Abstract: In one embodiment, a method includes providing an a priori classification engine, an a posteriori classification engine, and a heuristics engine. The a priori classification engine is operable to perform an a priori classification. The a posteriori classification engine is operable to perform an a posteriori classification. The heuristics engine is operable to perform a heuristics classification. In addition, the method includes accessing data from at least one source. The method further includes, responsive to an indication that the a priori classification should be performed, performing the a priori classification on the data. The method also includes, responsive to an indication that the a posteriori classification should be performed, performing the a posteriori classification on the data. Further, the method includes, responsive to an indication that the heuristics classification should be performed, performing the heuristics classification on the data.

Abstract: Systems and methods for identifying content in electronic messages are provided. An electronic message may include certain content. The content is detected and analyzed to identify any metadata. The metadata may include a numerical signature characterizing the content. A thumbprint is generated based on the numerical signature. The thumbprint may then be compared to thumbprints of previously received messages. The comparison allows for classification of the electronic message as spam or not spam.

Abstract: The present invention relates to a method and system for performing deep packet inspection of messages transmitted through a network switch in a Software Defined Network (SDN). Embodiments of the invention include a network switch, a controller, and a firewall in a software defined networking environment. In the present invention, the network switch is a simple network switch that is physically separate from the controller and the firewall. The invention may include a plurality of physically distinct network switches communicating with one or more controllers and firewalls. In certain instances, communications between the network switch, the controller, and the firewall are performed using the Open Flow standard communication protocol.

Abstract: A system, method, and computer-readable medium are disclosed for performing distributed analytics using a metadata encoded decision engine. More specifically, the operation of performing distributed analytics combines metadata encoding of input expectations for models with a multi-tier decision engine. In certain embodiments, the multi-tier decision engine provides arbitrary responses to input failures, including data dropping, routing to additional models, signaling, data conditioning, and even updating of the model parameters themselves. The combination of the processing model, the data input validation, and the decision engine improves the operation of a distributed data processing environment which is focused on predictive and reactive analysis of edge processing data.

Abstract: A continuous data backup using real time delta storage has been presented. A backup appliance receives a backup request from a backup agent running on a computing machine to backup data on the computing machine. The computing machine is communicatively coupled to the backup appliance. Then the backup appliance performs block-based real-time backup of the data on the computing machine. The backup appliance stores backup data of the computing machine in a computer-readable storage device in the backup appliance.

Abstract: Systems and methods relate to indexing of performance and cost of workloads in a computing environment. The computing environment may include a virtualized computing environment. According to some embodiments, a performance index relating to a plurality of workloads executing in the computing environment may be generated, where the performance index is based at least in part on performance and cost of use of one or more resources in the computing environment by the plurality of workloads. The index may be normalized. If the performance or cost of a particular workload departs from an expected performance or cost determined from the average performance and/or cost in the computing environment, resources may be reallocated to the workloads such that the performance or cost of the workload is closer to its expected performance or cost based on the performance index.

Abstract: In one embodiment, a method includes defining a slice of a dimensional database. The slice includes at least one dimension and at least one measurement and is expressable as a table. The method further includes building, in a structured query language (SQL) dialect, a single query that queries the slice and one or more non-dimensional databases. The SQL dialect represents the at least one dimension, the at least one measurement, and data attributes of the one or more non-dimensional databases. In addition, the method includes parsing the single query. The parsing includes generating a dimensional query for the dimensional database and a non-dimensional query for each of the one or more non-dimensional databases. Furthermore, the method includes executing the dimensional query on the dimensional database. Moreover, the method includes, for each non-dimensional database of the one or more non-dimensional databases, executing the non-dimensional query on the non-dimensional database.

Abstract: A system, method, and computer-readable medium for optimizing complex SQL statements using a region divided preferential SQL rewrite operation. The region divided preferential SQL rewrite operation makes it possible for a user to inference a machine SQL statement rewrite operation to optimize the SQL statement with more or less focus on different regions of the SQL. This operation combines the strength of using heuristic knowledge and understanding of data to rewrite the region of the SQL statement where the problem originates with the precision and efficiency of a machine SQL statement rewrite operation.

Abstract: DFA construction may be aborted if the DFA will become too big for the computing device to handle or based on user preferences. A DFA may be constructed from an NFA, which is constructed from an expression. The expression may have a total number of operands and operators r. The determination to abort DFA construction may be based on the operands. If the number of DFA nodes constructed is more than a lower threshold and the number of DFA nodes constructed is greater than a function, f(r), the DFA construction may be aborted. If the number of DFA nodes is greater than a higher threshold, the DFA construction may be aborted. The lower threshold may be determined based on computing device capabilities and user preference. The higher threshold may be based on computing device capabilities.

Abstract: A fingerprint of an image identified within a received message is generated following analysis of the message. A spam detection engine identifies an image within a message and converts the image into a grey scale image. The spam detection engine analyzes the grey scale image and assigns a score. A fingerprint of the grey scale image is generated based on the score. The fingerprint may also be based on other factors such as the message sender's status (e.g. blacklisted or whitelisted) and other scores and reports generated by the spam detection engine. The fingerprint is then used to filter future incoming messages.

Abstract: A secure connection between a user mobile device and a “Internet-of-Things” network-connected device (e.g., a home appliance or a vehicle) may be provided using an internet gateway residing in the public internet and a local gateway residing in a private network behind a firewall. The user device may receive an input through a software application and may generate an electronic instruction based on the input. The user device may then encrypt the electronic instruction and send the encrypted electronic instruction to the internet gateway over a secure connection (e.g., SSH, TLS). The internet gateway then sends the encrypted electronic instruction to the local gateway, which decrypts the encrypted electronic instruction, interprets it, and generates and transmits a device instruction to communicate with the network-connected device, either directly or through an intermediary device such as a third-party bridge or hub. Only the user device and local gateway have encryption/decryption keys.

Abstract: A system, method, and computer-readable medium are disclosed for improving the readability and understanding of a SQL query plan by presenting SQL query plan in a join plan representation. In various embodiments, the join plan representation includes one or more of a table join path portion, a statistics portion, an objects axis region and an operator region. The order of the table join path can be easily read in such a representation. Also, statistic figures like cost, IO, CPU and cardinality are all consistently and orderly presented, making it easy for users to understand and compare.

Abstract: In one embodiment, a method includes selecting an overall set of end-user transactions. The method further includes selecting an outcome. In addition, the method includes identifying an outcome-filtered subset of the overall set, the outcome-filtered subset comprising end-user transactions of the overall set associated with the selected outcome. The method also includes, for each transaction property of a plurality of transaction properties, measuring a difference between the transaction property's prevalence in the outcome-filtered subset and the transaction property's prevalence in the overall set. The measuring yields a property-prevalence differential for each transaction property. Moreover, the method includes, based, at least in part, on the property-prevalence differentials, determining one or more of the plurality of transaction properties to be correlation factors for the selected outcome.

Abstract: A dynamic, milestone-based solution for managing computer operations, as may be embodied by various systems, methods, and non-transitory computer-readable storage media, may involve analyzing a computer operation invoked by an invoking module. The solution may involve identifying and classifying discrete steps or phases within the invoked operation and applying context-specific watchdog timers and operational milestones based on the detected phases. The solution may involve monitoring the progress of the operation and terminating the operation when an operational milestone is not achieved before an applied watchdog timer expires during a given phase.

Abstract: A system, method, and computer-readable medium for performing a virtual organization operation for generating a virtual organization hierarchy that is based upon influence within an organization. More specifically, in certain embodiments, the operation generates a virtual organizational hierarchy that contains individuals, roles, contact information, responsibilities, estimates of purchasing authority, and other influential values. In certain embodiments, the virtual organization operation includes templates for virtual organizations of differing types to provide the capacity for handling differences in organizational structures like not-for-profits or educational establishments.

Abstract: A system, method, and computer-readable medium are disclosed for analysis and characterization of manufacturing information such as process trees or genealogies using graph theory. More specifically, using graph theory to analyze manufacturing information of a manufacturing operation allows for deep analysis of relationships between batches or units in a process tree and their closeness or distance, to identify clusters associated with specific quality characteristics or problems, to identify common antecedents of specifically labeled batches (e.g., problem batches), and/or to detect overall desirable or undesirable characteristics of the process tree (e.g., centrality, etc.).

Abstract: A method of determining whether a guarded term is represented in a message comprises associating a portion of the message with the guarded term and evaluating a cost of the association. A method of generating a collection of guarded terms that represents an original term comprises generating a plurality of variations of the original term, evaluating similarity of each of the plurality of variations with respect to the original term and determining whether the similarity meets a predetermined criterion.

Abstract: A system, method, and computer-readable medium for providing a device control operation which enables a device to receive or otherwise identify commands intended for it by having the device consult and interact with a secure decentralized transactional ledger. Such a device control operation indirectly and securely controls a device. More specifically, in certain embodiments, the transactional ledger comprises a distributed data structure that is maintained by a set of unassociated network attached information handling systems. In certain embodiments, the network attached information handling systems use novel algorithms and cryptographic methods to ensure that the state of the ledger is valid and that it reflects the state endorsed by a predetermined number (e.g., a majority) of the information handling systems maintaining the ledger.

Abstract: A system, method, and computer-readable medium are disclosed for providing usage and symptom oriented SQL statement optimization. More specifically, in certain embodiments, a SQL Optimizer is provided with a SQL Statement Usage and Symptom Oriented Tuning Tool. More specifically, the SQL Statement Usage and Symptom Oriented Tuning Tool assists users in composing a correct test run method and selecting a correct resource saving item. Additionally, in certain embodiments, the SQL Statement Usage and Symptom Oriented Tuning Tool includes a tuning tool user interface which allows users to provide the tool with specific information about the performance symptoms and usage patterns of their SQL statement. By providing such a user interface, users do not need to have knowledge of the actual settings used to tune the SQL statement. The SQL Statement Usage and Symptom Oriented Tuning Tool automatically composes settings to provide a SQL statement test run method on behalf of the user.

Abstract: Disclosed in the authentication and authorization of a client device to access a plurality of resources, requiring a user of a client device to enter only one set of login information. Authentication and authorization of a client device to access a plurality of resources after an initial set of login information is received by a networked computing environment. After the initial set of login information is received, a series of steps are performed that may be entirely transparent to the user of the client device.