Emc IP Holding Company LLC

Emc Corporation

Emc International Company

Other

Emp IP Holding Company LLC

Amit Lieberman

Assaf Natanzon

Jehuda Shemer

Ron Bigman

Leehod Baruch

Aharon Blitzer

Aviram Katz

Oron Golan

Raul Shnier

Senya Touretski

Yuri Manusov

Kfir Wolfson

Oded Peer

Yana Vaisman

Roy Dahan

Amihai Hadar

Maayan Maltz

Meytal Ashkenazy

Saar Cohen

Shai Harmelin

Idan Levyl

Radai Rosenblatt

Yossef Saad

Ravi Vijayakumar Chitloor

Naveen Rastogi

Matan Gilat

Prasanna Malaiyandi

Cynthia L Toryu

Oz Garinkol

Roy Michael

An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to receive a request to execute an application in a function-as-a-service ('FaaS') environment, to initiate execution of the application responsive to the request, and to invoke a plurality of application functions with each such application function interacting with one or more backend services in executing the application. The processing platform is further configured to automatically generate an application manifest characterizing relationships between the application functions and the backend services utilized in executing the application, to capture state of the application for a particular point in time based at least in part on the application manifest, and to perform operational recovery of the application for the particular point in time utilizing the captured state. The application manifest illustratively comprises a graph having a plurality of nodes corresponding to respective ones of the application functions and the backend services.

Automated capture and recovery of applications in a function-as-a-service environment

Systems and methods for backing up and restoring serverless applications are provided. A serverless application is queried to identify the functions and services used. These functions and services are transformed into a manifest or graph that allows the relationships of the serverless application to be identified in an automated manner. The serverless application can be backed up and/or restored using the manifest.

Serverless application operational recovery and manifest creation

Dynamic honeypots for computer program execution environments are described. A determination is made whether a time period has expired since a computer program execution environment, of multiple computer program execution environments, began executing a computer program that provides a user service. The computer program execution environment is changed into a computer security mechanism that counteracts an attempt of unauthorized use of a system that comprises the computer program execution environment, in response to a determination that the time period has expired since the computer program execution environment began executing the computer program that provides the user service.

Dynamic honeypots for computer program execution environments

The life cycle of one or more containers related to one or more containerized applications is managed by determining that a predefined retention time for a first container of a plurality of containers has elapsed; in response to the determining, suspending new session traffic to the first container; and waiting for a predefined session dilution time before terminating the first container and/or changing a role of the first container. In some embodiments, the session dilution time allows existing sessions to complete before the first container is disconnected from a service platform.

Container life cycle management with session dilution time

A plugin is provided to a service that includes a database for storing data corresponding to transactions received by the service and applied to the database. Upon receipt of a transaction to be performed by the service, the plugin receives a message generated by the service and associated with informing another service of the transaction. The message is stored in the database together with the transaction, the message and transaction thereby being in the same transactional context. Upon the transaction being committed, the message is also processed because the transaction and message are in the same single transactional context within the database.

Highly scalable and consistent pluggable messaging system

A selection is received of a copy of an application backed up from a first FaaS environment for deployment into a second FaaS environment. An application manifest used to backup the application is accessed. The manifest specifies application functions, backend services, and application function mappings. An application function interacts with a backend service in executing the application. An application function mapping includes a condition under which the application function is invoked. The copy of the application is restored into the second FaaS environment. A condition specified in the restored version of the application function mapping is changed. Based on the changed condition, the restored version of the application function is invoked when the restored version of the backend service performs an operation, and the application function of the application corresponding to the restored version of the application function is not invoked.

Repurposing serverless application copies

A method and system for implementing risk-based cyber security. Specifically, the disclosed method and system entail evaluating risk as a decision threshold for conducting cyber security assessments of system images within cloud computing environments. Further, the disclosed method and system pivot on intelligence pertaining to the latest cyber threats and/or vulnerabilities found worldwide.

Method and system for implementing risk based cyber security

Systems and methods for running an application program on a database host is disclosed. According to some embodiments, the system comprises an agent installed on the database host. The system further comprises an application engine installed on an application server. The application engine is configured to create and deploy the agent to the database host to be installed. The agent is configured to command a daemon installed on the database host to download a container image of the application program based on a container image name received from the application server.

Methods and systems for executing a software application using a container

An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to execute a cloud-native application utilizing a plurality of micro-services each associated with a different set of one or more underlying databases, to capture state of the cloud-native application for a particular point in time, and to perform operational recovery of the cloud-native application for the particular point in time utilizing the captured state. Capturing state of the cloud-native application for the particular point in time comprises capturing the state in accordance with a directional dependency graph that characterizes relationships between the micro-services and the associated databases utilized in executing the cloud-native application in order to ensure directional consistency between the databases in the captured state. Performing operational recovery of the cloud-native application for the particular point in time utilizing the captured state comprises performing the operational recovery in accordance with the directional dependency graph.

Directional consistency in capture and recovery of cloud-native applications

A storage system comprises an object store, which comprises a plurality of metadata objects, a plurality of change objects, and a plurality of data objects associated with data stored in at least one logical unit of a production site, and a replication site configured to generate a requested point in time (PIT) based at least in part on the plurality of data objects, by: dividing the plurality of metadata objects into a plurality of respective portions of metadata objects; mapping each respective portion of metadata objects to a respective one of a plurality of reducer nodes; performing map reduce operations on the respective portion of metadata objects, at each respective one of the plurality of reducer nodes, to apply the most recent list of changes that occurred to each offset before the first requested PIT; and merging together the list of changes from each reducer node into the requested PIT.

Methods, systems, and apparatuses to update point in time journal using map reduce to create a highly parallel update

A computer-implemented method is provided. First information is received from at least a first data source. Based at least in part on analysis of the received first information, a determination of a first risk of a first adverse event is made, the risk affecting a first entity associated with a first location. Based at least in part on the first risk, at least a first impact from the first adverse event on the first entity is determined. At least a first action is dynamically caused to occur either before the completion of the first adverse event, the first action configured to substantially mitigate the first impact.

Risk based analysis of adverse event impact on system availability

One embodiment is related to a method for setting a tenant context for an application in a multi-tenancy environment, comprising: identifying a tenant identity for a tenant request, wherein the tenant identity is included in the tenant request; and setting a proper context for a first service of the application based on the identified tenant identity.

Plug and play multi tenancy support for cloud applications

A bug or problem that occurs during execution of an application is detected and a time at which the problem occurred is stored. An enhanced copy of the application is restored from before the time at which the problem occurred, and the enhanced copy of the application is run. If the problem is reproduced, the application is paused. If the problem is not reproduced, restoration of the enhanced copy, running of the enhanced copy and detection of the problem are repeated for a pre-designated number of times.

Proactive debugging

A method and system for implementing cloud native application threat detection. Specifically, the disclosed method and system entail configuring a webhook within a build pipeline for cloud native applications, which when triggered by the detection of modifications to container configuration and/or definition files associated with the cloud native applications, forwards exact copies of the cloud native applications to a threat detection service for cyber security assessing. Further, based on the assessing, cloud native applications may be impeded from continuing, or alternatively, may be permitted to continue along, the build pipeline.

Growing community of inventors

Raanana, Israel

Amit Lieberman