Abstract: Communication connections with databases, such as when deployed as a database layer of a system architecture, are resource intensive to establish, take down, and maintain. However, from the applications' perspective, deployed in a business logic layer, more database connections result in less delay interacting with the databases. In order to optimize system resources, systems and methods are disclosed that create an optimized number of database connections and/or application connections, that are then maintained and shared by the applications via a proxy intercepting the communications and forwarding the communications to the database via the optimized number of pooled database connections. The connections may be multiplex so that simultaneous communications may be hosted concurrently.

Abstract: Method and system to improve keyboard input in an automated test environment. The method includes determining a keyboard layout. The method also includes receiving an input, wherein the input comprises a plurality of characters. The method further includes processing the input to determine an input delay between each character of the plurality of characters and entering each character of the plurality of characters with the determined input delay between each character.

Abstract: A virtualization pattern is learned. The learned virtualization pattern comprises information associated with one or more virtualized processes. For example, the virtualization pattern may comprise the creation of a first micro service and the spawning of a second micro service from the first micro service. The learned virtualization pattern is compared to a current virtualization pattern to identify an anomalous virtualization pattern in the current virtualization pattern. In response to identifying the anomalous virtualization pattern in the current virtualization pattern, an action is taken. For example, the action taken may be to quarantine a virtual process, to unload the virtual process, to quarantine a tenant partition, and/or the like.

Abstract: A plurality of circular blockchains are created. The plurality of circular blockchains may comprise different structures. For example, the plurality of circular blockchains may include: a single genesis block where a last block in each of the plurality of circular blockchain links back to the single genesis block, a plurality of genesis blocks where a last block in each of the plurality of circular blockchain links back to individual ones of the plurality of genesis blocks, and a genesis block and one or more connection blocks that form the plurality of circular blockchains.

Abstract: A first graphical object in a graphical user interface is identified using an Artificial Intelligence (AI) algorithm. The graphical user interface comprises a second graphical object that was not properly identified by the AI algorithm. Source code is retrieved from a hierarchical model of the graphical user interface. A determination is made if the identified first identified graphical object and the second graphical are the same type (e.g., a button object). In response to the identified first graphical object and the second graphical object being the same type, an attribute of the identified first graphical object is compared to an attribute of the second graphical object. In response to the attribute of the identified first graphical object being the same as the attribute of the second graphical object, the second graphical object as identified as the same graphical object type as the first graphical object.

Abstract: A manifest file from a container image for a cross-platform application that has been containerized for execution on a source platform specifies image layers for the cross-platform application within the container image and are ordered from a first image layer through a last image layer. The manifest file specifies exclusion/inclusion directories related to containerized execution of the cross-platform application on a target platform different than the source platform. Starting with the first image layer and ending at the last image layer, each image layer is unpacked at the target platform by copying files from the image layer to a directory at the target platform in accordance with the identified exclusion/inclusion directories. A version of the cross-platform application corresponding to the image layers as unpacked at the target platform is executed in a containerized manner.

Abstract: A system includes a processor and a memory. When executed by the processor, the processor is caused to receive a first file including one or more components, parse the first file into a metadata portion and one or more non-metadata portions, generate a manifest for each of the one or more non-metadata portions, generate an output data stream including component manifest and data pairs for each of the one or more non-metadata portions, normalize the output data stream, generate a first hash code corresponding to the normalized output data stream and compare the first hash code to a plurality of hash codes. If the first hash code matches any hash code of the plurality of hash codes, the processor is caused to prevent the first file from being stored in the database or automatically remove the corresponding file associated with the hash code matched with the first hash code.

Abstract: A binary file is received. For example, a binary file of a software application is received by an AI algorithm. Based on the received binary file, binary source code is generated. The binary source code is compared to source code of a current Software Bill-of-Materials (current SBOM) that that is associated with the binary file to identify differences between the binary source code and the source code of the current SBOM. In response to determining that there are differences between the binary source code and the source code of the current SBOM, the identified differences between the binary source code and the source code of the current SBOM are stored in a memory. Component information associated with the identified differences between the binary source code and the source code of the current SBOM are displayed in a user interface. This allows a user to efficiently manage the differences.

Abstract: Systems, devices, and methods are disclosed to create a second subcluster in a sandbox, wherein the second subcluster corresponds to a first subcluster that requires an upgrade. The first subcluster is currently in use by a client executing an application. A second subcluster is created in a sandbox, which mirrors the first sandbox. The second subcluster is upgraded and, when complete, the first subcluster is paused, and state information is obtained from the first subcluster and copied to the second subcluster. Once the state information is uploaded to the second subcluster, communications between the client and database are set to use the second subcluster. As a result, the client experiences only a minor delay rather than any unavailability of the accessed databases.

Abstract: Data of a plurality of channels of a spread-spectrum network are received. For example, the data of the plurality of channels of the spread-spectrum network may be captured by a spread-spectrum router (e.g., a WiFi router). The data of the plurality of channels of the spread-spectrum network is analyzed to identify an anomalous cross-channel pattern across the plurality of channels of the spread-spectrum network. For example, the attack may be a sequential attack across each of the channels of the spread-spectrum network. In response to identifying the anomalous cross-channel pattern across the plurality of channels of the spread-spectrum network, an action is taken to protect the spread-spectrum network. For example, the action may be to notify an administrator of the spread-spectrum network that a potential attack is occurring on the spread-spectrum network or to block access to the spread-spectrum router.

Abstract: Systems, devices, and methods are disclosed to create a second subcluster in a sandbox, wherein the second subcluster corresponds to a first subcluster that requires an upgrade. The first subcluster is currently in use by a client executing an application. A second subcluster is created in a sandbox, which mirrors the first sandbox. The second subcluster is upgraded and, when complete, the first subcluster is paused, and state information is obtained from the first subcluster and copied to the second subcluster. Once the state information is uploaded to the second subcluster, communications between the client and database are set to use the second subcluster. As a result, the client experiences only a minor delay rather than any unavailability of the accessed databases.

Abstract: According to examples, an apparatus may include a processor and a non-transitory computer-readable medium on which is stored machine readable instructions that may cause the processor to receive a prompt for a large language model (LLM). The received prompt may include a query to perform a task on computing data through in-context learning in the LLM. The LLM may be fine-tuned on the computing data. In response to the received prompt, the processor may cause the LLM to learn the task via the in-context learning in the LLM. The processor may cause the LLM to output a completion in response to the query for the task. The completion may be generated by performing the learned task on the computing data in the LLM.

Abstract: A data flow graph and a control flow graph of each of a safe code section and an unsafe code section corresponding to the safe code section are extracted. Code variant-injected safe code sections corresponding to the safe code section and code variant-injected unsafe code sections, in which code semantics are not altered, are generated. Structurally modifiable code variant-injected code sections are generated based on the code variant-injected safe code sections, the code variant-injected unsafe code sections, and an impaired code section semantically uncorrelated to the code variant-injected safe code section and the code variant-injected unsafe code section. A version of test code is generated based on the structurally modifiable variant-injected code sections and a specified behavior.

Abstract: A visual media is received. For example, the received visual media may be a digital image, a video file, or a video stream. A plurality of colors in the visual media are identified. In response to identifying the plurality of colors in the visual media, one or more watermark colors missing from the plurality of colors. A first watermark is generated to include in the visual media. The first watermark comprises at least one of the missing one or more watermark colors. The watermarked visual media is verified using image processing.

Abstract: First anomalies are selected from those identified by security analysis, and are enhanced with additional information. Second anomalies occurring within a specified time period and regarding a specified entity, including at least one of the first anomalies, are also selected. A prompt is generated based on the second anomalies. The prompt is generated to solicit a response from a large language model (LLM) including a natural language summary synthesizing the second anomalies. The second anomalies are also evaluated against a database to identify related security threats. Scores for these security threats are generated, and a subset of the threats is selected based on the scores. Another prompt is generated based on the second anomalies and based on the selected subset of security threats. The prompt is generated to solicit a response from an LLM including a natural language summary associating the security threats with the second anomalies.

Abstract: Anomalies regarding a specified entity that occurred within a specified time period are selected from anomalies identified by security analysis performed on raw events. The selected anomalies are enhanced with additional information regarding the selected anomalies. A prompt is generated based on the selected anomalies as have been enhanced. The prompt is generated to solicit a response from a large language model (LLM) including a natural language summary synthesizing the selected anomalies. The generated prompt as input to the LLM, and the response is received as output from the LLM.

Abstract: One or more anomalies are selected from anomalies identified by security analysis performed on a raw events regarding entities. The selected anomalies are enhanced with additional information regarding them. A prompt is generated based on the selected anomalies as have been enhanced. The prompt is generated to solicit a response from a large language model (LLM) including a natural language summary of the selected anomalies. The generated prompt as input to the LLM, and the response is received as output from the LLM.

Abstract: Anomalies regarding a specified entity that occurred within a specified time period are selected and enhanced with additional information. The selected anomalies, as have been enhanced, are evaluated against a database to identify security threats that the selected anomalies are related to. Scores for the identified security threats are generated, and a subset of the security threats that the selected anomalies are related to is selected based on the scores. A prompt is generated based on the enhanced selected anomalies and based on the selected subset of the identified security threats. The prompt is generated to solicit a response from a large language model (LLM) including a natural language summary associating the identified security threats with the selected anomalies regarding the specified entity that occurred within the specified time period. The prompt as input to the LLM, and the response is received as output from the LLM.

Abstract: Log events for a target system are received. In each of a number of iterations, selection of a filter from a library of preexisting filters is received from a user, the selected filter is applied to the log events to generate filtered log events, and the filtered log events are displayed to the user. In each iteration other than a first iteration, the selected filter is applied to the filtered log events that are generated in an immediately preceding iteration.

Abstract: Domain-specific images used for training an optical character recognition (OCR) machine learning model are generated as follows. Universal resource locator (URL) addresses of web pages associated with a particular domain are retrieved. Words in the web pages associated with the particular domain are determined. Domain-relevant n-grams of the words are identified for the particular domain. Corresponding domain-specific images of each domain-relevant n gram for the particular domain are generated.