Abstract: A method and a system of an agent-less scanning of cloud infrastructure is disclosed. The method includes running a virtual machine (VM) from a customer account and creating a snapshot of the VM in the customer account and saving the snap-shot of the virtual machine into a storage account. The method further includes creating at least one of: a docker image, a VM instance and a bare-metal system by restoring the respective snapshot saved in the storage account and gaining access to a restored system. The method further includes scanning the restored system by one of: using an ephemeral scanner that runs during a boot time of an instance or using a docker based command on a launched container and terminating instances of an ephemeral scanner by sending a message to at least one of: a cloud and a plurality of cloud servers for terminating the instances.

Abstract: Techniques are described for generating automated advice with respect to consolidating a plurality of sources. A set of one or more parameters relating to a proposed consolidation for a plurality of consolidation sources is received. In response to receiving the set of one or more parameters, a set of one or more recommendations for consolidating the plurality of consolidation sources is generated and stored on at least one of a volatile or non-volatile computer-readable storage medium. The set of one or more recommendations may indicate how to improve a performance associated with consolidating the plurality of sources to a set of one or more destinations based on a particular consolidation scenario. The set of one or more recommendations may be displayed during consolidation planning for the plurality of consolidation sources.

Abstract: Systems, methods, and other embodiments associated with virtual masked databases are described. One example system includes a masking logic to mask an unmasked column of a database table to produce a masked column. The masked column is then added to the database creating a bi-masked database. A portion of the bi-masked database is then selected by a view logic and provided to a user. The view provided to the user may allow fast, conflict free queries and updates to the database. By providing the user either masked or unmasked data based on information associated with the user, an added layer of data security may be achieved.

Abstract: Techniques are described for generating automated advice with respect to consolidating a plurality of sources. In an embodiment, a set of one or more parameters relating to a proposed consolidation for a plurality of consolidation sources is received. In response to receiving the set of one or more parameters, a set of one or more recommendations for consolidating the plurality of consolidation sources is generated and stored on at least one of a volatile or non-volatile computer-readable storage medium. In some embodiments, the set of one or more recommendations may indicate how to improve a performance associated with consolidating the plurality of sources to a set of one or more destinations based on a particular consolidation scenario. The set of one or more recommendations may be displayed during consolidation planning for the plurality of consolidation sources.

Abstract: A method, system, and computer program product for relational database management. The method constructs a referentially-complete target subset database from a source database by first estimating the expected size of the target subset database based on application of one or more subsetting rules. If the estimated size needs reduction, the user can modify the subsetting rules, and then modules are invoked to receive the modified subset rules. The method continues by generating a subsetting execution plan by applying the user-modified subset rules to the source database, and then modules process the generated execution plan, which processing results in storage of a referentially-complete target subset database. The user can influence the construction of the execution plan by suggesting an execution model to use during processing of the subsetting execution plan.

Abstract: A method, system, and computer program product for relational database management. The method constructs a referentially-complete target subset database from a source database by first estimating the expected size of the target subset database based on application of one or more subsetting rules. If the estimated size needs reduction, the user can modify the subsetting rules, and then modules are invoked to receive the modified subset rules. The method continues by generating a subsetting execution plan by applying the user-modified subset rules to the source database, and then modules process the generated execution plan, which processing results in storage of a referentially-complete target subset database. The user can influence the construction of the execution plan by suggesting an execution model to use during processing of the subsetting execution plan.

Abstract: Systems, methods, and other embodiments associated with maintaining referential integrity while masking database columns are described. One example method includes determining a transitive closure for dependency relationships involving a column to be masked and other columns related to the column to be masked through a dependency relationship. The example method may also include identifying a root column for a column in the transitive closure and creating a mapping table that stores original values and masking values for the root column. The method includes masking the root column and related child columns based on the mapping table in a manner that maintains referential integrity between the root column and the child column. Integrity may be maintained by masking corresponding values in the root column and a child column(s) with identical mask values from the mapping table.

Abstract: Systems, methodologies, media, and other embodiments associated with producing non-repeating random values for use in data masking are described. One example method includes accessing data describing a mask for a value in a database table column to be masked. The example method may also include identifying a number of distinct values in the database table column to be masked and determining a field width for a mask to provide unique random numbers to mask the distinct values. The method may include identifying locations in a mask value to store the unique random value and locations in a mask value to store filler values. The mask value may include different character sets and may comply with user specified formats. The method may include generating a set of statements that when executed produce a mapping table that includes masks for distinct values in the database table column to be masked.

Abstract: Systems, methods, and other embodiments associated with virtual masked databases are described. One example system includes a masking logic to mask an unmasked column of a database table to produce a masked column. The masked column is then added to the database creating a bi-masked database. A portion of the bi-masked database is then selected by a view logic and provided to a user. The view provided to the user may allow fast, conflict free queries and updates to the database. By providing the user either masked or unmasked data based on information associated with the user, an added layer of data security may be achieved.

Abstract: Systems, methods, and other embodiments associated with maintaining referential integrity while masking database columns are described. One example method includes determining a transitive closure for dependency relationships involving a column to be masked and other columns related to the column to be masked through a dependency relationship. The example method may also include identifying a root column for a column in the transitive closure and creating a mapping table that stores original values and masking values for the root column. The method includes masking the root column and related child columns based on the mapping table in a manner that maintains referential integrity between the root column and the child column. Integrity may be maintained by masking corresponding values in the root column and a child column(s) with identical mask values from the mapping table.

Abstract: Systems, methodologies, media, and other embodiments associated with producing non-repeating random values for use in data masking are described. One example method includes accessing data describing a mask for a value in a database table column to be masked. The example method may also include identifying a number of distinct values in the database table column to be masked and determining a field width for a mask to provide unique random numbers to mask the distinct values. The method may include identifying locations in a mask value to store the unique random value and locations in a mask value to store filler values. The mask value may include different character sets and may comply with user specified formats. The method may include generating a set of statements that when executed produce a mapping table that includes masks for distinct values in the database table column to be masked.