Abstract: An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to receive a request to execute an application in a function-as-a-service (“FaaS”) environment, to initiate execution of the application responsive to the request, and to invoke a plurality of application functions with each such application function interacting with one or more backend services in executing the application. The processing platform is further configured to automatically generate an application manifest characterizing relationships between the application functions and the backend services utilized in executing the application, to capture state of the application for a particular point in time based at least in part on the application manifest, and to perform operational recovery of the application for the particular point in time utilizing the captured state.

Abstract: Systems and methods for backing up and restoring serverless applications are provided. A serverless application is queried to identify the functions and services used. These functions and services are transformed into a manifest or graph that allows the relationships of the serverless application to be identified in an automated manner. The serverless application can be backed up and/or restored using the manifest.

Abstract: Dynamic honeypots for computer program execution environments are described. A determination is made whether a time period has expired since a computer program execution environment, of multiple computer program execution environments, began executing a computer program that provides a user service. The computer program execution environment is changed into a computer security mechanism that counteracts an attempt of unauthorized use of a system that comprises the computer program execution environment, in response to a determination that the time period has expired since the computer program execution environment began executing the computer program that provides the user service.

Abstract: The life cycle of one or more containers related to one or more containerized applications is managed by determining that a predefined retention time for a first container of a plurality of containers has elapsed; in response to the determining, suspending new session traffic to the first container; and waiting for a predefined session dilution time before terminating the first container and/or changing a role of the first container. In some embodiments, the session dilution time allows existing sessions to complete before the first container is disconnected from a service platform.

Abstract: A plugin is provided to a service that includes a database for storing data corresponding to transactions received by the service and applied to the database. Upon receipt of a transaction to be performed by the service, the plugin receives a message generated by the service and associated with informing another service of the transaction. The message is stored in the database together with the transaction, the message and transaction thereby being in the same transactional context. Upon the transaction being committed, the message is also processed because the transaction and message are in the same single transactional context within the database.

Abstract: A selection is received of a copy of an application backed up from a first FaaS environment for deployment into a second FaaS environment. An application manifest used to backup the application is accessed. The manifest specifies application functions, backend services, and application function mappings. An application function interacts with a backend service in executing the application. An application function mapping includes a condition under which the application function is invoked. The copy of the application is restored into the second FaaS environment. A condition specified in the restored version of the application function mapping is changed. Based on the changed condition, the restored version of the application function is invoked when the restored version of the backend service performs an operation, and the application function of the application corresponding to the restored version of the application function is not invoked.

Abstract: Systems and methods for backing up and restoring serverless applications are provided. A serverless application is queried to identify the functions and services used. These functions and services are transformed into a manifest or graph that allows the relationships of the serverless application to be identified in an automated manner. The serverless application can be backed up and/or restored using the manifest.

Abstract: A method and system for implementing risk-based cyber security. Specifically, the disclosed method and system entail evaluating risk as a decision threshold for conducting cyber security assessments of system images within cloud computing environments. Further, the disclosed method and system pivot on intelligence pertaining to the latest cyber threats and/or vulnerabilities found worldwide.

Abstract: Systems and methods for running an application program on a database host is disclosed. According to some embodiments, the system comprises an agent installed on the database host. The system further comprises an application engine installed on an application server. The application engine is configured to create and deploy the agent to the database host to be installed. The agent is configured to command a daemon installed on the database host to download a container image of the application program based on a container image name received from the application server.

Abstract: An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to execute a cloud-native application utilizing a plurality of micro-services each associated with a different set of one or more underlying databases, to capture state of the cloud-native application for a particular point in time, and to perform operational recovery of the cloud-native application for the particular point in time utilizing the captured state. Capturing state of the cloud-native application for the particular point in time comprises capturing the state in accordance with a directional dependency graph that characterizes relationships between the micro-services and the associated databases utilized in executing the cloud-native application in order to ensure directional consistency between the databases in the captured state.

Abstract: Systems and methods for backing up and restoring serverless applications are provided. A serverless application is queried to identify the functions and services used. These functions and services are transformed into a manifest or graph that allows the relationships of the serverless application to be identified in an automated manner. The serverless application can be backed up and/or restored using the manifest.

Abstract: A storage system comprises an object store, which comprises a plurality of metadata objects, a plurality of change objects, and a plurality of data objects associated with data stored in at least one logical unit of a production site, and a replication site configured to generate a requested point in time (PIT) based at least in part on the plurality of data objects, by: dividing the plurality of metadata objects into a plurality of respective portions of metadata objects; mapping each respective portion of metadata objects to a respective one of a plurality of reducer nodes; performing map reduce operations on the respective portion of metadata objects, at each respective one of the plurality of reducer nodes, to apply the most recent list of changes that occurred to each offset before the first requested PIT; and merging together the list of changes from each reducer node into the requested PIT.

Abstract: A computer-implemented method is provided. First information is received from at least a first data source. Based at least in part on analysis of the received first information, a determination of a first risk of a first adverse event is made, the risk affecting a first entity associated with a first location. Based at least in part on the first risk, at least a first impact from the first adverse event on the first entity is determined. At least a first action is dynamically caused to occur either before the completion of the first adverse event, the first action configured to substantially mitigate the first impact.

Abstract: One embodiment is related to a method for setting a tenant context for an application in a multi-tenancy environment, comprising: identifying a tenant identity for a tenant request, wherein the tenant identity is included in the tenant request; and setting a proper context for a first service of the application based on the identified tenant identity.

Abstract: A bug or problem that occurs during execution of an application is detected and a time at which the problem occurred is stored. An enhanced copy of the application is restored from before the time at which the problem occurred, and the enhanced copy of the application is run. If the problem is reproduced, the application is paused. If the problem is not reproduced, restoration of the enhanced copy, running of the enhanced copy and detection of the problem are repeated for a pre-designated number of times.

Abstract: A method and system for implementing cloud native application threat detection. Specifically, the disclosed method and system entail configuring a webhook within a build pipeline for cloud native applications, which when triggered by the detection of modifications to container configuration and/or definition files associated with the cloud native applications, forwards exact copies of the cloud native applications to a threat detection service for cyber security assessing. Further, based on the assessing, cloud native applications may be impeded from continuing, or alternatively, may be permitted to continue along, the build pipeline.

Abstract: An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to receive a request to execute a serverless application, to initiate execution of the serverless application responsive to the request, to utilize one or more application function mappings to invoke one or more application functions with each such application function interacting with one or more backend services in executing the serverless application, to capture state of the serverless application for a particular point in time, and to perform operational recovery of the serverless application for the particular point in time utilizing the captured state. Capturing state of the serverless application for the particular point in time comprises capturing the state in accordance with a previously-generated serverless application manifest characterizing the application function mappings, the application functions, and the backend services.

Abstract: A method and system for implementing a cloud native crowdsourced cyber security service. Specifically, the disclosed method and system entail leveraging existing disaster recovery (DR) solutions to perform cyber security assessments on cloud native application images restored within isolated cloud-based testing sandboxes. In leveraging existing DR solutions, a crowdsourced cyber security service is integrated into the existing DR solution as an additional feature.

Abstract: A computer implemented method, system, and computer program product comprising intercepting an interaction with a data storage capability at the abstraction layer enabled to intercept data interactions for different types of data storage capabilities; wherein the interaction changes data on the data storage capability; sending a copy of the interaction to a replication data storage capability; and sending the interaction to the data storage capability.

Abstract: Encapsulated application templates are provided for containerized application software development. An exemplary method for managing a plurality of services in a containerized application program comprises: creating an application template of the containerized application program, the application template comprising an identifier of a current version of each of the plurality of services, dependencies of the given service with other services of the application, runtime parameters and configurations of the given service; generating a transferable platform independent self-contained machine-readable token comprising the application template; and providing the transferable platform independent self-contained machine-readable token comprising the application template to another device as a common entry point to instantiate the containerized application program.