Abstract: Systems and methods include a snapshot interface to receive, from an application executing within a virtualized execution environment, a request to generate a snapshot of the virtualized execution environment. The snapshot interface forwards the request to generate the snapshot to a virtualization manager. The snapshot interface then receives, from the virtualization manager, a result of the request to generate the snapshot, the result indicating whether the snapshot was generated. Finally, the snapshot interface forwards, to the application, the result of the request.

Abstract: A method for testing storage protection hardware includes receiving by a non-trusted entity that is executing on a host server, a request to dispatch a secure entity. It is determined, by a secure interface control of the host server, whether the host server is in an auxiliary-secure (AS) debug mode for testing an AS entity. Based on determining that the host server is in the AS debug mode, a secure guest entity state is loaded from a state descriptor for the secure entity into an AS entity state in hardware to test, upon dispatch of the secure entity, accesses to pages in a memory that are registered as secure and as belonging to the AS entity.

Abstract: The present disclosure discloses a NVM-based method for performance acceleration of containers. The method comprises classifying each image layer of mirror images as either an LAL (Layer above LDL) or an LBL (Layer below LDL) during deployment of containers; storing the LALs into a non-volatile memory and selectively storing each said LBL into one of the non-volatile memory and a hard drive; acquiring hot image files required by the containers during startup and/or operation of the containers and storing the hot image files required by the containers into the non-volatile memory; and sorting the mirror images in terms of access frequency according to at least numbers of times of access to the hot image files so as to release the non-volatile memory currently occupied by the mirror image having the lowest access frequency when the non-volatile memory is short of storage space.

Abstract: Described is a system for utilizing fully dynamic proxies for data flow during data protection. The system determines threshold parameters for each respective virtual proxy in a plurality of virtual proxies. The system receives virtual machine protection data of each respective virtual proxy. The system detects a current data protection workload experienced by each virtual proxy operating according to its respective threshold parameters and virtual machine protection data. The system identifies at least one under-utilized virtual proxy and at least one over-utilized virtual proxy based on the current data protection workload detected on each virtual proxy. The system causes the at least one under-utilized virtual proxy to receive upcoming backup data flow before the at least one over-utilized virtual proxy.

Abstract: An application is provided as a compound virtual appliance having components to be hosted by virtual machines. Each component includes a set of virtual machine disks. Partial versions of the components are created by removing from each component each virtual machine disk determined to be a duplicate of a virtual machine disk of another component. A compact version of the compound virtual appliance is created by packing together the partial versions of the components and a single copy of each virtual machine disk having been determined to be a duplicate. The compact compound virtual appliance is deployed to a customer site. At the customer site, a complete version of the compound virtual appliance is reconstructed by adding back the single copy of each virtual machine disk having been determined to be a duplicate into each component having had the duplicate virtual machine disk removed.

Abstract: Systems and methods for identifying a characteristic of an input code by converting the input code into simplified code and using the simplified code to generate snippets that can be compared to code in a database. Preferably, code is simplified by at least one of: unifying of capitalization, removing characters, and replacing at least one of a character and a keyword with an identifier.

Abstract: A computer system is provided. The computer system includes a memory, a network interface, and at least one processor coupled to the memory and the network interface. The processor is configured to receive, via the network interface, a request for a computing session; determine a security score for the computing session; identify a virtual resource designated to support computing sessions having the security score; and establish the computing session with the virtual resource.

Abstract: A method includes monitoring client requests to access software container instances hosted by container host devices of a geographically-distributed software container platform and identifying, for a given software container instance hosted by a first one of the container host devices, geographic clusters of the client requests. The method also includes calculating a network distance from a given one of the geographic clusters to each of at least a subset of the container host devices. The method further includes replicating the given software container instance in a second one of the container host devices responsive to determining that the calculated network distance from the given geographic cluster to the second container host device is at least a threshold amount less than the calculated network distance from the given geographic cluster to the first container host device.

Abstract: A security module is disclosed. In embodiments, the security module includes a common host platform configured to co-host a plurality of certified functions via a plurality of interconnected hardware resources. The common host platform may be configured to host a first certified function independently certified via a first certifying authority, and a second certified function independently certified via a second certifying authority. The first certified function may be hosted on a first sub-set of dedicated hardware resources and a first sub-set of shared hardware resources. The second certified function may hosted on a second sub-set of dedicated hardware resources and the first sub-set of shared hardware resources including one or more hardware resources shared with the first certified function.

Abstract: The functionality offered through a game development application can be extended using a plurality of extension modules. A customer portal can expose information about the available modules to a developer, where the extension modules can include components such as a customer interface enabling an authorized entity to access or modify the functionality, as well as an application programming interface (API) or other interface for enabling the functionality to be accessed during gameplay. The API can be associated with various resources that can be allocated to the customer over a period of time, or that can be allocated dynamically in order to process discrete tasks. The allocation of resources can occur after release of the game and during live gameplay. Similar functionality can be accessed by a game administrator to trigger specific actions during gameplay.

Abstract: Data processing systems and methods, according to various embodiments, are adapted for efficiently processing data to allow for the streamlined assessment of risk ratings for one or more vendors. In various embodiments, the systems/methods may use one or more particular vendor attributes (e.g., as determined from scanning one or more webpages associated with the particular vendor) and the contents of one or more completed privacy templates for the vendor to determine a vendor risk rating for the particular vendor. As a particular example, the system may scan a website associated with the vendor to automatically determine one or more security certifications associated with the vendor and use that information, along with information from a completed privacy template for the vendor, to calculate a vendor risk rating that indicates the risk of doing business with the vendor.

Abstract: A communication processing device including: a memory that stores data relating to a pre-update firmware, and second data relating to a post-update firmware, and that stores first reference destination address indicating the storage area of reference destination included in the first data in association with the reference destination; a rewriting unit configured to rewrite at least some of the first reference destination address stored in the memory with second reference destination address indicating the storage area of the reference destination in the second data; and a control unit configured to, when referring to the reference destination in the first data, refer to the second data on the basis of the second reference destination address stored in the memory.

Abstract: Systems and methods for modifying bytecode at runtime are provided. A virtual machine can execute bytecode of an application. The virtual machine can receive a modification for the application that includes modified bytecode for the application. The virtual machine can identify a portion of the bytecode of the application that corresponds to the modified bytecode. The virtual machine can update the portion of the bytecode of the application at runtime using the modification.

Abstract: Described herein are systems, methods, and software to manage configurations between dependent clusters. In one implementation, a management system maintains a data structure that indicates relationships between clusters in a computing environment. The management system further identifies a configuration modification to a first cluster and identifies other clusters associated with the first cluster based on the data structure. Once the other clusters are identified, the management system may determine configuration modifications for the other clusters based on the data structure and initiate deployment of the configuration modifications.

Abstract: A method for controlling transactional processing system having transactions that include multiple tasks, a throughput limit a transaction processing time limit includes allocating a plurality of threads to be used by multiple tasks to achieve a throughput approximating the throughput limit. The method assigns the multiple tasks to the plurality of threads and assigns respectively different processing delays to the plurality of threads. The processing delays span an interval less than the transaction processing time limit. The method processes the multiple tasks within the transaction processing time limit by executing the plurality of threads at times determined by the respective processing delays.

Abstract: Techniques for migrating virtual machines in logical clusters based on demand for the applications are disclosed. In one example, a system may include a logical cluster that spans across a first datacenter located at a first site and a second datacenter located at a second site, the second datacenter being a replication of the first datacenter. The first datacenter may include a virtual machine executing an application. Further, the system may include a management node communicatively coupled to the first datacenter and the second datacenter. The management node may include a dynamic affinity policy engine to monitor the application running in the first datacenter, determine a demand for the application from the first datacenter and the second datacenter based on the monitoring, and recommend migration of the virtual machine hosting the application from the first datacenter to the second datacenter based on the demand for the application.

Abstract: A method comprises receiving a request to execute an instance of a given software container, determining source code entities of source code of the given software container, and generating a given software container profile for the given software container based at least in part on rankings associated with the source code entities. The method also comprises creating a resource management plan for the given software container utilizing one or more machine learning algorithms, the resource management plan comprising resource management metric thresholds determined based at least in part on historical resource utilization data for additional software containers having associated software container profiles similar to the given software container profile.

Abstract: A virtualized application runs on top of a guest operating system (OS) of a virtual machine and is supported by a file system of the guest OS. The method of supporting the virtualized application with the file system includes provisioning a first virtual disk as a data store of the file system and a second virtual disk for the virtualized application, wherein the first and second virtual disks store first and second files of the virtualized application, respectively, retrieving metadata of the virtualized application, updating a master file table of the file system according to the retrieved metadata to map the first files to logical blocks of the file system, updating the master file table to map the second files to additional logical blocks according to the retrieved metadata, and creating a mapping for the additional logical blocks, that is used during an input/output operation, according to the retrieved metadata.

Abstract: A method, computer program product, and computing system for generating a virtual storage appliance configuration file. A storage system may be queried for physical configuration information associated with deploying a virtual storage appliance based upon, at least in part, the virtual storage appliance configuration file. One or more virtual storage appliance deployment vulnerabilities associated with the storage system may be identified based upon, at least in part, the virtual storage appliance configuration file and the physical configuration information. A notification including the identified one or more virtual storage appliance deployment vulnerabilities may be generated.

Abstract: According to a computer-implemented method, a first virtual machine (VM) is deployed on a first hypervisor from a non-clustered server pool to run a workload of one or more applications. A dummy VM is configured on a second hypervisor from the non-clustered server pool to reserve same resources as the first VM without powering the dummy VM. The first VM is powered with a cold start on the second hypervisor using the resources on the dummy VM. Also, the first VM is provided with a same VM configuration on the second hypervisor that was on the first hypervisor.