Abstract: There are provided measures for enabling detecting malware. A method includes generating a copy of a first node, configuring a sandbox environment by using the generated copy, executing an electronic file or a URL in the sandbox environment configured with the copy, providing a result of the malware analysis of the electronic file or the URL, identifying the electronic file or the URL as malicious or suspicious on the basis of the provided result, and taking further action for protecting the first node from the electronic file or the URL identified as malicious or suspicious.

Abstract: Systems and methods for backing up data. A backup operation can identify blocks that have changed since a most recent backup operation. The blocks that have changed since the most recent backup operation are compared with the blocks that are being used. Only the blocks that are both used and have changed are backed up. This can reduce the size of the backup be excluding blocks that may have changed but are no longer used.

Abstract: Disclosed are a method and apparatus for managing effectiveness of an information processing task in a decentralized data management system. The method comprising: sending requests for multiple information processing tasks by a client to multiple execution subjects, transmitting information processing tasks in a sequential information processing task list in an order to the multiple execution subjects; caching the requested information processing tasks to a task cache queue, caching the sequential information processing task list as a whole to the task cache queue; judging whether each information processing task in the task cache queue satisfies a predetermined conflict condition; moving the information processing task to a conflict task queue if it is determined that the task satisfies the predetermined conflict condition, deleting the task from the conflict task queue and caching the task to the task cache queue when the predetermined conflict condition is not satisfied.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for managing content across discrete systems. A content management system can be implemented to manage content items and synchronize content items across devices. A content collaboration system can be implemented to generate documents and facilitate collaboration on documents. To take advantage of the content management system's functionality to manage and synchronize content items while also providing the collaboration functionality of the content collaboration system, the content management system can store and manage references to documents created in the content collaboration system. The document references can be managed by the content management system such that the document references appear to users as if the document references were the referenced document in the collaboration system.

Abstract: A method for backing up databases includes generating a Database-Host Mapping (DHM) associated with a backup request in response to receiving the backup request, performing a database redistribution analysis based on the DHM and a preferred server order list (PSOL) to generate a Host-Database Mapping (HDM), and initiating a backup of a plurality of databases using the plurality of hosts specified in the HDM.

Abstract: Systems and methods may provide for receiving web content and determining a trust level associated with the web content. Additionally, the web content may be mapped to an execution environment based at least in part on the trust level. In one example, the web content is stored to a trust level specific data container.

Abstract: In an approach to maintain data integrity in a computer data storage system, a clone management table is generated for a clone file tree that includes a relationship between at least one parent file and a clone file. The parent file is restored by: (i) determining that the parent-child relationship exists between the parent file and the clone file based on an entry in the clone management table, (ii) restoring data blocks in the parent file to the file system based on an analysis of an entry in the clone management table for the parent file and an identification of data blocks included in the clone file, and (iii) generating a new instance of the parent file based on the data blocks included in the file system and the entry in the clone management table for the clone file tree.

Abstract: Systems and methods are provided for database or data file backup. The system may comprise one or more processors and a memory storing instructions that, when executed by the one or more processors, cause the system to identify a list of data files required for restoring the database or data files, create a backup comprising copies of a subset of the data files that are created or modified after a preceding backup, and back up the database, wherein the backup includes an identification to the preceding backup.

Abstract: A data storage environment can include one or more virtual machines instantiated on a host computing device. Based on physical location data of the one or more virtual machines received from the host computing device, a storage manager can control the performance of a secondary copy operation on one or more storage units that store virtual machine data associated with the one or more virtual machines and/or the performance of a secondary copy operation on the one or more virtual machines.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for receiving a request to generate a backup of a distributed computing system; generating, by each of the plurality of components of the distributed computing system, one or more backup artifacts; generating, by each of the plurality of components of the distributed computing system, verification data, the verification data being metadata about the contents of the generated backup artifacts; obtaining a second request to validate the backup; provisioning a restore environment; processing the plurality of backup artifacts to restore the plurality of components in the provisioned restore environment; performing a verification process using respective verification data for the restored component, wherein each verification process determines whether contents of the restored component matches the respective verification data for the restored component; and outputting a result of the verification process.

Abstract: A remote data replication method and a storage system, where a production array sends a data replication request to a disaster recovery array. The data replication request includes an identifier of a source object and a data block corresponding to the source object. The data block is stored in physical space of a hard disk of the production array. The disaster recovery array receives the data replication request. The disaster recovery array creates a target object when the disaster recovery array does not include an object having a same identifier as the source object. An identifier of the target object is the same as the identifier of the source object, the disaster recovery array writes the data block into the physical space. This may reduce bandwidth load between the production array and the disaster recovery array.

Abstract: A computer-implemented method includes dividing a data set into a plurality of regions and dividing the plurality of regions into a plurality of chunks of fixed size. The computer-implemented method further includes determining a sample size of the plurality of chunks to be sampled for each region, wherein the sample size is determined based, at least in part, on an acceptance of a likelihood of identifying at least one collision between two regions corresponding to logical entities of a first cluster of logical entities. The computer-implemented method further includes sampling the plurality of chunks for each region based on the determined sample size. The computer-implemented method further includes generating a hash value for each chunk sampled and storing each hash value in an index. The computer-implemented method further includes identifying one or more collisions between the plurality of regions. A corresponding computer system and computer program product are also disclosed.

Abstract: A host computing arrangement is provided, which may include a host processor having a host operating system and host kernel associated therewith. The host processor may be configured to host a guest operating system, mirror a filesystem of the guest operating system via the host kernel, and generate caching criteria by scanning the mirrored filesystem. The host computing arrangement may further include a cache engine. The cache engine may be configured to process an I/O request from the guest operating system based on the caching criteria generated by the host processor.

Abstract: A virtual database administrator (VDBA) is implemented in a database server network to monitor back-up write events from the database servers on the network to a network back-up server and correct failed back-up attempts. The VDBA regularly polls the database servers for copies of event logs that include information about back-up attempts. The VDBA parses each of the event logs, searching for the back-up log entries indicating successful or failed back-up writes for particular databases. For failed back-up writes, the VDBA instructs the specific database server to retry the back-up write for the particular database. The back-up retry instructions are specific to the database server and cause a back-up retry limited to the particular database on the server that experienced the failure.

Abstract: A system for providing adaptive metric pruning includes a processor; a memory; and one or more modules stored in the memory and executable by a processor to perform operations including: receive, by a collector, metadata associated with the business transaction running in a monitored environment; train a machine learning system by providing training data and an anticipated result for the training data to the machine learning system to generate rules for retaining given metadata; predict a retention requirement for the received metadata by providing the received metadata to the machine learning system to apply the generated rules and generate a result for retaining the received metadata; and provide a user interface to display the generated result for retaining the received metadata including a recommendation on how to retain the received metadata according to the result for retaining the received metadata.

Abstract: System and mobile terminal for content delivery are provided. The system includes a plurality of mobile terminal application modules, each mobile terminal application module being embedded with a software development kit (sdk), the sdk being configured to determine whether data download satisfies a start condition of P2P download, implement the P2P download, provide forwarding of response data, and provide data sharing. The system further includes a P2P controller, communicating with the plurality of mobile terminal application modules, the P2P controller being configured to manage the sdk, manage and recommend available peers, search resources for download, and aid NAT traversal of the P2P download.

Abstract: A partitioning policy, comprising an indication of an initial mapping of data records of a stream to a plurality of partitions, is selected to distribute data records of a data stream among a plurality of nodes of a stream management service. Data ingestion nodes and storage nodes are configured according to the initial mapping. In response to a determination that a triggering criterion for dynamically repartitioning the data stream has been met, a modified mapping is generated, and a different set of ingestion and storage nodes are configured. For at least some time during which arriving data records are stored in accordance with the modified mapping, data records stored at the first set of storage nodes in accordance with the initial mapping are retained.

Abstract: In various embodiments, computer-implemented techniques for improving function of in-memory processing systems via adaptively caching datasets include: identifying data stored in a distributed filesystem, the data including data to be processed by an in-memory processing application and data not to be processed by the in-memory processing application; identifying one or more partitions of the data corresponding to the data to be processed; and selectively transferring the one or more partitions from the distributed filesystem to a memory of the in-memory processing application. Corresponding systems and computer-program products are also disclosed.

Abstract: Systems, apparatus and methods are disclosed which are directed to computer program products for managing multiple instances of an application or other entities, including managing instances of an application or other entities across multiple environments, in each case while assuring application performance to the extent possible given the resources available. The disclosed management software and/or processes may also be used to ensure that an application is running in multiple geo localities (e.g., discrete and/or physically separated geographical locations).

Abstract: A method for modifying a configuration of a storage system. The method includes one or more computer processors identifying data received at a logical partition (LPAR) of a storage system, wherein a copy program associated with a process for data mirroring executes within the LPAR. The method further includes determining a first rate based on analyzing a quantity of data received at the LPAR during the process of data mirroring. The method further includes creating a journal file from a set of records within the received data. The method further includes determining a second rate related to migrating the journal file from the LPAR to intermediate storage included in the storage system. The method further includes determining to modify a set of configuration information associated with the process of data mirroring by the storage system based, at least in part, on the first rate and the second rate.

Abstract: Provided are techniques for asynchronous remote mirror cloud archival. A data mover of a remote host receives, from an asynchronous remote mirror copy system of a primary storage controller, an archive copy operation, wherein the archive copy operation identifies a list of tracks of data and a location of cloud storage in a cloud infrastructure for storing the data from the tracks. The data mover issues, to a secondary storage controller, the archive copy operation, wherein the secondary storage controller archives the data from secondary storage to the cloud storage by invoking a cloud service, wherein the secondary storage stores data of primary storage of the primary storage controller.

Abstract: A user interface, system and method are provided for the recovery and restoration of software records or elements thereof to earlier record or data iterations or versions in order to overcome or repair consequences of database corruption or data deletion. A source database and/or a current archive database further enable recording of records of the source database to an historical data archive, from which records or elements thereof may be recovered. A restore command is detectable by the system as directly input via a user interface and/or as sent via an electronics communications modality or network. The databases and archives may have access to multiple iterations/versions of a record including the original record version as stored in an historical archive or elsewhere in a network. The records may optionally be updated in a batch method, in real time, and/or as the software records are created.

Abstract: A building automation system (BAS) controller configured for use in a BAS is disclosed. The BAS controller includes an internal storage device for storing a first type of data and a second type of data, and a processor in operative communication with the internal storage device. The BAS controller is configured to automatically store the first type of data and the second type of data to the internal storage device and the second type of data to an external storage device.

Abstract: Disclosed are systems, methods and computer program products for automatic data backup based on multi-factor environment monitoring. An example method includes monitoring an occurrence of one or more danger events; detecting when a danger event occurs or about to occur; determining a danger level of the detected danger event; determining an importance level of each of a plurality of backup data items; determining a backup time for performing backup of the backup data items based on the determined danger level of detected danger event; determining a backup order of the plurality of backup data items based on the determined importance level of the backup data items; selecting a backup storage for the backup data items and performing a backup of the plurality of backup data items to the selected backup storage.

Abstract: A method for processing an I/O request and a computer system are provided. The method includes: receiving an I/O write request from a virtual machine; writing first data to be written as requested by the I/O write request into a local persistent storage area; determining a file type of a file to which the first data belongs; and writing the first data into a remote shared storage area if the file type of the file to which the first data belongs is a user file or a system file. Thus access traffic on the remote shared storage area can be reduced.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a backup system are provided. The backup system obtains a first backup image of a first virtual desktop image of a VDI system. The backup system initiates a first validation of the first backup image against one or more constraints of the first backup image. The backup system initiates an alert procedure when the first validation has failed.

Abstract: A VM (Virtual Machine) backup calculates, for each of the VMs, a set of blocks corresponding to the VM for inclusion in a backup, such that the set of blocks is calculated according to a prioritized sequence of operations based on a storage array connected to the computing node. The method traverses each of the calculated set of blocks, in which the set of blocks is taken at a common point in time for each VM, and stores the traversed blocks in a backup format configured for restoring the VM corresponding to the set of blocks by restoring the blocks and corresponding blocks at the common point in time. The prioritized sequence of operations allows the most efficient approach to be attempted first, but ensuring robust coverage by attempting successive “fallback” approaches so that effective coverage of all VMs occurs.

Abstract: One embodiment is related to a method for coordinating virtualized proxy node based virtual machine (VM) backups, comprising: determining one or more strategies for coordinating a plurality of virtualized proxy nodes for VM backup; and initiating one or more virtualized proxy node based VM backups based on the determined one or more strategies.

Abstract: In one example, a method for backing up data includes downloading configuration information that includes one or more policies that specify one or more aspects of a backup process. Next, a notification is received concerning a “start” command, receipt of the notification is acknowledged, and the “start” command is performed to create a backup job in a job queue. A signal is then sent indicating that the “start” command is finished, and a backup start event is created. The backup process is then performed, and a report generated indicating that success or failure of the backup process.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating data migration. Data migration is customizable according to user-specified data formats. A data migration system monitors the data migration process and automatically retries data migration tasks that have failed. In addition, the results of data migration are reversed according to detected threshold conditions.

Abstract: A method of managing snapshots on a storage system includes a storage controller (1) receiving a request to store a first snapshot associated with a first volume among a plurality of volumes on the storage system and (2) determining if an assigned snapshot reserve space remaining associated with the first volume is less than an amount of space that is required to store the first snapshot. In response to the assigned snapshot reserve space remaining being less than the amount of space required, borrowing snapshot reserve space from at least one of an unused assigned space or an unused unassigned space within the storage system and storing at least a portion of the first snapshot to the borrowed snapshot reserve space.

Abstract: Exemplary methods, apparatuses, and systems include a source site management server receiving, from first and second potential target site management servers, characteristics of the first and second potential target sites that affect replication of data from the source site to each potential target site. The source site management server receives selection of one or more criteria to be met in the selection of a target site for replication of data. The source site management server determines which potential target site is a better match for the received criteria based upon a comparison of the received criteria with the received characteristics of the target sites. The source site management server configures, automatically in response to the determination, the selected site as the target site for replication of data within the source site.

Abstract: Systems and methods for backing up data are disclosed. Changes made to a file system are tracked in a change log. When a backup operation is initiated, the changes identified in the change log are applied to the backup save sets. When a file associated with an event in the change log cannot be identified, the file is identified using the inode or other identifier. The event in the change log is then applied once the file is identified. The backup so achieved has eventual name space consistency and can be achieved without taking a snapshot of the file system.

Abstract: For the management of a file system for accessing data in a storage system in which the data are stored physically in a unique manner, a first storage environment associated with a first access performance level is mounted, from a first mount point. Moreover, at least one second storage environment, different from the first storage environment, and associated with a second access performance level is mounted, from a second mount point and with total or partial overlay of data with respect to the first storage environment. The data physically stored in a unique manner in the storage system is accessed, either via the first mount point or via the second mount point, as a function of a data use case.

Abstract: Data is migrated from a source storage device to a destination storage device using tape media. Both the source storage device and the destination storage device utilize disk drives to store data. A portion of data is detected migrating to the tape media. Metadata of the portion of data is changed to identify the portion of data as residing on the tape media. A prefetch command for the portion of data is detected. It is determined that the portion of data is stored on the tape media. In response to determining that the portion of data is stored on the tape media, the prefetch command is executing without recalling the portion of data to the disk drives. Instead, the portion of data is read directly from the tape media.

Abstract: A system and method for displaying an enhanced version history user interface for an online content management system. In one embodiment, a version history user interface includes version history entries that represent primary events and anchor events. In another embodiment, a preview version history user interface is displayed that allows a user to preview a version of a content item. In another embodiment, a restore action process allows a user to restore a previous version of a content item to be the new current version of the content item.

Abstract: Time based protection of data stored in a source volume of a computer system uses a directory structure to store backups from a storage system. A first backup from a storage system is received. The first backup contains an image of the source volume for a first time. A first time stamp representing the first time is associated with the first backup. The first backup is stored as a first directory indexed by the first time stamp in a top backup directory. A second backup is received from the storage system. The second backup contains an image of the source volume for a second time. A second time stamp representing the second time is associated with the second backup. The second backup is stored as a second directory indexed by the second time stamp in the top backup directory. The first and second directories are linked to a section of the top backup directory at a root of the top directory.

Abstract: Deduplication in a distributed storage system is described. A deduplication manager defines a first extent on a first node in a distributed storage system. The deduplication manager selects a second extent from the one or more groups of extents. The second extent matches the first extent. The deduplication manager removes, from the first extent, one or more data chunks that are included in the second extent. The deduplication manager associates, with the first extent, a pointer to the second extent for the removed one or more data chunks.

Abstract: A service exposes a storage system-independent application programming interface (API) and receives a data request from an application over the API. The service transforms the storage system-independent data request into a storage system-specific data request and executes it against an identified cloud-based storage system. The service can execute the request against multiple cloud-based storage systems and then return aggregated results to the application through the storage system-independent API.

Abstract: In one example, a method for searching data includes creating a set of tokens corresponding to data of an encrypted dataset, and then encrypting the tokens. Next, an encrypted search index is created that includes the encrypted tokens and that excludes any positional information concerning the data to which the encrypted tokens correspond. A query is then defined that includes one or more encrypted search tokens. Next, search results are received that identify any matches between the encrypted search tokens and the encrypted tokens of the encrypted search index. Finally, the data that corresponds to any identified tokens that match a token of the encrypted search index is decrypted.

Abstract: In one example, a method is provided for creating an inversion patch that can be used to locally restore a file to an earlier version of that file. Initially, a datacenter receives information concerning a target file version that resides at the datacenter and that is associated with a file stored locally at a client. The information includes an identification of the file and an identification of the target file version. Next, byte ranges are identified that are affected by changes that took place with respect to the file after the target file version was created. The byte ranges are then combined to form a unified set of byte ranges. Finally, the original content of the byte ranges in the unified set is identified and used to create the inversion patch.

Abstract: A method for migrating data from a source storage system to a destination storage system comprises the following steps. In a first step, an initial copy is performed. In a second step, one or more incremental copies are performed and then a final cutover incremental copy is performed. The performing the one or more incremental copies further comprises excluding from a respective one of the one or more incremental copies first data portions of the data that are likely to change before this performing a final cutover incremental copy.

Abstract: Embodiments disclosed herein provide systems, methods, and computer readable media for a converged mechanism for protecting data. In a particular embodiment, a method provides identifying a level of importance for a plurality of data items and tracking changes to the plurality of data items. The method further provides aggregating the changes based on the level of importance and logging the aggregated changes.

Abstract: Provided are a computer program product, system, and method for an application to provide for, in one embodiment, using hierarchical storage management to respond to a request to delete a data set by migrating the data set to another storage tier in a storage system before deleting the data set from its current location. As a result, the data set is stored on another tier to provide an opportunity to reverse the decision to delete the data set. In one embodiment, a temporary interval of time is provided to reverse the deletion decision and restore the data set from the migrated data set, before the data set is permanently deleted.

Abstract: A file backup method, which can be implemented on a virtual machine system or applied to backup files of a virtual machine, is herein described. The virtual machine system may include a virtual machine server and be associated with a backup server. Changes to a storage media are tracked through change block tracking. A location where file system records reside on the storage media is identified. Changed file system records are identified among the tracked changes to the storage media. Copies are made of the files that the changed file system records are pointing to.

Abstract: Embodiments are described for analytic backup of datasets in a client-server network. A system or processor-based operation derives historical data about backup operations performed in a client-server computer network system and analyzes a present backup operation to be performed for a client computer dataset with respect to a plurality of parameters comprising data type, backup level/data density, backup method, and target storage type. A report comparing one or more past backup operations from the historical data to the present backup operation is generated and transmitted to a user of the client to facilitate selection of an optimum backup method for the present backup operation with respect to minimized backup operation time.

Abstract: Methods, systems, and apparatus for optimizing a cache memory device of a storage system are described. In one embodiment, a first base segment tree representing a first full backup including data and metadata describing the data is cached in a cache memory device. Subsequently, a plurality of incremental segment trees representing incremental backups to the first full backup are cached in the cache memory device. Each of incremental segment trees corresponding to the changes to the first full backup, without modifying the first base segment tree in response to the changes. At least two of the incremental segment trees are merged into an updated incremental segment tree to reduce a storage space of the cache memory device to store the incremental segment trees. The updated incremental segment tree comprises data and metadata represented by two or more incremental segment trees.

Abstract: The disclosed computer-implemented method for healing images in deduplication storage may include (i) detecting that a data segment stored within deduplication storage is corrupted by executing an algorithm on the data segment to generate a numerical identifier for the data segment and determining that the numerical identifier does not match a previously stored numerical identifier for the data segment, (ii) checking, during a backup operation, whether a digital fingerprint of a data segment of an image being backed up matches a digital fingerprint of the corrupted data segment that was taken prior to corruption and that is already stored within the deduplication storage, and (iii) appending the data segment from the image being backed up to a container that already contains the corrupted data segment rather than replacing the corrupted data segment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: According to one embodiment, a method includes presenting a medium to more than one user as being exclusively occupied by whichever user attempts to access at least one file from the medium, writing a first file managed by a first user to a data partition of the medium, and storing a first user identifier (ID) that identifies the first user as metadata to an index partition of the medium in response to writing the first file managed by the first user. In another embodiment, a method includes reading metadata from an index partition of a medium from a first user of a plurality of users, extracting first file attribute information associated with a first user ID that indicates a first user from the metadata, and reading a first file based on the first file attribute information associated with the first user ID from a data partition of the medium.

Abstract: A query analyzer may be used to identify a plurality of queries and associated query characteristics, the query characteristics including a corresponding dataset of data units for each query, wherein the data units are to be loaded from an offline memory into a memory of an in-memory database. Then, a sequencer may be used to select a selected dataset for loading into the memory of the in-memory database, based on dependencies between the plurality of queries as included within the query characteristics, and on relationships, if any, between the datasets.