Abstract: Techniques for processing electronic documents are disclosed. In one particular embodiment, the techniques may be realized as a method for processing electronic documents comprising obtaining an electronic document being sent over a network toward a destination, analyzing text content of the electronic documents to identify whether the electronic document matches any of a plurality of predefined document templates, wherein the electronic document conforms to a structure of at least one of the plurality of predefined document templates, and wherein the analyzing comprises executing at least one machine learning algorithm, the at least one machine learning algorithm trained using at least one sample electronic document having a predefined template, obtaining a document loss prevention (DLP) policy based on the at least one document template associated with the electronic document, and selectively allowing the electronic document to continue toward the destination based on the DLP policy.

Abstract: A method and apparatus for processing a transform function and parameter information to represent data files is described. In one embodiment, the method includes processing at least one data file to identify a reference file, a transform function and parameter information and storing the transform function and the parameter information, wherein the transform function and the parameter information is applied to the reference file to create the at least one data file.

Abstract: A method and apparatus for streaming applications to a plurality of clients within a peer-to-peer network is provided. In one embodiment, a method for distributing application blocks to facilitate application streaming within a peer-to-peer network includes processing location information regarding a plurality of data chunks amongst a plurality of clients, wherein the plurality of data chunks form at least a portion of an application block and communicating the location information amongst the plurality of clients, wherein the location information is used to request at least one data chunk of the plurality of data chunks.

Abstract: A method and apparatus for detecting malicious software activity, using at least one processor, based on an Internet resource information database in memory is described. In one embodiment, a method for detecting malicious software activity, using at least one processor, based on an Internet resource information database in memory includes processing Internet activity to determine source and time information associated with at least one application download, comparing the Internet resource information database with the source and time information associated with the at least one application download to identify at least one suspicious application, and monitoring execution of the at least one suspicious application.

Abstract: Method and apparatus for template-based processing of electronic documents is described. In some examples, text content of the electronic documents is analyzed to identify whether each of the electronic documents matches any of a plurality of document templates. A template index is generated that relates at least one of the electronic documents with at least one of the plurality of document templates associated therewith. A search query is generated using at least one of the plurality of document templates as a respective at least one search parameter. An archive having the electronic documents is searched using the template index to locate any of the electronic documents that match the at least one document template of the search query.

Abstract: A method and apparatus for securing sensitive data from misappropriation by malicious software is provided. In one embodiment, the method for securing sensitive data from misappropriation by malicious software includes examining a history to identify potentially compromised sensitive data upon an occurrence of the malicious software and notifying a user regarding the potentially compromised sensitive data.

Abstract: A method and system of providing replica files within a fileset is disclosed. According to one embodiment, a method is provided which comprises associating a source file and a replica file of the source file within a fileset, wherein the replica file of the source file comprises a virtual copy of the source file. In another embodiment wherein the source file comprises a metadata file system object and the replica file of the source file comprises a replica metadata file system object, the associating comprises generating a reference within the replica metadata file system object to the metadata file system object.

Abstract: Method and apparatus for detecting web-based electronic mail in network traffic is described. In some examples, web pages are extracted from the network traffic. Fields in each page of a group of the web pages that share a documents structure are identified. A statistical analysis of the fields of each page in the group of web pages is performed to identify any electronic mail (e-mail) fields. The group of web pages is indicated to include web-based e-mail messages if the fields of each page in the group of web pages include at least one e-mail field.

Abstract: A system and method for data storage in an array. A system includes a client coupled to a storage subsystem including data storage locations addressable as rows and columns in an array. Each column comprises a separate storage device. Each row includes redundant data. For a given row, a coordinating storage device coordinates the computation and storage of redundant data. The system detects a failure of a storage region and in response, configures an overlay storage device to temporarily overlay the failed region, maintains an association between the overlay device and the failed region, and maintains a record of changes made to the overlay device while the region is in a failed state. In response to detecting that the failed region has been restored, the system uses the association to identify the overlay device and uses the record of changes made to the overlay device to resynchronize the failed region.

Abstract: A method and system for generating ranking criteria used to rank items in a computer system. The ranking criteria is based, at least in part, on storage information related to each of the items to be ranked. The storage information includes a storage parameter and/or a backup parameter. In one embodiment, a list of items is received in which storage information associated with each of the items is gathered. The items are ranked according to a relationship between the determined ranking criteria and at least the storage information associated with each of the items.

Abstract: A system and method for data storage in an array. A system includes a client coupled to a storage subsystem including data storage locations addressable as rows and columns in an array. Each column comprises a separate storage device. Each row includes redundant data. For a given row, a coordinating storage device coordinates the computation and storage of redundant data. The system detects a failure of a storage region and in response, configures an overlay storage device to temporarily overlay the failed region, maintains an association between the overlay device and the failed region, and maintains a record of changes made to the overlay device while the region is in a failed state. In response to detecting that the failed region has been restored, the system uses the association to identify the overlay device and uses the record of changes made to the overlay device to resynchronize the failed region.

Abstract: A method and system of providing access to a virtual storage device is disclosed. According to one embodiment, access is provided to a virtual storage device comprising a file system storage object to store data to be written to the virtual storage device and a storage device. According to another embodiment, the virtual storage device further comprises a file system storage object to represent the virtual storage device.

Abstract: A method involves generating a block-level write operation, which causes a value to be written to a primary volume, and generating information indicative of whether any of the block-level write operation should be transferred to a secondary site during replication of data in the primary volume. The information can indicate that all, part, or none of the block-level write operation should be transferred to the secondary site. If the information indicates that less than all of the block-level write operation should be transferred to a secondary site, the information can also indicate that logical information associated with the block-level write operation should be transferred to the secondary site instead of transferring the value being written by the block-level write operation.

Abstract: A method for improving storage system performance is disclosed. The method includes cloning information stored in a first unit of storage in a second unit of storage. The first unit of storage is stored in a first cache maintained by an upper-level system, while the second unit of storage is stored in a second cache.

Abstract: A method and system of providing a write-accessible storage checkpoint is disclosed. According to one embodiment of the present invention, a first writable storage checkpoint is associated with a first storage checkpoint of a storage checkpoint chain where the storage checkpoint chain is independent of the first writable storage checkpoint and a write operation is then performed utilizing the first writable storage checkpoint.

Abstract: A method involves generating a block-level write operation, which causes a value to be written to a primary volume, and generating information indicative of whether any of the block-level write operation should be transferred to a secondary site during replication of data in the primary volume. The information can indicate that all, part, or none of the block-level write operation should be transferred to the secondary site. If the information indicates that less than all of the block-level write operation should be transferred to a secondary site, the information can also indicate that logical information associated with the block-level write operation should be transferred to the secondary site instead of transferring the value being written by the block-level write operation.