Abstract: Generating models usable by data appliances to perform inline malware analysis is disclosed. A set of features, including a plurality of n-grams, extracted from a set of files is received. A reduced set of features is determined that includes at least some of the plurality of n-grams. The reduced set of features is used to generate a model usable by a data appliance to perform inline malware analysis.

Abstract: Exemplary embodiments disclose a method, a computer program product, and a computer system for generating dialogue via hashing functions. Exemplary embodiments may include detecting dialogue between one or more participants, converting the dialogue to a hashcode, and determining one or more responses to the dialogue by applying one or more models to the hashcode, wherein the one or more models correlates one or more hashcodes with the one or more responses.

Abstract: The disclosure provides a method and an apparatus for recommending a chart, an electronic device, and a storage medium. The method may include: generating an input vector of at least one input field relative to each chart based on the at least one input field obtained in advance; calculating a similarity of the input vector and a predetermined feature vector corresponding to each chart; obtaining a target chart corresponding to the at least one input field based on the similarity between the input vector and the predetermined feature vector corresponding to each chart; and sending the target chart to a terminal device.

Abstract: One or more defect analysis iterations are performed on a collection of records. In a given iteration, a defect presence probability is obtained using a machine learning model for a record group. An estimated audit benefit is then assigned to the record group based at least partly on a defect remediation importance score of the record group. An indication of the estimated audit benefit of the record group is provided to an auditor. An audited defect status for the record group, generated by the auditor, is used to initiate one or more automated actions.

Abstract: A computing apparatus to provide endpoint detect and response (EDR) filtering to an enterprise, including: a processor and memory; a network interface; a network protocol to communicatively couple to a data source via the network interface; and instructions encoded within the memory to provide an EDR filtering pipeline to receive an unfiltered EDR stream via the network interface, extract an EDR record from the EDR stream, and apply a hash to the EDR record to determine that the EDR record is uncommon in context of the enterprise; and a decorator module to decorate the EDR record for in-depth analysis.

Abstract: A data model is trained to determine whether data is raw, compressed, and/or encrypted. The data model may also be trained to recognize which compression algorithm was used to compress data and predict compression ratios for the data using different compression algorithms. A storage system uses the data model to independently identify raw data. The raw data is grouped based on similarity of statistical features and group members are compressed with the same compression algorithm and may be encrypted after compression with the same encryption algorithm. The data model may also be used to identify sub-optimally compressed data, which may be uncompressed and grouped for compression using a different compression algorithm.

Abstract: In one embodiment, a method includes receiving, from a client system associated with a user of an online social network, data indicating that the user is located at a first geographic location at a first time; accessing a first embedding representing a first place-entity corresponding to the first geographic location; accessing multiple second embeddings representing multiple respective second place-entities each corresponding to a second geographic location; calculating, a similarity metric between the embedding representing the first place-entity and each of the embeddings representing the second place-entities; ranking each of the second place-entities based on their calculated similarity metrics; and sending, to the client system, information associated with one or more second geographic locations corresponding to one or more second place-entities having a ranking greater than a threshold ranking.

Abstract: Systems and methods for expediting medical image retrieval based on examination priority are provided. A method includes receiving medical images and parsing the contents to determine medical image information. The method includes applying priority rules based on the medical image information. The priority rules specify an image storage location for storing the medical images. The image storage locations include workstation cache memory and drives of a local storage system having different image access speeds that are slower than an access speed of the workstation cache memory. The method includes storing the medical images at the specified image storage location as defined by the priority rules and retrieving the medical images from the specified image storage location in response to a request to view the medical images at a workstation. The method includes presenting the medical images retrieved from the specified image storage location at a display device of the workstation.

Abstract: Methods and systems for improving memory utilization and access speed of database indexes are disclosed. A representation of attributes of items listed on a network-based publication system is identified. The representation includes a plurality of lists of the attributes as a sequence of serialized attributes, each of which stores an attribute identifier (ID) and data corresponding to the attribute identifier. A compact or compressed structure is used to represent the attribute IDs. This representation allows a reader application to quickly determine whether an attribute ID is present in the lists or not. Directly-addressable variable-length codes (DACs) are used, in an unconventional manner, to represent the data. By representing the data in this way, the index takes up less memory for certain types of data and the reader application is able to gain faster access to the index.

Abstract: Differences between editions of items, such as books, can be determined and information about those difference provided for display to a user. The information can include a difference score, for example, that indicates an overall level of difference between the editions. This can include a percentage difference in some embodiments, considering the overall differences or differences for portions considered to be significant. In other embodiments contextual information, weightings, and other factors can be used to attempt to generate a similarity (or difference) score that will be of more use to a potential consumer, where the consumer can determine the substantive differences between the versions and determine whether the difference in price justifies the extent of the differences. The consumer in some embodiments can also view the differences, or at least a subset or information about the differences.

Abstract: Techniques for building a machine learning framework with tracking, model building and maintenance, and feedback loop are provided. In one technique, a prediction model is generated based on features of multiple entities. For each entity indicated in a first database, multiple feature values are identified, which include feature values stored in the first database and feature values based on sub-entity data regarding individuals associated with the entity. The feature values are input into the prediction model to generate a score for the entity. Based on the score, a determination is made whether to add, to a second database, a record for that entity. The second database is analyzed to identify other entities. For each such entity, a determination is made whether to generate a training instance; if so, a training instance is generated and added to training data, which is used to generate another prediction model.

Abstract: A query directed to database data stored across a set of files is received. The query includes predicates and each file from the set of files is associated with metadata stored in a metadata store that is separate from a storage platform that stores the set of files. One or more files are removed from the set of files whose metadata does not satisfy a predicate of the plurality of predicates to generate a pruned set of files. One or more predicates are removed that are satisfied by the metadata of the pruned set of files to generate a modified query.

Abstract: Disclosed are techniques for wireless positioning. In an aspect, a user equipment (UE) receives a plurality of downlink positioning reference signals (DL-PRS) transmitted by a corresponding plurality of cells, wherein the plurality of cells is grouped into one or more groups, wherein each of the one or more groups is associated with one or more attributes, and wherein each cell of each of the one or more groups has the same values of the one or more attributes, reports, to a positioning entity, at least one baseline positioning measurement for at least one representative cell of at least one group of the one or more groups based on DL-PRS transmitted by the at least one representative cell, and reports, to the positioning entity, differential positioning measurements for cells of the at least one group based on the at least one baseline positioning measurement.

Abstract: A system (100) includes a feature extraction engine (130), a finding code comparison engine (140), and a mapping interface (160). The feature extraction engine (130) extracts features of a statement of a finding code in a source vocabulary (110) and features of a second statement of a second finding code in a target vocabulary (112). The finding code comparison engine (140) determines a mapping between the statement of the source vocabulary and the second statement of the target vocabulary by comparing the extracted features based on at least one identified concept that comprises the extracted features. The mapping interface (160) presents the determined mapping on a display device (162).

Abstract: Systems and methods are described for a cyber-physical vehicle management system generated by an Integrated Secure Device Manager (ISDM) Authority configured to manage licensing and approval of Cyber-Physical Vehicle (CPV)s, a public/private key pair and a unique ID for the Authority, create a self-signed Authority token signed by the private key, send the Authority token to a plurality of ISDM Node device configured to verify Module device authenticity and in communication with the Authority, store, by each Node, the Authority token, and mark, by each Node, the Authority token as trusted.

Abstract: A virtual environment may be generated, the environment including a procedurally generated virtual property. The virtual property may include various features automatically generated based upon a procedural rule set, so as to provide variability between two or more virtual properties. One or more procedurally generated virtual properties may be provided to a user, and various virtual tools may be provided via which the user may identify relevant aspects corresponding to risk associated with the virtual property.

Abstract: A method for providing location-based information via a temporary social network includes detecting each of a plurality of first user devices within a predetermined proximity of a physical location and, in response, connecting each of the plurality of first user devices to a social network that is associated with the physical location using a communications network. In some embodiments, each of the plurality of first user devices will be connected to the social network for a predetermined amount of time or for as long as they are in the predetermined proximity. While in the social network, location-based information about the physical location is received over the communications network from each of the plurality of first user devices connected to the social network. At least some of that location-based information about the physical location may then be over the communications network to a second user device.

Abstract: An entity resolution system performs a method of resolving one or more candidate entities based on a data set. The entity resolution system has a rules-based module, a machine learning module, a narrative module, and an evaluation module. The rules-based module compares the first entity features to the second entity features and determines whether a rule identifies a relationship between the first entity and the second entity. The machine learning module rates a similarity of the first entity features and the second entity features. The narrative module generates a narrative output based on one or more of the rules-based module and the machine learning module, the narrative output stating an identified relationship between the first entity and the second entity. The evaluation module determines one or more metrics to apply feedback to the system.

Abstract: The present teaching relates to methods, systems, and programming for information retrieval. A search result associated with a search query is obtained and provided to a user. Upon receiving a filtering request from the user, the search result is filtered based on the filtering request to generate an updated search result. The updated search result is provided to the user in response to the filtering request.

Abstract: To execute function-step-based graph queries on a graph engine that has its own graph query language, rather than re-implementing an existing infrastructure to support function-step-based graph protocols, function-step-based graph queries are transformed to the graph query language that is understood by the graph engine. The existing infrastructure computes the results of the transformed queries. Result sets are then transformed to function-based-based result sets, which are returned to customers. In this manner, the graph engine supports function-step-based graph query workloads without implementation of the function-step-based graph protocol.

Abstract: In one aspect there is provided a method. The method may include collecting one or more functions that implement the decision logic of a solution. A snapshot of the one or more functions can be generated. The snapshot can executable code associated with the one or more functions. The solution can be deployed by at least storing the snapshot of the one or more functions to a repository Systems and articles of manufacture, including computer program products, are also provided.

Abstract: Disclosed is a data deduplication method for an edge computer. The method is performed in a key-value store, and may include receiving a compaction request occurred from the key-value store to a metadata layer, checking whether deduplication for removing duplicated data is required when compaction of a metadata file is performed in response to the received compaction request, and removing the duplicated data by checking whether the deduplication is required.

Abstract: Systems and methods are disclosed for comparing selections of text to show differences between the two selections. The text may be selected from the same source or from two different sources. In one implementation, a system receives a first selection of text for comparison and places the selection in a first buffer. The system receives a second selection of text for comparison and places the second selection in a second buffer. The system compares the first buffer and the second buffer to determine differences and displays the differences. In some embodiments, the system may allow a user to choose two buffers from among a plurality of buffers for comparison.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable media for listing conversion estimation and optimization. A listing conversion estimation and optimization system receives a set of listing data for generating a listing of an item for sale on an online marketplace and determines, based on the set of listing data, a likelihood value indicating the likelihood that the listing will result in a sale within a given time period. The listing conversion estimation and optimization system causes presentation of a graphical indicator representing the likelihood value on the display of the listing user's client device.

Abstract: A method for maintaining cache of database objects using a chain set that includes multiple chains each specifying an ordering of database objects is disclosed. In response to a change of state of a particular database object, a corresponding chain is selected. The selected chain is then locked, the state of the particular database object changed, and then the selected chain is unlocked.

Abstract: A search system performs a federated search across multiple databases and generates a ranked combined list of found genealogical records. The system receives a user query with one or more specified characteristics. The system may determine expanded characteristics derived from the specified characteristics. The system searches the various databases with the characteristics retrieving records according to the characteristics. The system combines the retrieved records and ranks them using a machine learning model. The machine learning model is configured to assign a weight to the records returned from each of the genealogical databases based on the characteristics specified in the user query. The machine learning model may be trained by any combination of one or more of: a Nelder-Mead method, a coordinate ascent method, and a simulated annealing method. The ranked combined results are provided in response to the user query.

Abstract: A system described herein may use a Bloom filter to reduce unnecessary accesses to memory. The filter may provide constant search time through hashing and use a relatively small amount of space. The filter may utilize hashing functions to generate a key associated with each data item of a set of data items, where the bit length of the key may be calibrated and tuned for selection of a minimum key length (in number of bits) versus a desired false positive rate. Such keys may be combined to form the filter. The resulting filter may be compared to various request keys that are generated using the same hashing functions in order to determine whether a requested item is present in the associated memory. The keys may be compared to the filter by comparing each bit in the key to each bit of the filter at the same location.

Abstract: A computer-implemented method of operating a user-searchable database system of curated, themed digital content data, which method includes operating a Connects function to process and store heterogeneous digital content comprising topic data as curated topic data and identified connections between each topic and other topics, and operating a user interface to enable users to search the curated topics and present a search results page in a way that invites further investigation of topics searched, including a list or compilation of topics matching terms defining the search. The method also includes displaying topic elements corresponding to the list or compilation of matching topics in prioritized order based on each topic's relatedness to the search.

Abstract: An example operation may include one or more of receiving, via a network, a blockchain request from a client device, simulating a transaction of the blockchain request to generate a read set of data being read by the transaction and a write set of data being written by the transaction, determining whether to endorse the transaction with respect to a distributed ledger by executing customizable endorsement logic of the blockchain node, wherein the executing customizable endorsement logic receives, as input, the generated read and write sets and determines whether or not the transaction should be committed to a data block of the distributed ledger based on the generated read and write sets, and transmitting information about a result of the customized endorsement logic determination to the client device.

Abstract: Systems and methods of the present invention provide for one or more server computers communicatively coupled to a network and configured to: receive a string used to search an available domain name, identify a token within the string including a unigram, and generate and transmit one or more available domain name candidates including a unigram and one or more tokens interchangeable with a token previously co-occurring with the unigram token.

Abstract: Techniques for indexing file paths of items in a content repository may include querying, by at least one processor, a content repository stored on at least one computer readable storage medium for one or more items that qualify for file path indexes, do not have the file path indexes, and have a parent folder that has a file path index, wherein the querying does not depend on results from previous queries, and wherein the file path index indicates an associated item's location in a folder tree, creating, by the at least one processor, the file path indexes for resulting items from the querying, and, if the querying results in at least one resulting item, repeating the querying of the content repository and the creating of the file path indexes until the querying results in zero resulting items.

Abstract: A computer-implemented method of training machine learning models for making simulated estimations is provided. The method includes collecting, from a database, a set of historical data, applying one or more transformations to the set of historical data to create a set of model features, and separating the set of model features into one or more pools, each pool comprising one or more model features of the set that are homogeneous with respect to a common value. the method further includes, for each pool, dynamically creating a training set that includes the one or more sets of model features of the pool and at least some of the historical data. The method further includes, for each training set, training a machine learning model on the training set.

Abstract: Extract, Transform, Load (ETL) processing may be initiated by detected events. A trigger event may be associated with an ETL process apply one or more transformations to a source data object. The trigger event may be detected for the ETL process and evaluated with respect to one or more execution conditions for the ETL process. If the execution conditions for the ETL process are satisfied, then the ETL process may be executed. At least some of the source data object may be obtained, the one or more transformations of the ETL process may be applied, and one or more transformed data objects may be stored.

Abstract: A method for creating a unique digital experience based upon meeting a predefined threshold of users within a system comprising: detecting a machine-readable code with a user device and determining an identification of a user, the user device, or both; determining whether the identification of the user device contains a unique ID by querying a server; wherein if no unique ID is identified, issuing the unique ID to the user device; storing the unique ID within a database; determining a threshold of users for the system, wherein unique digital coupons are held until the meeting of said threshold; meeting said threshold and generating a unique digital coupon, said digital coupon being unique to the unique ID; and delivering the unique digital coupon to said user device.

Abstract: A method and a system for determining affiliation of a web resource to a plurality of clusters are provided. The method includes: at a training stage: detecting a plurality of web resources; retrieving information associated with the plurality of web resources; generating a respective pattern based on the information; grouping the plurality of web resources into the plurality of clusters, based on the respective pattern; at a run-time stage: receiving an indication of a given web resource; retrieving the information about the given web resource; generating a new pattern of the given web resource; analyzing pattern affiliation of the new pattern with a specific one from the plurality of clusters of web resources; calculating an affiliation ratio therewith; in response to the affiliation ratio exceeding a predetermined threshold value, associating the given web resource with the specific one of the plurality of clusters.

Abstract: Systems and methods maintain a toplist associated with a sliding window having m elements. The toplist can include the top k elements of the sliding window, where k is less than m (typically an order of magnitude or more less than m). As new elements are received from a data stream, a counter associated with the new element is updated and the new element is inserted into the sliding window. If the toplist has less than k elements, the new element is added. Otherwise, if the new element is already in the toplist, its counter value is updated with the new value. Otherwise, if the new element's counter is smaller than the smallest element in toplist, then do nothing. If the new element counter is larger than the smallest counter in the toplist, the smallest element is discarded from the toplist and the new element is inserted.

Abstract: A location-based social networking application enables users to communicate and interact with one another only when they are in proximity to one another. The social networking features and functionality enables users to securely communication and interact with other users, without providing an exact or current location. The application further includes account management functionality, chat functionality, and commerce functionality.

Abstract: A method and a system for event validation on a vehicle. The method includes detecting an event determined by the vehicle. The method can include requesting and receiving external event determination, from at least one external source within a first surrounding area, based on the event. The method also includes generating an internal event determination based on the event and validating a validated event based on the both the external and internal event determinations. The method includes requesting and receiving external drive plan, from the external source within a second surrounding area, based on the validated event. The method also includes generating an internal drive plan, validating a validated drive plan based on the internal and external drive plans, and implementing the validated drive plan.

Abstract: An information handling system is provided for extracting data associated with a data field of a database from a randomly formatted source document. A processor of the information handling system receives the document, embeds a text-based representation of text of the document into vector data associated with the text, and encodes the vector data through a first neural network into reconstructed text activations. The processor further concatenates the vector data with an image-based representation of the document to provide first concatenated data, and encodes the first concatenated data through a second neural network into extracted visual feature activations. The processor further concatenates the reconstructed text activations with the extracted visual feature activations to provide second concatenated data, decodes the second concatenated data to identify particular data associated with the data field, and updates an entry of the database with the particular data in the data field.

Abstract: A system and a method are disclosed that enable a mobile device to use an encoded tag to initiate and maintain communications with at least one remote server. The encoded tag is positioned to identify a point of interest, and in response to using the mobile device to scan the encoded tag, communications regarding the point of interest may be initiated. A single encoded tag may be used to obtain and update recorded information about the point of interest, to notify others about an issue related to the point of interest, to log into the system, and to wait to be alerted about an issue related to the point of interest. If an issue relating to a point of interest has been reported, the system and method may monitor the reported issue to ensure that an action has been taken to address the reported issue.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed that estimate the second frequency moment. An example apparatus includes a hashing generator to input a first audience member identifier and a second audience member identifier of the media impression data through a hashing function, an output of the hashing generator being a first bit-value representation of the first audience member identifier and a second bit-value representation of the second audience member identifier, a vector generator to increment first and second values of corresponding first and second positions in a vector based on the first and second bit-value representations, respectively, a second frequency moment generator to estimate the second frequency moment of the media impression data using the vector, and a comparator to, using the second frequency moment, determine whether a computer can complete a query request of the media impression data based on query processing constraints.

Abstract: Systems and methods include obtaining an expression for a Data Loss Prevention (DLP) engine, wherein the expression includes one or more DLP dictionaries that evaluate to a score for comparison with a corresponding threshold and one or more logical operators used to combine an evaluation of the one or more DLP dictionaries; storing the expression in a database associated with a DLP service; monitoring traffic from one or more users; evaluating the traffic using the DLP engine and the expression; and determining a DLP trigger based on a result of the expression that is a logical TRUE.

Abstract: An enterprise data processing module and method are described herein. The enterprise data processing module comprises at least one collector and at least one analyzer. The collectors may be operable to collect data pieces from a plurality of data sources. The analyzers may be operable to analyze the collected data pieces to determine cross-source relationships that exist between the data pieces collected from the plurality of sources. The analyzed data pieces may be stored in one or more big-data databases as blocks of data according to the cross-source relationships.

Abstract: A method for estimating the geographical position of a terminal of interest, among a panel of terminals of a wireless communication system. For each terminal of the panel, a time signature including values measured for each terminal during a predetermined observation period is determined. Values of similarity between the time signatures of the terminals of the panel is calculated, a similarity value calculated for two terminals representing the probability of the terminals being moved together or having been located at the same place during the observation period. Various terminals of the panel are partitioned into different groups depending on the similarity values. The geographical position of the terminal of interest is estimated as a function of the available geolocation data for at least one other terminal of the group to which the terminal of interest belongs.

Abstract: Techniques for outside-in mapping for corpus pairs are provided. In one example, a computer-implemented method comprises: inputting first keywords associated with a first domain corpus; extracting a first keyword of the first keywords; inputting second keywords associated with a second domain corpus; generating an embedded representation of the first keyword via a trained model and generating an embedded representation of the second keywords via the trained model; and scoring a joint embedding affinity associated with a joint embedding.

Abstract: A system that creates entity records, wherein the system includes a computer system. The system includes: a database arrangement operable to store existing data sources and a processing module communicably coupled to the database arrangement. The processing module is operable to receive unstructured data from existing data sources; structure the unstructured data to obtain data-records, wherein the data-records comprise entity names and entity attributes associated with the entity names; bucket data-records into one or more buckets based on similar entity attributes thereof; create intermediate clusters including at least one of the one or more buckets based on a pattern recognition algorithm; calculate a prediction probability score associated with each of the data-records within the intermediate clusters; combine the data-records from the intermediate clusters to obtain an entity-record, wherein the combined data-records include a prediction probability score higher than a predefined threshold.

Abstract: The disclosure provides a system that can easily calculate a similarity rate of a target document when comparing the target document. An array set of a designated type of words (e.g., nouns) is respectively extracted from a test document and a reference document as an arrayed test document and an arrayed reference document. A word included in a common word set of the arrayed test document and the arrayed reference document is defined as true as a proposition, and other words are defined as false as propositions. Further, when a ratio of words defined as true as propositions in a word array of a first designated length including a word among words defined as false as propositions is greater than or equal to a first designated value, the word is redefined as a wildcard and true as a proposition.

Abstract: The present technology relates to an information processor and an information processing method that enable presentation of a response to a user with an appropriate amount of information in a voice interaction system. Provision of an information processor including a processing unit that adjusts an amount of information in a response with respect to desired information of a user, in accordance with a certainty factor of the user himself/herself that is estimated for the desired information makes it is possible to present the response to the user with the appropriate amount of information in the voice interaction system. The present technology is applicable to a voice interaction system, for example.

Abstract: A three-component computer security system focused around crowdsourcing. Users may install the software, at which point it may access the users' computers or hosts, identify certain behaviors as suspicious, and ask for confirmation from the user. The user may then manually edit the report to remove or add behaviors. The system may then prepare a report to deliver to a central system, which may perform malware detection, expert evaluation, and deep learning on the received reports. When the host program's assessment and the user's assessment conflict, the program may be flagged for expert analysis. This use of crowdsourced information may then be used to develop detection, mitigation, and prediction protocols, which may be based on machine learning, and may further be used to manage hackbacks if authorized and desired.

Abstract: Joining data using a disjunctive operator is described. An example computer-implemented method can include receiving a query that includes a first disjunctive predicate involving a first table and a second table. The method may also include determining a first set of rows from the first table and generating a filter from the first set of rows. The method may also further include applying the filter to the second table to generate a second set of rows. Additionally, the method may also include joining the first set of rows and the second set of rows using a first disjunctive operator of the first disjunctive predicate to generate a first results set.