Abstract: A method and system for implementing threat intelligence as a service in a cloud computing environment. Specifically, the disclosed method and system entail leveraging existing disaster recovery (DR) solutions to perform threat intelligence tests and identify known cyber security threats and/or anomalous activity instigated by unknown cyber security threats, if any, on system images backed up on the existing DR solution. In leveraging existing DR solutions, a threat intelligence service is integrated into the existing DR solution as an additional feature.

Abstract: In one embodiment, a method includes replicating a production volume on a plurality of replica volume portions. Each replica volume portion is stored on a respective storage array with a respective journal. The replicating includes distributing data from a write command to a production volume across the replica volume portions using a coding scheme. A subset of replica volume portions, less than a total number of replica volume portions, includes data for a full replica volume of the production volume.

Abstract: A first cloud is provided with a first abstraction layer between a first instance of an application and a first set of different storage types. A second cloud, remote from the first cloud, is provided with a second abstraction layer between a second instance of the application and a second set of different storage types. A replication protection appliance (RPA) is connected between the first and second abstraction layers. The first abstraction layer intercepts a write command from the first instance of the application to storage of a particular type among the first set of different storage types. The first abstraction layer sends a copy of the write command to the RPA. The RPA replicates the write command to the second abstraction layer for the second abstraction layer to send to corresponding storage of the particular type among the second set of different storage types.

Abstract: According to one embodiment, a request is received for restoration, where the request includes an application identifier (ID) identifying a first application and a timestamp specifying a particular time and date (time/date) of past. A restore module executed by a processor identifies a first application bundle based on the timestamp and the application ID. The first application bundle includes an executable image of the first application and metadata describing an operating environment that hosted the first application at the particular time/date. The restore module restores the first application in a first operating environment configured based on the metadata of the first application bundle.

Abstract: A method and system for implementing cyber security as a service in a cloud computing environment. Specifically, method and system entail leveraging existing disaster recovery (DR) solutions to perform cyber security tests and assess cyber security vulnerabilities, if any, on system and/or application images backed up on the existing DR solution. In leveraging existing DR solutions, a cyber security service is integrated into the existing DR solution as an additional feature.

Abstract: Systems and methods for backing up and restoring serverless applications are provided. A serverless application is queried to identify the functions and services used. These functions and services are transformed into a manifest or graph that allows the relationships of the serverless application to be identified in an automated manner. The serverless application can be backed up and/or restored using the manifest.

Abstract: A selection is received of a copy of an application backed up from a first FaaS environment for deployment into a second FaaS environment. An application manifest used to backup the application is accessed. The manifest specifies application functions, backend services, and application function mappings. An application function interacts with a backend service in executing the application. An application function mapping includes a condition under which the application function is invoked. The copy of the application is restored into the second FaaS environment. A condition specified in the restored version of the application function mapping is changed. Based on the changed condition, the restored version of the application function is invoked when the restored version of the backend service performs an operation, and the application function of the application corresponding to the restored version of the application function is not invoked.

Abstract: A problem that occurs during execution of an application is debugged by building a lightweight container image and an enhanced container image. Data traffic for debugging is selected and the selected data traffic is copied using an enhanced copy. The problem is debugged using the enhanced container image and the selected data traffic.

Abstract: Detection of a cause of an error occurring in a data center is provided. A time period between a failure event in the data center and a previous successful event is determined. A set of devices involved in the failure event is generated using a data protection advisor (DPA). Data collected for the set of devices during the determined time period is scanned to detect at least one configuration change made during the determined time period. Based on a result of the scanned collected data, the at least one configuration change is displayed as a potential root cause of the error.

Abstract: A storage system is provided, comprising a processor and a storage array comprising a data storage entity storing computer-accessible data and a container executing within the storage array. The container is configured to run a temporal query service configured to query the data storage entity in the storage array from within the storage array, wherein a structure of a temporal query generated in accordance with the temporal query service comprises a query format configured to be compatible with a temporal structure of the data storage entity. The temporal query service is configured to parse at least a first temporal query received from a requesting entity to determine a set of temporal query parameters relating to data stored on the data storage entity, query the data storage entity with a second temporal query formed in accordance with the set of query parameters, and return temporal query results.

Abstract: A computer program product, system, and method for generating coded fragments comprises determining a set of available data protection plans; determining one or more parameters associated with a customer, a host, or a data protection system; generating a recommended host protection configuration for the host using the parameters, wherein the recommended host protection configuration includes one or more of the available data protection plans; and assigning the recommended host protection configuration to the host.

Abstract: In one aspect, a method includes migrating a database object from a source database to a target database, updating a storage of the location of the DB object to be the target database, directly accessing one of the target database and the source database during the migrating and executing, during the migrating, a database command by retrieving the DB object from the other one of the target database and the source database.

Abstract: Embodiments of the present disclosure relate to a method, an apparatus and a computer program product of recovering from a failure of a first node within a data storage system by receiving notice from the data storage system that the first node has failed; and restoring the first node based on a heat map of data I/O activity to the first node.

Abstract: A storage system is provided, comprising a processor and a first storage array in operable communication with the processor. The first storage array comprises a data storage entity and a container executing within the storage array, the container in operable communication with the data storage entity. The container is configured to run at least one service used to control at least one operation used by the storage system. In certain embodiments, the container is configured to execute the service within the storage array to control operations involving the storage array from within the storage array. In certain embodiments, the container further comprises a service intercepting and controlling inputs and outputs (I/O) to and from the storage system.

Abstract: A method for software application management includes receiving, from a client device, a software application, obtaining a software application manifest for the software application, and transmitting the software application manifest to multiple vendors. Each of the vendors includes computing system resources for hosting the software application. The method further includes receiving bids from the vendors, selecting, from the bids, a winning bid, and transmitting the software application and payment information to the vendor of the winning bid.

Abstract: A method and a system for implementing golden container storage. Specifically, the disclosed method and system entail the creation of a container registry to securely store golden containers (or templates) for containers of specific application types that execute within a service platform. Given short retention spans, the containers are constantly being cycled out. Each recreated container is modeled after one of the golden containers, and assigned new Internet Protocol (IP) and/or media access control (MAC) addresses rather than assuming the existing addresses of the containers the recreated containers replace. Substantively, embodiments of the invention employ these tactics towards implementing a moving target defense (MTD) strategy.

Abstract: According to one embodiment, a request is received for estimating migrating a first dataset from a first cloud system to a second cloud system. A migration cost estimation module determines a network bandwidth required to migrate the first dataset from the first cloud system to the second cloud system, determines a duplicated data time period during migration that the first dataset has to be maintained by both the first cloud system and the second cloud system for service continuity, and determines a total cost of migrating the first dataset from the first cloud system to the second cloud system based on the required network bandwidth and the duplicated data time period. It is then determined whether to migrate the first dataset from the first cloud system to the second cloud system based on the total cost.

Abstract: Management of access to data stored in a storage system is provided using container images. Specifications for a requested data scan of the storage system are received. The requested data scan is performed using a container image according to the received specifications, the container image being run on the storage system. A cost of resources is associated with the requested data scan performed using the container image. Access to data stored in the storage system is managed based on the cost of resources.

Abstract: An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform implements compute services for users and further comprises a copy data manager configured to maintain a data version repository. The data version repository stores under the control of the copy data manager multiple data versions for each of one or more of the compute services implemented by the processing platform. A code version repository stores multiple code versions for each of one or more of the compute services. Automated testing of one or more of the code versions for a given one of the compute services and one or more of the data versions for the given compute service is carried out by an automated code testing system applying a search algorithm to traverse both the one or more code versions and the one or more data versions.

Abstract: Described embodiments provide systems and methods for operating a storage system. One or more data replicas of production data of the storage system are generated. For each of the one or more data replicas, an associated hash value is generated. The one or more data replicas are stored in a replica storage of the storage system, and the associated hash values are stored as journal data associated with the respective data replica. Each data replica is verified based upon the hash value retrieved from the journal data.