Abstract: Disclosed is an improved system for performing intelligent text reduction on text strings for optimal display in a variety of user interface display elements. The system includes a smart text reduction algorithm that can shorten text strings as necessary in response to resizing the user interface or elements therein. The system also includes a design time user interface for application developers (or other users) to design graphical user interfaces in a collaborative workspace. The design time user interface incorporates the smart text reduction algorithm to enable designers to modify user interface display elements and run the text reduction algorithm on any text strings that no longer fit within the modified display elements. The described embodiments can also translate text strings of user interface display elements and can execute the smart text shortening algorithm on the translated text strings accordingly.

Abstract: An audit schedule is determined from a database storing a master data set comprising audit events, system parameters, and resources. Audit events are grouped according to information of the master data set, for example shared units (e.g., product, service, organization, risk level, audit type, etc.). Audit groups are prioritized by factors such as unit priority and audit duration. A random audit event within the group is chosen, and then a time slot is selected according to a desired distribution (e.g., left-to-right), determining resource availability for that slot. The procedure may optionally consider additional constraints (e.g., manually added, national holidays, auditor availability) outside the master data set. The procedure shuffles through audit events of the group with the highest priority, and then through audit events of lower priority groups, filling out the audit schedule according to resource availability and constraints. Audit schedule changes are recorded in a change log data object.

Abstract: Systems and techniques for deep hierarchy navigation include instantiating user interface (UI) components of an application in an application view on a computing device, where each of the UI components is represented by an application (app) model. For each of the UI components, dependencies on other objects are mapped including paths to the other objects. In response to an action to submit data contained in the UI components, each of the UI components is checked against validation rules. In response to one of the UI components violating one of the validation rules, an error in the UI component violating the rule is identified in a popover window using the mapped dependencies to identify the error. In response to a selection of the error in the popover window, the application is focused on the UI component containing the error.

Abstract: A web application security testing framework includes a HTTP browser engine replaying recorded sessions to identify candidate traces indicative of attack. A mutation engine changes values in the attack candidate traces to generate additional traces posed against a virtualized server-side platform. The virtualized server-side platform creates snapshots of application state for testing, avoiding permanent damage to application persistence. The virtualized server-side platform includes persistence monitoring sensors (e.g., at connectors to the database or file system) for detecting vulnerability classes including Cross-Site Request Forgery (CSRF) and SQL injection attacks. For remote command execution attack detection, a server-side vulnerability validation interface records strings passed to code generating application program interfaces (APIs).

Abstract: Systems and methods are provided for receiving and processing a query to determine an intent of the query, and analyzing the intent of the query to determine that the intent of the query is associated with a use case state diagram. Systems and methods further provide for traversing a plurality of nodes in the user case state diagram to generate a value for each relevant node, performing an operation associated with the query using the generated values, and providing the results of the operation to a computing device.

Abstract: Embodiments allow identifying unique locations, proximity, and constraints of various individualization resource units in a data center. A plurality of processes may compete for available resources (e.g., CPU, network bandwidth, memory) in a shared environment, which may be virtualized (e.g., comprising host, VM, container, application server instance resource units). A scheduling infrastructure determines individualization unit locations according to an identifier reflecting resource hierarchies. For each process, the data sending infrastructure sends location data as an ID stack to a central monitoring instance for analysis. That central monitoring instance can reference the resource location information to identify process proximity and competition for resources constraining process performance. Resource location information in the form of coordinates provided by the ID stack, offer valuable information regarding resource consumption and other information relevant for process monitoring.

Abstract: Example embodiments involve a system, computer-readable storage medium storing at least one program, and computer-implemented method for processing deferred clauses used in conjunction with data definition statements. The method may include receiving a data definition statement signaling creation of a database object. The received data definition statement specifies a dependency of the database object on a non-existing database object. The method may further include determining whether a deferred clause is included in the data definition statement; and based on determining that the deferred clause is included in the data definition statement, creating the database object with the dependency on the non-existing database object.

Abstract: Embodiments manage access to cryptography keys for database data, within a secure key store of a local key server owned by a new (security) operating system (OS) user separate from an original default OS user. Existing principles governing distinct OS user access privileges engrained within the OS itself, are leveraged to preclude the default OS user from accessing files of the new security OS user. Embodiments thus segregate the right to read secure cryptography keys of a secure key store, from the right to administer database installation on the OS level. While the original default OS user retains access to the encrypted data, the new security OS user now owns the cryptography key necessary to decrypt that database data. Thus, the default OS user is denied enough information to unlock the database data, enhancing its security. Embodiments are particularly useful for promoting data security in cloud setups and multi-tenant databases.

Abstract: The present disclosure involves systems, software, and computer implemented methods for generating a centralized overview display from annotated data sources. One example method includes identifying data sources that each include data to be presented in a user interface. A set of annotations are identified, for each data source, that describe the data included in the respective data source. One or more visual representation types are associated with each data source. Each visual representation type indicates a type of visual representation to apply when rendering data included in the associated data source. A user interface configuration is generated based on the data sources, the annotations, and the associations between the visual representation types and the associated data sources.

Abstract: A workflow assistant can provide for improved memory aids and workflow management. The workflow assistant can retrieve context information from a base application to facilitate the creation of memory aids and workflow management items. Textual analysis can be applied to user input to determine data elements, data objects, assistant items, and collections that may be relevant to a memory or workflow aid. The workflow assistant can suggest actions for a user to take, such as based on text analysis of user input or the contents of a collection. Technical features such as a context analyzer that retrieves information from the base application for access by the workflow assistant can make the workflow assistant more dynamic and reduce the user interaction needed to create or modify a memory or workflow aid.

Abstract: Embodiments detect cross-site request forgery (CSRF) attacks by monitoring, mutation, and analysis of suspect requests that are received by an application server. An engine observes UI interaction, HTTP traffic, and server-side changes in order to create an initial list of CSRF candidates (e.g., HTTP requests that could indicate a CSRF vulnerability). Embodiments may feature a virtualized server-side platform including sensors deployed for application persistence monitoring. Using inter-trace analysis, these CSRF candidates are de-composed into their semantic components (e.g., parameter values and classes). By performing value mutation operations on these components and repeated replay of the resulting HTTP requests, CSRF candidates are tested to see if the underlying HTTP request could be utilized in the context of a CSRF attack.

Abstract: A system, a method, and a computer program product for replication of data changes are disclosed. Based on a received data query, at least one attribute of stored data is identified for replication. The attribute corresponds to at least one parameter of the received query. Data stored at a first time and data stored at a second time are retrieved. The second time is subsequent to the first time. Data stored at the first time is compared to the data stored at the second time to determine a delta difference between the data stored at the first and second times. The computed delta difference is selected for the identified attribute. The selected computed delta difference is replicated in response to the received query.

Abstract: Systems and methods are provided for fragmentation. A dataset including data records is received. Fragments corresponding to the data records are determined. A fragment identifier table is determined which includes a plurality of fragment codes. Each fragment code uniquely corresponds to each fragment. A fragment having a fragment attributes is selected. Based on the fragment attributes, a fragment boundary set is determined. Each fragment boundary set is unique to each fragment code. An encoded limited cardinality dataset is generated based on the fragment boundary sets for visualization on a client device.

Abstract: The subject matter disclosed herein provides methods for identifying the type of content found in a database or source file having data records. A source file having one or more data records may be accessed. The data records may be associated with one or more data values arranged into columns. One or more data types may be proposed for at least one column by examining the data values in the column. A confidence score may be calculated for each proposed data type. The proposed data types may be arranged into a prioritized list based on each data type's confidence score. One or more rules may be applied to the column to finalize priorities of the proposed data types. The rules may be applied without referring to the data values in the column. Results may be provided based on the finalized priorities. Related apparatus, systems, techniques, and articles are also described.

Abstract: In one aspect there is provided a method. The method may include: executing, at a client, an application that includes a first function and a second function; determining, based at least on an indicator, that the first function is to be executed locally at the client and the second function is to be executed remotely at a server; generating a package that includes a first class definition of a first class, the first class definition being required for executing the second function based at least on the second function including a reference to the first class; and sending, to the server, the package to at least enable the server to execute the second function. Systems and articles of manufacture, including computer program products, are also provided.

Abstract: A system includes a memory and a semiconductor-based processor coupled to form logic circuits. The logic circuits provide a combined localization and personalization (LPN) web service to a computer application, receive a call from the computer application for recommendations to localize and personalize a computer application for a particular user, prepare a recommendation on which one or more reusable application logic modules to attach to a core logic of the computer application to localize and personalize application for the particular user.

Abstract: A client database manager can cause a memory of a client device on a client side of a network to store a first component, a second component, and a relationship value representing a dependent relationship between the first component and the second component. A client processing module can cause a processor to receive, after the storing, a request to process the first component at the client device. The client database manager can send to the server side of the network a request for an update of at least one of the first component or the second component. The client processing module can cause the processor to process at the client device, before receiving a response to the request for the update from the server side of the network, at least a portion of the first component and at least a portion of the second component based on the relationship value.

Abstract: In an example, a database is accessed to obtain a first metadata type, the database further including a second metadata type and a third metadata type, the third metadata type including instance-specific reporting metadata. The first metadata type is persisted in the memory, while the instance-specific reporting metadata is not persisted. In response to receiving a request from the graphical user interface to provide options for inclusion in a custom report template for the user, information from the first metadata type is sent to a graphical user interface, information regarding the instance-specific reporting metadata is generated by executing structured query language (SQL) queries stored in database views for the database.

Abstract: An application object framework enables simultaneous, bi-directional communications between one or more application objects and a client(s) providing a user interface, which may be executing an instance of one or more of the application objects. The application object framework enables an efficient and customized use of existing or newly-created network communications protocols, to provide simultaneous, bi-directional communications that are easily customized to the semantics, actions, and other aspects of application objects.

Abstract: Techniques and solutions are described for automatically creating test code from production code. The production code can include one or more test code identifiers, such as of code checkpoints or modifiable code segments, for example, replaceable code segments or redirectable method calls. Using a user interface, such as a wizard, a user can view test code identifiers, select test code identifiers to activate, and optionally supply values, operators, or code to be used in the test code. The generated test code can include a test version of the production code that is separate from the production code. The generated test code can include test methods that include import parameters, export parameters and operators therefor, and other code to be used in tests to be performed using the test version of the production code.