Abstract: Techniques are disclosed for provisioning virtual machines via content-centric networking approach in a computing system implemented with a distributed virtual infrastructure. In one example, a method comprises the following steps. A virtual machine template is obtained. The virtual machine template defines one or more segments which represent one or more content portions. The one or more content portions are addressable in accordance with a content-centric network communications protocol. At least one virtual machine is deployed from the virtual machine template. The generating and deploying steps are performed on one or more physical processing elements associated with a computing system implemented via a distributed virtual infrastructure.

Abstract: The present disclosure relates to a method and apparatus for measuring performance of a storage system. The method comprises: causing one or more entities to execute a task set comprising multiple tasks, each of the multiple tasks being used for accessing the storage system; obtaining an indicator set of the storage system based on a result of the execution, the indicator set comprising one or more indicators for indicating performance of the storage system; and adjusting the task set based on the indicator set, for subsequent execution by the one or more entities. The method can be executed iteratively. By means of the present invention, workloads for the next round's execution can be intelligently improved according to execution results after each round's execution of workloads, so that performance of the storage system can be obtained more pertinently and efficiently so as to better utilize the storage system.

Abstract: The present invention relates to a method and apparatus for data management in multi-tenant distributive environment. According to the embodiments of the present invention, a tenant-specific virtual metadata server may be created and registered with a task manager in a job processing system. The virtual metadata server provides a tenant-specific logical file system namespace. Any access to tenant data will be performed via the virtual metadata server. In other words, such virtual metadata server acts as an interface between a tenant terminal and an entity file system. In this way, it may effectively realize isolation of tenant data and enhance data security. Moreover, by using a virtual metadata server rather than physically isolating user data, the embodiments of the present invention may guarantee the efficiency of data sharing while improving the data security.

Abstract: Embodiments of the present invention relate to a method, apparatus and system for collecting data in an Internet of Things. In one embodiment of the present invention, there is provided a method for collecting data in an Internet of Things, comprising: receiving status data from a sensor node of at least one sensor node; in response to verifying the status data being trusted status data, extracting content data from the status data; aggregating the content data based on a predefined rule; and transmitting the aggregated content data to a data center; wherein the at least one sensor node is connected with the data center via the Internet of Things. In one embodiment, there is provided an apparatus for collecting data in an Internet of Things. In one embodiment, there is provided a system for collecting data in an Internet of Things.

Abstract: Embodiments of the present invention relate to a method and apparatus for providing computing resources to a user. In one embodiment of the present invention, there is provided a method for providing computing resources to a user, comprising: in response to a request from the user, looking up in a profile repository a profile corresponding to the user's domain information; requesting at least one computing resource associated with the profile; integrating the at least one computing resource into a virtual datacenter; and providing the virtual datacenter to the user; wherein the at least one computing resource is physically deployed in a distributed manner. In one embodiment of the present invention, there is provided an apparatus for providing computing resources to a user.

Abstract: The present invention provides a method, system and apparatus for securely operating a computer. The method comprises: obtaining presence status of an authenticated user, the presence status indicating whether the authenticated user is present in the vicinity of the computer; and triggering security operation in response to that the presence status indicates the authenticated user is absent in the vicinity of the computer. By means of the method, current status of an authenticated user who has logged in can be easily learned, and in turn, corresponding security operation is performed; in addition, when a user is performing sensitive operation, it can be confirmed in real time whether the user is an authenticated user who previously logged in, so that security of operating the computer is improved.

Abstract: Methods and apparatus are disclosed for managing access to data in a data storage system. For example, an apparatus comprises at least one processing platform associated with a distributed virtual infrastructure. The processing platform comprises at least one processing device having a processor coupled to a memory. The processing platform is operative to instantiate a meta data management process that is configured to provide at least one client process with information to allow the client process to perform one or more operations in accordance with one or more data storage devices through a storage area network. The information provided to the client process may comprise one or more data block descriptors. Each of the one or more data block descriptors may comprise path information for at least one of the data storage devices and an offset address in the at least one data storage device.

Abstract: Embodiments of the present invention relate to a method and system for managing a virtual machine disk. According to embodiments of the present invention, thin provisioning and thick provisioning are integrated to form a hybrid virtual machine disk management mechanism. Specifically, for a thin provisioned VM disk, if it is determined that the load level of the disk is relatively high, it may be decided to switch the VM disk to be thick provisioned. On the contrary, for a thick provisioned VM disk, if it is determined that a load level of the disk is relatively low, it may be decided to switch the VM disk to be thin provisioned so as to avoid resource waste. In this way, the efficiency and flexibility of the management of virtual machine storage disks may be improved.

Abstract: Methods and apparatus are disclosed for managing access to data in a data storage system. For example, an apparatus comprises at least one processing platform associated with a distributed virtual infrastructure. The processing platform comprises at least one processing device having a processor coupled to a memory. The processing platform is operative to instantiate a meta data management process that is configured to provide at least one client process with information to allow the client process to perform one or more operations in accordance with one or more data storage devices through a storage area network. The information provided to the client process may comprise one or more data block descriptors. Each of the one or more data block descriptors may comprise path information for at least one of the data storage devices and an offset address in the at least one data storage device.

Abstract: Example embodiments of the present invention relate to a system, apparatus and methods for preserving the integrity of a code to prevent it from being modified, maliciously or inadvertently, while it is in execution in the RAM of a computer platform. This method also may be referred to as code hardening. Code to be hardened in example embodiments of the present invention may be referred to as protected code. Example embodiments of the present invention are able to externally detect unauthorized stoppage of the hypervisor by employing (1) a launch-time metric of the protected code; (2) a run-time metric of the protected code; and (3) a liveliness indicator of the protected code.