Abstract: Systems and methods are disclosed for collaborative information analysis via electronic communications. In accordance with one implementation, a method is provided for analyzing electronic communications. The method includes, for example, receiving a selection of one of a plurality of electronic communication systems. Moreover, the method includes receiving, from the selected electronic communication system, an electronic communication comprising a plurality of terms and identifying at least one term of interest from the plurality of terms. The method further includes searching for information pertaining to the at least one term of interest and receiving information responsive to the search. The method also includes creating an object corresponding to the at least one term of interest and sharing a representation of the object with one or more users.

Abstract: A system architecture for linking one or more derived objects to existing data objects in a data structure can be organized in a variety of forms. A method for establishing the architecture may include linking first and second data objects. The first data object may include a first plurality of properties, and the second data object may include a second plurality of properties. At least one of the second plurality of properties may be based on the first plurality of properties. The method may further include receiving, by a computer, a user limitation of a property type that is associated with the at least one of the second plurality of properties. The method may include deriving, based on the user limitation, a new object that includes a third plurality of properties. The third plurality of properties may include a subset of one or more of the first and second pluralities of properties. The new object may be linked to the first and second data objects.

Abstract: An improved unit test framework that validates large datasets generated by a data management system is described herein. Typical unit test frameworks validate functions. However, the improved unit test framework validates the underlying data. For example, after each step of a data transformation process implemented by the data management system, the data management system can execute a data unit test that loads data sets into memory, checks a set of preconditions, and applies unit test logic to the loaded data sets. In some embodiments, the data management system executes the data unit tests asynchronously with the data transformation processes and therefore do not interfere with the data transformation processes. Rather, the data management system generates and transmits a notification when any step of the data transformation process fails a particular data unit test.

Abstract: An interactive data object map system is disclosed in which large amounts of geographical, geospatial, and other types of data, geodata, objects, features, and/or metadata are efficiently presented to a user on a map interface. The interactive data object map system allows for rapid and deep analysis of various objects, features, and/or metadata by the user. A layer ontology may be displayed to the user. In various embodiments, when the user rolls a selection cursor over an object/feature an outline of the object/feature is displayed. Selection of an object/feature may cause display of metadata associated with that object/feature. The interactive data object map system may automatically generate feature/object lists and/or histograms based on selections made by the user. The user may perform geosearches, generate heatmaps, and/or perform keyword searches, among other actions.

Abstract: Various systems and methods are provided for performing soft entity resolution. A plurality of data objects are retrieved from a plurality of data stores to create aggregated data objects for one or more entities. One or more retrieved data objects may be associated with the same entity, based at least in part upon one or more attribute types and attribute values of the data objects. In response to a determination that the one or more of the retrieved data objects should be associated with the same entity, metadata is generated that associates the data objects with the entity, the metadata being stored separately from the data objects, such that the underlying data objects remain unchanged. In addition, one or more additional attributes may be determined for the entity, based upon the data objects associated with the entity.

Abstract: One or more virtual machines are launched at an application platform. At each of the one or more virtual machines, a machine learning model execution environment is instantiated for an instance of a machine learning model. A respective instance of the machine learning model is loaded to each machine learning model execution environment. Each loaded instance of the machine learning model is associated with an application programming interface (API) endpoint which can receive input data for the loaded instance of the machine learning model from a client device and return output data produced by the loaded instance of the machine learning model based on the input data.

Abstract: Systems and methods are provided for determining an alias file that defines aliases for one or more datasets. At least one Structured Query Language (SQL) query that includes one or more aliases defined in the alias file can be determined. The at least one SQL query can be translated to a corresponding executable SQL expression. The corresponding executable SQL expression can be executed.

Abstract: A method is provided for determining angular relationships from a point of interest to a plurality of peripheral points of interest on a map. One or more cost functions from the point of interest to the plurality of the peripheral points of interest on the map are analyzed. A plurality of vectors emanating from the point of interest to the plurality of the peripheral points of interest on a different representation of the map are displayed. Another method is provided for identifying points of interest on a map. Regions of high interest are identified on the map. Regions of low interest are identified on the map. The regions of high interest are expanded on a different representation of the map. The regions of low interest are contracted by an amount proportional to an amount the regions of high interest are expanded on the different representation of the map.

Abstract: Methods and systems for structuring, storing and displaying time series data in a user interface. One system includes processors executing instructions to determine, from time series data from a first sensor, a first subset of time series data for the first batch from the first start time and the first end time, determine, from the time series data from the first sensor, a second subset of time series data for the second batch from the second start time and the second end time, generate a time series user interface comprising a chart, the chart including a first plot for the first subset of time series data and a second plot for the second subset of time series data, the first plot being aligned to the second plot, and cause presentation of the time series user interface.

Abstract: Systems and methods are provided that allow federated data from various source systems to be accessed and analyzed through a data analysis platform. The federated data may be stored in different formats. The data analysis platform can receive the federated data in whatever format it has been stored at its respective source system. A script can be used to generate temporary representations (or temporary objects) for the federated data by transforming the federated data. Moreover, the temporary representations or temporary objects can be further transformed into a data analysis platform-specific format. A user of data analysis platform may access and/or manipulate either the temporary representations or objects as well as the data analysis platform-specific objects. Temporary objects can be transformed automatically into corresponding platform-specific objects when necessary to provide an enhanced capability or operation on the objects.

Abstract: Systems and methods are provided for presenting multiple dimensions of an entity for visual comparison. Multiple sets of data representing multiple dimensions of a first entity may be accessed. The multiple sets of data may be converted for plotting within a first multidimensional arc chart. The first multidimensional arc chart may be defined by a rounded outer shape. The rounded outer shape may be characterized by an arc length. The first multidimensional arc chart may be divided into multiple sections. Individual sections may include a plot of a dimension of the first entity. Values of the plot may be determined based on corresponding positions along the arc length. An interface that includes the first multidimensional arc chart may be provided.

Abstract: Techniques allow a computer to responsively search for graph shapes similar to a user-selected graph shape much faster. Data can be pre-processed and stored as vectors, along with an index. The index can be used to find similar vectors that represent graph shapes similar to a user-selected shape in a computationally efficient manner. Vectors of multiple resolutions can be used to anticipate different sizes of a graph that a user can select, and comparisons can be repeated and refined. When a satisfactorily small number of candidate vectors are determined, more computationally intensive distance calculations can be performed on data reconstructed from the vectors.

Abstract: A computer system may generate alerts related to a potential cyber attack an resource of an organization. The computer system may receive activity information associated with activity on a computer network of the organization, access contextual information about the resource, determine, based on the contextual information, select, based at least in part on the contextual information, one or more indicators that are indicative of a cyber attack against the resource to form a second plurality of indicators, and generate, based at least in part on the second plurality of indicators and the contextual information, a risk score, wherein the risk score indicates a probability that the resource is at risk of a cyber attack. In response to the risk score satisfying a threshold value, the computer system may generate an alert. Alerts may be presented using a graphical user interface. Analysts' actions may be tracked for review.

Abstract: A datacenter has more computing power than a personal computer. The personal computer sends a request to perform an operation on a data set to the datacenter. The datacenter evaluates various inputs to determine if, despite the datacenter's computing power, the personal computer is likely to complete the operation faster. Based on the determination, the datacenter may perform the operation, send the data set to the personal computer for the personal computer to process, or start a competitive computation. As a result, a user interface can be more responsive. Machine learning processes can be used to improve predictions.

Abstract: Systems, methods, and non-transitory computer readable media are provided for determining routes within a location. Location information for a location may be obtained. The location information may include terrain information for the location. A set of restricted regions within the location may be determined based on the location information. A set of paths within the location may be determined based on the set of restricted regions. An interface through which information describing the set of paths within the location is accessible may be provided.

Abstract: Various systems and methods are provided that display schematics and data associated with the various physical components in the schematics in an interactive user interface. For example, a computing device links data stored in one or more databases with schematics displayed in one or more interactive user interfaces. The computing device parses a digital image that depicts a schematic and identifies text visible in the digital image. Based on the identified text, the computing device recognizes representations of one or more physical components in the schematic and links the representations to data regarding the physical component in one or more databases, such as specification data, historical sensor data of the component, etc. The computing device modifies the digital image such that it becomes interactive and visible in a user interface in a manner that allows the user to select a physical component and view data associated with the selection.

Abstract: Techniques for improving database searches are described herein.

Abstract: A computer-implemented method is provided to visualize data related to one or more assets utilizing an interactive geospatial map. The system may receive query criteria, indicating a geographic region of interest and/or timespan of interest, and may access a plurality of datasets including a first dataset comprising data items associated with default locations of assets and a second dataset comprising data items associated with transit events of assets, and wherein the plurality of datasets are associated with geographic locations and respective times. The system may query the plurality of datasets to determine, for assets associated with the one or more data items, expected geographic locations of the assets, and may generate user interface data configured for rendering an interactive user interface including an interactive geospatial map with indications of the expected geographic locations of the assets, and a plurality of interactive tables.