instance of the location-independent address.

Abstract: A method involves: executing an application on a cluster, which includes several nodes; and, subsequent to the cluster being partitioned into several sub-clusters, a first one of the sub-clusters executing a first one of the applications and a second one of the sub-clusters being capable of executing a second application. The first sub-cluster executes the first one of the applications after either determining that no other sub-cluster includes nodes that are part of the logical cluster that runs that application or after winning ownership of the logical cluster that runs the application. In a competition for ownership of a logical cluster, the winning sub-cluster is selected based on application-specific information, which is specific to the application that runs on that logical cluster.

Abstract: Mechanisms for backing up at least a portion of storage at a primary computing system to a backup computing system. The primary system identifies primary memory block(s) that have altered content since the time of a last backup. For each such primary block, the primary system estimates whether or not the altered content of the primary block is the same as content of another primary block as the content existed at the time of a specific backup. If they are the same, the primary system backs up the corresponding block by simply informing the backup system of the matching content, and having the backup system write the matching content of other backup block over the respective backup block, rather than transferring the entire block contents.

Abstract: A method and apparatus for generating computer configuration rules comprising receiving configuration data regarding a plurality of computers, analyzing the configuration data to determine associations within the configuration data, and generating configuration rules from a result of the analysis.

Abstract: A method, system, computer system, and computer-readable medium that identify the number of times areas of storage are updated and use that information to synchronize primary and secondary storage areas. The invention enables quick resumption of operations upon a discovery that primary and secondary data have become unsynchronized. Regions of storage that are unsynchronized can be identified quickly without the need to read the change log. In addition, data are copied efficiently, with minimal or no duplication of effort or data. Faster and more reliable storage can be allocated for storing regions of data that are “hot spots,” thereby making better use of existing storage resources and budgets.

Abstract: A system and method are disclosed for preventing detection of a selected process running on a computer. A request to access a file concerning a process running on the computer is received from a user. It is determined whether the file requested by the user relates to the selected process. If the requested file does not relate to the selected process, the user is provided with access to the file.

Abstract: The inventions relate generally to layered computing systems that provide public access to the content of the layers. Also disclosed herein are prioritization schemes usable in a layered computing system, including prioritization by layer type, by assigned priority weights, by access type, by sub-layers and by read-write indicators. Processes may further be associated to layers from which they originate, and priority given to associated layers thereby. Association may also be provided for installer services, thereby depositing an applications updates into its layer. Layers may also contain file reference information including exclusion or inclusion entries indicating what files may be written thereto. Paths recorded in layers may also embed variables to true paths on a layered system. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Abstract: The inventions relate generally to layered computing systems that provide public access to the content of the layers. Also disclosed herein are prioritization schemes usable in a layered computing system, including prioritization by layer type, by assigned priority weights, by access type, by sub-layers and by read-write indicators. Processes may further be associated to layers from which they originate, and priority given to associated layers thereby. Association may also be provided for installer services, thereby depositing an applications updates into its layer. Layers may also contain file reference information including exclusion or inclusion entries indicating what files may be written thereto. Paths recorded in layers may also embed variables to true paths on a layered system. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Abstract: The disclosure is directed to systems and methods for patching computer programs. In one example, a patch is virtually installed to a computing device having a base file system and configuration, a computer program, and a patch layering subsystem. The virtual installation may include storing content of the patch to a patch layer, and generating and storing mapping data defining at least one relationship between the content in the patch layer and content in the base file system and configuration. The virtually installed patch may be enabled, including applying the mapping data to the patch layering subsystem such that the patch layering subsystem is configured for selectively redirecting access requests from the base file system and configuration to the patch layer. In certain embodiments, the enabled patch may be disabled by reversing the application of the mapping data to the patch layering subsystem.

Abstract: A system and method for performance monitoring including instance life cycle event monitoring is disclosed. A performance monitoring system may correlate performance data to application instance life cycle events. Changes in performance at an instance level, application level or tier level may be related to application instance life cycle events such as creation, migration and destruction. In one embodiment, a performance monitoring method may include collecting performance data for one or more application instances, detecting one or more instance life cycle events associated with the one or more application instances, correlating the performance data to the one or more instance life cycle events, and storing the correlated performance data.

Abstract: The present invention discloses user interface for creating a dynamic computing environment using allocateable resources. The interface enables the fast, efficient selection and configuration of processing resources for the computing environment. The resources are fully selectable and allocable by a system architect. In a first embodiment, a primary company, Design2Deploy, Inc.® provides the ability for a customer or system architect to design a system by allocating resources and specifying how the resources are to be used. The system architect may create a computing environment from a remotely-accessible user interface such as a web page on the Internet. Thus, the system architect can create, modify and operate the environment from anywhere in the world.

Abstract: A method and system of replicating data using a recovery data change log. According to one embodiment a method is provided in which a copy of a data change log at a primary node is maintained at a data recovery node, the data change log being associated with a primary data volume of the primary node, a failure of the primary data volume is detected, and a secondary data volume of a secondary node is updated using the copy of the data change log in response to the detection.

Abstract: Systems, methods, and computer readable media for determining whether a computer file (340) has been infected by an attacking agent. A scanning engine (205) generates a new hash of a critical viral target region of the file (340) and compares it to a stored hash of the critical viral target region. The scanning engine (205) determines whether the file (340) has been scanned by the most recent version of a detection module (425) associated with the attacking agent. If the hashes are identical and the file (340) has been scanned by the most recent version of the detection module (425), the scanning engine (205) determines that the file (340) is free of infection by the attacking agent.

Abstract: A scan-on-read manager efficiently scans received data. The scan-on-read manager detects attempts by applications to read received data. The scan-on-read manager scans received data only responsive to an application attempting to read it. The scan-on-read manager only allows the application to read received data that has been scanned.

Abstract: A method for reading data in a block-level single-instance storage system may involve receiving a first address of a data block, retrieving a signature corresponding to the first address, and reading data from a second address corresponding to the signature. A storage system may include a storage manager and first and second lookup tables. The storage manager may interface with an application (such as a database system or a file system) that uses a first set of identifiers for data blocks. The storage manager may use a second set of identifiers for the data blocks, and translates between the first and second identifiers using the lookup tables. The first lookup table indexes data block signatures according to the first set of identifiers. The second lookup table indexes the second set of identifiers according to the data block signatures. The second lookup table may be pruned to provide single instance storage.

Abstract: The present invention discloses systems and methods for providing a multi-platform and multi-national gateway service library. A client may communicate with a gateway in its language character set by recognizing unique internal locale ID. The gateway may decode data transmitted by the client in order to access UTF-8 XML files stored on the gateway. In addition, the gateway may encode messages into a character set used by the client.

Abstract: A database server receives an incoming query and converts the query into its canonical form. The database server compares the canonical incoming query with stored template queries. If the incoming query matches one of the stored template queries, then the query is legitimate and the query is executed on the database. If the canonical incoming query does not match one of the stored template queries, then the database server determines whether the incoming query is malicious or anomalous. The database server identifies tokens in the incoming query that are not present in a similar template query. If the tokens have meaning in the language utilized to express the query, the database server declares the query malicious. Otherwise, the database server declares the query anomalous.

Abstract: Method and apparatus for managing digital identities through a single interface is described. One aspect of the invention relates to managing digital identities related to a user. An identity policy of an entity is obtained. At least one relevant digital identity is selected from the digital identities. Each relevant digital identity includes information required by the identity policy. A selected digital identity is obtained from the relevant digital identity or identities. A representation of the selected digital identity is provided to the entity that complies with the identity policy.

Abstract: A system and method for communicating file system events using a publish-subscribe model. In one embodiment, the system may include a storage device configured to store data and a file system configured to manage access to the storage device and to store file system content. The file system may be further configured to detect a file system content access event, and in response to detecting the file system content access event, to publish a record of the file system content access event to a publish-subscribe channel accessible by one or more applications.