Emc (benelux) B.v., S.a.r.l.

Emc Israel Development Center, Ltd.

Emc Corporation

Evgeny Drukh

Assaf Natanzon

Shlomo Ahal

Ziv Kedem

Oded Kedem

Yair Heller

Michael Lewin

Tzach Sechner

Ido Singer

Avi Shoshan

Efrat Angel

Oded Weber

Method and apparatus for detecting viruses in a continuous data protection system using by scanning journal data. In an exemplary embodiment, a system stores journal data, receiving a virus signature update containing a first new virus signature, scanning the journal data for the first new virus signature, and identifying a data block containing the first new virus signature for a first virus.

Methods and apparatus for virus detection using journal data

In one aspect, a method to recover data includes annotating metadata entries in a journal to indicate changes by an application to an object stored in a continuous data protection environment. Each entry of the metadata corresponds to one of a unique group of DO stream data blocks or a unique group of UNDO stream data blocks. The method also includes determining a version of the object that meets criteria by searching the annotated entries and obtaining the version of the object that meets the criteria. In another aspect, a method to recover data includes receiving criteria to recover an object, determining a version of the object that meets the criteria by searching point-in-time images using a DO stream and an UNDO stream and obtaining the version of the object that meets the criteria.

Method and apparatus to recover data in a continuous data protection environment using a journal

Method and apparatus to provide bottleneck processing in a continuous data protection system having journaling. In an exemplary embodiment, system parameter information is collected and analyzed to output bottleneck information.

Methods and apparatus for bottleneck processing in a continuous data protection system having journaling

Methods and systems for accessing data from a previous point in time, including receiving data stored in a storage system of addressable memory, the storage system including a plurality of addresses, receiving a journal history of write transactions for the storage, each write transaction including (i) a plurality of designated memory addresses, (ii) a corresponding plurality of current data to write in the designated memory addresses for storage, and (iii) a time indicator, generating a data structure that represents a virtual interface to the storage at a specified point in time, based on the write transactions in the journal history having a time subsequent to the specified point in time, and enabling a user to process the data from the specified point in time, via the virtual interface and the journal history.

Methods and apparatus for point in time data access and recovery

Methods and systems for continuous data replication, including receiving a write transaction from a production site, the write transaction including raw data (RWNEW), a size indicator (SZ) for the size of the raw data, and a start address (ADD) for writing the raw data, copying the raw data (RWNEW) into a first journal data stream at a current journal address (JADD), and copying the size indicator (SZ), the start address (ADD) and the journal address (JADD) into a first journal meta-data stream.

Methods and apparatus for optimal journaling for continuous data replication

A system for consistent data recovery, including a storage area network (SAN) of initiator nodes and target nodes, wherein initiator nodes issue I/O requests and target nodes respond to I/O requests, the SAN being represented logically as a plurality of consistency groups of nodes, G, . . . , Gn, each consistency group representing at least one logical storage unit (LU), each LU acting as a target node within the SAN, at least one host device, each host device acting as an initiator within the SAN, each host device including a transmitter for issuing I/O requests to at least one LU, and each host device being associated with a host device agent, the host device agent including an interceptor for intercepting I/O requests issued by the host device, and a router for forwarding the intercepted I/O requests to a data protection appliance, a data protection appliance (DPA) acting as both an initiator node and a target node within the SAN.

Growing community of inventors

Rehovot, Israel

Evgeny Drukh