Abstract: Provided is a system and method that can identify whether an item is a dangerous good. The system can determine whether a product belongs in any of a number of different classes of dangerous goods from among a plurality of different regulations based on a machine learning algorithm which performs a text-based classification. In one example, the method may include receiving an identification of an object, retrieving a plurality of descriptive attributes of the object from a data store and converting the plurality of descriptive attributes into an input string, predicting whether the object is a dangerous object via execution of a text-based machine learning algorithm that receives the input string as an input, and outputting information about the prediction of the object for display via a user interface.

Abstract: Computer-readable media, methods, and systems are disclosed for copying tenant data within a cloud-based microservice architecture including a Kubernetes cluster. Copy tasks are generated for a plurality of microservices and progress of the copy tasks is monitored by updating one or more statuses associated with the copy tasks. One or more job files may be generated for each microservice including executable code for copying the tenant data within the microservice or within a data store associated with the respective microservice.

Abstract: Methods, systems, and computer-readable storage media for providing a first access schema in a view layer of the database system, the first access schema including first database objects and projection views, each projection view corresponding to a second database object of second database objects in a data persistency, transitioning access of sessions of an application from the data persistency to the first access schema, executing at least a portion of the maintenance procedure in the database system, the at least a portion of the maintenance procedure changing one or more second database objects within the data persistency, creating a second access schema, and transitioning access of the sessions of the application from the first access schema to the second access schema, transitioning access of the sessions of the application from the second access schema to the data persistency, and removing the second access schema from the database system.

Abstract: Methods, systems, and computer-readable storage media for receiving a query from a digital assistant of an enterprise system, retrieving data that is responsive to the query from a data management system, inputting a first few-shot prompt to a LLM, and determining, in response to the first few-shot prompt, that a graphical representation of the data is to be generated, and in response: inputting a second few-shot prompt and a third few-shot prompt to the LLM, receiving code from the LLM responsive to the third few-shot prompt, and executing the code to render the graphical representation with the digital assistant.

Abstract: The present disclosure involves systems, software, and computer implemented methods for executing integration scenario regression tests in customer landscapes. One example method includes identifying a request to create a test case for an integration scenario for a cloud platform customer. The test case is created for the scenario, including enabling the test case to run in an isolated customer environment specific to the customer. An update to the cloud platform is identified. The update is provisionally applied to the cloud platform for the customer. The test case is executed in the isolated customer environment, to test the scenario for the customer. A determination is made as to whether execution of the test case succeeded. In response to determining successful test case execution, the update to the cloud platform is finalized for the customer. In response to determining unsuccessful test case execution, the update is rolled back for the customer.

Abstract: In an example embodiment, a solution is provided for encrypting and decrypting data in which the solution itself creates unique symbols, reducing or eliminating the possibility that a hacker or other malicious actor can understand what the symbols mean, let alone decrypt them. More particularly, for encryption, the characters of an original text is split into individual vector-based characters, and each of these vector-based characters are split into subcharacters at intersection points. Each of the split characters are then rotated, and the rotated characters are organized one on top of each other. The characters are then connected to each other, and the intersection points of the subcharacters within the characters that were used to split the characters into subcharacters are passed into a machine learning model that is trained to add lines between intersection points that have no lines, as noise to further obfuscate the original text.

Abstract: Various embodiments for a chatbot improvement system are described herein. An embodiment operates by receiving input from a user via a chatbot interface. A first vertical corresponding to the user is identified. The input from the user is interpreted based on a first set of keywords corresponding to the first vertical. A first confidence score is calculated for the first vertical based on the interpretation of the input using the first set of keywords. It is determined whether the first confidence score exceeds a threshold. If the threshold is exceeded, a response to the input is generated based on the first set of keywords. If the threshold is not exceeded, the response to the input based on the second set of keywords. The generated response is provided for display via the chatbot interface.

Abstract: A method for on-demand access to table partitions may include receiving, at a data execution engine, a query accessing a database table divided into a first partition and a second partition stored at different nodes of the database. The data execution engine may respond to the query by acquiring a lock on the database table and instantiating data structures to support the execution of the query without loading any of the partitions of the database table into a main memory. Instead, the loading of the individual partitions of the database table may be delegated to the operators tasked with performing the operations included in the execution plan for the query. Each operator may refrain from loading those partitions of the database table that are determined to be unnecessary for performing the individual operations. Related systems and computer program products are also provided.

Abstract: Systems and methods include reception of a first service call from a first service at a second service, generation, at the second service, of a response to the first service call, determination, at the second service, of an amount of hardware resources consumed by the second service during generation of the response to the first service call, generation, at the second service, of a first resource consumption token identifying the amount of hardware resources consumed by the second service during generation of the response to the first service call, determination of a first identifier of a type of hardware on which the second service is executing, and return of the response, the first resource consumption token and the first identifier of the type of hardware to the first service.

Abstract: Data is gathered from a log file on a first application server, a log file on a second application server, a database on a database server, or any suitable combination thereof. By correlating the data from different sources, XP-Functions that execute in sequence on a single application server are identified and combined into a sequence referred to as an executable process chain (XP-Chain). The automatic process discovery server reconstructs end-to-end processes out of XP-Chains, even when the XP-Chains are executed on different application servers, based on log files and database data. A test script may be generated for an identified end-to-end process. By running the test script, proper functioning of the end-to-end process may be confirmed. Existing test scripts may be disabled for a formerly identified end-to-end process that is no longer found to be executed.

Abstract: Techniques and solutions are provided for identifying sets of related data, such as for a data deletion process. Data objects can be considered as having parent-child relationships, where values for one or more attributes of a child data object are constrained by corresponding one or more attributes of a parent data object. The set of data objects and their relationships can be represented, such as in a graph. In an iterative process, the data object representation is analyzed to identify “leaf nodes,” which are data objects that do not constrain other data objects. Relevant data is deleted from the data objects, and the representation is updated to “remove” such data objects so that a new set of leaf nodes is obtained. Optionally, when a leaf node that serves as a parent is analyzed, it can be confirmed whether corresponding data has already been deleted from its children.

Abstract: A method for compressing columnar data may include generating, for a data column included in a data chunk, a dictionary enumerating, in a sorted order, a first set of unique values included in the first data column. A compression technique for generated a compressed representation of the data column having a fewest quantity of bytes may be identified based at least on the dictionary. The compression technique including a dictionary compression applying the dictionary and/or another compression technique. A compressed data chunk may be generated by applying the compression technique to compress the data column included in the data chunk. The compressed data chunk may be stored at a database in a variable-size persistent page whose size is allocated based on the size of the compressed representation of the data column. Related systems and articles of manufacture are also provided.

Abstract: A thread executing a task at a node in a multi-socket computing system may access a first data structure to obtain a first calibration dataset for the node. The first thread may generate a timestamp based on the first calibration dataset and a first quantity of time measured by a clock at the first node. The real-time duration of the task may be determined based on the timestamp. The first thread may recalibrate the first clock by at least generating, based on the first quantity of time measured by the clock and a second quantity of time measured by a wall clock of an operating system of the multi-socket computing system, a second calibration dataset. The first thread may update the first data structure to include the second calibration dataset while a second thread accesses a second data structure to obtain calibration data.

Abstract: Techniques for managing application service behavior using request context are disclosed. In some embodiments, a computer system performs a method comprising: detecting a request sent by a service of an application, the service being one of a plurality of services included in a microservice architecture of the application, the request including a service type data that identifies the application and a service identification data that identifies the service; determining a behavior configuration for the request based on the service type data and the service identification data; and executing the service or another service of the plurality of services based on the determined behavior configuration.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for securely generating a new access token based on relatively long-lasting refresh tokens in self-contained format. A first request to generate a new access token for authorization of a client application with an application server is received and includes a first protected version of a refresh token. The first protected version of the refresh token is an encrypted version of the refresh token based on a first client identifier. The first protected version of the refresh token is decrypted to determine content of the refresh token based on a second client identifier of the client application that is externally invoked for validating the authorization. In response to successfully decrypting the first protected version, performing a validation of the refresh token. In response to successfully validating the refresh token, generating the new access token and providing it to the client application.

Abstract: Disclosed herein are system, method, and computer-readable medium embodiments for securely accessing cloud data providers with user-impersonation. An embodiment operates by receiving an initial logon request for a cloud data provider. The embodiment authenticates the request using a cluster unique identifier (CUID) of the cloud data provider. The embodiment then authorizes the request by exchanging an authorization code for an identifier token and a refresh token issued by the cloud data provider. The embodiment then validates the tokens, and stores the refresh token for subsequent user-impersonation logons. Subsequently, the embodiment receives a user-impersonation logon request for the cloud data provider. The embodiment exchanges the refresh token for an access token issued by the cloud data provider, and uses the access token to gain access to the cloud data provider without a user directly having to complete authentication and authorization processes.

Abstract: Techniques for implementing a differentially private variational autoencoder for data obfuscation are disclosed. In some embodiments, a computer system performs operations comprising: encoding input data into a latent space representation of the input data, the encoding of the input data comprising: inferring latent space parameters of a latent space distribution based on the input data, the latent space parameters comprising a mean and a standard deviation, the inferring of the latent space parameters comprising bounding the mean within a finite space and using a global value for the standard deviation, the global value being independent of the input data; and sampling data from the latent space distribution; and decoding the sampled data of the latent space representation into output data.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for identifying potential attacks through monitoring of user credential login attempts across a network of websites. One example method includes receiving a request associated with an authentication of a requestor at a landscape environment. In response to receiving the request encrypted credentials responsive to the request are loaded at a credential manager running at the landscape environment. The encrypted credentials are persisted at a storage by the credential manager. The encrypted credentials include credentials that are encrypted with a public key and are provided in encrypted form to the credential manager. The encrypted credentials are provided to a credential usage component running at the landscape environment for decrypting the encrypted credential with a private key persisted by the credential usage component at the landscape environment.

Abstract: A non-interactive protocol is provided for evaluating machine learning models such as decision trees. A client can delegate the evaluation of a machine learning model such as a decision tree to a server by sending an encrypted input and receiving only the encryption of the result. The inputs can be encoded using their binary representation. Efficient data representations are then combined with different algorithmic optimizations to keep the computational overhead and the communication cost low. Related apparatus, systems, techniques and articles are also described.