Abstract: Data analytics on encrypted data elements is disclosed. One example is a system including a first data system, a second data system, and a data analytics system. The first data system includes a first data element and a first encryption module with a first private key. The second data system includes a plurality of second data elements and a second encryption module with a second private key. The first encryption module and the second encryption module are communicatively linked to one another, to apply, via the first and second private keys, an encryption protocol to the first data element and the plurality of second data elements to encrypt the data elements. The data analytics system maps the encrypted data elements to an analytics space, performs data analytics based on the mapped data elements, and distributes, via a computing device, results of the data analytics to an information retrieval system.

Abstract: Example implementations relate to multi-tenant upgrading. Some implementations may receive a request to upgrade a first tenant from an original version of an application to a new version of the application. The new version of the application may be backwards compatible with the original version. Some implementations may also upgrade the first tenant to the new version in response to the request while data according to the original version is simultaneously being provided to a second tenant. Additionally, some implementations may also provide data according to the new version for tenants that have completed the upgrade and provide data according to the original version of the application for tenants that have not upgraded.

Abstract: A technique to generate a feature set. A plurality of samples from a data set can be clustered. Features can be selected based on the clusters. The features can be added to the feature set. Additional samples can be clustered and features selected and added to the feature set until a convergence threshold is reached.

Abstract: Example implementations relate to static program analysis. For example, an apparatus includes a processor to perform static program analysis on a set of processor executable instructions associated with an object-relational mapping (ORM) framework. The first set of processor executable instructions includes an object. The processor is also to generate a propagation path of the object based on an execution flow of the object. The propagation path includes a first node and a second node. The first node corresponds to a first ORM operation to store the object in a database. The second node corresponds to a second ORM operation to retrieve the object from the database. The second node is linked to the first node based on a common attribute of the object. In response to a determination that the propagation path includes a sink, the processor is to output a security risk warning.

Abstract: Examples disclosed herein relate to indicating a trait of a continuous delivery pipeline. Examples include accessing, for each of a plurality of continuous delivery (CD) pipelines, respective pipeline characteristics previously collected by a collection engine of a CD server for at least one of the CD pipelines, and indicating a trait of the pipeline characteristics of at least one of the CD pipelines.

Abstract: Application testing is disclosed in the present disclosure. An interface structure may be extracted from source code of an application under test (AUT), and the interface structure may be separated into subsections. Then a primary test may be performed for the AUT by using test code to execute the subsections. An assertion strategy in the test code may be evaluated based on a predefined assertion requirement to obtain a first measurement result of the AUT, in which the assertion strategy may be to assert an execution result of the test code executing the subsections.

Abstract: According to examples, an apparatus may include a processor and a non-transitory computer readable medium storing instructions that cause the processor to classify files stored on a source storage into files for deletion and files for migration based on a storage policy and meta-data, generate aliases to link the files classified for migration to a location on a target storage, copy the files classified for migration from the source storage to the linked location on the target storage, and determine whether the files copied onto the target storage are identical to the files classified for migration on the source storage using a digital key. In response to a determination that the copied files are identical to the files classified for migration, the processor may activate the generated aliases and may decommission the source storage.

Abstract: According to examples, an apparatus may include a processor and a memory on which is stored machine readable instructions executable by the processor to: access network traffic data pertaining to data flows among nodes in a network; partition the network traffic data into a plurality of windows; for each of the plurality of windows, aggregate data flows between pairs of nodes; compute a data distribution of each of the aggregated data flows; select a summary structure for each of the aggregated data flows based on the computed data distributions of the aggregated data flows; generate a summary of each of the aggregated data flows using the selected summary structures for the aggregated data flows; and store the generated summaries.

Abstract: Example embodiments disclosed herein relate to determining permissible activity in an application. Application programming interfaces (APIs) of an application are monitored using a runtime agent. Information about the APIs is provided to a rules engine. A set of rules describing permissible activity is received from the rules engine.

Abstract: Examples disclosed herein relate to determining event and input coverage metrics for a graphical user interface (GUI) control instance. Examples include accessing event and input occurrence data identifying interactions performed on a GUI of an application, determining an event coverage metric for the given GUI control instance based on the event occurrence data, and determining an input coverage metric for the given GUI control instance based on the input occurrence data.

Abstract: A customer may provide a merchant with primary account number information in connection with a purchase transaction. The merchant may send an associated authorization request to a payment card processor. A tokenization server at the payment card processor may generate a token corresponding to the primary account number. To secure the token, the token may be encrypted at the payment card processor using a cryptographic key shared with the merchant. A structure preserving encryption algorithm may be used in encrypting the token. A processor identifier may be embedded in the encrypted version of the token during the structure preserving encryption operation. The merchant can use the shared key to decrypt the token and extract the processor identifier. A settlement request may be directed to the processor from the merchant to settle the transaction using the processor identifier.

Abstract: In one implementation, a system for risk scoring a software application includes a component score engine to calculate an impact component score and a likelihood component score for a security vulnerability during development of the software application based on a plurality of scored descriptions of security risk elements for the software application. In addition, the system includes a total risk score engine to calculate a total security risk score for the software product application on the impact component score and the likelihood component score for the security vulnerability of the software application. In addition, the system includes a risk characterization engine to assign a risk characterization to the software product based on where the total risk score falls within a predetermined scale.

Abstract: According to an example, a position of a pointer may be detected to be positioned over an icon of a plurality of selectable icons. A menu containing a set of sub-icons corresponding to the icon may be displayed and a first location and a second location of the displayed menu may be determined. A first line and a second line may be determined and a plurality of points in a movement of the pointer may be recorded. A third line that crosses the plurality of recorded points may also be determined. In response to a determination that the third line is within an area between the first line and the second line, the menu may continue to be displayed while the pointer passes over another icon of the plurality of selectable icons.

Abstract: Example embodiments relate to monitoring application flow of an application responsive to receiving a monitoring mode upon launch of a session of the application. In this manner, the embodiments disclosed herein enable monitoring an application on a first computing device based on a first received monitoring mode and monitoring the same application on a second computing device based on a second received monitoring mode.

Abstract: Examples relate to managing cross-domain information. The examples disclosed herein relate to generating a cross-domain sharing specification that comprises an identifier of a first domain and at least one type of user interaction information that a first user enables for cross-domain sharing. The at least one type of user interaction information may be selected from a plurality of types of user interaction information related to the first domain. The examples relate to obtaining, from the first domain, user interaction information corresponding to the at least one type of user interaction information and storing the user interaction information in the cross-domain sharing specification.

Abstract: In one implementation, a system can comprise a probe monitor engine to monitor a probe passed to a function of a set of instructions, a propagation engine to identify an infrastructure connection based on an attribute of the probe during a runtime session, and a rule engine to generate an infrastructure rule based on the infrastructure connection and the attribute of the probe.

Abstract: In some examples, a method may include accessing data records of completed work items associated with managing a lifecycle of a software application and extracting feature values from the data records of the completed work items for a selected set of features. The method may also include determining timing data of state transitions for the completed work items from the data records and generating a predictor through machine learning using the timing data and the extracted feature values as input samples. The generated predictor may provide a transition probability of a particular state transition for a work item with specific feature values. The method may further include using the predictor to determine an estimated timing of the particular state transition for the uncompleted work item.

Abstract: A non-transitory machine-readable storage medium encoded with instructions executable by a processing resource of a computing device to access network traffic exchanged with a web server application. The storage medium also identifies, in the accessed network traffic, an analysis reporting message of a client system and extracts, from the analysis reporting message, information representing a client system analysis of at least one prior transaction between the client system and a proxy server associated with the web server application. The information representing the client system analysis can comprise information describing an experience of the client system, including an indication of an amount of time to perform at least one prior transaction between the client system and the proxy server.

Abstract: In one implementation, an image-based application automation system determines that a first image from a plurality of images associated with an input event does not satisfy any portion of a graphical user interface at a first time. The image-based application automation system then selects, independent of user input, a second image from the plurality of images after the first time, and identifies a portion of the graphical user interface satisfied by the second image.

Abstract: A technique includes creating a proxy file that is associated with a recovery request, which is associated with the recovery of data associated with a virtual machine file from a secondary storage. The technique includes using metadata that is extracted from the proxy file to access the data. Using the metadata includes, in response to an input/output (I/O) request associated with the recovery request, storing an association of an identifier of the proxy file with metadata representing a parameter associated with the secondary storage. The metadata is stored outside the proxy file. The metadata is used to identify an I/O processing unit; and the technique includes communicating with the I/O processing unit to notify the I/O processing unit to process the I/O request.