Abstract: A system of one or more computing devices is utilized for, among other purposes, creating a template-driven search interface and conducting searches thereon. In an embodiment, the system comprises: a template repository; search templates in the template repository, the search templates comprising at least: field specification data that specify search interface fields for obtaining search input data, and query specification data that specify how to generate structured queries based on the search input data obtained for the one or more of the search interface fields; a search field generator that generates search fields indicated by the field specification data; a template loading module, coupled to the template repository, that identifies available search templates in the template repository; and a search interface generator, coupled to the search field generator and template loading module, that generates different search interfaces depending on which template is selected.

Abstract: Embodiments of the present disclosure relate to a data analysis system that may automatically generate memory-efficient clustered data structures, automatically analyze those clustered data structures, automatically tag and group those clustered data structures, and provide results of the automated analysis and grouping in an optimized way to an analyst. The automated analysis of the clustered data structures (also referred to herein as data clusters) may include an automated application of various criteria or rules so as to generate a tiled display of the groups of related data clusters such that the analyst may quickly and efficiently evaluate the groups of data clusters. In particular, the groups of data clusters may be dynamically re-grouped and/or filtered in an interactive user interface so as to enable an analyst to quickly navigate among information associated with various groups of data clusters and efficiently evaluate those data clusters in the context of, for example, a fraud investigation.

Abstract: The present disclosure relates to systems and techniques for multi-stage rendering of data pages for display in a data page display window. The present disclosure also relates to rendering data as part of a background instance of a data page renderer. The present disclosure also relates to displaying data requested from a workspace application in a data page window once the requested data is sufficiently rendered as part of a background instance of a data page renderer. The present disclosure also relates to providing a pool of background instances of multiple data page renderers for rendering and pre-rendering data pages for storage and eventual display in a data page window.

Abstract: A computer system is configured to receiving a data set from a data provider and automatically save the data set in a quarantine database where copying, moving, and sharing of the data set are restricted until the data set is released by a data provider. The data set is parsed to find and mark portions with potentially sensitive information. At least those parts are reviewed by a data governor, who can confirm, add, edit, or remove markers. Those parts can be visually indicated to the data governor, along with a preview of, metadata about, and analysis of the data set. After reviewing at least the automatically marked portions, the data governor can release the data set to a non-quarantine database where another user can use the data set. The user is restricted from accessing the quarantine database.

Abstract: Systems and methods are disclosed for key phrase clustering of documents. In accordance with one implementation, a method is provided for key phrase clustering of documents. The method includes obtaining a first plurality of documents based at least on a user input, obtaining a statistical model based at least on the user input, and obtaining, from content of the first plurality of documents, a plurality of segments. The method also includes identifying a plurality of clusters of segments from the plurality of segments, determining statistical significance of the plurality of clusters based at least on the statistical model and the content, and providing for display a representative cluster from the plurality of tokens, the representative cluster being determined based at least on the statistical significance. The method further includes determining a label for the representative cluster based at least on the plurality of clusters and the statistical significance.

Abstract: A computing system accesses an image-based document and a text document having text extracted from the image-based document and provides a user interface displaying at least a portion of the image-based document. In response to selection of a text portion of the image-based document, the system determines an occurrence of the text portion within at least a portion of the image-based document and then applies a search model on the text document to identify the same occurrence of the text portion. Once matched, alignment data indicating a relationship between a selected tag and both the text portion of the image-based document and the text portion of the text document is stored.

Abstract: A system and a method are provided for collaborative data entry and integration. An operation performed by the system and the method include causing a collaborative interface for input to a spreadsheet to be provided via a user interface, receiving a data entry to the spreadsheet via the collaborative interface, validating the received data entry based on one or more validity rules associated with the spreadsheet, capturing a snapshot of the spreadsheet including the validated data entry, and causing at least the validated data entry of the spreadsheet to be integrated into datasets for one or more applications, at least based on the captured snapshot of the spreadsheet.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for computer network security risk assessment. One of the methods includes obtaining compromise likelihoods for user accounts. Information describing a network topology of a network is obtained, with the network topology being nodes each connected by an edge to other nodes, each node being associated with a compromise likelihood, and one or more nodes are high value nodes associated with a compromise value. Unique paths to each of the high value nodes are determined for a particular user account. An expected value for each path is determined based on the compromise likelihood of the particular user account, the compromise likelihood of each node included in the path, the communication weight of each edge included in the path, and the compromise value associated with the high value node. User interface data is generated describing at least one path.

Abstract: An example method of enforcing granular access policy for embedded artifacts comprises: detecting an association of an embedded artifact with a resource container; associating the embedded artifact with at least a subset of an access control policy associated with the resource container; and responsive to receiving an access request to access the embedded artifact, applying the access control policy associated with the resource container for determining whether the access request is grantable.

Abstract: Aspects of the present disclosure involve receiving references to application data of applications hosted by the servers. The application data includes information defining an interface of the application (e.g., a set of interface elements), and data types associated with the application. As a part of the process for generating a composite graphical user interface (GUI), the composite interface system receives references to application data of one or more applications at various memory locations (e.g., at both local and third-party servers). In this way, the composite interface system accesses the application data of any referenced application in order to retrieve application data to configure a composite GUI which includes interface elements of each of the referenced application.

Abstract: Systems, techniques, and user interfaces are disclosed for an object-centric builder software that can utilize an ontology to design, configure, and build a workflow application that also references the ontology to perform a workflow. The ontology may serve as a data model for stored data associated with the particular workflow. The builder software may leverage the ontology to obtain advance knowledge of the availability and structure of the stored data that will be accessible to the workflow application at run-time, in order to build a workflow application that is well-tailored for that particular workflow. This approach may also result in flexible workflow applications that are easily built and maintained.

Abstract: Techniques related to a domain-specific language for transformations are disclosed. A server computer may process a table definition composed in a domain-specific language. The table definition may include a sequence of one or more transformations to be performed on one or more source tables to generate a target table. The sequence may include a customized transformation. A source dataset may be provided as input to an implementation of the customized transformation. An output dataset may be generated as a result of executing the implementation. An intermediate table may be generated based on performing at least one transformation on a particular source table. A supplemental portion for the intermediate table may be generated based on performing the at least one transformation on an appended portion of the particular source table. The target table may be generated based on combining the supplemental portion with the intermediate table.

Abstract: Generating a first signature value corresponding to a first dataset stored in a first data region having a first access permission level. Determining a signature anonymization value. Truncating the first signature value based on the signature anonymization value. Generating a secure search query for identifying, based on the truncated first signature value, second signature values corresponding to entries of a second dataset stored in one or more second data regions having one or more second access permission levels. Receiving a response to the secure search query including the plurality of second signature values. Determining the entries of the second dataset from the second signature values. Comparing the respective entries of the second dataset to the at least a portion of the first dataset. Generating one or more notifications based on the comparisons indicating a potential match between a particular respective entry of the second dataset and the at least a portion of a first dataset.

Abstract: Computer implemented systems and methods are disclosed for automatically and canonically identifying related data in various data structures while maintaining secure access to individual data objects and their properties. Data structures may include a plurality of records, wherein each record is associated with a respective entity. Access to individual records, or in some embodiments access to individual attributes of a record, may be restricted to particular users or groups on a per-item basis. In accordance with some embodiments, systems and methods are disclosed for identifying pairs of records, determining a probability that both records relate to a common entity, and securely notifying and presenting users with information regarding the probability while preserving the access restrictions for the individual records and attributes. Record pairs that potentially refer to the same entity may be linked, reconciled, or ignored in response to feedback from users who have access to one or both records.

Abstract: Techniques for visualizing dependencies in a data analytics system are described. In an embodiment, a visualization system may receive datasets and dataset dependency information for the datasets. The visualization system may receive a first type of analysis objects from a first analysis object system and dataset dependency information from an analysis object dependency service. The visualization system may receive a second type of analysis objects from a second analysis object system. The second type of analysis object may include a JSON representation of a set of operations that are applied during analysis such as a set of programming instructions. The visualization system may traverse and analyze the JSON representation to determine, for a given analysis object, one or more parent dependencies. The visualization system can then generate a graph of the datasets and analysis objects.

Abstract: Computer implemented systems and methods are disclosed for importing data from electronic data files. In accordance with some embodiments, a file format is assigned to a source electronic data files by a data importation system. The data importation system may further identify a file type identifier associated with the source electronic data file and map the source electronic data file to a transformation template. The data importation system may further store the file format, file type identifier, and an indication of the transformation template as a file type profile associated with the source electronic data file in a database.

Abstract: Systems and methods are provided for improved auditing of user actions associated with a software application. The system includes functionality to log user actions in a structured, standardized way. The system includes interactive user interfaces for analyzing the logs. The logging is based on a well-defined categorization of available actions. The log information includes (and distinguishes among) user details, context details, user inputs, and/or system outputs (including identification of data objects). The interactive user interfaces enable a user to view structured log data in an efficient manner, such as by presenting logs in a tabular format, executing queries on the log data, and/or presenting visualizations that summarize the log data. The interactive user interfaces provide functionality that allows a user to investigate and/or audit user interactions with a data object.

Abstract: Aspects of the present disclosure involve a data audit system to generate and cause display of a tracking interface at a client device, wherein the tracking interface is configured to facilitate the visualization of tracking data retrieved from multiple sources. The audit system is configured to access a data source to retrieve tracking data that includes an associated asset identifier that identifies a subject of the tracking data, to link the retrieved tracking data to a data object at a database of the audit system based on the asset identifier, and to generate and cause display of a visualization of the tracking data within a tracking interface.

Abstract: Systems and methods are described for determining and displaying optimal associations of data items. Data items may include media content such as television programs, and may be associated with advertisements to be displayed during content consumption. A tool may process data regarding segments of viewers that have common characteristics, and further process data regarding viewers of particular data items, to identify degrees of association between individual segments of viewers and particular data items. The degrees of association between a particular data item and multiple segments of viewers, or between multiple data items and a particular segment of viewers, may be displayed in a user interface that identifies optimal associations between data items and advertisements based on the viewer segments having high degrees of association with the data item.

Abstract: Computer implemented systems and methods resolve data entries across multiple lists. The lists may include a plurality of records, wherein each record is associated with a respective entity. In accordance with some embodiments, the systems and methods further comprise identifying a direct field match between two lists, determining updated lists based on the remaining data entries, executing a comparison of the remaining data entries, determining a scoring metric based on the comparison, and determining whether the scoring metric exceeds a threshold. The systems and methods further comprise generating a data distribution curve based on the matched and unmatched data records and adjusting the threshold based on the data distribution curve for the next iteration of comparisons executed on the remaining unresolved entities.