Dell Products Inc.

Roman Bober

Lior Gdaliahu

Yonit Lopatinski

Doron Bokobza

Ofir Ezrielev

Maxim Balin

Stav Sapir

Eliyahu Rosenes

Eli Rosenes

Eyal Porges

Methods and systems for managing edge devices are disclosed. The edge devices may be managed using playbooks. The playbooks may be used to manage operation and security of edge devices. The playbooks may be generated by the edge devices and include implementation mapping and vulnerabilities mapping of software on the edge devices. For an issue of an edge device of the edge devices, an administrator may include a change to a code base of the software in the playbook. The change to the code base of the software in the playbook may initiate generation of a new playbook that includes the change.

Managing operation of edge devices using playbooks

Methods and systems for managing data in a deployment comprising edge devices are disclosed. The data may include sensitive data. The sensitive data may be managed by embedding the sensitive data in digital content data in a steganographic manner. After embedding the sensitive data, the digital content data may be transmitted between edge devices through a data stream. In the transmission of the digital content data, the sensitive data may be imperceptible to monitoring by an unauthorized third-party. Because the sensitive data may be imperceptible in the transmission, the edge devices may securely share the sensitive data. Because the edge devices may securely share the sensitive data, computer implemented services may be improved.

Securing sensitive data in edge devices using steganography

Systems and methods support segmenting and encrypting a data object. For instance, a computing system may segmented data object into multiple chunks and then encrypt each of the chunks according to pseudo-randomly selected encryption algorithms. A result is that the data object has been split into multiple encrypted chunks, where the encrypted chunks have some amount of pseudo-randomness in their encryption.

Computing systems and methods providing segmented encryption

Methods, systems, and devices for providing computer implemented services are disclosed. To provide the computer implemented services while using software objects that provide a surface area of attack that may compromise the services, the software objects may be analyzed and modified. To do so, a relative usefulness of computer code, on which the software objects depend, may be established. An action set may then be obtained based on the relative usefulness. The action set may include actions to be performed to modify the software objects. By doing so, the software objects may be modified in a manner that reduces the surface area of attack, thereby reducing a likelihood of compromise to the computer implemented services.

Utilization of the least code principle to structure workflows

Systems and methods support command content validation. During runtime of an application, a command content validator may intercept a first command directed to a first software component, wherein the application includes a plurality of software components; compare the first command to a stored set of policies, wherein the set of policies sets out either or both of allowed command content and disallowed command content; determine that the first command is allowed based on the set of policies; and allow or disallow a first requested action of the first command to be performed.

Computing systems and methods providing command content validation

Methods and systems for managing data in a system comprising edge devices and a data transfer bus is disclosed. The data may be managed by encrypting with homomorphic encryption and storing the data in edge devices. The edge devices may be stored in a physically insecure locations and maintain encryption of the data between edge devices. The data that is stored and in an encrypted state may include personally identifiable information. Maintaining encryption of the personally identifiable information between edge devices may prevent exposure to memory of the edge devices. Preventing exposure to memory of the personally identifiable identification may prevent a likelihood of a malicious attack and/or malware from finding the personally identifiable information if the malicious attack and/or malware may monitor memory of the edge devices.

Managing access to sensitive information

Methods and systems for managing data processing systems that provide computer-implemented services are disclosed. A data processing system (e.g., device) may include and depend on the operation of its hardware and/or software components in order to provide the computer-implemented services. To manage the operation of a device, a device manager may obtain log data (e.g., sequences of log messages) for the components of the device that reflect the operational activity of the device and/or its components. The log data may be analyzed automatically (e.g., in real-time), using a repository of known log data sequences, to identify operational issues and/or corresponding responses to the operational issues. The responses may include compensatory and/or correctional actions for remediation of the operational issues. The automated methods may provide an efficient and cost-effective method for managing device operational issues that may reduce the likelihood of the device becoming impaired and/or interruptions in the computer-implemented services.

Managing operational functionality of far edge devices using log data

Methods and systems for storing data are disclosed. To store data, transactions may be generated and sent to a storage system. Hashes of the transaction may also be generated and distributed to ledger agents of a distributed ledger system. The hashes of the transaction may be used by the storage system to verify integrity of the transaction. To establish trust in the ledger agents, the storage system may require that the hashes of the transaction be signed with a private key. The private key may be protected with multiple protection mechanisms.

Securing data transactions through a distributed ledger system

Systems and methods support generation and validation of log records. For instance, a software object may generate log records and save those log records to a first repository. Either the same or a different software object may then generate a hash for each log record and then encrypt each hash and store each hash in another repository. A software object that consumes the log records may then validate a given log record by accessing its corresponding encrypted hash, decrypting the hash, and comparing the decrypted hash to a re-generated hash of the particular log record.

Computing systems and methods generating and validating log records

Techniques are provided for message content reduction using message templates. One method comprises obtaining a message of a given type, of multiple types, to be transmitted over a network; identifying one or more templates, of multiple templates, for the given type, wherein the templates comprise a respective message identifier; selecting a given template of the given message type based on a similarity of the message with the given template; updating the message by (i) incorporating the message identifier of the given template into the message and (ii) removing one or more fields of the message that match respective fields of the given template; and transmitting the updated message to a recipient device. The recipient device may determine whether the updated message comprises the message identifier, and may retrieve a message template using the message identifier. The recipient device may store the updated message as a template in a message cache.

Message content reduction using message templates

Methods and systems for managing workloads are disclosed. The workloads may be supported by operation of workload components that are hosted by infrastructure. The hosted locations of the workload components by the infrastructure may impact the performance of the workloads. To manage performance of the workloads, an optimization process may be performed to identify a migration plan for migrating some of the workload components to other infrastructure such as shared edge infrastructure. Migration of the workload components may reduce the computing resource cost for performing various workloads.

System and method for management of workload distribution in shared environment

Methods and systems for managing workloads are disclosed. The workloads may be supported by operation of workload components that are hosted by infrastructure. The hosted locations of the workload components by the infrastructure may impact the performance of the workloads. To manage performance of the workloads, an optimization process may be performed to identify a migration plan for migrating some of the workload components to other infrastructure such as shared edge infrastructure and cloud infrastructure temporarily or permanently. Migration of the workload components may reduce the computing resource cost for performing various workloads and/or reduce workload performance disruptions.

System and method for management of workload distribution for transitory disruption

A system can identify microservices calls. The system can, in response to identifying a first call, where the first call originates externally, storing, to logged calls, a first association between the first call, a response to the first call, a first entity that originated the first call, a second entity to which the first call is destined, a unique identifier, and a counter associated with the unique identifier, or where the first call originates internally, storing, to the logged calls, a second association between the first call, the response, the first entity, the second entity, the unique identifier, and the counter after incrementing the counter, wherein the unique identifier is identified by the first call. The system can order logged calls that share unique identifiers according to values of respective counters. The system can store a topology of the microservices that is generated according to the ordered logged calls.

Microservices anti-pattern discovery

Methods and systems for managing workloads are disclosed. The workloads may be supported by operation of workload components that are hosted by infrastructure. The hosted locations of the workload components by the infrastructure may impact the performance of the workloads. To manage performance of the workloads, an optimization process may be performed to identify a migration plan for migrating some of the workload components to different infrastructure locations. Some of the different infrastructure locations may reduce computing resource cost for performance of the workloads.

Growing community of inventors

Ashdod, Israel

Roman Bober