Abstract: Computer-implemented systems and methods forecast network resource and/or infrastructure needs for an enterprise computer system that employs network servers to host resources that are requested by network users. Based on the forecasts, the network resources can be scaled or provisioned accordingly. The state of the network servers can be dynamically adjusted to meet the request needs of the users while reducing excess capacity. The forecasting techniques of the present invention are also applicable to cloud computing environments, Based on the forecasts, the cloud server pool can be scaled dynamically, so that the system's scale satisfies the changing requests and avoids wasting resources when the system is under low load.

Abstract: The invention relates to a computer-implemented system and method for provisioning data to data consumers within a business or organization. The method may include the steps of: providing a user interface for the data consumers that presents them with a data catalog identifying various data sources available to the data consumer and an electronic data request form, and presenting a data owner in the organization with options for specifying access to their data. The method may also include providing a data preparation module that includes an interface to the data sources, a data entitlement module to control the types of data presented to the data consumer, and a semantic layer that replaces technical terms associated with the data sources with non-technical descriptions of the available data. The method may also include automatically provisioning the requested data to the data consumers using an auto code generation function.

Abstract: A computer-implemented method is disclosed for providing an interface to prioritize classification rules for an unclassified input. A set of classification rules for input queries are stored as a plurality of records, each record comprising a plurality of values, each value being associated with an attribute from a plurality of attributes ordered by priority from most important to least important, at least one record comprising a value consisting of a wildcard operator, and each record representing a classification rule that applies to an input query if and only if each value of the plurality of values is matched by a corresponding value for a same associated attribute in the input query. A GUI enables setting the ordering of the plurality of attributes; receiving an input query; and based on the ordering, automatically determining and outputting a unique best match among all classification rules that satisfy the input query.

Abstract: A system for extraction and verification of handwritten signatures from arbitrary documents. The system comprises one or more computing devices configured to: receive a digital image of a document; remove a subset of words from the digital image identified via OCR; determine a plurality of regions of connected markings that remain in the digital image; based at least in part on a pixel density or proximity to an anchor substring of each region, determine that a region contains a handwritten signature; extract first image data of the region containing a handwritten signature from the digital image; retrieve second image data of a confirmed example signature for a purported signer of the handwritten signature; and based on a comparison of the first image data with the second image data, forward a determination of whether the first image data and second image data are similar.

Abstract: A system for network message microtiming, comprising a central routing device, a first mesh network, and a second mesh network. The central routing device continuously receives utilization data from one or more devices of the first mesh network; continuously receives timing data from one of more devices of the second mesh network; builds and continuously updates a probabilistic future latency model based at least in part on the utilization data and the timing data; receives a message from a client computing device comprising data to be sent to at least one of a plurality of remote computing devices via the first mesh network; determines that a current expected latency according to the future latency model exceeds a predetermined threshold; and as a result delays transmission of a packet comprising the data to be sent to at the least one of the plurality of remote computing devices.

Abstract: A method of software version management for ensuring stability of published code. The method comprises receiving source code for an application; automatically inserting, into the source code or in a testing environment that will execute the source code, additional code to register an attempt by the source code to access an external resource; executing the source code in the testing environment; during execution of the source code, automatically tracking numbers of attempts made to access each external resource of a plurality of external resources; receiving configuration data associating each external resource with a fitness score; based at least in part on each number of attempts to access an external resource and on the fitness score associated with the external resource, determining a total application fitness score; and automatically publishing the source code to a production environment if and only if the total application fitness score exceeds a predetermined threshold.

Abstract: A method and system for providing online content in braille is provided. The method and system can allow for any online content to be converted from text into electronic braille by tokenizing the online content and determining the electronic braille form the tokenized online content based on a set of rules.

Abstract: A system and method for characterizing a connection configuration of a client connecting to a computer system. The system can host a web service to which a client is redirected or connected to establish a client session between the client and the web service. The web service then actively and/or passively measures various attributes associated with the communication layers, such as latencies and/or configuration settings associated with each of the communication layers. Based on differences between the attributes of the communication layers, the computer system can characterize the client connection configuration. Various client connection configurations can include conventional connections, connections utilizing an external domain name service, connections through virtual private networks, connections through various proxies, and so on.

Abstract: A system and method may determine the carbon emissions risk to an institution through its lending and investment activities to a plurality of counterparties by, for example, determining carbon emissions data for a number of counterparties and, for each counterparty, determining the carbon emissions risk to the institution. A system and method may determine the proportion of total capital of a counterparty that is being financed by a bank, and multiply this by a carbon emissions measure for the counterparty. Embodiments may be applied to determine optimal investment strategies for managing an institution's exposures to carbon risk over time.

Abstract: A computer-implemented method for indexing a stream of files is disclosed. The method comprises receiving a file; generating a set of atomic indexes based on the file contents; storing the atomic indexes in a current index; and if the current index reaches a threshold criterion, freezing the current index into a read-only form, propagating the current index to one or more distributed databases, and generating a new index for future insertions. In some embodiments, the method further comprises one or more of providing an interface to query the databases for files matching a particular signature; searching the databases using a YARA-specified signature; converting a user-provided signature in the YARA format to an index-acceleratable format; retrieving a set of files that are possible matches of the particular signature; verifying that each file of the set of files is a match of the particular signature; and providing the files through the interface.

Abstract: A system for executing software, wherein a computing device stores instructions for a code execution module such that, when the instructions are executed, the computing device will: receive, for execution by the code execution module, software; create one or more immutable software nodes described in the software; determine that the software comprise an instruction to begin a simulated change at runtime of the one or more immutable software nodes; store the simulated change in a simulated change apparatus; using the simulated change apparatus, perform one or more operations of the software as if the one or more immutable software nodes had been changed in memory, during a period of time where each of the one or more immutable software nodes is guaranteed to retain logical immutability; and output results of the one or more operations.

Abstract: A system for storing and looking up values via hash table is disclosed. The system comprises multiple hash tables, each hash table being associated with a different hashing function and a content addressable memory (CAM). One or more processors receive a request to store a value; generate hashes of the value via each of the hashing functions; determine whether there exists at least one hash table that has a vacancy for the value; and if the determination is positive, insert the value in one of the at least one hash tables having the vacancy, and if the determination is negative, insert the value in the CAM. The processors also receive a request to look up a value; determine whether any of the hash tables or the CAM contain the value; and return the determination of whether the any of the plurality of hash tables or the CAM contain the value.

Abstract: A system for improving performance in an enterprise computing environment is disclosed and involves a change registry vault, including a machine learning model that analyzes whether or not implementation of a change will result in adverse operation of a component of the enterprise computing environment if the change is released, and takes different actions depending upon a result of that analysis. A corresponding method is also disclosed.

Abstract: A network of computing nodes and a method of operating the computing nodes effectuate, in real-time, an international, money transfer from the bank account of a first person (the payer) in a first country to the bank account of a second person (the beneficiary) in a second, different, country.

Abstract: A system is disclosed, comprising data storage and one or more computing devices. The data storage stores a plurality of records, each record comprising a plurality of values, each value being associated with an attribute from a plurality of attributes, and each record representing a classification rule that is satisfied if and only if each value of the plurality of values is matched by a value in a candidate query. The computing devices comprise one or more processors and non-transitory memory storing instructions that, when executed by the one or more processors, cause processors to: provide a graphical user interface (GUI) to enable setting a first ordering of the plurality of attributes, receive a candidate query; and based on the ordering of the plurality of attributes, automatically determine and output a best match among a set of all classification rules that are satisfied by the candidate query.

Abstract: A method and system for masking private data (e.g., personally identifiable information (PII)) is provided. The method and system can include receiving log data from an application where at least a portion of the data is private, masking the data based on a type of the application. The method and system can also include an ability to update one or more rules that are applied to the masking based on the application type.

Abstract: A system for detecting and responding to an anomaly in a chaotic environment, comprising one or more autonomous agent devices and a central server comprising a processor and non-transitory memory.

Abstract: A method of detecting and responding to anomalous activity within a system involves, based upon pivot feature information, for a snapshot interval, generating a frequency structure interrelating a pivot feature, a binning feature and counts, using the frequency structure, generating a graphical image of a pre-specified width and height in pixels, and wherein the pre-specified width corresponds to a cyclical repeating interval made up of multiple bins, the graphical image having been generated such that a bin of the multiple bins, is the bin having a highest count, and the bin is scaled to the pre-specified height, and counts of all other bins in the interval are scaled relative to that highest count, graphically comparing the generated graphical image to an immediately preceding graphical image for similarity, and if a result of the comparison fails to satisfy a pre-specified similarity threshold, automatically triggering an appropriate anomaly detection-based follow-on action.

Abstract: A system for executing software, wherein a computing device stores first software instructions for a code execution module such that, when the first software instructions are executed, the computing device will: receive, for execution by the code execution module, second software instructions; create one or more immutable software nodes described in the second software instructions; determine that the second software instructions comprise an instruction to begin a simulated change at runtime of the one or more immutable software nodes; store the simulated change in a simulated change apparatus; using the simulated change apparatus, perform one or more operations of the second software instructions as if the one or more immutable software nodes had been changed in memory, during a period of time where each of the one or more immutable software nodes is guaranteed to retain logical immutability; and output results of the one or more operations.

Abstract: A computer-implemented method for collecting files transmitted on a network for subsequent malware analysis is disclosed. The method comprises determining, by a sensor, that a file has been transmitted on the network; transmitting, from the sensor to an intermediate agent, the file; storing, by the intermediate agent, the file, pending a determination whether metadata of the file indicates an identical copy of the file has likely already been stored by a source collection subsystem; responsive to a determination that the file has not likely already been stored by the source collection subsystem, transmitting the file from the intermediate agent to the source collection subsystem; verifying, by the source collection subsystem, that the file has not likely already been stored by the source collection subsystem; and storing the file for future analysis.