Abstract: Systems and methods for managing access to data based on a geographic location requirement are disclosed herein. According to an aspect, a system includes a first computing device comprising a data storage manager configured to manage access to stored data based on one or more predetermined rule(s) that specifies geographic location requirement(s) for permissible access to the stored data. The manager is also configured to receive, from a second computing device, a request to access the data. Further, the manager is configured to determine a geographic location of the second computing device, determine whether the geographic location of the second computing device meets the geographic location requirement(s), and permit or deny access to the stored data by the second computing device in response to determining that the geographic location of the second computing device meets the geographic location requirement(s).

Abstract: Systems and methods for managing access to data based on a geographic location requirement are disclosed herein. According to an aspect, a system includes a first computing device comprising a data storage manager configured to manage access to stored data based on one or more predetermined rule(s) that specifies geographic location requirement(s) for permissible access to the stored data. The manager is also configured to receive, from a second computing device, a request to access the data. Further, the manager is configured to determine a geographic location of the second computing device, determine whether the geographic location of the second computing device meets the geographic location requirement(s), and permit or deny access to the stored data by the second computing device in response to determining that the geographic location of the second computing device meets the geographic location requirement(s).

Abstract: Systems and methods for selecting cryptographic settings based on computing device location are disclosed. According to an aspect, a method includes determining a location of a client of a server. The method also includes selecting, at the server and based on the location of the client, one of several different cryptographic settings for communication with the client or data management. The method may also include implementing, at the server, the selected cryptographic setting.

Abstract: Systems, computing devices, and methods for authenticating privileged subsystem access by policy and by use of a security key generated at boot are disclosed herein. According to an aspect, a method includes generating a security key upon boot of a host-facing interface for a client. The method also includes communicating the security key to a baseboard management controller. Further, the method includes authenticating, to the host-facing interface commands, based on the security key. The method may also include implementing a policy associated with the security key. Further, in response to determining that a received command is not allowed by policy or the security key is not authenticated, an external server port or debug header may be disabled to prevent execution of the command.

Abstract: Systems and methods for selecting cryptographic settings based on computing device location are disclosed. According to an aspect, a method includes determining a location of a client of a server. The method also includes selecting, at the server and based on the location of the client, one of several different cryptographic settings for communication with the client or data management. The method may also include implementing, at the server, the selected cryptographic setting.

Abstract: Systems, computing devices, and methods for authenticating privileged subsystem access by policy and by use of a security key generated at boot are disclosed herein. According to an aspect, a method includes generating a security key upon boot of a host-facing interface for a client. The method also includes communicating the security key to a baseboard management controller. Further, the method includes authenticating, to the host-facing interface commands, based on the security key. The method may also include implementing a policy associated with the security key. Further, in response to determining that a received command is not allowed by policy or the security key is not authenticated, an external server port or debug header may be disabled to prevent execution of the command.

Abstract: A system for automatically collecting and analyzing crash dumps to determine if a security exploit was unsuccessful and generating a report.

Abstract: A system for automatically collecting and analyzing crash dumps to determine if a security exploit was unsuccessful and generating a report.

Abstract: A method and system for tracking usage of memory in a computer system is provided. Arguments for both the size of a memory allocation and the type of memory being allocated are reserved in a fixed location. A first fixed location is reserved for small memory allocations, i.e. less than one page, and a second fixed location is reserved for large memory allocations, i.e. one page or larger. The fixed location is selected based upon a determination of the size of an allocation required by a calling application. Upon receipt of a memory allocation request by the calling application, a pointer is returned to the calling application identifying the fixed location. Similarly, upon release of memory by the calling application, a counter is decremented to track the amount of memory in use by the application.

Abstract: Sessions states within virtual machine (VM) environments are maintained. Each VM environment hosts a guest operating system (OS) and one or more application programs running. The guest OS and the application computer programs of each VM environment constitute a session. A connection broker maintains a state machine as to states of the sessions and permits transitions among the states in response to messages, commands, and internal decisions. Different types of agents may send the messages, and the commands. The states of the sessions may include a pending state and a number of other states. The pending state is an interim state that indicates a session is being transitioned from one of the other states to another of the other states. These other states may include an offline state, an online-down state, an online-up state, a suspended state, an active state, an idle state, a disconnected state, and a failed state.

Abstract: Commands are processed by hardware within a virtual client computing environment, such as graphics-related commands processed by graphics hardware. A server computing device includes graphics hardware, a virtual client computing environment, and a server computing environment. The graphics hardware processes graphics-related commands into responses. The virtual client computing environment includes an encoding application that issues the commands. The server computing environment includes a decoding application. The encoding application includes a first thread that receives the commands and places them onto a first queue. The encoding application includes a second thread that receives the responses from a second queue and communicates the responses to a remote display device.

Abstract: A method and system are provided for managing a spin state of individual physical disks in a distributed file system. Spin control messages are forwarded to a specified physical disk asynchronously with an I/O command and prior to receipt of the data request by the physical disk. This enables the spin state of the physical disk to be responsive to the I/O command with minimal delay.

Abstract: A method and system are provided for directing a client to a preferred service instance. At creation of a service instance, the service binding attribute of the created instance is extended to include assigned domains and associated priorities. There are then two phases to directing a client to the preferred service instance. The first phase is compilation of a list of domains and priorities for the service in response to a query. Upon completion of the first phase, a second phase is executed to determine a preferred service for the client by comparing fully qualified domain name entries and assigned priority entries.

Abstract: Memory allocation requests are satisfied from a memory pool or from lookaside lists, based on the memory size requested to be allocated. A method, for each of a number of future differently sized memory allocations, determines which memory allocations are to be satisfied from a lookaside list, and which memory allocations are to be satisfied from a memory pool. For each memory allocation to be satisfied from a lookaside list, a corresponding lookaside list for the allocation is initialized. A table is constructed that has a number of entries corresponding to all the differently sized memory allocations. Each entry corresponding to a memory allocation to be satisfied from a lookaside list points to the lookaside list for that memory allocation.

Abstract: A method and system for maintaining integrity of metadata associated with a migrated file. Following migration of data from a source filesystem to a destination filesystem, a tool is automatically invoked to detect if there are any differences in metadata associated with the files and/or folders at each location. Each select field of the metadata at the source filesystem is reviewed to ensure that it matches with the equivalent field at the destination filesystem. In the event at least one of the reviewed metadata fields does not match, an error is generated and forwarded to an operator.

Abstract: An apparatus, system, and method are disclosed for cache synchronization within a multi-tier system having multiple client-server relationships. The apparatus includes a pre-synchronization module, a locking module, and a synchronization module. The pre-synchronization module receives a pre-synchronization call from an upstream node coupled to a first downstream node. The locking module locks a first cache coupled to the first downstream node in response to a synchronization call from the upstream node. The synchronization module synchronizes source data on the upstream node with cached data on the first cache. The apparatus also may include a post-synchronization module to perform any necessary cleanup activities. Advantageously, the apparatus, system, and method reduce the likelihood of a system deadlock due to premature locking of the first downstream cache, which prevents a subsequent downstream cache from synchronizing with the first cache.

Abstract: A method and system for tracking usage of memory in a computer system is provided. Arguments for both the size of a memory allocation and the type of memory being allocated are reserved in a fixed location. A first fixed location is reserved for small memory allocations, i.e. less than one page, and a second fixed location is reserved for large memory allocations, i.e. one page or larger. The fixed location is selected based upon a determination of the size of an allocation required by a calling application. Upon receipt of a memory allocation request by the calling application, a pointer is returned to the calling application identifying the fixed location. Similarly, upon release of memory by the calling application, a counter is decremented to track the amount of memory in use by the application.