Abstract: Disclosed are systems and methods for using a virtual media device to communicate messages to one or more applications running in a virtual machine (VM) without the need to expose credential information. Based on a media image having been mounted on a virtual media device of the VM, a notification may be generated to enable an agent in the VM to access the media image. The media image may include a message for one or more applications running in the VM. The agent may be configured to retrieve the message and to communicate the message to the one or more applications to enable the one or more applications to perform operations based on the message. The agent may be configured to eject the virtual media device based on completion of the operations.

Abstract: Systems and methods are disclosed for performing a backup of data to a backup server for one or more applications on a virtual machine having a universally unique identifier (UUID). A backup application can be deployed within the virtual machine, residing on a guest operating system. The backup application can report a list of applications on the virtual machine to the backup server. The backup server can deploy any application-specific modules that may be needed to perform the backup, and a list of pre- and post-backup actions to take, per application. The backup server can trigger the pre- and/or post-backup actions. The virtual machine can inform the backup server that the pre- and/or post-backup actions have completed. Backups can be in accordance with one or more policies stored at the backup server and associated with the virtual machine UUID or associated with an account that the virtual machine, or its user, are associated with.

Abstract: In one example, a method for facilitating read-write processes in a read-only environment includes intercepting a write request directed to read-only data, the write request including a data block. A file object construct is then created that is representative of the read-only data, and the file object construct is stored in association with a unique identifier. The data block of the write request is written to a data structure so that the data block is mapped to the file object construct. The file object construct, when retrieved, includes a representation of the read-only data modified in accordance with the write request, but no change is required to be made to the underlying read-only data.

Abstract: In one example, a method for validating a user includes transmitting, to a management server, a request for a shared secret, and receiving, from the management server, the shared secret. Next, the shared secret received from the management server is compared to a secret identified in a user request for access to a backup of data associated with a computing device. The user is granted access to the backup when the shared secret identified by the user matches the shared secret obtained from the management server, and the user is denied access to the backup when the shared secret identified by the user does not match the shared secret obtained from the management server.

Abstract: In one example, a method for processing data includes receiving a request to perform an operation concerning stored data that is ‘read only’ data. The request includes one or more data blocks, and has an offset and an end. Next, a data structure is created that is a representation of the stored ‘read only’ data with which the request is concerned, and the data structure includes data blocks. Finally, the requested operation is performed with respect to the data blocks of the data structure, but without modification of the stored ‘read only’ data to which those data blocks correspond.

Abstract: In one example, a method for controlling access to data includes receiving, by an authenticator, a request from a user for access to a backup of data associated with a computing device. The authenticator then transmits a request that the user identify a shared secret that is unique to the computing device and that is known to the authenticator. When the user is a member of a permissible class of user, the shared secret is accessible by the user. The authenticator then receives a response from the user purporting to identify the shared secret, and the authenticator compares the shared secret identified in the response from the user with the known shared secret. When the shared secret identified in the user response matches the known shared secret, the authenticator grants user access to the backup.

Abstract: In one example, a method for writing data includes receiving a write request that includes one or more data blocks, and has an offset and an end. Next, a data structure is examined and an offset of a leading data block residing in the data structure is identified. The last position of the leading data block is then calculated. If the last position of the leading data block is less than the offset of the write request, the one or more data blocks of the write request are stored in the data structure. Alternatively, if the last position of the leading data block is equal to or greater than the offset of the write request, then the one or more data blocks of the write request are merged with the leading data block to produce a merged, defragmented data block, which is then stored in the data structure.

Abstract: In one example, a method for reading data, includes receiving a read request that is directed to a data object, where the read request includes both an offset and an end. Next, the data object is examined to determine if a previously written data block is present that has an offset which is the same as one of the offset or the end of the read request. If there is no previously written data block present which has the same offset or end as the read request, a previously written data block whose offset immediately precedes one of the offset or the end of the read request is then returned.

Abstract: A system for restoring a backup data comprises a processor and a memory. The processor is configured to: 1) receive an indication to restore a backup data to a virtual storage device location; 2) determine a map between a virtual storage device volume name and a virtual storage device backup serial number; and 3) retrieve backup data from the virtual storage device backup. The memory is coupled to the processor and configured to provide the processor with instructions.