Abstract: Aspects of the present disclosure include a system comprising a computer-readable storage medium storing at least one program and a method for managing access permissions associated with data resources. Example embodiments involve evaluating user access permissions with respect to shared data resources of a group of network applications. The method includes receiving a request to access a data resource. The method further includes accessing a policy object linked to the data resource that includes an effective policy for the data resource. The method further includes evaluating a user's access permissions with respect to the data resource based on the policy object and communicating a response to the network application that includes the access permission of the user.

Abstract: Systems and methods are described for determining and displaying optimal associations of data items. Data items may include media content such as television programs, and may be associated with advertisements to be displayed during content consumption. A tool may process data regarding segments of viewers that have common characteristics, and further process data regarding viewers of particular data items, to identify degrees of association between individual segments of viewers and particular data items. The degrees of association between a particular data item and multiple segments of viewers, or between multiple data items and a particular segment of viewers, may be displayed in a user interface that identifies optimal associations between data items and advertisements based on the viewer segments having high degrees of association with the data item.

Abstract: A data resolution system provides users with the ability to access and create associations between data items tagged in documents as part of an initial process of identifying data items to be tagged in the documents. Thus, the user that is adding tags to the documents is able to identify related data items from other data sources and create links with those data sources. This ability to identify links at the time of tagging reduces the need for later searching of data sources for related data items. Additionally, the system automatically stores information regarding each link so that information regarding the linked data items may be viewed alongside the original document and/or further information regarding the linked data item is easily accessible. Data items that are tagged in a document may be associated with data items representing the same object, but with different identifiers, names, etc. in external data sources.

Abstract: One or more processors store rules for performing rules-based cleaning operations on a plurality of datasets, wherein each rule comprises one or more functions to be executed against a dataset during the rules-based cleaning operations, the one or more functions each having one or more associated conditions and actions, wherein the one or more actions are performed on the dataset responsive to the one or more associated conditions being satisfied. The one or more processors further apply the rules to each of the plurality of datasets to perform the rules-based cleaning operations. To apply the rules to a given dataset, the one or more processors identify an ordered list of the one or more functions to be executed with respect to the given dataset during the rules-based cleaning operations and determine, for each of the one or more functions, whether the given dataset satisfies one or more conditions associated with a respective function of the one or more functions.

Abstract: An error management system can provide search results based on a received stack trace. For example, the error management system receives, from a client device, a search query including a stack trace. The error management system parses the search query to identify at least a first class and one or more errors associated with the first class, yielding a parsed search query. The error management system searches a class mapping table based on the parsed search query. The class mapping table includes a listing of classes and corresponding links to source code. The error management system searches an error discussion database based on the parsed search query. The error discussion database includes one or more user generated postings regarding programming errors. The error management system provides, to the client device, search results resulting from searching the class mapping table and the error discussion database.

Abstract: This disclosure relates to a system and method for data analysis. According to a first aspect, there is described a method, the method being performed using one or more processors, comprising: receiving one or more user inputs indicative of one or more relationships between data in a plurality of datasets; determining, based on the one or more user inputs, at least one object view for visualizing the data in the plurality of datasets; generating, based on the one or more user inputs, metadata comprising: an object graph indicative of the one or more relationships between two or more of the plurality of datasets; and information identifying the at least one object view; and in response to a query relating to the plurality of datasets, using the metadata to determine how response data responding to the query should be provided.

Abstract: Systems and methods are provided for facilitating the transformation of data from a tabular data set organized according to a data schema to an object based data set organized according to data ontology. The data schema and the data ontology may be used to generate a custom coding language suitable for facilitating the creation of a transform script. Error checking, type checking, autocomplete, and preview tools may be provided to permit the verification of the transform script as it is created.

Abstract: Systems and methods for preparing and analyzing data related to geo-spatial properties. A system generates from a first data source, based on an ontology, a geographic dataset including first data objects representative of first data from the first data source and at least one geo-spatial reference based on respective location information from the first data source that corresponds to the first data. The system can also generate a vector map data tile layer based on the ontology using the geographic dataset and including vector map data tiles, having map geometry data linked to the first data objects by a geo-spatial reference, and corresponding to a portion of a geographic area represented by the vector map data tile layer. In response to requests from the front-end system application for first data related to a geo-spatial feature, tiles can be provided and first data corresponding to selected geo-spatial references can be displayed.

Abstract: A method, apparatus, and computer program are disclosed. The method may be performed by one or more processors and may comprise receiving first data representing an infrastructure of a computer network, the first data comprising an indication of hosts which form at least part of the computer network and one or more software resources on respective hosts. The method may also comprise receiving second data from a vulnerability scanning software, the second data comprising an indication of one or more vulnerabilities detected in the one or more software resources provided on at least some of the hosts of the computer network. Using a combination of the first data and the second data, output data may be generated representing a risk profile of the computer network infrastructure, the output data indicating one or more subsets of hosts, determined as being at risk of being affected by the detected vulnerabilities by virtue of the software resources they provide for output on a user interface.

Abstract: A computer system is configured to generate alerts related to malicious activity on an audited computing system. The computing system is provided with instructions to receive activity information associated with activity of an entity performed in an audited computing network, access contextual information associated with the entity, determine, based on the contextual information, a set of weights associated with the activity information and combine the weight and the entity activity information to generate a risk score. In response to the risk score satisfying a threshold value, the computer system may generate an alert, and, in response to receiving a user input associated with the alert, update the set of weights. In certain embodiments, the updated weights may be used for determining the risk score of future alerts.

Abstract: Systems and methods for live reindexing include receiving, at a dispatch server, a request to reindex a database, wherein, at the time the request to reindex is received, the dispatch server is configured to send queries for information in the database to a first index server, the first index server comprising a first index of information in the database. The systems and methods further include, responsive to receiving the request to reindex and while the database is live, generating a second index of the information in the database, storing the second index at a second index server, and configuring the dispatch server to use the second index server as a live index server and to no longer use the first index server as a live index server.

Abstract: Systems and methods for adaptive and transparent entity screening are provided. In an aspect, a first entity list comprising a plurality of first entity records is accessed. The first entity records comprise a plurality of first entity identifying attributes. A second entity list comprising a plurality of second entity records is also accessed, wherein the second entity records comprise a plurality of second entity identifying attributes. In certain aspects, an entity screening model pairs the first entity identifying attributes of the first entity record with the second entity identifying attributes of the second entity record, executes different matching algorithms on pairs of entity identifying attributes, and determines an overall likelihood that the pair of entity records are a match based on aggregation of match scores from the plurality of matching algorithms.

Abstract: The systems, methods, and devices of the present disclosure may provide, among other features, high-performance, interactive geographical and/or data object map capabilities in which large amounts of geographical, geospatial, and other types of data, geodata, objects, features, and/or metadata are efficiently presented to a user on a map interface. In various embodiments, an interactive geographical map display system may enable rapid and deep analysis of various objects, features, and/or metadata by the user by aggregating and clustering large sets of data into aggregate values and clusters. The user can select various clusters, via the user interface, to interact with the data, clusters, and map.

Abstract: A system including first computer memory storing a full data set representable in rows and columns, a second computer memory storing executable instructions, and processors configured to execute the instructions to cause presentation of data of the full data set on a display including columns of data each having data fields, receive user input identifying a column of the data set, determine items to modify in information in the data fields of the identified column, generate and cause display of an indication of a proposed change action to modify the determined items, and in response to a user input indicating a selection of the indication of the proposed change action, update the presentation of the data based on the change action to modify information displayed in the data fields of the identified column of the data, and store a log of the change action.

Abstract: Embodiments of the present disclosure relate to user interfaces and systems that may enable dynamic and interactive access of, investigation of, and analysis of data objects stored in one or more databases. The data objects may be accessed from the one or more databases, and presented in multiple related portions of a display. In particular, the system provides a time-based visualization of data objects (and/or properties associated with the data objects) to a user such that the user may, for example, determine connections between various data objects, observe flows of information among data objects, and/or investigate related data objects.

Abstract: Aspects of the present disclosure relate to performing agnostic data integrity checks on source data, and based on the data integrity checks, generating a human-readable report that may be useable to identify specific errors or anomalies within the source data. Example embodiments involve systems and methods for performing the data integrity checks and generating the human-readable reports. For example, the method may include operations to ingest data from a source database through a data pipeline and into a local database, access the data from the data pipeline, determine a data type of the data, determine subtypes of data elements which make up the data, determine a count of each subtype, and generate a human-readable report, to be displayed at a client device.

Abstract: Systems and methods are provided for improved time series databases and time series operations. A time series service responds to requests from external devices. The external devices request time series data and submit time series queries. The time series service generates planned and efficient time series queries from the initial queries. The time series service performs operations such as unit conversion, interpolation, and performing operations on time series data. The time series service can identify which time series database to query from and/or cause data to be populated into a time series database from a data pipeline system.

Abstract: Systems and methods are provided for providing continuous configuration deployment. A configuration definition object may be obtained from a remote datastore. The obtained configuration definition object may be stored in a local datastore. The configuration definition object may be obtained and stored in advance of a scheduled maintenance. The configuration definition object may be obtained in response to the configuration definition object being committed to the remote datastore. The configuration definition object may be used to generate different configuration objects. A configuration object may be generated from the configuration definition object and one or more system characteristics. A service request may be received, and the configuration object may be executed to perform a configuration of a computing system.

Abstract: A system may determine one or more data sources which the system is configured to access. The system may provide a set of application programming interfaces (APIs) for interacting with data stored in one or more data sources. The APIs may be accessible to one or more web applications which the system is configured to serve. The system may determine that a web application has requested an operation for interacting with the data through one or more APIs in the set of APIs. The system may determine one or more responses based at least in part on the operation requested by the web application. The system may provide the response(s) to the web application.