Netapp, Inc.

Netskope, Inc.

Prathamesh Deshpande

Stephen Wu

Manan Dahyabhai Patel

Abhijeet Prakash Gole

Douglas P Doucette

Rohit Shankar Singh

Siying Yang

Yongxin Wang

Yi Zhang

Yihua Liao

Dipak Patil

Ratnesh Gupta

Sourav Sen

Rupa Natarajan

Anureita Rao

Nikul Y Patel

Vikhyath Rao

An application may store data to a dataset comprising a plurality of volumes stored on a plurality of storage systems. The application may request a dataset image of the dataset, the dataset image comprising a volume image of each volume of the dataset. A dataset image manager operates with a plurality of volume image managers in parallel to produce the dataset image, each volume image manager executing on a storage system. The plurality of volume image managers respond by performing requested operations and sending responses to the dataset image manager in parallel. Each volume image manager on a storage system may manage and produce a volume image for each volume of the dataset stored to the storage system. If a volume image for any volume of the dataset fails, or a timeout period expires, a cleanup procedure is performed to delete any successful volume images.

Dataset image creation

The disclosed technology relates to managing input-output operation in a zoned storage system includes identifying a first physical zone and a second physical zone within a zoned namespace solid-state drive associated with a logical zone to perform a received write operation. Data to be written in the received write operation is temporarily staged in a zone random write area associated with the identified second physical zone. Based a storage threshold of the zone random write area, a determination is made regarding when to transfer temporarily staged data to be written area to the identified second physical zone. When the storage threshold of the zone random write area determined to have exceeded, temporarily staged data to be written is transferred to the identified second physical zone.

Methods for handling input-output operations in zoned storage systems and devices thereof

The disclosed technology relates to determining physical zone data within a zoned namespace solid state drive (SSD), associated with logical zone data included in a first received input-output operation based on a mapping data structure within a namespace of the zoned namespace SSD. A second input-output operation specific to the determined physical zone data is generated wherein the second input-output operation and the received input-output operation is of a same type. The generated second input-output operation is completed using the determined physical zone data within the zoned namespace SSD.

Methods for managing input-output operations in zone translation layer architecture and devices thereof

System and method for managing and producing a dataset image across multiple storage systems

Rollback procedure for failed dataset image operation

The disclosed technology teaches a method of calibrating a user confidence or risk score that expresses evaluation of user behavior that was not compliant with an organization's security policies, including configuring components of the user confidence or risk score, comprising configuring categorical alert weights, categorized by severity, responsive to administrator controls, for alerts to be generated due to an activity by the user that the organization's security policies treat as risky, and configuring a decay factor that attenuates the alert weights as time passes, responsive to an administrator sensitivity control. The disclosed method includes causing display of resulting user behavior evaluation examples, based on activity examples for user examples, comprising causing display of a time series of the user confidence or risk scores for the activity examples for the user examples, and a resulting user confidence or risk score for the user examples.

Calibrating user confidence in compliance with an organization's security policies

The disclosed technology teaches a method of reducing false detection of anomalous user behavior on a computer network, including forming groups from identity and access management (IAM) properties and assigning the users into initially assigned groups based on respective IAM properties, and recording individual user behavior in a statistical profile, including application usage frequency. The method also includes dynamically assigning a user with a realigned group, different from the initial assigned group, based on comparing the recorded user behavior, with user behavior in statistical profiles of the users in the groups, evaluating and reporting anomalous events among ongoing behavior of the individual user based on deviations from a statistical profile of the realigned group. The method utilizes common app usage for forming the groups, in some cases. Further, evaluating anomalous events includes evaluating deviations of the events among ongoing behavior of the individual user based from the individual's statistical profile.

Reducing false detection of anomalous user behavior on a computer network

The disclosed technology teaches a method for evaluating user compliance with an organization's security policies, formulating a user confidence or risk score, comprising scoring for each user a sum of alert weights, categorized by severity, and generated over time. Each contribution to an alert weight is generated due to an activity by the user that the organization's security policies treat as risky. Alert weights, over time, are subject to a decay factor that attenuates the alert weights as time passes. Also disclosed is reporting the user confidence score, comprising causing display of a time series of the user confidence or risk scores over a predetermined time and/or a current user confidence or risk score and/or at least some details of the activity by the user that contributed to the alert weights over time.

Scoring confidence in user compliance with an organization's security policies

System and method for enforcing a dataset timeout for generating a dataset image

System and method for utilizing operation identifiers for communicating with storage systems to perform a dataset image operation

Presented herein are system and method for providing a non-disruptive mechanism for splitting a parent volume located on a first aggregate into a new volume, the method comprising: splitting the parent volume, by the network storage system, into a new volume, wherein the new volume comprises an application; and providing a snapshot of the parent volume at the new volume.

Non-disruptive automatic application regrouping

Creating and verifying successful creation of a dataset image of a dataset stored across a plurality of storage systems

Commit request processing for dataset image creation success

Growing community of inventors

San Jose, CA, United States of America

Prathamesh Deshpande