Abstract: Systems and methods for providing a universal format driven data transformation. In conventional ETL operations, the transform process that transforms data from the source format to the destination format is based on a transformation program. Conventionally, transform logic is developed around the chosen transform program. In accordance with an embodiment, a universal, format-driven data transform can be achieved through the use of a data transformation format. In accordance with an embodiment, a method for providing a universal format driven data transformation can include providing a transformation format in a file, wherein the transformation format is in a human-readable form; and providing, in the transformation format, keywords defining a target table type, a dataset list, and dataset operations to be performed on a dataset from the dataset list.

Abstract: Techniques are described for dynamic cloud configuration changes based on a computing attack detection. An example method can include a device receiving a message that a metric collected from a processor has exceeded a threshold, the processor being an element of a first node, the first node, exceeding the threshold being indicative of a computing attack. The device can transmit a first instruction over the network to transition a second processor from the first node to a second node. The device can transmit a second instruction over the network to suspend the first node from receiving a workflow request. The device can determine whether the processor is a victim of the attack. The device can transmit the determination of whether the processor is the victim of the attack. The device can receive a second message that the attack has been mitigated.

Abstract: Techniques are described for HTML-based image generation. An example, method can include generating hypertext markup language (HTML) code for a table comprising a table structure of a set of rows and columns. The method can further include generating HTML code for a text to populate a cell of the table. The method can further include generating a rendered image of the table using the HTML code. The method can further include detecting a first pixel of the rendered image comprising the first color, and a second pixel of the rendered image comprising the second color. The method can further include detecting the text on the rendered image. The method can further include generating a bounding box, surrounding the detected text. The method can further include generating annotation comprising a bounding box parameter and a text parameter.

Abstract: Techniques for enterprise data aggregation and collective insights generation are disclosed, including: receiving multiple sets of enterprise-specific customer relationship management (CRM) data, respectively, from enterprise-specific CRMs; aggregating the sets of enterprise-specific CRM data, to obtain collective CRM data; receiving a request to generate a collective insight that is applicable to a particular subset of the collective CRM data; responsive to the request, selecting a particular machine learning model from multiple machine learning models, wherein each machine learning model is configured to generate collective insights for a respective subset of the collective CRM data; generating the collective insight that is applicable to the particular subset of the collective CRM data, using the particular machine learning model.

Abstract: Techniques discussed herein relate to improved data recovery techniques within cloud computing environments. The disclosed techniques utilize consistency groups that are identified for volumes corresponding to a compute instance. A plurality of resource identifiers uniquely identifying a respective cloud computing resource of the cloud computing environment can be maintained. A cloud computing instance corresponding to a resource identifier may be identified and volume metadata associated with that resource identifier is obtained. The volume metadata identifying at least one of a block volume or boot volume. A consistency group is generated for the identified volume devices for the computing instance and one or more schedules can be generated with which various snapshots of the volume devices of the group are to be subsequently generated.

Abstract: Large applications may access data from a number of different computing environments. Each of these computing environments may provide user interface (UI) components that are tightly coupled with the backend services providing the data. When an application is loaded in one computing environment, the main UI and local UI components from that environment may be loaded during initialization. Additionally, UI components from other computing environments may be dynamically added to the main UI at runtime. These UI components may communicate through proxies that resolve cross-domain communication and pass secure user tokens to retrieve data from the corresponding backend services in the other computing environments for display by the UI components in the main UI. Thus, the user interface may seamlessly integrate UI components and associated data across different computing domains.

Abstract: Techniques for transforming Java source code using a symbolic description language are disclosed, including: obtaining a set of Java source code corresponding to a Java program; generating a symbolic description language (SDL) model of the set of Java source code; generating, based on the SDL model, a transformed program including at least one transformation relative to the Java program.

Abstract: Techniques for modifying hierarchal-structured data of one hierarchal data structure based on a modification to another hierarchal data structure are disclosed. A system determines that a modification has been made, or is requested to be made, to a particular hierarchal data structure. The system analyzes a set of rules to determine whether the modification of the hierarchal data structure triggers another modification to an additional hierarchal data structure. The additional hierarchal data structure includes different nodes, or nodes arranged in a different hierarchal structure, than the particular hierarchal data structure. The system modifies the additional hierarchal data structure based on the rule. The modification of the additional hierarchal data structure is different than the modification to the particular hierarchal data structure.

Abstract: Techniques for modeling Java source code in a symbolic description language are disclosed, including: obtaining a set of Java source code; determining that the set of Java source code includes a user-defined type; determining that the set of Java source code includes a loop; generating, based on the set of Java source code, a symbolic description language (SDL) model including an SDL representation of the user-defined type and an SDL representation of the loop.

Abstract: Techniques are described herein for advanced persistent threat detection. An example method can include a device receiving a message identifying an instruction loaded onto an instruction cache of a secure processer. The device can transmit a control instruction to configure a kernel image to collect a metric over a first time interval, the metric being generated based at least in part on the secure processor executing the instruction during the first time interval. The device can receive the first metric from the kernel image, the metric being indicative of a transition of the secure processor from a non-secure state to a secure state. The device can determine whether the secure processor is undergoing a computing attack based on the metric. The device can transmit the determination of whether the secure processor is undergoing a computing attack to a sender of the message.

Abstract: A natural language identity classifier system is described, which employs a supervised machine learning (ML) model to perform language identity classification on input text. The ML model takes, as input, non-lexicalized features of target text derived from subword tokenization of the text. Specifically, these non-lexicalized features are generated based on statistics determined for tokens identified for the input text. According to an embodiment, at least some of the non-lexicalized features are based on natural language-specific summary statistics that indicate how often tokens were found within a corpus for each natural language. Use of such summary statistics allows for generation of natural language specific conditional probability-based features.

Abstract: Example embodiments facilitate prioritizing the recycling of computing resources, e.g., server-side computing systems and accompanying resources (e.g., non-volatile memory, accompanying firmware, data, etc.) leased by customers in a cloud-based computing environment, whereby computing resources (e.g., non-volatile memory) to be forensically analyzed/inspected, sanitized, and/or updated are prioritized for recycling based on estimates of when the computing resources are most likely to require recycling, e.g., via background sanitizing and updating. Computing resources that are likely to be recycled first are given priority over computing resources that are more likely to be recycled later. By prioritizing the recycling of computing resources according to embodiments discussed herein, other cloud-based computing resources that are used to implement computing resource recycling can be efficiently allocated and preserved.

Abstract: Systems, methods, and other embodiments associated with generating aggregate data geospatial grid cells for encoding in vector tiles are described. In one embodiment, a method includes identifying a subset of finest-resolution geospatial grid cells contained by a vector tile in a set of finest-resolution geospatial grid cells and their associated aggregate data values; selecting a cell resolution level based on a zoom level of the vector tile; generating a new geospatial grid cell at the cell resolution level based on cell IDs of the subset of finest-resolution cells; generating a total aggregate data value for the new cell based on associated aggregate data values of the subset of finest-resolution cells; encoding the new cell and total aggregate data value in the vector tile; and transmitting the encoded vector tile to a client to cause the vector tile and the new cell to be displayed.

Abstract: A framework for transferring workloads between security regions of an infrastructure service. For example, techniques for transferring workloads between security regions across a private network based on signatures associated with the security regions.

Abstract: A process for defining a cloud service in an Infrastructure as Code (IaC) tool is designed to dynamically determine numbers of clusters, availability domains, compute nodes, and/or load balancers at run time. These values are then used to determine a number of subnet levels required for a classless inter-domain routing (CIDR) slicing operation to generate subnets for each of the compute nodes and load balancer nodes in the service. Because IaC languages do not provide nested loop control constructs, labels for each of the subnets can be generated and assigned using a Cartesian product of label elements. These labels can be modified by a count variable that is incremented each time a resource is duplicated in the script to simulate the effect of a nested loop structure.

Abstract: The present embodiments relate to updating a dataflow interactive cluster with zero downtime. A request to update a first dataflow cluster can be received, and a second dataflow cluster can be generated as a replacement cluster to execute received queries. Generating the second dataflow cluster can include identifying a second series of executor nodes that are configured to execute queries from the gateway node via a second driver node. A first update to a configuration of a host configuration node can be performed to register the second dataflow cluster as an active endpoint and identify the first dataflow cluster as an inactive endpoint. When no active queries exist, a second update to the configuration can be provided to remove the first dataflow cluster from the configuration to direct subsequent queries from the gateway node to the second dataflow cluster.

Abstract: A system continually or periodically computes priority scores for unexecuted tasks. The system selects and executes tasks based on respective priority scores. The priority score for a particular unexecuted task may be computed as a function of a set of tasks that currently depend on the particular unexecuted task. The priority score for the particular unexecuted task may increase or decrease as the set of tasks, that depend on the particular unexecuted task, increase or decrease.

Abstract: Systems, devices, and methods discussed herein enable the provisioning of one or more virtual resources within a cloud-computing environment based at least in part on user-defined constraints. By way of example, a request to provision one or more virtual resources within the cloud-computing environment may be received. The request may include a set of user-defined constraints. Placement data indicating a mapping of a particular virtual resource to a particular hardware resource may be obtained based at least in part on the set of user-defined constraints. The virtual resource(s) may be provisioned within the cloud-computing environment in accordance with the set of user-defined constraints based at least in part on utilization of the placement data.

Abstract: Generic Concurrency Restriction (GCR) may divide a set of threads waiting to acquire a lock into two sets: an active set currently able to contend for the lock, and a passive set waiting for an opportunity to join the active set and contend for the lock. The number of threads in the active set may be limited to a predefined maximum or even a single thread. Generic Concurrency Restriction may be implemented as a wrapper around an existing lock implementation. Generic Concurrency Restriction may, in some embodiments, be unfair (e.g., to some threads) over the short term, but may improve the overall throughput of the underlying multithreaded application via passivation of a portion of the waiting threads.

Abstract: Techniques for using signed nonces to secure cloud shells are provided. The techniques include receiving, by a session manager service, a request to connect a user device to a secure connection to a secure shell instance. The session manager service may authorize the user device to access the secure shell instance and may configure the secure shell instance, being described by a shell identifier of the secure shell instance. The techniques also include generating, by the session manager service, a nonce token and providing the shell identifier, and a router address of the secure shell router to the user device. The techniques also include generating, by the session manager service, a signed nonce token using the nonce token; and providing the signed nonce token and the shell identifier to a user device.