International Business Machines Corporation

Nilesh Prabhakar Bhosale

Joseph W Dain

Gregory Tad Kishi

Sandeep R Patil

Wayne A Sawdon

Abhishek Jain

Deepavali M Bhagwat

John Thomas Olson

Duane Mark Baldwin

James Hewitt

Dean Hildebrand

Robert Beverley Basham

Frank N Lee

William W Owen

Takeshi Ishimoto

Thomas K Clark

Ashish Chaurasia

Christopher J Vollmar

Mandar Jayant Vaidya

Storage network with controller that includes using deep packet inspection to determine whether a computer file or computer object is sensitive and/or critical, and then, if it is sensitive or critical, applying an artificial intelligence algorithm to determine whether there is a potential threat that is represented by the file or object. If there is a potential threat, then a cyber-resiliency workflow is performed to eliminate or at least mitigate the potential threat.

Detecting security threats to data on a storage controller

Provided are a computer program product, system, and method for determining an encryption technique for a modified data object to backup. Deep data inspection is performed on an object using a natural language processing module to determine facets for the object. The facets provide facet values for instances of sensitive information in the object. The facet values for the object are processed to determine a cumulative facet value. A determination is made of an encryption technique comprising one of a plurality of different encryption techniques to use on the object based on the cumulative facet value. The determined encryption technique is used to encrypt the object to transfer to a backup storage.

Determining facet values for sensitive information in a data object to determine an encryption technique to encrypt the data object for backup

Systems and methods for management of event metadata. The methods may include maintaining a plurality of data storage systems in communication with an external metadata management system. The methods may also include operating the metadata management system to store tagged event metadata corresponding to the plurality of data storage systems. Event metadata corresponding to a data storage system includes information associated with at least one data operation event executed on data residing in that data storage system.

Methods and systems for event based tagging of metadata

Systems and methods for cognitive encryption of data are disclosed. The methods may include maintaining a plurality of data storage systems in communication with an external metadata management system, operating the metadata management system to store metadata corresponding to data residing on the plurality of data storage systems, identifying a candidate data set residing on at least one of the plurality of data storage systems on which at least one security action should be performed using information included in the metadata management system, and in response to identifying the candidate data set, identifying the at least one security action.

Methods and systems for encryption based on intelligent data classification

Provided are techniques for data search with automated selection of one or more AI inference models and inference label indexing. Metadata for a data object that is stored in a data source is retrieved. The metadata is matched to filtering criteria. The filtering criteria is used to identify an Artificial Intelligence (AI) inference model. The data object is sent to an inference engine for the AI inference model. An inference result is received from the inference engine. The inference result is stored in a database to associate the inference result with the data object. Then, in response to receiving a search request with one or more terms, the one or more terms are matched to the inference result in the database. and the data object and the inference result are returned.

Data search with automated selection of artificial intelligence inference models and inference label indexing

A computer-implemented method includes receiving custom metadata for several data items, the data items having system metadata associated therewith, selecting, based on the custom metadata, some of the data items to move between a primary storage system and a secondary storage system, and moving the selected data item(s) between the primary storage system and the secondary storage system. A computer program product includes a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a computer to cause the computer to perform the foregoing method. A system includes a processor and logic integrated with the processor, executable by the processor, or integrated with and executable by the processor. The logic is configured to perform the foregoing method.

Event driven migration, recall, and data placement optimization based on custom metadata

A computer-implemented method according to an aspect includes training a cognitive network, utilizing metadata associated with historic data threats, inputting metadata associated with a current data threat into the trained cognitive network, identifying, by the trained cognitive network, one or more stored instances of data determined to be vulnerable to the current data threat, and adjusting one or more security aspects of the one or more stored instances of data determined to be vulnerable to the current data threat.

Protecting data based on a sensitivity level for the data

Embodiments for storage resource utilization analytics using metadata tags by a processor. Storage capacity utilization in the plurality of heterogeneous storage systems may be determined using one or more events indexed into a centralized search index.

Storage resource utilization analytics in a heterogeneous storage system environment using metadata tags

Provided are a computer program product, method, and system for determining data to redact in an object. Event messages for objects are received. Each event message includes at least one facet, each facet for an instance of data in an object resulting from deep data inspection of the object that is used to determine whether the instance of data should be redacted. The event messages are added to a message queue. Information is added to a database for each of the event messages include the at least one facet for an object in the event message. The database is queried to determine an object having a facet for an instance of data that indicates the instance of data is to be redacted. The instance of data is redacted in the determined object having the facet that indicates the instance of data is to be redacted data.

Processing event messages for data objects to determine data to redact from a database

Provided are a computer program product, method, and system for determining data to redact in an object. Event messages for objects are received. Each event message includes at least one facet, each facet for an instance of data in an object resulting from deep data inspection of the object that is used to determine whether the instance of data should be redacted. The event messages are added to a message queue. A determination is made of an event message in the message queue for an object having a facet for an instance of data that indicates the instance of data is to be redacted. Redaction is performed on the instance of data in the object in the determined event message having the facet indicating the instance of data is to be redacted data.

Processing event messages for data objects in a message queue to determine data to redact

A computer-implemented method according to an aspect includes determining a sensitivity level for an instance of data, comparing the sensitivity level to one or more policies, and conditionally performing a backup of the instance of data, based on the comparing.

Systems and methods for classification of backup data are disclosed. The methods include maintaining a plurality of backup data storage systems in communication with an external metadata management system, and operating the metadata management system to store tagged metadata corresponding to backup data residing on the plurality of backup data storage systems. The tagged metadata includes a plurality of custom tags indicative of information about the backup data.

Methods and systems for custom metadata driven data protection and identification of data

Provided are a computer program product, system, and method for backing up data from a plurality of source data sets to a backup storage. Event messages are received. Each event message indicates an update to a changed data object in one of the source data sets. The event messages are added to at least one message queue. The event messages are read in the at least one message queue. A record is added to a database for each of the read event messages. Records added to the database include information on changed data objects. The database is queried to determine records for changed data objects that satisfy a backup criteria. The changed data objects in at least one of the source data sets that satisfy the backup criteria are copied to the backup storage.

Processing event messages for changed data objects to determine changed data objects to backup

A computer-implemented method according to one embodiment includes determining a classification associated with an instance of data, determining a vulnerability level of a first storage system at which the instance of data is currently located, and conditionally migrating the instance of data from the first storage system to a second storage system, based on the classification associated with the instance of data and the vulnerability level of the first storage system.

Selecting data storage based on data and storage classifications

Embodiments for namespace management between storage systems by a processor. Events, containing metadata associated with an operation, from a plurality of heterogeneous storage systems may be received such that the events are indexed into a common repository according to the metadata to maintain a single namespace for data in the plurality of heterogeneous storage systems.

Growing community of inventors

Pune, India

Nilesh Prabhakar Bhosale