Abstract: There is provided a method of maintaining a security risk level of data objects stored in a distributed system, comprising: estimating a current security risk level of at least one storage unit of each of a plurality of network nodes based on real time monitoring; distributing a plurality of data objects among the at least one storage units of the plurality of network nodes according to the current security risk level such that a minimal security requirement of each data object is complied with; detecting a change in the current security risk level of the at least one storage unit; and creating a new copy of at least one of the data objects for storage on a different network node such that the minimal security requirement of each data object is maintained.

Abstract: There is provided a method of maintaining a security risk level of data objects stored in a distributed system, comprising: estimating a current security risk level of at least one storage unit of each of a plurality of network nodes based on real time monitoring; distributing a plurality of data objects among the at least one storage units of the plurality of network nodes according to the current security risk level such that a minimal security requirement of each data object is complied with; detecting a change in the current security risk level of the at least one storage unit; and creating a new copy of at least one of the data objects for storage on a different network node such that the minimal security requirement of each data object is maintained.

Abstract: A method may include in response to receiving a command to delete data on a storage resource, determining, whether a storage unit has an area to delete responsive to the command that is not aligned with boundaries of the storage unit. The method may also include in response to determining that the storage unit has an area to delete responsive to the command that is unaligned with boundaries of the storage unit, determining whether the entire storage unit, other than the area to delete responsive to the command that is unaligned with boundaries of the storage unit, is marked for unmapping. The method may further include in response to determining that the entire storage unit, other than the area to delete responsive to the command that is unaligned with boundaries of the storage unit, is marked for unmapping, unmapping the storage unit from a logical-to-physical map for the storage resource.