Abstract: Methods, systems, and computer-readable storage media for receiving, by an intermediate system from a web browser, a request to access a target system, in response to the request, transmitting, by the intermediate system, a request for a reentrance ticket to a target system, the request for a reentrance ticket including user credentials, and transmitting, by the intermediate system, the reentrance ticket to the web browser, the web browser transmitting a request for a security session to the target system, and executing one or more calls to the target system during the security session.

Abstract: Techniques and solutions are described for detecting malicious database activity, such as SQL injection attempts. A first machine learning classifier can be trained by comparing processed and unprocessed user input, where a difference between the two can indicate suspicious or malicious activity. The trained classifier can be used to analyze user input before query execution. A second machine learning classifier is trained with a data set that includes call stack information for an application requesting execution of a dynamic query and query statistics associated with processing of the query at the database. The query of the application can be correlated with a corresponding database query by hashing the application query and the database query and comparing the hash values, where matching hash value indicate a common query. The trained classifier can monitor execution of future queries to identify queries having anomalous patterns, which may indicate malicious or suspicious activity.

Abstract: Optimization of procedures for enterprise applications can take both declarative query statements and imperative logic into account in a unified optimization technique. An input procedure can implement complex analytical queries and also include iterative control flow logic such as loops. Alternative query execution plans for the procedure can be enumerated by moving queries out of and into loop boundaries via hoist and sink operations. Program correctness can be preserved via excluding some operations via dependency graphs. Sink subgraphs can also be used. Query inlining can also be supported, resulting in synergies that produce superior execution plans. The computing execution resource demand of the respective alternatives can be considered to arrive at an optimal query execution plan that can then be used to actually implement execution of the procedure. Execution performance can thus be greatly improved by performing counterintuitive optimizations.

Abstract: Techniques and solutions are described for translating strings in a human language that are associated with code, such as code that declares user interface elements in association with which the strings can be displayed. The strings can be embedded in code, or can be included in files that are accessed by the code or used in creating executable code. Strings can be extracted from data, such as files, received in a translation request. After translation, such as by a human translator or using automatic translation, the translation results can be provided in response to the translation request. The translation process can be automated, such that changes to files in a code repository can trigger a translation request. Disclosed technologies can facilitate the production of programs that are localized using different human languages.

Abstract: The present disclosure involves systems, software, and computer implemented methods for creating and merging delta object notation documents. One example method includes receiving a request to create a delta object notation document based on a first object notation document and a second object notation document. The first object notation document is compared to the second object notation document to generate the delta object notation document in an object notation format. Generating the object notation document includes navigating properties in the first object notation document and the second object notation document to identify properties in the first object notation document and the second object notation document and determining, for each property identified in the first object notation document or the second object notation document, whether a property with a same name and parent exists in a corresponding first object notation document or a corresponding second object notation document.

Abstract: System, method, and computer program product embodiments enable configuration of a recommended data replication strategy for cloud based in-memory databases. An embodiment operates by requesting, by a first computing device, configuration of an on-demand cloud-based in-memory database, assessing, at the first computing device, database system components, and transmitting database system component information from the first computing device to a second computing device over a network. The first computing device receives from the second computing device an evaluation of the database system components and a recommended replication strategy responsive to a replication rule set. The database system components at the first computing device are then configured to use the recommended replication strategy.

Abstract: Technologies described herein can be used to support modification to data by a client computing device without a concurrency check. An update to a data document can be received from a client computing device. Contents of the update can be analyzed to determine whether a concurrency check is required before applying the update to the data document. In at least some embodiments, at least part of the contents of the data document can be organized in such a way that multiple, independent modifications can be made to the contents of the data document without concurrency checks. A server computer can be configured to identify updates to these contents of the data document, and to apply the updates to the data document without performing concurrency checks. In at least some embodiments, a list of concurrency-safe data document properties can be accessed when determining whether to omit the concurrency check.

Abstract: Provided is a system and method for time-dependent activation of configuration content for a software application or service in a distributed computing environment. In one example, the method may include receiving a request associated with a software application, reading version information of a configuration object of the software application, the version information comprising different versions corresponding to different configuration content of the configuration object, identifying a currently active version of the configuration object from among the different versions based on activation identifiers of the different versions, and retrieving configuration content corresponding to the currently active version of the configuration object.

Abstract: A method may include performing a transaction on a row in a table stored in a database. In response to performing the transaction, a first timestamp block associated with a range of rows including the row may be retrieved. In response to determining that the first timestamp block is a sparse timestamp block that has reached maximum capacity, a second timestamp block may be allocated for storing the timestamp associated with the transaction. The sparse timestamp block may be allocated with sufficient storage space for storing some but not all of the timestamps associated with the range of rows. By contrast, the second timestamp block may be a dense timestamp block allocated with sufficient storage space for storing all of the timestamps associated with the range of rows. The timestamp associated with the transaction may be stored in the second timestamp block.

Abstract: Some embodiments provide a system and method associated with a determination of an upgrade path for an application service associated with a container-orchestration system (e.g., a KUBERNETES® container-orchestration system). A container-orchestration system server may trigger, by an operator object deployed as a controller for the application service, an upgrade process. In response to the trigger, the container-orchestration system server may access a dictionary type data structure containing a plurality of tuples associated with the application service (and the dictionary type data structure may be uncoupled from the application service). The container-orchestration system server may then automatically execute a search algorithm on the plurality of tuples to determine the upgrade path from a source version to a target version for the application service. According to some embodiments, the application service may then be automatically upgraded in accordance with the determined upgrade path.

Abstract: Disclosed herein are system, method, and computer program product embodiments for determining an integration regression between a source system and a target system. An embodiment operates by selecting a first set of messages in a middleware system. The embodiment receives a baseline mapping for the first set of messages from the middleware system. The embodiment creates a test suite based on the first set of messages. The embodiment performs the test suite, wherein the performing generates a second set of messages in the middleware system and a current mapping for the second set of messages. The embodiment compares the first set of messages to the second set of messages based on the baseline mapping and the current mapping. The embodiment determines an integration regression between the source system and the target system based on the comparing.

Abstract: System, method, and various embodiments for providing a digital on-duty assistant are described herein. An embodiment operates by receiving a support request from a customer over a communication channel. A channel type corresponding to the communication channel over which the support request was received is identified. Which of a plurality of support specialists is assigned to service the support request over the channel type is identified. Contact information, corresponding to the channel type, for the identified support specialist is determined. The support request is forwarded to the identified support specialist based on the contact information corresponding to the channel type of the communication channel.

Abstract: Methods, systems, and computer-readable storage media for receiving a configuration descriptor from configuration descriptor repository, the configuration descriptor declaring a configuration task, and providing an order of invoking two or more application programming interfaces (APIs) to respective components of the enterprise-side landscape to execute the configuration task, processing the configuration descriptor by a configuration executor of an integration services platform to automatically execute at least a portion of the configuration task by invoking the two or more APIs in the order, a response of a first API being provided as a request to a second API, and selectively indicating one of success and failure of the configuration task based on at least one response of the two or more APIs.

Abstract: Embodiments of the present disclosure pertain to rendering on a mobile device. In one embodiment, a list of widgets to be rendered on a display stored in a priority queue. Widgets in the priority queue are sent to rendering software components based on a specified priority in the queue. The priority is based on whether or not the widgets are in a display area of a display. In one embodiment, data for widgets in the queue is retrieved during rendering of other widgets, and priority is based on whether data for a particular widget in the queue is available.

Abstract: Disclosed herein are system, method, and computer program product embodiments for generating folder keys and using folder keys to access folder paths. In an embodiment, a computer system may instantiate a graphical user interface (GUI) to display folder and sub-folder contents as well as a folder key. A user may input a folder key as a representation of the displayed sub-folder of the corresponding folder path. The folder key may include one or more symbols that the computer system may store and associate with the folder path. Using the folder key, the computer system may retrieve a particular sub-folder, manage security or permissions related to folders, and/or facilitate navigation between sub-folders. Using a folder key may aid a user in quickly navigating to a particular sub-folder and may allow a computer system to avoid loading unnecessary intermediate sub-folders as a user navigates to a particular desired sub-folder.

Abstract: A system, method, and computer-readable medium, to define and represent real world physical devices and physical things and corresponding virtual representations thereof and to define relationships between the virtual representations of the physical devices and physical things. The defined relationships can be saved to a memory, retrieved from the memory, and used by one or more applications.

Abstract: Methods and apparatus, including computer program products, are provided for first and last aggregation. In one aspect, there is provided a method, which may include receiving, by a calculation engine, a query; detecting, by the calculation engine, whether the query includes a first aggregation and/or a last aggregation over at least one group and at least one keyfigure; optimizing the received query, when the detecting indicates the received query includes the first aggregation and/or the last aggregation, wherein the optimizing further comprises initiating execution of the received query by at least: performing a single read of a table, detecting, from the single table read, at least one group, and indicating, in the detected at least one group, the first aggregation in the at least one keyfigure and/or the last aggregation in the at least one keyfigure; and returning, for the at least one detected group, the indicated first aggregation and/or the indicated second aggregation.

Abstract: Systems, methods, and computer media for collaboratively securing software applications are provided herein. Through a collaborative approach, the described examples allow detection and management of unauthorized users across applications and application suites. By communicating details regarding cyber-attacks among applications, threats to applications can be managed pre-emptively. For example, applications can use attacks on other applications to implement new honeytokens, threat detection points, and blacklisted usernames or other identifiers to limit data access in future attacks.

Abstract: Systems, methods, and computer media for securing software applications are provided herein. The multi-factor fingerprints allow attackers to be distinguished from authorized users and allow different types of attacks to be distinguished. The multi-factor fingerprint can include, for example, a session identifier component, a software information component, and a hardware information component. The different components can be separately compared to components of stored fingerprints to determine whether an application session request is malicious, and if so, what type of attack, such as session cookie theft or a spoofing attack, is occurring.

Abstract: Disclosed herein are system, method, and computer program product embodiments for changing a software code when executed by a PS (“production system”). An embodiment operates by pulling a copy of master code, entering changes to the copy of the master code, sending a request for staging a code push, sending a request for a voter build of staging code, and testing the changes.