Emc Corporation

Emc IP Holding Company LLC

Lacework Inc.

Intuit, Inc.

Fortinet, Inc.

Ying Xie

Yijou Chen

Vikram Kapoor

Theron D Tock

Vimalkumar Jeyakumar

Harish Kumar Bharat Singh

Weifei Zeng

Edward K Lee

Zheng Yang

Xuan Tang

Hong Wang

Andreas L Bauer

Victor Salamon

Sriram Krishnan

Nitin Garg

Dheer Moghe

Rajesh Gandhi

Ken Kim

Curtis Anderson

Walter T Dobberpuhl

Ping Zhang

Amit Roy

Chengjie Liu

Hongbin Mao

Gregory William Lazar

Fabiano C Botelho

Russell R Laporte

Munish T Desai

James Odis Pendergraft

Neil F Schutzman

Utkarsh Vipul

Norman Speciner

Lorenzo Bailey

Yong Wang

Srikant Varadan

Daniel Stanton Keefe

David A Parenti

Shyamsunder Singaraju

Robert Andrew Foulks

Handling of certificates by intermediate actors, including: receiving, by a proxy and from a client, a client certificate and a first private key; generating, by the proxy and based on the client certificate and the first private key, an intermediate certificate; generating, by the proxy and in response to a request from the client to connect to a destination, an alternate certificate for the destination; and providing, to the client, a certificate chain comprising the alternate certificate, the intermediate certificate, and the client certificate.

Handling of certificates by intermediate actors

Establishing a location profile for a user device, including: gathering information associated with the location of a user device; determining, based on the information associated with the location of a user device, whether the user device is being accessed at a known location; responsive to determining that the user device is being accessed at a known location: determining a characterization of the known location; and determining, based on the characterization of the known location, whether device utilization is anomalous; and responsive to determining that the user device is not being accessed at a known location: determining a characterization of the unknown location; and determining, based on the characterization of the unknown location, whether device utilization is anomalous.

Establishing a location profile for a user device

Using activity monitored by multiple data sources to identify shadow systems, the method comprising: gathering first information describing access to one or more resources by one or more user devices of a user; gathering, from at least a subset of the one or more user devices, second information describing access to the one or more resources; and identifying one or more shadow systems based on a discrepancy between the first information and the second information.

Using activity monitored by multiple data sources to identify shadow systems

Detecting anomalous behavior of a device, including: generating, using information describing historical activity associated with a user device, a trained model for detecting normal activity for the user device; gathering information describing current activity associated with the user device; and determining, by using the information describing current activity associated with the user device as input to the trained model, whether the user device has deviated from normal activity.

User-specific data-driven network security

Elastic privileges in a secure access service edge, including: identifying, based on one or more access policies, an application accessible to a user; determining, for the user, an access pattern of the application; and restricting, without modifying the one or more access policies, access to the application by the user based on the access pattern.

Elastic privileges in a secure access service edge

Generating user-specific polygraphs for network activity, including: gathering information describing network activity associated with a user and generating, based on the information, a user-specific polygraph that includes one or more destinations associated with the network activity.

Generating user-specific polygraphs for network activity

Detecting deviations from typical user behavior, including: identifying a geographic location of a device that is associated with a user; determining device activity associated with the user; and detecting, based on a profile associated with the user, that the device activity associated with the user deviates from normal activity for the user.

Detecting deviations from typical user behavior

Detecting anomalous behavior of a device

Certain aspects of the present disclosure provide techniques for maintaining an application through an execution platform. An example method generally includes receiving a first workflow definition of a plurality of workflow definitions associated with an application. The first workflow definition may be a workflow defining a build operation for building the application. The first workflow definition is executed to build the application by retrieving an executable binary from a binary repository, retrieving source code for the application binary from an application source code repository, building the application binary by executing the executable binary on the retrieved source code, and storing the application binary in the binary repository. A second workflow definition is received to execute the application. The second workflow is executed to execute the application by retrieving the application binary from the binary repository, and executing the retrieved application binary to run the application.

Integrated system to distribute and execute complex applications

In one embodiment, a set of two or more workflow definitions is stored, wherein each workflow definition describes a workflow of an application. The set of two or more workflow definitions are used to implement a state machine of the application based at least in part on the two or more workflow definitions.

Execution of workflows in distributed systems

A method, computer program product, and computing system for receiving a shred command from a host on a storage device associated with a main storage copy within a redundant storage system. The shred command with respect to the main storage copy is processed on the storage device associated with the main storage copy.

Shredding system and method

A method, computer program product, and computing system for determining, at the computing device, one or more dependencies associated with a plurality of managed objects and a plurality of backend objects. One or more backend notifications associated with one or more backend objects of the plurality of backend objects may be received. One or more managed objects of the plurality of managed objects associated with the one or more backend objects of the one or more backend notifications may be identified, based upon, at least in part, the one or more dependencies associated with the plurality of managed objects and the plurality of backend objects. The one or more identified managed objects of the plurality of managed objects may be updated based upon, at least in part, the one or more backend notifications.

Data management system and method

An execution platform comprising a workflow engine and an application engine is provided. A workflow definition associated with an application is received. The workflow definition is used to run an application workflow to perform an action with respect to the application, at least in part by causing an executable binary to be run by the application engine.

A method, computer program product, and computing system for determining, at the computing device, one or more dependencies associated with a plurality of managed objects and a plurality of backend objects. A plurality of consistency groups with one or more managed objects of the plurality of managed objects and one or more backend objects of the plurality of backend objects may be generated based upon, at least in part, the one or more dependencies associated with the plurality of managed objects and the plurality of backend objects. The one or more backend objects of the plurality of consistency groups may be fetched. The one or more managed objects of the plurality of consistency groups may be updated based upon, at least in part, the one or more fetched backend objects.

A set of two or more workflow definitions is stored, wherein each workflow definition describes a workflow of an application. The set of two or more workflow definitions are used to implement a state machine of the application based at least in part on the two or more workflow definitions.

Growing community of inventors

Cupertino, CA, United States of America

Ying Xie