Abstract: Cybersecurity active defense and rapid bulk recovery in data storage systems are disclosed herein. An example system includes a file system, and an architecture installed on the file system, the architecture being configured to protect the file system in a zero trust manner from a malicious attack by a source system, the architecture including a controller that is configured to determine file-level operations of files in the file system that are indicative of a malicious event, block a user account or machine address interacting with the files, prevent data exfiltration or data corruption of the files, provide an alert regarding the files, identify the files that were associated with the malicious event, generate recommendations regarding the files based on datapoints and the file-level operations on the files, present a graphical user interface that displays the recommendations, and remove and restore the one or more of the files as requested.

Abstract: Zone management of compute-based object stores is provided herein. An exemplary method may include assigning a virtual operating system container from the reserve zone pool to a task group, the task group including a set of tasks for a phase of a first request, and executing the set of tasks within the assigned virtual operating system container.

Abstract: A method of implementing virtualization involves an improved approach to resource management. A virtualizing subsystem is capable of creating separate environments that logically isolate applications from each other. Some of the separate environments share physical resources including physical memory. When a separate environment is configured, properties for the separate environment are defined. Configuring a separate environment may include specifying a physical memory usage cap for the separate environment. A global resource capping background service enforces physical memory caps on any separate environments that have specified physical memory caps.

Abstract: Systems, methods, and media for method for managing requests for computing resources. Methods may include dynamically throttling requests for computing resources generated by one or more tenants within a multi-tenant system, such as a cloud. In some embodiments, the present technology may dynamically throttle I/O operations for a physical storage media that is accessible by the tenants of the cloud. The present technology may dynamically throttle I/O operations to ensure fair access to the physical storage media for each tenant within the cloud.

Abstract: Zone management of compute-based object stores is provided herein. An exemplary method may include assigning a virtual operating system container from the reserve zone pool to a task group, the task group including a set of tasks for a phase of a first request, and executing the set of tasks within the assigned virtual operating system container.

Abstract: A method for storing and processing data includes providing an operating system (OS) virtualization running on a processor and having a plurality of containers. Each container may prevent privilege escalation by a user to an administrator of a global zone running the OS virtualization. The method may also include providing a hardware virtual machine (HVM) for the user, the HVM encapsulated in one of the containers. A system for storing and processing data is provided that includes an operating system (OS) virtualization stored in a memory and running on a processor. The OS virtualization has a plurality of containers, and each container prevents privilege escalation by a user to an administrator of a global zone running the OS virtualization. The HVM may be encapsulated in one of the containers. A non-transitory computer readable storage medium having a program recorded thereon is provided.

Abstract: Systems, methods, and media for method for managing requests for computing resources. Methods may include dynamically throttling requests for computing resources generated by one or more tenants within a multi-tenant system, such as a cloud. In some embodiments, the present technology may dynamically throttle I/O operations for a physical storage media that is accessible by the tenants of the cloud. The present technology may dynamically throttle I/O operations to ensure fair access to the physical storage media for each tenant within the cloud.

Abstract: Systems, methods, and media for method for managing requests for computing resources. Methods may include dynamically throttling requests for computing resources generated by one or more tenants within a multi-tenant system, such as a cloud. In some embodiments, the present technology may dynamically throttle I/O operations for a physical storage media that is accessible by the tenants of the cloud. The present technology may dynamically throttle I/O operations to ensure fair access to the physical storage media for each tenant within the cloud.

Abstract: Systems, methods, and media for method for managing requests for computing resources are provided herein. Methods may include dynamically throttling requests for computing resources generated by one or more tenants within a multi-tenant system, such as a cloud. In some embodiments, the present technology may dynamically throttle I/O operations for a physical storage media that is accessible by the tenants of the cloud. The present technology may dynamically throttle I/O operations to ensure fair access to the physical storage media for each tenant within the cloud.

Abstract: Systems, methods, and media for method for managing requests for computing resources are provided herein. Methods may include dynamically throttling requests for computing resources generated by one or more tenants within a multi-tenant system, such as a cloud. In some embodiments, the present technology may dynamically throttle I/O operations for a physical storage media that is accessible by the tenants of the cloud. The present technology may dynamically throttle I/O operations to ensure fair access to the physical storage media for each tenant within the cloud.

Abstract: A method of implementing virtualization involves an improved approach to virtual memory management. An operating system includes a kernel, a resource control framework, a virtual memory subsystem, and a virtualization subsystem. The virtualization subsystem is capable of creating separate environments that logically isolate applications from each other. The virtual memory subsystem utilizes swap space to manage a backing store for anonymous memory. The separate environments share physical resources including swap space. When a separate environment is configured, properties are defined. Configuring a separate environment may include specifying a swap cap that specifies a maximum amount of swap space usable by the separate environment. The resource control framework includes a swap cap resource control. The swap cap resource control is enforced by the kernel such that during operation of the separate environment, the kernel enforces the swap cap specified when the separate environment was configured.

Abstract: A method of implementing virtualization involves dynamic, temporary resource pools. A virtualizing subsystem is capable of partitioning a plurality of physical resources to create resource pools. The virtualizing subsystem is further capable of creating separate environments that logically isolate applications from each other, and assigning a created separate environment to a created resource pool. A separate environment is configured by defining properties of the separate environment. Configuring the separate environment includes specifying at least one resource pool attribute. When the separate environment is started, a temporary resource pool is created from available physical resources and the separate environment is assigned to the temporary resource pool. The temporary resource pool is created in accordance with the at least one resource pool attribute specified when the separate environment was configured. The temporary resource pool may be destroyed when the separate environment is shutdown.

Abstract: A method of implementing virtualization involves an improved approach to virtual memory management. An operating system includes a kernel, a resource control framework, a virtual memory subsystem, and a virtualization subsystem. The virtualization subsystem is capable of creating separate environments that logically isolate applications from each other. The virtual memory subsystem utilizes swap space to manage a backing store for anonymous memory. The separate environments share physical resources including swap space. When a separate environment is configured, properties are defined. Configuring a separate environment may include specifying a swap cap that specifies a maximum amount of swap space usable by the separate environment. The resource control framework includes a swap cap resource control. The swap cap resource control is enforced by the kernel such that during operation of the separate environment, the kernel enforces the swap cap specified when the separate environment was configured.

Abstract: A method of implementing virtualization involves an improved approach to resource management. A virtualizing subsystem is capable of creating separate environments that logically isolate applications from each other. Some of the separate environments share physical resources including physical memory. When a separate environment is configured, properties for the separate environment are defined. Configuring a separate environment may include specifying a physical memory usage cap for the separate environment. A global resource capping background service enforces physical memory caps on any separate environments that have specified physical memory caps.

Abstract: A method of implementing virtualization involves dynamic, temporary resource pools. A virtualizing subsystem is capable of partitioning a plurality of physical resources to create resource pools. The virtualizing subsystem is further capable of creating separate environments that logically isolate applications from each other, and assigning a created separate environment to a created resource pool. A separate environment is configured by defining properties of the separate environment. Configuring the separate environment includes specifying at least one resource pool attribute. When the separate environment is started, a temporary resource pool is created from available physical resources and the separate environment is assigned to the temporary resource pool. The temporary resource pool is created in accordance with the at least one resource pool attribute specified when the separate environment was configured. The temporary resource pool may be destroyed when the separate environment is shutdown.