Abstract: The following description is directed to the use of encryption by a computing system. In one example, a method can include determining whether information associated with a logical address is stored unencrypted within an on-chip memory of an integrated circuit or whether the information associated with the logical address is stored encrypted within an off-chip memory external to the integrated circuit. When the information is not stored unencrypted within the on-chip memory and is stored encrypted within the off-chip memory: a page associated with the logical address can be retrieved from the off-chip memory containing the encrypted information; the retrieved page can be decrypted to generate unencrypted information; and the unencrypted information can be stored in a frame of the on-chip memory.

Abstract: Portions of code in an original application are randomized to generate a randomized version of the original application, wherein the randomizing does not modify expected behavior of the original application. Digital signature(s) are generated that attest to integrity of the randomized version. The digital signature(s) and either the original application or the randomized version are sent to a user device for execution or denial of execution of the randomized version based on the digital signature(s). At the user device, the randomized version is created if not received. The randomized version of the application is verified by the user device using the digital signature(s). The randomized version is executed by the user device in response to the digital signature(s) being verified or not executing the randomized version in response to the digital signature(s) not being verified.

Abstract: Reconciling data is disclosed. It is determined whether a state of a first backup application is consistent with a state of a second backup application. In the event the state of the first backup application is not consistent with the state of the second backup application, the state of the first backup application is updated to be consistent with the state of the second backup application.

Abstract: There are provided measures for enabling advanced local-network threat response. Such measures could exemplarily comprise receiving, at a local-network honeypot entity, a username/password related authentication data in relation to a login attempt to the honeypot entity, triggering a threat response operation at a local-network backend entity upon detection of the username/password related authentication data, the threat response operation comprising testing validity of the username/password related authentication data in one or more local accounts of the local-network, and in case the username/password related authentication data is detected to be valid for any account in the local-network, determining that said account is compromised and locking the compromised account.

Abstract: A method, executed by at least one processor, includes generating a snapshot for a plurality of data files, receiving an update request for a selected file of the plurality of data files, determining if the selected file is subject to a backup policy, updating the selected file without preserving the snapshot of the selected file if the selected file is not subject to the backup policy, and updating the selected file while preserving the snapshot of the selected file if the selected file is subject to the backup policy. A corresponding computer program product and computer system are also disclosed herein.

Abstract: For automatically applying update to snapshots of a virtual machine (VM), a cloned virtual machine is created reproducing a state of an existing first snapshot of a virtual machine, a first virtual NIC in the cloned VM is disabled, an update is applied to the cloned VM to which a second virtual NIC has been added, the second virtual NIC is deleted from the cloned VM to which the update has been applied, the first virtual NIC is enabled, and a second snapshot of the cloned VM is generated with the enabled first virtual NIC wherein the second snapshot is associated with the virtual machine.

Abstract: A computerized method and apparatus compresses symbolic information, such as text. Symbolic information is compressed by recursively identifying pairs of symbols (e.g., pairs of words or characters) and replacing each pair with a respective replacement symbol. The number of times each symbol pair appears in the uncompressed text is counted, and pairs are only replaced if they appear more than a threshold number of times. In recursive passes, each replaced pair can include a previously substituted replacement symbol. The method and apparatus can achieve high compression especially for large datasets. Metadata, such as the number of times each pair appears, generated during compression of the documents can be used to analyze the documents and find similarities between two documents.

Abstract: A device includes a processor that performs a procedure.

Abstract: The disclosed computer-implemented method for improving the efficiency of point-in-time representations of databases may include (1) identifying a database that includes (A) one or more utilized storage locations that store substantive data and (B) one or more empty storage locations that are not currently storing any substantive data, (2) creating a point-in-time representation of the database by (A) identifying the empty storage locations and (B) flagging the empty storage locations in connection with the point-in-time representation of the database, (3) detecting a request to write certain substantive data to at least one of the empty storage locations, and then in response to detecting the request, (4) satisfying the request while refraining from performing a copy-on-write operation on the empty storage location due at least in part to the empty storage location not currently storing any substantive data. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Methods, systems, and apparatuses for storing operational information related to operation of a non-volatile array are described. For example, the operational information may be stored in a in a subarray of a memory array for use in analyzing errors in the operation of memory array. In some examples, an array driver may be located between a command decoder and a memory array. The array driver may receive a signal pattern used to execute an access instruction for accessing non-volatile memory cells of a memory array and may access the first set of non-volatile memory cells according to the signal pattern. The array driver may also store the access instruction (e.g., the binary representation of the access instruction) at a non-volatile subarray of the memory array.

Abstract: The memory system may include a memory device including: a plurality of planes each including a plurality of memory blocks suitable for storing data, and a plurality of page buffers corresponding to the planes; and a controller including a memory, the controller being suitable for performing a read operation to the memory blocks of a first plane storing a first data corresponding to a read command among the planes by referring to a meta-data of the first data, and for providing the first data to a host; wherein the meta-data is stored in the memory or the page buffers.

Abstract: Disclosed are a distributed storage system, a cluster node, and a range management method thereof, including: partitioning, by the cluster node according to a configuration parameter, a range corresponding to a first routing table entry in a local routing table into at least two subranges, where the first routing table entry refers to a routing table entry in which information that indicates the cluster node is recorded in replica information; separately establishing, by the cluster node, a log queue for each of the subranges; determining, by the cluster node, a corresponding subrange according to a key field of a data operation request from a client; executing a corresponding data read/write operation according to the determined subrange; and updating, according to the data read/write operation, a log queue corresponding to the determined subrange.

Abstract: A technique for use in balancing flash drive wear in data storage systems is disclosed. Multiple sets of flash drives are identified where data is stored as multiple slices striped across the set of flash drives. A write rate at which data will be written to the multiple slices stored on the set of flash drives during a next time interval is predicted. A number of bytes that can be written to each set of flash drives is determined. A metric representative of a wear rate is determined for each set of flash drives. HDD relocation candidates are identified and a relocation process to relocate identified slices initiated.

Abstract: The various implementations described herein include systems, methods and/or devices used for garbage collection in memory system. The method includes: (1) determining occurrences of triggering events including data reclamation events, urgent data integrity recycling events, and scheduled data integrity recycling events, and (2) recycling, in response to each of a plurality of triggering events, data in a predefined quantity of memory units from a source memory portion to a target memory portion of the memory system. A respective data reclamation event corresponds to the occurrence of host data write operations in accordance with a target reclamation to host write ratio. A respective urgent data integrity recycling event occurs when a memory portion satisfies predefined urgent read disturb criteria. A respective scheduled data integrity recycling event occurs at a rate corresponding to a projected quantity of memory units to be recycled by the memory system over a period of time.

Abstract: The described embodiments include a computing device that has two or more levels of memory, each level of memory having different performance characteristics. During operation, the computing device receives a request to lease an available block of memory in a specified level of memory for storing an object. When a block of memory is available for leasing in the specified level of memory, the computing device stores the object in the block of memory in the specified level of memory. The computing device also commences the lease for the block of memory by setting an indicator for the block of memory to indicate that the block of memory is leased. During the lease (i.e., until the lease is terminated), the object is kept in the block of memory.

Abstract: A technique for use in balancing flash drive wear in data storage systems is disclosed. multiple sets of flash drives are identified where data is stored as multiple slices striped across the set of flash drives. A write rate at which data will be written to the multiple slices stored on the set of flash drives during a next time interval is predicted. A number of bytes that can be written to each set of flash drives is determined. A wear metric representative of a wear rate is determined for each set of flash drives. A write quota and an interval period is determined for one or more sets of flash drives. If the wear metric exceeds the write quota for one or more sets of flash drives during the time interval, reduce the wear rate for the one or more sets of flash drives.

Abstract: A technique for use in balancing flash drive wear in data storage systems is disclosed. multiple sets of flash drives are identified where data is stored as multiple slices striped across the set of flash drives. A write rate at which data will be written to the multiple slices stored on the set of flash drives during a next time interval is predicted. A number of bytes that can be written to each set of flash drives is determined. A metric representative of a wear rate is determined for each set of flash drives. Flash drive wear rate is balanced such that the wear rate for each of the multiple is approximately equal.

Abstract: It is often desired to add or change the functionality of an existing executable, also known as binary. Simply splicing in new machine code into the binary will not work due to host system-specific and platform-specific limitations. The present invention will enable adding any new code to an existing program while overcoming the aforementioned consistency limitations and maintaining the original functionality.

Abstract: A versioned records management computing system that uses a restart era in order to promote rapid recovery. A persistent store includes a multi-versioned record collection. The records are also associated with a restart era that corresponds to the era of operation of the computing system after a restart. Upon a recovery, the current restart era changes. An object collection media has an object collection that conforms to an object model such that the object model is used to operate upon the records. The object collection media is operable such that the object collection is durable so as to survive restarts of the system to thereby allow for accelerated recovery.

Abstract: Scheduling threads in a system with many cores includes generating a thread map where a connection relationship between a plurality of threads is represented by a frequency of inter-process communication (IPC) between threads, generating a core map where a connection relationship between a plurality of cores is represented by a hop between cores, and respectively allocating the plurality of threads to the plurality of cores defined by the core map, based on a thread allocation policy defining a mapping rule between the thread map and the core map.

Abstract: A storage controller for cache management that includes a cache memory and a cache management module. The cache management module to, on receipt of region specification requests from hosts, extract from the region specification requests cache rules for management of regions of data storage of a storage array, and on receipt of data operation requests from hosts, process the data operation requests based on the extracted cache rules.

Abstract: Various embodiments are directed to providing integrity protection for a system management mode. During initialization, a hash value of a system management mode control routine may be determined. Subsequently, during operation, the hash value may be compared to a hash value of a system management mode control routine to be executed. The system management mode control routine to be executed may be determined to be authentic if the hash values are the same.

Abstract: Embodiments of the present invention provide a method for modifying a root node, and a modification apparatus. The method for modifying a root node of the present invention includes: receiving a root node modification request; modifying a root node in a data area of a database according to the modification information; replicating the modified root node to the general area of the database; finding, in the general area of the database, that an identifier of an active mapping page is the identifier of the first mapping page, and determining that the first mapping page is the active mapping page; and replacing the second mapping page with the modified root node according to the modified root node that is replicated to the general area, and modifying the identifier of the active mapping page to the identifier of the second mapping page. The present invention improves concurrent processing efficiency of indexing.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include defining a plurality of failure domains for sets of storage devices in a storage facility, and defining, using the failure domains, one or more limitations for distributing data on the storage devices. Upon identifying a data distribution configuration for a software defined storage system that is compliant with the one or more limitations, the identified data distribution configuration can be presented to a user. The failure domains may include physical failure domains, logical failure domains, or a combination of physical and logical failure domains, and the limitations may include mandatory limitations or a combination of mandatory and non-mandatory limitations.

Abstract: A multi-streaming memory system includes a memory, and a processor coupled to the memory, the processor executing a software component that is configured to identify multiple attributes that are each related to logical block addresses (LBAs), and that each correspond to each of a plurality of streams of data writes, evaluate an importance factor for each of the attributes for each of the streams, and clustering two or more of the LBAs by assigning a stream ID to each of the LBAs based on all of the importance factors for each of the LBAs and the assigned stream.

Abstract: A semiconductor chip comprising memory controller circuitry having interface circuitry to couple to a memory channel. The memory controller includes first logic circuitry to implement a first memory channel protocol on the memory channel. The first memory channel protocol is specific to a first volatile system memory technology. The interface also includes second logic circuitry to implement a second memory channel protocol on the memory channel. The second memory channel protocol is specific to a second non volatile system memory technology. The second memory channel protocol is a transactional protocol.

Abstract: In one implementation, a computer-implemented method can include receiving, at a driver running on a mobile computing device with a local power source, a command from an application for an allocation of volatile memory; allocating, by the driver, memory from a pool of volatile memory for the application; storing data in the allocated memory; detecting, by the driver, that a particular situation currently exists on the mobile computing device that will cause the data to be lost; and performing, by the driver, an operation with regard to the memory and the data that will cause the data to be preserved following a conclusion of the particular situation.

Abstract: According to an embodiment, a network monitoring device that monitors a network includes a software storage and a controller. The software storage is configured to store software applied to a first electronic device connected to the network. The controller is configured to determine, in response to reception of verification result data indicating software verification failure from the first electronic device, whether a recovery condition determined in advance as a condition of recovering software in the first electronic device is satisfied, and perform a control of transmitting the software stored in the software storage to the first electronic device when it is determined that the recovery condition is satisfied.

Abstract: Methods, devices, and non-transitory process-readable storage media for compacting data within cache lines of a cache. An aspect method may include identifying, by a processor of the computing device, a base address (e.g., a physical or virtual cache address) for a first data segment, identifying a data size (e.g., based on a compression ratio) for the first data segment, obtaining a base offset based on the identified data size and the base address of the first data segment, and calculating an offset address by offsetting the base address with the obtained base offset, wherein the calculated offset address is associated with a second data segment. In some aspects, the method may include identifying a parity value for the first data segment based on the base address and obtaining the base offset by performing a lookup on a stored table using the identified data size and identified parity value.

Abstract: A data storage device with one or more buffers can employ buffer tenure management with at least a data storage device having a first buffer, a second buffer, a buffer manager, and a non-volatile memory. The first buffer can be located on-chip while the second buffer is located off-chip. The first buffer may be filled with data having a tenure of less than a predetermined tenure threshold as directed by the buffer manager.

Abstract: A server includes communication circuitry configured to communicate with a plurality of external terminals, a storage which stores reference data for hardware integrity verification of the plurality of external terminals, and a processor configured to verify the hardware integrity of a second external terminal using the reference data, when a request for the hardware integrity verification of the second external terminal is received through the communication circuitry from a first external terminal.

Abstract: During a process of migrating a source system into a standardized virtual environment, virtual machine instances of the source system executing in a hypervisor are snapshotted as virtual machine images in an operational repository of the hypervisor. The virtual machine images in the operational repository are short-term snapshots. From time to time during the migration process, long-term snapshots of the source system are created by checking given ones of the virtual machine images from the hypervisor operational repository into an image library as image objects.

Abstract: A method for filtering out nodes associated with hierarchical data structures is provided. The method may include generating node controllers on the hierarchical data structures. The method may include determining whether user actions are received on a first node controller, a second node controller, and a third node controller associated with the generated plurality of node controllers. The method may include filtering node levels associated with hierarchical data structures, and presenting the hierarchical data structures without the filtered out node levels. The method may include filtering out sibling nodes associated with the hierarchical data structures, and presenting the hierarchical data structures without the filtered out sibling nodes. The may further include reverse-collapsing first node levels and filtering out second node levels based on the reverse-collapsed first node levels, and presenting the hierarchical data structures without the filtered out second node levels.

Abstract: A storage device includes a non-volatile storage, and a controller configured to carry out, in parallel, operations in response to a plurality of commands received from a host and queued in a command queue. When the controller receives, from the host, a read command and then a subsequent command before all data read from the non-volatile storage are transmitted to the host in response to the read command, the controller transmits a response to the subsequent command after part of the data read from the non-volatile storage are transmitted to the host and before the all data read from the non-volatile storage are transmitted to the host.

Abstract: Embodiments of the present disclosure relate to the communications field and disclose a read-only memory (ROM) flashing method and an intelligent terminal, so as to implement lossless ROM flashing on an original system of the intelligent terminal. A solution provided by the embodiments of the present disclosure includes: the intelligent terminal includes a virtual extended system and an original system, the original system runs a factory system file of the intelligent terminal, and the virtual extended system runs a ROM flashing system file; when a ROM flashing instruction entered by a user is received, the ROM flashing system file is written into a storage image file of the virtual extended system; and the virtual extended system is started to run the ROM flashing system file. The present disclosure is used to perform ROM flashing on an intelligent terminal.

Abstract: Apparatus for a garbage collection is disclosed herein. The apparatus includes a processor that includes a load-monitored region register. A memory stores program code, which, when executed on the processor performs an operation for garbage collection, the operation includes specifying a load-monitored region within a memory managed by a runtime environment; enabling a load-monitored event-based branch configured to occur responsive to executing a first type of CPU instruction to load a pointer that points to a first location in the load-monitored region; performing a garbage collection process in background without pausing executing in the runtime environment; executing a CPU instruction of the first type to load a pointer that points to the first location in the load-monitored region; responsive to triggering a load-monitored event-based branch, moving an object pointed to by the pointer with a handler from the first location in memory to a second location in memory.

Abstract: A method is used in managing deletion of replicas of files. A request to delete a set of replicas of a file of a file system is received. A replica of the file represents a state of the file at a particular prior point in time. A destination replica is identified. A set of file system blocks shared between a replica of the set of replicas and the destination replica is de-allocated by updating metadata of the destination replica. File system blocks associated with the set of replicas are de-allocated. A subset of the file system blocks are de-allocated concurrently.

Abstract: A method for migrating data to avoid read disturbance is introduced to contain the following steps: obtaining first read counts corresponding to physical blocks from a first read-count table; obtaining second read counts corresponding to the physical blocks from a second read-count table; subtracting each first read count from one corresponding second read count to generate third read counts; finding a singular physical-block from physical blocks according to the third read counts; performing a test read on data of the ith physical page of the singular physical-block; determining whether the data of the ith physical page of the singular physical block has passed the test read; and if so, moving or copying data of the ith physical page and at least one neighboring physical-page of the singular physical block to an available physical-block.

Abstract: A file protection method may include receiving a package that includes files for installing and executing an application, adding a protection file for an operation of a file protection module to the package, and providing the package to which the protection file is added over a network. In response to execution of a control command for a desired file that is controlled by the application through a service code of the application at an electronic device on which the application is installed and executed through the package, a protection command included in the file protection module is called and control of the desired file and integrity verification associated with data stored in the desired file are processed in response to the called protection command.

Abstract: Apparatuses and methods for transferring data from memory on a data path are described. An example apparatus includes: one or more data terminals; a plurality of memory banks, one of the plurality of memory banks being selected responsive, at least in part, to a bank address; and a data path including a plurality of data path routes and a plurality of switching buffers on the plurality of data path routes. The plurality of switching buffers are arranged such that one or more of the plurality of switching buffers are selected responsive, at least in part, to the bank address and activates one of the plurality of data path routes.

Abstract: A method for recovering data from one or more storage systems for a group recovery. In response to receiving a request for the group recovery, the method implemented at a backup server identifies a group recovery resource based on the request, where the group recovery resource includes one or more recovery item lists. The backup server traverses the one or more recovery item lists of the group recovery resource to determine a source recovery storage system, target recovery storage systems, and one or more data items to be recovered to each of the target recovery storage systems. The backup server then initiates one or more recovery sessions to recover the one or more data items from the source recovery storage systems to the recovery target storage systems substantially concurrently.

Abstract: A data storage device is disclosed wherein a first host block is written to a first data sector, and when writing a second host block to a second data sector the first host block is read from the first data sector. When the read of the first host block fails, a partial map is generated identifying a location of the second host block in the second data sector, the partial map is stored in a non-volatile memory, and the second host block is written to the second data sector. When a power failure occurs after writing the second host block to the second data sector, an exception entry is updated using the partial map, wherein the exception entry is associated with the first and second host blocks.

Abstract: A system and method for offset protection data in a RAID array. A computer system comprises client computers and data storage arrays coupled to one another via a network. A data storage array utilizes solid-state drives and Flash memory cells for data storage. A storage controller within a data storage array is configured to store user data in a first page of a first storage device of the plurality of storage devices; generate intra-device protection data corresponding to the user data, and store the intra-device protection data at a first offset within the first page. The controller is further configured to generate inter-device protection data corresponding to the first page, and store the inter-device protection data at a second offset within a second page in a second storage device of the plurality of storage devices, wherein the first offset is different from the second offset.

Abstract: A semiconductor device may include: a bus; first and second function modules configured to communicate via the bus; a first encryption module configured to encrypt first data output from the first function module using a first encryption key to generate first encrypted data; and/or a second encryption module configured to decrypt the first encrypted data using the first encryption key, to output the decrypted first data to the second function module, and to encrypt second data output from the second function module using a second encryption key to generate second encrypted data. A semiconductor device may include: a bus; first and second modules configured to communicate via the bus; and/or an encryption module configured to use different encryption policies for first data, which is output from the first module and stored in a memory, and second data, which is output from the second module and stored in the memory.

Abstract: A data protecting method, a memory storage apparatus and a memory control circuit unit are provided. The method includes: determining whether a first procedure being executed or about to be executed by the memory storage device is a first type procedure; and if the first procedure being executed or about to be executed by the memory storage device is the first type procedure, temporarily stopping receiving a first data corresponding to a first write command before the first procedure is finished.

Abstract: Various embodiments of the invention relate generally to an electronic device, and more particularly, to a semiconductor memory device and an operating method thereof. A semiconductor memory device including a plurality of memory cells using an optimal input buffer reference voltage may include at least one input buffer receiving data to be stored in the plurality of memory cells, and an input buffer reference voltage control unit setting one of a plurality of internal voltages generated beforehand and having different voltage levels as a reference voltage of the at least one input buffer in response to a control signal received from a controller controlling the semiconductor memory device.

Abstract: A computer-implemented method is provided for storing process data. The method comprises allocating a storage area for the process data in the storage means, loading the process data, from the at least one source system, and storing the process steps according to a predetermined data structure in the allocated storage area of the storage means. The predetermined data structure comprises a first attribute, in which a unique identification of the process instance of the respective process step is stored, a second attribute, in which an identification of the respective process step is stored, and a third attribute, in which the sequence of the process steps within a process instance is stored. The method then sorts the process steps in the allocated storage area, wherein the process steps are first sorted according to the first attribute, and subsequently, according to the third attribute.

Abstract: Disclosed herein are systems and methods for managing information management operations. The system may be configured to employ a work flow queue to reduce network traffic and manage server processing resources. The system may also be configured to forecast or estimate information management operations based on estimations of throughput between computing devices scheduled to execute one or more jobs. The system may also be configured to escalate or automatically reassign notification of system alerts based on the availability of system alert recipients. Various other embodiments are also disclosed herein.

Abstract: A method for storage volumes in a cascade of storage volumes including starting a first data map relating a first storage volume to a second storage volume while a second data map relating the first storage volume and a third storage volume is active. Starting the first data map uses a zone map that relates the first storage volume to a zone within the cascade of storage volumes.

Abstract: Embodiments of the present invention provide methods, systems, and computer program products for data deduplication. In one embodiment, for a data chunk, it is determined whether a hash value of the data chunk generated by a first hash function is present in a hash table. Once a threshold size of the hash table is reached, it is determined whether there is free space in a write data area, identified by a second hash function. When there is no free space in the write data area, a post-deduplication process is performed for each data chunk in the write data area. Once free space is cleared in the write data area, the data chunk is written to the write data area identified by the second hash function.