Avocado Systems Inc.

Cohesity, Inc.

Other

Amitabh Sinha

Keshav Govind Kamble

Chinmaya Manjunath

Karandeep Singh Chawla

Colin Scott Johnson

Dayanand Sharma

Prakash Veljibhai Vaghela

Rakesh K Garg

Shailesh R Naik

A current configuration of one or more data management services is monitored. It is determined that the current configuration is insufficient to achieve a data protection intent indicated by a specification of the data protection intent. In response to determining that the current configuration is insufficient to achieve the data protection intent indicated by the specification of the data protection intent, the current configuration of the one or more data management services is modified in a manner to achieve the data protection intent indicated by the specification of the data protection intent.

Automatically implementing a specification of a data protection intent

A specification of a data protection intent is received. Configurations for a plurality of different data management services are automatically determined in an attempt to achieve the specified data protection intent. The determined configurations in the plurality of different data management services are automatically implemented.

In one embodiment, a system includes a sender host having a processing circuit and logic integrated with and/or executable by the processing circuit. The logic is configured to cause the processing circuit to select a plurality of base parameters commonly identifiable by a sender host and a receiver host and determine at least one external event that triggers a change in selection of the plurality of base parameters to a plurality of changed parameters. The logic also causes the processing circuit to generate a unique security key using the plurality of base parameters in response to a determination that the at least one external event has not occurred, generate the unique security key using the plurality of changed parameters in response to a determination that the at least one external event has occurred, and send, by the sender host, a message including the unique security key to the receiver host.

Security key generator module for security sensitive applications

In one embodiment, a system includes a processing circuit and logic integrated with and/or executable by the processing circuit. The logic causes the processing circuit to monitor a plurality of application instances operating on a first host. The logic also causes the processing circuit to detect that a first application thread has been called by a first application instance operating on the first host and determine whether the first application thread is registered to be called by the first application instance on the first host by consulting a registration index. Moreover, the logic causes the processing circuit to quarantine the first application thread in response to a determination that the first application thread is not registered to be called by the first application instance on the first host.

Thread level access control to socket descriptors and end-to-end thread level policies for thread protection

According to one embodiment, a system includes a processing circuit and logic integrated with and/or executable by the processing circuit. The logic is configured to cause the processing circuit to determine, by an application operating on a first host in a network, one or more security features and/or capabilities available to the application for protecting the application and first data used by the application from unauthorized activity. The logic is also configured to cause the processing circuit to send, by an ADPL operating on the first host via a data socket descriptor, a first message to one or more peer applications in the network, the first message including indication of the one or more security features and/or capabilities available to the application. The logic may further cause the processing circuit to receive a second message indicating security features available to a peer application in the network operating on another host.

Application security capability exchange via the application and data protection layer

A method for delivering content to users from a web site system over a network is presented. The method includes one or more users connecting to the web site system over the network for the purpose of registering as a sending party to provide content to the web site system along with providing one or more smart-tags associated with the content, the smart-tags providing qualifying information about the content, or registering as a subscribing party to request content from the web site system by providing a subscription including one or more smart-tags. The sending party requests the web site system to deliver content provided by the sending party and the subscribing party requests delivery of the desired content. The subscribing party receives the desired content from the web site system over the network when the subscription at least in part matches one or more smart-tags provided by the sending party.

Growing community of inventors

Fremont, CA, United States of America

Amitabh Sinha