Emc IP Holding Company LLC

Emc Corporation

Oded Peer

Yana Vaisman

Assaf Natanzon

Jehuda Shemer

Amit Lieberman

Ron Bigman

Oleg Freylafert

Yedidya Dotan

Marcelo Blatt

Ika Bar-Menachem

Anton Khitrenovich

Tomer Meidan

Yael Villa

Asaf Shoval

Mikael Peres

Shachar Israeli

Yariv Amar

Nir Moatty

Elad Koren

Eyal Lewinsohn

Ika Bar Menachem

A computer implemented method, system, and computer program product comprising intercepting an interaction with a data storage capability at the abstraction layer enabled to intercept data interactions for different types of data storage capabilities; wherein the interaction changes data on the data storage capability; sending a copy of the interaction to a replication data storage capability; and sending the interaction to the data storage capability.

Abstraction layer

In one aspect, a method includes migrating a database object from a source database to a target database, updating a storage of the location of the DB object to be the target database, directly accessing one of the target database and the source database during the migrating and executing, during the migrating, a database command by retrieving the DB object from the other one of the target database and the source database.

Database migration

According to one embodiment, a request is received for estimating migrating a first dataset from a first cloud system to a second cloud system. A migration cost estimation module determines a network bandwidth required to migrate the first dataset from the first cloud system to the second cloud system, determines a duplicated data time period during migration that the first dataset has to be maintained by both the first cloud system and the second cloud system for service continuity, and determines a total cost of migrating the first dataset from the first cloud system to the second cloud system based on the required network bandwidth and the duplicated data time period. It is then determined whether to migrate the first dataset from the first cloud system to the second cloud system based on the total cost.

Multi-cloud data migration in platform as a service (PAAS) environment

Parallel processing of events having multi-dimensional dependencies is provided. Each event has at least one profile and each profile has at least one profile key. An event is dependent on another event if they have at least one common profile key. The profile key(s) for a plurality of profiles of the given event are compared to profile keys of previously queued events. A given event is assigned to a same queue as at least one dependent event. When a given event is dependent on events in at least two queues, the given event is not assigned to a queue until only one queue has dependent events remaining to be processed. A list of profile keys that have been assigned to each queue and/or a reference count of a number of events that have been queued for each profile key are optionally maintained.

Parallel processing of events having multi-dimensional dependencies

There are disclosed techniques for use in authentication. In one embodiment, the techniques comprise generating first and second distributions. The first distribution relating to risk scores expected to be produced by an authentication system in connection with requests to access a computerized resource. The expected risk scores are based on a normalization process configured to produce risk scores by normalizing raw risk scores in connection with requests. The second distribution relates to risk scores actually produced by the authentication system in connection with requests. The actual risk scores include risk scores normalized by the normalization process. The techniques also comprise comparing the first and second distributions by determining a Kolmogorov-Smirnov distance between the respective distributions. The techniques also comprise initiating, based on the comparison, a failover of the normalization process to a new normalization process for use by the authentication system.

Managing deviations between expected and normal operations of authentication systems

In general, the invention relates to a method and system for migrating tables in databases. The method may include calculating a first plurality of migration factors for a first set of tables in a source database using a plurality of pre-calculated factors and a first plurality of dynamically-calculated factor, where each of the first plurality of migration factors is associated with one of the first set of tables. The method may further include selecting a first table from the first set of tables to migrate based on the first plurality of migration factors; and migrating the first table to a target database.

Database monitoring for online migration optimization

Methods and apparatus are provided for configuring the granularity of key performance indicators that are available from a monitored component. A granularity of a key performance indicator provided by a monitored component can be configured by creating a plurality of instances of a statistics collector object, wherein each instance of the statistics collector object collects information for a different context of the key performance indicator; updating an indicator value for a corresponding instance of the statistics collector object when an activity occurs for the context of the key performance indicator; and providing the indicator value for a given context of the key performance indicator to a monitoring object. The configurable granularity can be specified by the product, for example, using an application programming interface.

Methods and apparatus for configuring granularity of key performance indicators provided by a monitored component

In one example, a method includes generating an enhanced copy, which includes application data generated from using an application, the application, a configuration of the application and runtime settings to run the application. The method also includes restoring at least one of the application, the configuration of the application and the runtime settings using the enhanced copy.

Storing application data as an enhanced copy

Disclosed are techniques for use in authentication. In one embodiment, the techniques comprise a method. The method comprises the step of receiving a request comprising a plurality of attributes. The method also comprises determining whether to grant authentication or to perform an assessment of at least some of the attributes. The said determination is dependent on whether one of the attributes corresponds with a predictor.

Method, apparatus and article of manufacture for fast tracking authentication

Techniques of detecting malicious events involve generating a relational graph of event data describing events that occur within a specified, limited time window. Along these lines, a malicious event detection computer receives event data describing interactions between entities such as users, devices, and network domains from various servers that occur within a specified time window. In response, the malicious event detection computer generates a relational graph that has graph structures (e.g., nodes and edges) representing these interactions. Analysis of patterns within the resulting relational graph indicates whether there is a malicious event occurring.

Detecting malicious online activities using event stream processing over a graph database

Methods, apparatus and articles of manufacture for modifying queries and rules for profile fetching and risk calculation are provided herein. A method includes comparing at least one aspect of a query submitted to access a data store to rule sets associated with the data store to determine a potential access path within the data store for responding to the query, comparing information pertaining to an entity identified via the query to risk information pertaining to entities to determine a level of risk associated with the entity identified via the query, generating a modified version of the query based on information derived from the potential access path within the data store for responding to the query, and calculating a risk score associated with the modified version of the query based on the aspect of the query and the level of risk associated with the entity identified via the query.

Modifying queries and rules for profile fetching and risk calculation

An information security application responds to a request by generating a context vector and performing a lookup in a configuration structure to identify a configurable action to be taken. The context vector includes current values of environment variables. The configuration structure stores configuration objects having an environment field storing configured values of the environment variables to specify a context for use of an action value in an action field. A wildcard value indicates that the context for use is independent of a given environment variable. The lookup results in a set of configuration objects whose configured values of the environment variables either are wildcards or match respective values in the context vector. The set of action values is resolved to a resolved action value specifying the configurable action, and a response is returned to the client computer based on a result of the configurable action.

Computer security application configuration structure employing independently specified configuration objects and separate resolver

Techniques for using a network analyzer device connected to a network include (a) sniffing packets traversing the network between a web-based application server and a user machine, the user machine being operated by a user, (b) analyzing the sniffed packets to extract event information relating to interaction events between the user machine and the web-based application server, and (c) sending the extracted event information to an authentication server for risk-based authentication of the user.

Using packet interception to integrate risk-based user authentication into online services

An improved technique of processing an authentication request from an authentication requestor involves an adaptive authentication device comparing a behavioral history of fact values associated with a user over a current time window with a user's baseline profile that includes a behavioral history of the fact values. The adaptive authentication device accesses such a behavioral history over several previous time windows from a database whose entries include a user identifier, a time interval and user data which represents fact value behavioral history over the time interval. When the device receives an authentication request from an authentication requestor, the adaptive authentication device matches a username of the request with a user identifier of an entry of the database whose time period is the current time period. The adaptive authentication device then updates fact values representing the user's current behavioral history and compares the current behavioral history to the user's baseline profile.

Growing community of inventors

Raanana, Israel

Oded Peer