Datacore Software Corporation

Citrix Systems, Inc.

David A Linde

Ziya Aral

Roni J Putra

Nicholas C Connolly

Mark H Friedman

Daniel Alec Gulkis

Shweta Subramani

Ye (Tom) Chen

Mohamed Ghanem

Daniel Gulkis

Disclosed herein are methods, systems, and computer-readable media for blocking attempts at runtime redirection and attempts to change memory permissions during runtime. The present disclosure describes features that enable runtime detection of an attempt to redirect routines or change memory permissions, and determining whether to allow or deny the attempt. Such features may include changing memory write permissions on memory segments, such as those segments used by dynamic loaders after call associations have been saved or otherwise created. Other features may include swapping the addresses of system routines (e.g., open, read, write, close, etc.) to new routines that perform the same function as well as additional functionality configured to detect attempts to redirect or change memory permissions. Once detected by the new routine during runtime, a determination may be made to deny or allow the call based on a policy.

Blocking routine redirection

Systems, methods, and computer-readable media for securing a mobile device application using an application wrapper while preserving and/or improving performance of the wrapped application are presented. In one or more embodiments, an application wrapper may detect, during execution of a wrapped application, at least one performance caused by the application wrapper. The application wrapper may modify execution of the wrapped application to address the at least one detected performance issue. In some instances, the at least one performance issue may be associated with a cache that stores one or more pages from a database, and the cache and the database may be maintained within the wrapped application.

Performance of a wrapped application

Disclosed are network managed volumes that enable simplified and more efficient use of information technology assets by allocating physical disk drives as needed. A pool of storage can be defined and populated with physical disks that are accessible in a storage area network. Virtual volumes are created from the storage pool, with each virtual volume being separately allocable to a host device (e.g., client, application server, etc.). Thus, host devices that have been allocated these virtual volumes perceive ownership of the entire volume, without requiring a present allocation of physical storage space having the same characteristics, but with seamless introduction of physical resources as needed.

Network managed volumes

Methods and apparatus for point-in-time volumes are provided. A relationship is enabled between a source volume and point-in-time volume. Copying a data chunk to the point-in-time volume before a write operation modifies the data chunk on the source volume dynamically creates the point-in-time volume. The point-in-time volume can be accessed in read/write mode as a general purpose data storage volume. Other embodiments comprising additional features, such as a forced migration process, are also provided.

Methods and apparatus for point-in-time volumes

A volume insight architecture in which software processes internal to the server system issue read/right commands against client data stored on a disk device local to the server independent of client control. A volume insight driver interments the physical location of client data on the server disk and dynamically adjusts the data addresses from the software processes such that they coincide with the actual address of the client data on the server disk. The software processes and the address translation process are invisible to the client. The server treats the locally stored client file system as a local server file system. Processes which can be run against the local file system image on the server cannot distinguish between a true locally mounted file system image and the locally presented file system image presented by the volume insight architecture. Maintenance functions, such as backup, virus detection, etc., are locally performed. This reduces the overhead burden on the client systems.

Growing community of inventors

Plantation, FL, United States of America

David A Linde