Abstract: Described are improved systems, computer program products, and methods for a new local rolling online patching solution to a database server with minimized disruption to other instances during patching. For a one-node database server, it achieves single rolling online patching by starting a new instance of the same database from the newly patched home before shutting down the collocated instance running out of the old home.

Abstract: Techniques for using logit values for classifying utterances and messages input to chatbot systems in natural language processing. A method can include a chatbot system receiving an utterance generated by a user interacting with the chatbot system. The chatbot system can input the utterance into a machine-learning model including a set of binary classifiers. Each binary classifier of the set of binary classifiers can be associated with a modified logit function. The method can also include the machine-learning model using the modified logit function to generate a set of distance-based logit values for the utterance. The method can also include the machine-learning model applying an enhanced activation function to the set of distance-based logit values to generate a predicted output. The method can also include the chatbot system classifying, based on the predicted output, the utterance as being associated with the particular class.

Abstract: An expense report generation system receives transaction authorization data from a card issuer and compares the data with expense report generation criteria to determine whether to generate an expense report, prior to settlement of the transaction, based on the authorization data. The expense report generation system evaluates additional data obtained from other data sources including contextual information of the employee, transaction authorization, location, and other employees to generate the expense report. The expense report generation system subsequently updates the generated expense report based on updated transaction authorization data and/or transaction settlement data. The expense report generation system trains and uses a machine learning model for efficiency and accuracy in generating expense reports from transaction authorization data while reducing an employee's burden in manually inputting expense information and the approval process burden.

Abstract: In one or more embodiments, a software service allows software providers to implement machine learning (ML) features into products offered by the software providers. Each ML feature may be referred to as an encapsulated ML application, which may be defined and maintained in a central repository, while also being provisioned for each user of the software provider on an as-needed basis. Advantageously, embodiments allow for a central definition for an ML application that encapsulates data science and processing capabilities and routines of the software provider. This central ML application delivers a ML deployment pipeline template that may be replicated multiple times as separate, tailored runtime pipeline instances on a per-user basis. Each runtime pipeline instance accounts for differences in the specific data of each user, resulting in user-specific ML models and predictions based on the same central ML application.

Abstract: Techniques for implementing a qualification-based task management system in a work environment are disclosed. When a user logs in to a work center terminal, a system identifies a set of pending tasks that need to be completed. The system filters the tasks available to the user based on the user's qualifications and the equipment present at the work center. When the system identifies a task for which there is not a set of users with matching qualifications, the system applies a machine learning model to the task parameters to identify candidate users or recommended qualifications for performing the task.

Abstract: Techniques for generating recommendations for re-ordering scheduled tasks to improve completion times of one or more tasks are disclosed. A system displays a representation of a schedule for performing tasks among work centers in a work environment. The system identifies performance metrics associated with a current configuration of tasks in the work environment. The system further analyzes performance metrics for alternative task schedules in the work environment. The system displays interface elements to allow a user to re-order tasks among the work centers in the work environment. The system also displays predicted performance metrics associated with the alternative task schedules. When a user selects a particular interface element to implement an alternative task schedule, the system generates instructions to work centers to reorder tasks in the work environment.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on network resources and one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: Techniques for managing digital messages to and from a shared mailbox are disclosed. A system receives a message directed to a shared mailbox. The system analyzes contextual data in the message to identify a set of users with access to the shared mailbox who are recipients of the message. The system performs notification operations to notify different users with access to the shared mailbox of different messages. Notification operations include sending a notification to a particular communications platform, such as email, instant message, or text, that a message in the shared mailbox is associated with the recipient, tagging the message in the shared mailbox with names of recipients associated with the message, and/or categorizing the messages in the shared mailbox according to users.

Abstract: For end-to-end encryption of a virtual cloud network, a VPN tunnel from a customer device is terminated at a host network headend device using encryption keys secured in hardware and managed by the customer. The network headend device can be a card in a bare-metal server with one or more network virtualization devices. The network headend device is configured to receive a first key provisioned by a customer; receive a first data packet sent from a device of the customer; and decrypt the first data packet using the first key to obtain information. A network virtualization device is configured to receive the information from the network headend device; ascertain that the information is to be sent to a virtual machine in a virtual cloud network; ascertain that data in the virtual cloud network is configured to be encrypted; and encrypt the information with a second key to generate a second data packet before routing the second data packet to the virtual machine.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: A secure private network connectivity system (SNCS) within a cloud service provider infrastructure (CSPI) is described that provides secure private network connectivity between external resources residing in a customer's on-premise environment and the customer's resources residing in the cloud. The SNCS provides secure private bi-directional network connectivity between external resources residing in a customer's external site representation and resources and services residing in the customer's VCN in the cloud without a user (e.g., an administrator) of the enterprise having to explicitly configure the external resources, advertise routes or set up site-to-site network connectivity.

Abstract: Techniques are described for creating a network-link between a virtual network in a cloud environment and a service endpoint associated with a service provided by another cloud environment. The network-link is created based on network resources and one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: Systems and methods for cloud security monitoring and threat intelligence in accordance with embodiments of the invention are disclosed. In one embodiment, a process for monitoring and remediation of security threats includes generating a threat model using a first portion of activity data, identifying, based upon the threat model, a threat using a second portion of activity data, selecting a security policy to implement in response to the identified threat, identifying cloud security controls in a remotely hosted cloud application server system to modify in accordance with the selected security policy, establishing a secure connection to the remotely hosted cloud application server system using login credentials associated with a tenant account with the cloud application, and sending instructions to the remotely hosted cloud application server system to set the identified cloud security controls with respect to the tenant account in accordance with the selected security policy.

Abstract: The present disclosure relates to a system and techniques for preventing corruption of snapshot data by limiting the visibility of committed data. To do this, the system may maintain an index that indicates the highest transaction identifier value such that no future commits will have a transaction identifier less than or equal to the indexed transaction identifier value. In embodiments, if a read is performed, only transactions having a transaction identifier less than or equal to the index value can be read. Each time that a transaction is committed, the index value is updated to the transaction identifier for the transaction having the highest transaction identifier without any intermediary transactions.

Abstract: A computer system may receive one or more requests for access to one or more cloud services and may store the one or more requests in a request log. The computer system may receive one or more access rules applicable to cloud service access rights. The computer system may aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications. The computer system may generate and store container access policies that define access of a container and the one or more cloud services, the container access policies based at least in part on the aggregated one or more requests and the one or more access rules. The computer system may send the container access policies to a request forwarder of a compute instance in a production environment.

Abstract: Techniques for recommending runbook operations during a runbook generation process are disclosed. The system recommends operations for including in the runbook based on user activity. Generating operations of a runbook based on user activity generates a runbook that captures a user's behavior. The recommended operations may be different than any operations performed by the user. The recommended operations may be based in part on data sets accessed by the user frequently, periodically, or continuously.

Abstract: Techniques are provided for block-level fail atomicity on byte-level non-volatile media. In one technique, an offset table and application data that stores content of a file are stored for a file. The offset table includes multiple entries, each entry being associated with a different offset value and storing a logical block address (LBA) that references a location in the application data. In response to receiving a request, that includes an input buffer and an offset value, to update the file: (a) an entry, in the offset table, that corresponds to the offset value and comprises a first LBA is identified; (b) a second LBA that is considered free is identified; (c) the second LBA is replaced with the first LBA; (d) the input buffer is written to a location, in the application data, that the second LBA references; and (e) the second LBA is added in the entry.

Abstract: Techniques for implementing user interfaces, systems, and processes for multidimensional clustering and analysis are described herein. In one aspect, an application or cloud service receives a request to cluster a set of records where the request identifies a first set of one or more dimensions to use for clustering and a second set of one or more dimensions to analyze for correlation patterns. Responsive to receiving the request to cluster the set of records, the system generates clusters based at least in part on variances in the first set of one or more dimensions, wherein each cluster includes at least one record from the set of records. The system may generate, for each respective cluster, an analytic result that identifies how strongly the second set of one or more dimensions correlate to the respective cluster. The system may present the clusters and analytic results for further processing.

Abstract: Techniques are described herein for managing transactions between data consumers and data providers using a blockchain. In some embodiments, a blockchain network receive smart contracts that govern access rights to data sets provided by blockchain members and smart contracts that execute blockchain transactions based on the usage of data sets. When a data set is provided to a blockchain member through the blockchain network, usage of the data set may be tracked. Responsive to detecting usage of the data set, one or more smart contracts may execute one or more blockchain transactions within the blockchain network.