Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for implementing a response to one or more security incidents in a computing network. One of the methods includes identifying a security incident based on detecting one or more indicators of compromise associated with the security incident, comparing the security incident with a predefined ontology that maps the security incident to one or more courses of action, selecting a response strategy that includes one or more of the courses of action, and implementing the response strategy as an automated response.

Abstract: An enterprise resource planning tool that accesses primary sales data tracked by an enterprise resource planning system operated by a company and describing primary sales of products offered by the company. The enterprise resource planning tool also accesses inventory level data that describes inventory levels for the products at one or more recipients of the primary sales of the products offered by the company. The enterprise resource planning tool further derives secondary sales data that describes secondary sales of the products offered by the company based on the accessed primary sales data and the accessed inventory level data. In addition, the enterprise resource planning tool stores the derived secondary sales data and uses the stored secondary sales data to perform operations related to enterprise resource planning.

Abstract: A request to perform a transaction is detected. Based on the request to perform the transaction, one or more factors related to a context in which the transaction is being requested are determined. Based on the one or more factors, one or more parameters for authenticating a user that requested performance of the transaction are determined. The user that requested performance of the transaction is authenticated based on the determined one or more parameters for authenticating the user that requested performance of the transaction. Based on to authenticating the user that requested performance of the transaction, performance of the requested transaction is allowed.

Abstract: In one implementation, a computer-implemented method includes receiving, at a process risk classifier running on a computer system, a request to determine a risk level for a particular process; accessing one or more signatures that provide one or more snapshots of characteristics of the particular process at one or more previous times; identifying one or more differences between the particular process in its current form and the one or more signatures; accessing information identifying previous usage of the computer system's resources by the particular process; determining a current risk score for the particular process based, at least in part, on (i) the one or more signatures for the particular process, (ii) the one or more differences between the particular process in its current form and the one or more signatures, and (iii) the previous usage of the resources; and providing the current risk score for the particular process.

Abstract: Unmanned vehicle (UV) movement and data control may include controlling a UV according to a movement plan. Formatted movement and status metadata may be received from a sensor of the UV during movement of the UV. The movement and status metadata may include time and location information for the UV during the movement of the UV. An unformatted data stream may be received from the sensor of the UV. The time and location information may be injected into metadata of the unformatted data stream to generate a time and location correlated (TLC) stream. The TLC stream may be analyzed to identify an event related to the UV, and a notification related to the event may be generated.

Abstract: An unmanned vehicle (UV) system provides network data connectivity for terminals. UV nodes in the system may transmit and receive terminal data in a network of UV nodes and other nodes according to a routing protocol. The nodes may include fixed nodes or UV nodes with a wired or wireless network connection to a destination terminal. A UV node may receive data from a source terminal for transmission to the destination terminal, and when the UV node is within range of a node in the network connected the destination terminal, the UV node transmits the received data to the node within range for forwarding to the destination terminal via the network.

Abstract: According to an example, event anomaly analysis and prediction may include accessing a master directed graph that specifies known events and transitions between the known events, and ranking each of the known events. Each of the ranked known events may be clustered into a plurality of anomaly categories. A plurality of rules to analyze new events may be determined based on the plurality of anomaly categories. A determination may be made, based on an application of the plurality of rules to data that is to be analyzed for an anomaly, whether the data includes the anomaly. In response to a determination that the data includes the anomaly, a device associated with the data may be controlled.

Abstract: Condition detection using image processing may include receiving telemetry data related to movement of a vehicle along a vehicle path. Condition detection using image processing may further include receiving images captured by the vehicle, and generating, based on the telemetry data and the images, an altitude map for the images, and world coordinates alignment data for the images. Condition detection using image processing may further include detecting the entities in the images, and locations of the entities detected in the images, consolidating the locations of the entities detected in the images to determine a consolidated location for the entities detected in the images, generating, based on the consolidated location, a mask related to the vehicle path and the entities detected in the images, and reconstructing three-dimensional entities model for certain types of entities, based on the entities masks and world coordinates alignment data for the images.

Abstract: A method for controlling a sensor may be performed by a mobile device including a processor and a memory. The method may include receiving raw data from the sensor, classifying the raw data into a context value, interpreting the context value into a higher-level context, receiving a predicted context based on the higher-level context, and controlling the sensor based on the predicted context. Controlling the sensor may include controlling a frequency at which raw data is received from the sensor, or an on/off state of the sensor. Control of the sensor may also be based on both the higher-level context and the predicted context.

Abstract: Cloud computing has emerged as an extremely popular implementation option for a wide range of computing services. However, provisioning services into the cloud is an extremely difficult technical challenge. This is due in part to the regular emergence of new cloud service providers, as well as the routine changing and reconfiguration of the disparate computing platforms, services, assets, supported technical components, and other features offered by the service providers. An analysis architecture determines how to map a particular technical component into the execution environment of any particular service provider, including translation through a reference type.

Abstract: Unmanned vehicle (UV) control may include receiving a UV work order and generating a mission request based on the UV work order. The mission request may identify an objective of a mission, assign a UV and a sensor to the mission from a fleet of UVs and sensors, and assign a first movement plan to the mission based on the identified objective of the mission. The assigned UV may be controlled according to the assigned first movement plan, and communication data may be received from the assigned sensor. The communication data may be analyzed to identify an event related to the mission. The identified event and the first movement plan may be analyzed to assign a second movement plan to the mission based on the analysis of the identified event and the first movement plan to meet the identified objective of the mission.

Abstract: An integrated fleet vehicle management system provides remote management and diagnostics and analysis of vehicles. The system provides integration across many layers including on board units (OBUs) in vehicles, a telematics layer collecting OBU data, enterprise resource planning (ERP) applications, a data and analytics layer platform including data storage, and a mobility platform. The above integration enables management and diagnostics of vehicles and analysis of vehicle data for servicing and determining productivity.

Abstract: Cloud computing has emerged as an extremely popular implementation option for a wide range of computing services. However, provisioning services into the cloud is an extremely difficult technical challenge. This is due in part to the regular emergence of new cloud service providers, as well as the routine changing and reconfiguration of the disparate computing platforms, services, assets, supported technical components, and other features offered by the service providers. An analysis architecture determines how to map a particular technical component into the execution environment of any particular service provider with the aid of translation scripts.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for providing network resources based on available user information. The methods, systems, and apparatus include actions of obtaining a set of user information, receiving a request to access a network resource, and in response to receiving the request to access the network resource, determining user information requested by the network resource. Additional actions include determining whether the set of user information satisfies the user information requested by the network resource and in response to determining that the set of user information satisfies the user information requested by the network resource, selecting a particular network resource to provide in response to the request. Further actions include in response to selecting the particular network resource, providing the particular network resource in response to the request.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for analyzing threat intelligence information. One of the methods includes receiving by a threat information server, threat intelligence information from one or more intelligence feeds and generating one or more identified security threats, identifying a compromise by a management process orchestration server and retrieving information from the threat information server and identifying one or more actions to be performed, determining by an indicator analytics processor, a composite credibility based on the actions, and determining one or more components for profiling and determining indicators of compromise for each component, and communicating the indicators of compromise to the management process orchestration server.

Abstract: A method, a system and a device are provided for aggregating data to provide a display in a user interface. The method includes populating data records in data storage of a data management system; authenticating a user; retrieving a list from the data records and displaying the list for the authenticated user; selecting an item from the list through the user interface; receiving an item authentication token associating with the authenticated user; retrieving the plurality of attributes for the item authentication token and a progress status of the object history record; and in response to receiving a user selection, providing a text input field on the display for receiving a user's text inquiry; determining a numerical figure for the authenticated user; and aggregating data for displaying the plurality of attributes, displaying the progress status and determining the numerical figure for the authenticated user.

Abstract: A system, method and article of manufacture are provided for a first business entity to provide a network-based supply chain framework for collaborative order management between at least a second and a third independent business entity, such as a service provider, vendor, reseller, manufacturer and the like. A request for an order is received over a network with an automated system, from at least a second business entity. The order is transmitted over a network, with an automated system, to at least the third business entity. Information is received from the third business entity relating to a status of completion of the order by the third business entity using a network. The progress in completing the order is tracked based on the information received from the third business entity. Progress reports from the tracking are generated periodically; and transmitted to the second business entity using the network.

Abstract: A testing and extract, transform and load (TETL) system is operable to interface with test platforms testing hardware or software components of information technology systems. The TETL system can execute extract, transform and load operations to load test data into a data warehouse and facilitates evaluating the test data across projects, entities and domains.

Abstract: Context based AR may include receiving a first wireless signal from a pair of context based AR glasses worn by a user. The context based AR glasses may include a display viewable by the user and a camera to image an object viewed by the user. The image of the object may be analyzed, and compared to images of objects stored in a database that includes information associated with the images of the objects. Based on a match, the object viewed by the user may be identified. Based on collaboration of the user with personnel disposed remotely from the user, and the identified object, a second wireless signal may be sent to the pair of context based AR glasses to provide information related to the collaboration, and to further superimpose the information associated with the identified object adjacent to and/or on top of the object viewed by the user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining where to store a version of an object in an isolated environment. In one aspect, a method include actions of obtaining, from a process running in an isolated environment, a request to access an object and determining a frequency that changes to a version of the object stored in the isolated environment will be mapped back to a version of the object stored in the non-isolated environment. Additional actions include determining, based on the frequency that changes to a version of the object stored in the isolated environment are mapped back to a version of the object stored in the non-isolated environment, whether to store the version of the object in primary memory associated with the isolated environment or secondary memory associated with the isolated environment.