Abstract: A system maintains, generates, and manages infrastructure layouts. The infrastructure layouts interconnect infrastructure components and capture relational aspects between the components within the interconnections. The infrastructure layouts map northbound services, which are service outputs, to southbound services, which are service capabilities, for fulfilment. The system may traverse a mapping from a northbound service to a fulfilling southbound service to generate a workflow to support deployment of the northbound service. In various implementations, the system may compare a path, which maps a northbound service to a southbound service, to a policy model to determine compliance with the policy.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for analyzing data that includes security threat information. One of the methods includes identifying intelligence types that each categorizes a subset of data, associating, for each of the intelligence types, each of the subsets of data, which are categorized by the respective intelligence type, with the respective intelligence type, determining rules for a third party that each indicate that the third party should receive data associated with particular types of potential security threats and priority information for the data, determining, for each of the potential security threats indicated in the rules, a group of the subsets that include information associated with the respective potential security threat, assigning, for each subset in each of the groups, a priority to the respective subset using the priority information, and providing the determined subsets to the third party using the respective priorities.

Abstract: A system and method for gas exposure monitoring of a work area are described. The system may include components that receive an alarm data item from a sensor device. The alarm data item may be generated in response to a first user being exposed to a gas concentration measured by the sensor device. A processor may receive a location of the sensor device in the work area based on a location identifier of the sensor device. A second user located within a predetermined vicinity of the sensor device may be identified. The second user may be identified by the processor. The system may transmit an indication of the alarm data item received from the first user and the location of the sensor device in the work area to the second user. The transmission may be automatic on detection of the second user's location.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, are described that enable automated testing of web applications. Techniques include receiving a web application and a test script including user-specified instructions for testing the web application. The user-specified instructions are converted into commands that include first-type commands executable by a browser automation module to control operations of a web browser, and second-type commands that are not executable by the browser automation module, where the total number of commands exceeds a number of instructions in the test script. The first-type commands are provided for execution to the browser automation module to control operations of the web browser, and the second-type commands are executed to control operations of the at least one computer that cannot be controlled by the browser automation module. A report is output based on executing the first-type and second-type commands.

Abstract: Determining placement options for technical components of a specified service is a difficult technical challenge. A metadata architecture addresses, in part, the technical challenge by defining a complex metadata collection and attachment mechanism. In one implementation, the metadata architecture defines metadata domains and obtains descriptive metadata for those domains, e.g., metadata for the technical components from multiple disparate sources and across multiple different characteristics of the technical components. The metadata architecture is linked to the technical components and the metadata architecture injects specific metadata subsets into, e.g., a placement pipeline that determines where the technical components may be placed in the extensive provider/platform/service space.

Abstract: A fused image of the person's hand is accessed, the fused image having been generated using a segmented graylevel image and a segmented color image. The hand in the fused image is identified. One or more finger tips and one or more finger valleys in the fused image are identified. One or more fingers of the hand are segmented, based on the identified finger tips and finger valleys. The one or more fingers of the hand are labeled. One or more features for each finger of the hand are determined.

Abstract: The invention concerns a system having: a virtual assistant interactivity platform (102) including: a processing device; a memory device storing data identifying a plurality of virtual assistants, and one or more topics associated with each virtual assistant; a communication interface configured to receive an input query from a user device (104); and a memory coupled to the processing device and storing executable instructions that, when executed by the processing device, cause the processing device to: assess the input query to identify a subset of at least one of the virtual assistants based on a comparison between at least one topic of the query and the one or more topics associated with each virtual assistant; transmit a query based on the input query to each of the virtual assistants of the subset; evaluate answers to the input query received from the virtual assistants of the subset in order to generate a response comprising one or more of the answers; and transmit the response to the user device.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for correlating domain activity data. First domain activity data from a first network domain and second domain activity data from a second network domain is received. The first domain activity data and the second domain activity data is filtered to remove irrelevant activity data, based on a first set of profile data for devices in the first network domain and a second set of profile data for devices in the second network domain. Unfiltered first and second domain activity data is aggregated. Aggregated unfiltered first and second domain activity data is correlated to determine an attack path for an attack that occurs across the first network domain and the second network domain, based on attack signatures and profiles associated with previously identified attacks. A visualization of the attack path is generated.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.

Abstract: API analytics systems and methods are provided. Frequently occurring API usage patterns may be determined from API call data collected from across an API ecosystem. Alternatively or in addition, a classification structure, such as a decision tree, may be generated from the API usage patterns. A type of activity that resulted in a set of API calls being invoked may be determined from the classification structure. A similarity or difference between the set of API calls and the frequently occurring API usage patterns may also be determined and/or identified.

Abstract: The present disclosure concerns a method of identifying a biometric record of an individual in a database (108), the database comprising at least first and second sets of records, each set comprising at least one record, the method comprising: receiving by a processing device (102) at least first and second input biometric samples of said individual; performing on the records of said first set a first matching process comprising a first filtering operation followed by a second filtering operation, and performing on the records of said second set a second matching process comprising said second filtering operation followed by said first filtering operation, wherein said first filtering operation comprises comparing said first input biometric sample to a first reference biometric sample of each record, and said second filtering operation comprises comparing said second input biometric sample to a second reference biometric sample of each record; and identifying a biometric record of said individual based on res

Abstract: A computer-implemented method for scanning a computer system for sensitive data. A scan manager manages a scan of files of a second computer. The scan manager receives a request to scan and identify files stored on the second computer based on at least one category of sensitive data. The scan manager receives scan report recipient information and generates a user profile based on the at least one category and the recipient information. The scan manager makes the user profile available to a category server for use in creating a scan profile defining the scan criteria and deploys a scan agent to a computer to conduct the scan based on the scan profile. When the scan is complete and upon creation of the scan report, the scan manager makes the scan report available to the intended recipients.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for creating structured data using data received from unstructured textual data sources. One of the methods includes receiving unstructured textual data, identifying one or more keywords in the unstructured textual data, determining one or more patterns included in the unstructured textual data using the identified keywords, identifying one or more intelligence types that correspond with the unstructured textual data using the determined patterns, and associating, for each of the identified intelligence types, a data subset from the unstructured textual data with the respective intelligence type.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for transforming representations of network activity data. A data structure that represents communication events between computing devices of one or more networks is received. The data structure is analyzed and a set of potential attack paths represented in the data structure is determined. A score is assigned to each potential attack path in the set of potential attack paths. Potential attack paths that have scores that do not meet a predetermined threshold are removed from the set of potential attack paths. Potential attack paths that remain in the set of potential attack paths are ranked, based on each score assigned to each potential attack path, and the data structure that includes a ranked set of potential attack paths is provided.

Abstract: A method, a device and a system for providing access on a mobile device to aggregated data for interactively displaying a session for a candidate token are provided. The method includes populating data records of a data repository of a data management system from an external data system; generating first information in the data records stored in the data repository; caching the first information on a caching server; creating an application link to be displayed in a mobile device, wherein the application link enables the access to the cached first information that is stored in the data repository; providing an access authorization to the mobile device; retrieving the cached first information from the caching server; displaying the cached first information in a user interface; generating second information dynamically; displaying the second information in the user interface of the mobile device; and deactivating the application link after the session takes place.

Abstract: A method, computer-readable medium, and system for provisioning computing resources across multiple cloud providers and/or data centers are disclosed. A graphical user interface is used to select a plurality of computing resources and at least one cloud provider and/or at least one data center for providing the plurality of computing resources. Scripts associated with the at least one cloud provider and/or at least one data center are accessed, where each script is capable of automatically setting up a computing resource on an associated cloud provider or associated data center. The scripts are then used to automatically allocate and/or configure the computing resources on the at least one cloud provider and/or at least one data center. As such, computing resources can be automatically provisioned using a generic graphical user interface and without a user having skills or credentials specific to each cloud provider and/or data center.

Abstract: A method, a device and a system for providing access to a mobile device for a session object to aggregated data associated with a session are provided. The method includes populating data records of a data repository of a data management system from an external data system; generating first information in the data records stored in the data repository; caching the first information on a caching server; creating an application link to be displayed in a mobile device, wherein the application link enables the access to the cached first information; providing an access authorization to the mobile device; retrieving the cached first information from the caching server; displaying the cached first information in a user interface of the mobile device; generating second information dynamically; displaying the second information in the user interface; providing an evaluation for the job candidate; and deactivating the application link after the session takes place.

Abstract: In one implementation, a computer-implemented method includes receiving, at a process risk classifier running on a computer system, a request to determine a risk level for a particular process; accessing one or more signatures that provide one or more snapshots of characteristics of the particular process at one or more previous times; identifying one or more differences between the particular process in its current form and the one or more signatures; accessing information identifying previous usage of the computer system's resources by the particular process; determining a current risk score for the particular process based, at least in part, on (i) the one or more signatures for the particular process, (ii) the one or more differences between the particular process in its current form and the one or more signatures, and (iii) the previous usage of the resources; and providing the current risk score for the particular process.

Abstract: Journaling technology, in which a tool, that is separate from a journaling process executed by a server system, causes display of an interface that enables user selection of information derivable from journaling data collected by the journaling process. The tool receives, through the displayed interface, user input selecting desired information derivable from the journaling data collected by the journaling process. Based on the user input, the tool determines one or more commands that are understood by the journaling process and that control the journaling process to retrieve journaling data needed to derive the desired information. The tool controls the journaling process to execute the one or more commands, accesses journaling data retrieved through execution of the one or more commands, and reformats the accessed journaling data into a presentable format of the desired information.

Abstract: This disclosure relates to assessing database migrations to cloud computing systems. On example method includes determining, by a migration server including one or more hardware processors, a set of possible transactions associated with a database application based at least in part on a set of application attributes associated with the database application; generating, by the migration server, a set of application requirements associated with the set of possible transactions; and creating, by the migration server, a set of migration recommendations associated with the database application based on the set of application requirements, the set of migration recommendations configured to allow the database application to be migrated to a cloud computing system and to allow the database application to comply with the set of application requirements when executed in the cloud computing system.