Abstract: Data access threat detection and prevention modules are implemented proximate to data storage, e.g. in disk array controllers. The modules may be implemented in hardware or firmware. The modules monitor IOs from the disk array controllers to access managed drives. IOs exhibiting access parameters that deviate from a whitelist or match a blacklist are deemed to be suspicious. The whitelist may be created from monitoring normal, safe IOs and storing associated access patterns. In response to detection of suspicious activity the modules may halt or slow subsequent IOs, e.g. IOs to the same data, all data, an associated logical device, or the managed drive.

Abstract: In one aspect, a system and method includes modeling in a common representation network element commands, events and data from a plurality of sources. The method also includes translating data represented in a first modeling language to data represented in a second modeling language for storing the data in the second modeling language in a global data model repository and automatically generating code to support external management interface based on the stored data in the global repository.

Abstract: In one aspect a system and method includes receiving user-input configuration changes to a configuration file and tracking the configuration changes in multiple independent edit views. The method also includes updating an active-edit view to include configuration changes of a single independent edit view, and updating a configuration database that stores the configuration files, according to configuration changes in the active edit view.