Abstract: A modular data integration system comprising a server system configured to ingest a plurality of data object from a plurality of data sources into a data lake, data warehouse, or both according to business use-cases for a plurality of data consumers. The business use-cases allow the modular data integration system to ingest data objects through independent data channels which meet the requirements of a business purpose and conform with a service level agreement.

Abstract: Systems and methods for implementing an embedded compiler running within a Java Virtual Machine that recompiles code changes on-the-fly are disclosed. An embodiment of the present invention is directed to using scripts within an application codebase to define what actions to take following a code change and recompilation on a particular set of code. An embodiment of the present invention ensures that the new code is made available to the rest of the live running system in a way that avoids class or data version conflicts.

Abstract: A computer-implemented method of providing web security control integration in a system that utilizes at least one vendor proxy service for securely accessing the Internet. The method comprises receiving an instruction to update a web control policy or exception, generating a web control and exception update request, using a vendor agnostic API, wherein the web control and exception update request includes policy objects and content data, delivering the web control and exception data to a policy sync worker associated with a particular vendor proxy service, converting the web control and exception update request, via the policy sync worker into a format suited to the particular vendor proxy service, and delivering the converted web control and exception update request to the particular vendor proxy service associated with the policy sync worker to update the web control policy at the particular vendor proxy service.

Abstract: A computer-implemented method of providing web security control integration in a system that utilizes at least one vendor proxy service for securely accessing the Internet. The method comprises receiving an instruction to update a web control policy or exception, generating a web control and exception update request, using a vendor agnostic API, wherein the web control and exception update request includes policy objects and content data, delivering the web control and exception data to a policy sync worker associated with a particular vendor proxy service, converting the web control and exception update request, via the policy sync worker into a format suited to the particular vendor proxy service, and delivering the converted web control and exception update request to the particular vendor proxy service associated with the policy sync worker to update the web control policy at the particular vendor proxy service.

Abstract: A device, system and method for analyzing audio speech signals to detect fraudulent calls to a contact center comprising splitting an audio recording of a call in real-time into a foreground speech signal attributed to a main speaker and a background audio signal, extracting audio features from the foreground speech signal and background audio signal, inputting the extracted audio features into an ensemble model comprising multiple different machine learning models co-trained to cumulatively detect fraud, wherein the multiple different machine learning models include: a speaker audio model to detect audio speech anomalies, a speaker intent model to classify intent of the main speaker, and a prosody model to detect voice intonation of the main speaker. A prediction may be output, by the ensemble model, indicating whether the call is fraudulent.

Abstract: Systems and methods for translating natural language to SQL on a custom enterprise data warehouse powered by Generative AI. With an embodiment of the present invention, a natural language question may be converted to a meaningful and accurate database query, e.g., SQL query, relevant to tables existing in an enterprise data warehouse. An embodiment of the present invention is directed to a comprehensive approach of transforming a natural language query to a focused SQL query using domain specific data models across firmwide metadata systems and data systems. In response to a user query, an embodiment of the present invention performs metadata analysis, targeted data retrieval and then SQL generation. An embodiment of the present invention may apply data warehousing standards and guidelines followed in the enterprise and provide a plug-and-play type architecture and solution that is scalable to large warehousing and other systems.

Abstract: A system and method for detecting cyberattacks involves monitoring and analyzing incoming email received over the internet using enterprise telemetry; extracting observations from an enterprise telemetry data feeds and transmitting to a summarization module for summarizing a potential indicator of compromise pertaining to the email monitored and analyzed by the network telemetry; storing the observation summarization data in a graph database; querying over the internet an external cybersecurity threat intelligence provider, upon identification of a true-positive network threat, for enriching information and artifacts contained within the true-positive network threat, receiving over the internet enriching information and artifacts from the external cybersecurity threat intelligence provider, and storing the received enriching information and artifacts in the graph database; and identifying a new indicator of compromise using data stored in the graph database.

Abstract: In one or more implementations, a data processing device and a data processing method are disclosed that includes a data communication port configured to transmit and receive data to and from at least one computing device. Further, a replicator is included that is configured to replicate ingress data received from the data communication port to a pattern matcher and a field programmable gate array. The pattern matcher is configured to receive the replicated data directly from the replicator and to generate and transmit a trigger signal to the field programmable gate array. Still further, the field programmable gate array is configured to receive the replicated data from the replicator and the trigger signal from the pattern matcher and to perform bit operations on the replicated data as a function of the trigger signal.

Abstract: Apparatus and corresponding methods for distributing tasks across various processing devices, such as servers, of a distributed computing environment are disclosed. The embodiments can batch workloads and distribute the tasks to the various processing devices for processing such as to reduce an overall processing time and costs. The embodiments may, additionally or alternatively, monitor actual processing times, and reassign tasks that fail to complete within an expected time frame.

Abstract: Systems and methods for optimizing the management of resources in Kubernetes clusters are disclosed. An embodiment of the present invention is directed to central dynamic Helm charts, providing a flexible and efficient mechanism for deploying, managing, and updating applications within Kubernetes environments across an entity/platform. By centralizing Helm chart configurations and dynamically adjusting them based on real-time resource metadata, an embodiment of the present invention enhances scalability, reliability, and consistency in Kubernetes deployments. In addition, an embodiment of the present invention provides a Configuration Tool that automates creation of directory structures and YAML files required to perform industry standard deployment patterns with ease.

Abstract: Computer-implemented systems and methods provide a better support experience and resolve user configuration issues for firm platforms more quickly. The systems and methods use automated tools that query a selected firm platform for real time data that allows anyone to obtain an up-to-date view of a user's data or configuration for the selected platform.

Abstract: A method of dynamically managing network traffic with granular security zones is disclosed. The method includes receiving a data packet from a user device, the data packet including identifying information indicating a sender and a receiver. The method further includes blocking the data packet from reaching the receiver. The method still further includes mapping, in response to the blocking, the identifying information to entity information and asset information for the sender, and entity information and asset information for the receiver. The method yet further includes matching the entity information with an entity permission of one or more entity permissions, each entity permission indicating that a specific source asset associated with a specific entity can or cannot communicate with a specific target asset associated with a specific entity. The method still further includes updating one or more packet filter rules based on the matching.

Abstract: A device, system and method is provided for tracking network communication in a multi-protocol network. During the offline phase, a linkage graph may be generated representing network communication pathways of recorded messages comprising nodes representing network communication devices and edges representing direct communication paths pairwise connecting parent-child nodes over which the messages are transmitted. The linkage graph may be optimized by eliminating or reducing branching nodes. During a real-time online phase, for each new recorded message associated with a device node, tracing a communication pathway along edges of the optimized linkage graph by linking a sequence of nodes that connect sequential pairs of child-parent nodes extending from the device node to a root node. Simultaneous to linking each node to the device node, a network traffic metric for the linked node(s) may be accumulated to quickly and efficiently track the network traffic metric for the new recorded message.

Abstract: A system and method for secure authentication between applications that may be attacked with an attack originating from a quantum computer is provided. The systems and methods can involve generating a plurality of keys, wherein each key of the plurality of keys is unique and determining one or more pairs of applications from a plurality of applications, wherein each pair can include applications that can connect. The systems and methods can also involve upon receiving a request from a first application of the plurality of applications to connect to a second application of the plurality of applications finding the pair of the one or more pairs that includes both the first application and the second application and associating one key of the plurality of keys to the pair, and performing by the first application and the second application, mutual authentication using the one key.

Abstract: A system and method for maintaining data quality, including: periodically updating, at a first computing apparatus, a source data table maintained at a second computing apparatus at a first time interval; periodically updating, in an iterative or recursive manner at the first computing apparatus, a batch data table maintained at the second computing apparatus at a second time interval; obtaining, at the second computing apparatus from an information system, one or more data tables, metadata, and one or more transaction tables; determining, at the second computing apparatus, whether a refresh timestamp or a modification timestamp is within a predetermined time period from a timestamp of the one or more transaction tables; when it is within the predetermined time period, updating a data visualization application for reviewing the timestamp negative result, wherein the data visualization application comprises a graphical user interface that is accessible using a third computing apparatus.

Abstract: Systems and methods provide advanced user entitlement management for enterprise networks. System can comprise a local network and a central transactional database, such that the local network is configured to generate a plurality of multi-dimensional user entitlements on the local network, where each multi-dimensional user entitlement of the plurality of multi-dimensional user entitlements is capable of being defined by dimensional restrictions or coverages; store the plurality of multi-dimensional user entitlements in a central admin database on the local network; and push the plurality of multi-dimensional entitlements to an active directory database on a cloud network coupled to the local network; the cloud network comprising: an RTAC server configured to receive an entitlement query from a querying app such as at least one application hosted on the cloud network or a third party application connected via a SCIM interface, and fetch the plurality of multi-dimensional user entitlements.

Abstract: A data replication and switching device and method, including a plurality of data communication ports, a management port, at least one replicator respectively associated with the data communication port, a Layer 1 (“L1”) switch, and a L1 bypass. At least some data received via the at least one of the plurality of ports can be routed to at least one of the plurality of data communication ports and, in response to the configuration data received via the at least one management port, the data replication and switching device can route at least some of the data received via the data communication port to bypass the L1 switch or to route at least some of the data received via the data communication port to the L1 switch.

Abstract: A system and method perform automated steering of network traffic over a least latency path. A service request module receives traffic parameters from a user, a process train module generates a service identification (ID) in response to a request from the service request module, and a connection admission control module generates a service ticket including the service ID and the traffic parameters, communicates with a network controller to gather information about a network, determines the least latency path through the network from the gathered information, and generates a command in the service ticket. Activation of the command configures the network to steer the traffic flow of communications of the user on the least latency path. The method implements the system.

Abstract: A system and method enhance original media including a first audio using generative artificial intelligence, including large language models and media conversion modules. The system includes a graphic user interface (GUI) including a media player and a display region for outputting an enhanced media including the original media, a summary of the original media, and the plurality of chapter headings of the original media. The media player plays the original media, and the display region displays the summary and the plurality of chapter headings. The summary, the plurality of chapter headings, and each of a translation into a selected language and a second audio generated from the summary and the plurality of chapter headings are automatically generated from the original media. The method implements the system.

Abstract: Managing tasks using an application-level blue-green topology with parallel cell infrastructure rails. Each cell infrastructure rail includes a dispatcher bot and a performer bot. The dispatcher bot is configured to prepare a work task based on a received request, and the performer bot performs the work task, resulting in performed work. A discovery server includes a service registry configured to store the states of the infrastructure rails. The discovery server receives the request for the work task, and sends the request to a dispatcher bot of a specific cell infrastructure rail based on the request and the states of the cell infrastructure rails. A respective workflow cell server receives the performed work. In the case that one cell infrastructure rail experiences a problem when processing the request, the cell infrastructure rails are switched to perform the request on the other cell infrastructure rail. The method implements the system.