A system creates a secondary stack containing execution information of at least one function operating on the computer system, and receives an attack notification of an attack on the computer system. The system determines a point in the secondary stack at which a recovery from the attack is possible. In one embodiment, the system then generates a signature of the attack based on the execution information contained within the secondary stack.

A storage system including journaling comprises a controller capable of coupling to at least one storage device and to at least one journaling device, and a process executable on the controller. The executable process comprises a resolve utility capable of determining logical unit, track, and sector identification for a selected file on the at least one storage device, a user interface enabling a user to select tracks and sectors on the at least one storage device for restoration to a predetermi...

A host and a storage system each keep a shared identifier indicating a state of a system. The storage system acquires, at update of data, a data pair including data for a change through processing of the host and data before the update. The storage system relates the data pair to a shared identifier. When the host indicates an identifier, the storage system restores data using the data pair.

Disclosed is a rollback-free method for performing multi-step procedures in the presence of possible failure. As the procedure proceeds from its initial state through transitions to its final state, its constituent transitions are monitored for failure. If a failure is detected, then the procedure is "sidetracked" into a recovery coordination state. From the recovery coordination state, the procedure is logically taken back to its initial state and retried. In this manner, the procedure is sheph...

A system and method is provided for optimizing restoration of stored data. A request for data to be restored to any point in time is received. A current state of the data is determined. One or more data blocks required to modify the data from the current state to the any point in time requested are identified. The data at the any point in time is restored within a storage medium using the identified one or more data blocks.

An apparatus, system, and method are disclosed for recovering multivolume data. In one embodiment, a backup module physically backs up a plurality of source volumes to plurality of backup volumes. A data set size module may also capture a data set size for a data set during the physical backup. A retrieval module retrieves metadata for the data set from a catalog. A location module locates the data set on the plurality of backup volumes using the metadata. A recovery module recovers the data set...

Embodiments include a controller apparatus, a computerized apparatus, a device, an apparatus, and a method. A controller-apparatus includes a monitoring circuit for detecting a computational error corresponding to an execution of an instruction of a sequence of instructions by a processor subsystem having an adjustable operating parameter. The controller apparatus also includes a recovery circuit for rolling back an execution of the sequence of instructions to a checkpoint in response to the det...

Mechanisms for adaptively entering and exiting recovery mode. When a message is received from a particular message transaction, the appropriate processing instance is loaded from persistent memory to system memory. The processing instance then determines from its own state information whether or not it is in recovery mode. This indication of recovery or normal mode may be set by a system-wide recovery detection module. If the processing instance determines that it is in normal mode, then the pro...

The present invention is a checkpoint processor configured for coupling to individual Web services through a Web services engine. The checkpoint processor can include checkpoint logic programmed to store checkpoint data for the individual Web service instance invocations. The checkpoint processor further can include restart logic programmed to restore the stored checkpoint data to a replacement for failed ones of the individual Web service instance invocations. Finally, the checkpoint processor ...

When an event occurs in a storage system that is not recognized by a host, it is not possible to recover data at the point before and after this event. Provided is a storage system including a first storage area storing data to be used by a computer, and a second storage area for storing updated data and its update log information when there is an update request from the computer to the first storage area. This storage system monitors its own storage system and detects an event, and creates a re...