Abstract: A method for performing data backup includes: receiving a backup request specifying a file where the file is stored in a shared storage. Additionally, in response to the backup request: retrieving, by a primary data node, properties of the file; determining, by the primary data node, resource availability for plurality of secondary data nodes where the primary data node and the plurality of secondary data nodes is operatively connected to the shared storage and a backup storage; logically dividing, by the primary data node, the file into a plurality of segments using at least the properties of the file; and coordinating, by the primary data node, the backup of the file using the plurality of segments and the resource availability of the plurality of secondary data nodes.

Abstract: One or more embodiments of the invention have a cluster manager, or other related component, determine upfront which data node should perform a backup of the asset. This is achieved by running a pre-backup step, either periodically or prior to the reception of a backup request, to determine the preferred node for backup. Once the backup request is received, the cluster manager queries the preferred node, if the preferred node is still the best data node to perform the backup, then that data node performs the backup. If, however, the preferred data node no-longer is the best data node for performing the backup, the current preferred data node will signal the cluster manager with an alternative data node that is best data node to perform the backup and the cluster manager will have that alternative data node perform the backup.

Abstract: A configuration file specifies a percentage value of data to validate. A synthetic full backup image of a source volume on cloud storage is accessed. The synthetic full backup is created by merging changed blocks of an incremental backup with another previous backup. A bitmap specifying locations of the changed blocks is examined. A region on the synthetic full backup beginning at a location corresponding to an initial changed block and ending at a location corresponding to a last changed block according to the bitmap is identified. The region is partitioned into a set of portions. Each portion is validated by randomly selecting blocks in a respective portion to validate. The validating of the respective portion continues until an amount of data validated in the respective portion reaches a size equal to the percentage value of a size of the incremental backup divided by a number of portions.

Abstract: A method for backing up standalone data and clustered data on a node, that includes receiving, by a backup agent, a first backup request, making a first determination that a backup process is not active, and based on the first determination, identifying a first type of data specified in the first backup request, where the first type of data is the standalone data, locating, using a first backup policy, the standalone data in the node, begin generating standalone backup data from the standalone data, receiving, by the backup agent, a second backup request, making a second determination that the backup process is active, and based on the second determination, queuing the second backup request.

Abstract: Embodiments described herein relate to a method for managing file based backups (FBBs). The method may include obtaining a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage; in response to the FBB mount request: enabling access to a portion of the FBB by the application; notifying a cyber sense device that the access is enabled; providing, to the cyber sense device, a storage location of the portion of the FBB for which access was enabled; receiving, from the cyber sense device, a security event notification; and performing, in response to the security event notification, a security action set.

Abstract: A method for managing data includes obtaining, by a file system metadata manager, a data access request for a file system, wherein the data access request is obtained from an analytics engine, in response to the data access request: obtaining a metadata backup, wherein the metadata backup is associated with the file system, extracting file system metadata from the metadata backup, generating, using the file system metadata, a virtual file system associated with the file system, and providing the virtual file system to the analytics engine, wherein the analytics engine performs an analysis on the file system using the virtual file system.

Abstract: A method for writing a file to a network attached storage (NAS) server, the method that includes receiving, by a universal connector executing in a user space, a write request from an application executing in the user space, where the write request includes a filename, and in response to receiving the write request, allocating a dynamic buffer, where a first size of the dynamic buffer is larger than a second size of the filename, sending a system limitation request to the NAS server, receiving, in response to the system limitation request, system limitations from the NAS server, where the system limitations comprise a filename size limit, validating the filename against the system limitations, and sending, based on the validating, the write request to the NAS server.

Abstract: A target host is booted into a preinstallation environment. A request to register as a recovery agent is issued from a REST API of the target host to a backup management server. A TLS certificate to establish a secure channel is received from the backup management server. A request identifying a backup copy to be stored on the target host is issued from the REST API of the target host and over the secure channel to the backup management server. Credentials required to access a backup storage at which the backup copy is stored is received. Using the credentials, the backup copy is retrieved from the backup storage.

Abstract: Described is a system (and method) for application-based packing for storing backup data within an object storage. More particularly, the system may efficiently pack backup files into objects having a specialized size by accounting for the source and size of the backup file. For example, the system may determine whether backup files associated with a particular application may be stored within individual objects or packed together within a shared object. Accordingly, by accounting for such criteria the system may perform an intelligent allocation of backup data within a cloud-based object storage. The system may be implemented as part of an incremental backup infrastructure. Accordingly, when allocating the backup files amongst objects, the system may also store specialized metadata to preserve the ability to perform a reconstruction of data (e.g. synthetically) as if a full backup was performed.

Abstract: Techniques described herein relate to a method for performing data protection services for limited access cloud data. The method includes identifying, by a cloud service provider (CSP) proxy, a backup generation event associated with a virtual machine (VM); in response to identifying the backup generation event: obtaining VM information associated with the VM; instantiating a VM agent within the VM; obtaining a metadata file from the VM agent; obtaining VM data from limited access cloud data; storing the VM data and a copy of the metadata file in a backup storage to generate a backup of the VM; generating indexing metadata associated with the backup using the metadata file; and providing the indexing metadata to a data manager.

Abstract: Techniques described herein relate to a method for performing data protection services for limited access cloud data. The method includes identifying, by a data manager, a protection policy assignment event; in response to identifying the protection policy assignment event: identifying subscriptions associated with cloud resources; identifying services associated with each subscriptions; assigning protection policy types to the subscriptions based on the associated services; and initiating performance of data protection services based on the protection policy assignments associated with each subscription.

Abstract: Techniques described herein relate to a method for performing data protection services for limited access cloud data. The method includes identifying, by a cloud service provider (CSP) proxy, a protection policy event associated with an incremental approximation backup of an object; in response to identifying the protection policy event: obtaining previous object metadata associated with the object; obtaining object data from on-premises cloud resources associated with the object; generating slices of the object data; generating current checksums and current object metadata associated with each slice; selecting a first slice of the slices; making a first determination that a first current checksum of the current checksums and a first previous checksum associated with the first slice do not match; in response to the first determination: storing the first slice in a backup storage; and updating a first portion of the current object metadata associated with the first slice.

Abstract: Techniques described herein relate to a method for performing data protection services for limited access cloud data. The method includes obtaining, by a data manager, an initial cloud service provider (CSP) proxy generation request from a user; in response to obtaining the initial (CSP) proxy generation request: creating an authentication account in a CSP directory based on the initial CSP proxy generation request; instantiating a CSP proxy in an on-premises CSP using authentication information associated with the authentication account; storing the authentication information; and associating the user with the authentication information and the CSP proxy, wherein after the associating the CSP proxy can access limited access cloud data and cloud resources of the on-premises CSP.

Abstract: In accordance with one or more embodiments of the invention, a method is provided for re-tiering files and folders located in a cloud-based file system without crawling all the files and folders in the cloud-based file system. The method utilizes the meta-data for the files and folders to determine, based upon provided rules, which tier a file or folder should be assigned to. By utilizing the meta-data, the use of expensive cloud resources may be minimized when there is a need for re-tiering the files and folders into appropriate cloud tiers.

Abstract: Techniques described herein relate to a method for performing data protection of file system data on a host. The method includes obtaining a data access request for a file corresponding to a placeholder file from an application during a backup access session; obtaining, in response to the data access request, file system data associated with the file from a backup storage using backup metadata associated with the placeholder file; providing the file system data associated with the file to the application; making, after the providing, a determination that the file is modified by the application; and in response to the determination: flagging the placeholder file.

Abstract: Embodiments of the invention relate to generating backups of assets. More specifically, in one or more embodiments of the invention, the meta-data generated during the backups is leveraged for detecting cyber-attacks by leveraging backup meta-data, to reduce the amount of data that needs to be scanned by a cyber-security module to detect a cyber-attack, such as a ransomware attack. This allows any attacks to be detected earlier and reduce processing by leveraging the periodic backups that are performed as part of data protection, to detect when an attack has or is occurring. By making these determinations, a quick identification of possible ransomware attacks may be made and other methods of mitigating the attack may be deployed when the method of mitigating the attack might still be useful to mitigate potential damage to a user's data.

Abstract: In accordance with one or more embodiments of the invention, a method is provided for re-tiering files and folders located in a cloud-based file system without crawling all the files and folders in the cloud-based file system. The method utilizes the meta-data for the files and folders to determine, based upon provided rules, which tier a file or folder should be assigned to. By utilizing the meta-data, the use of expensive cloud resources may be minimized when there is a need for re-tiering the files and folders into appropriate cloud tiers.

Abstract: In general, one or more embodiments of the invention relates to systems and methods for performing a backup and later determining a level or percentage of corruption of the resulting backup set. By having a cyber-security module analyze the backup data periodically, corruption of backup data both caused by cyber-attacks or by hardware failures may be detected and characterized. By knowing how corrupted a particular corrupted backup data set is, an informed decision may be made with regards to purging the backup data set and/or using the backup data set or portion thereof in any further restorations. By making these determinations, a quick identification of possible ransomware attacks may be made, and additional degradation of a user's data may be avoided.

Abstract: Embodiments of the invention relate to methods and systems for efficiently sharing assets such as files and folders between a host computer system and a client computer system while minimizing the amount of work the client must perform to efficiently transfer an asset. In one or more embodiments, assets such as files and folders that are to be shared or transferred are placed in appropriate network slice queues by the hosts rather than the clients. These network slice queues allow the files and folders to be placed in slices without utilizing the resources of the clients as well as much of the available network resources. This ensures efficient use of network resources, while minimizing the amount of work the hosts and/or clients must perform in order to perform a backup.

Abstract: Embodiments of the invention relate to generating backups of assets. More specifically, in one or more embodiments of the invention, multiple copies of a backup are stored in separate locations. The copies may then be used to perform a restoration when one of the copies is corrupted. If all copies are corrupted the invention allows for partial restoration of those portions of the copies that are not corrupted. By using copies, embodiments of the invention allow the backups to be more resilient to attacks and system failures.