Abstract: The present disclosure involves systems, software, and computer-implemented methods for generating data regulation-compliant data from application interface data. One example method includes receiving a request for creation of document data. The request includes personal data of a user. Document data, including at least some of the personal data, is created based on the request. The document data is encoded into an encoded document that does not include any personal data of the user and includes structural information that describes the structure of the document data. A request to use the encoded document is received and the encoded document is decoded. A synthetic document is generated using the structural information included in the encoded document. Generation of the synthetic document includes insertion of synthetic user data into the synthetic document at positions in the synthetic document that correspond to positions of personal data within the document data.

Abstract: Aspects of the current subject matter are directed to performing privacy-preserving analytics over sensitive data without sharing plaintext data. According to an aspect, a system includes at least one data processor and at least one memory storing instructions which, when executed by the at least one data processor, result in operations including: receiving, from each of a plurality of clients, a utility score and a partial noise value; performing, based on the received utility scores and the partial noise values, a secure multi-party computation of a privacy-preserving statistic, the performing of the secure multi-party computation of the privacy-preserving statistic further comprising determining a noisy utility score for each data value in a domain of output values and selecting a highest noise utility score from the determined noisy utilities scores; and providing, based on the selected highest utility score, an output value for the privacy-preserving statistic.

Abstract: Techniques and solutions are provided for determining changes to computing objects based on a change to a related computing object. A model of model objects is created, where a model object represents a computing object of a plurality of computing objects. The model stores information about relationships between the plurality of computing objects. A change to a computing object of the plurality of computing objects is received, and the model is used to determine one or more objects of the plurality of computing objects that are affected by the change, using the relationship information in the model. At least a portion of the plurality of the objects are of differing types.

Abstract: A method, a system, and computer program product for automatic implementation of solutions for deployment errors in continuous integration and continuous deployment pipelines. A deployment log including a deployment error indicating a failure to deploy a software product including a software configuration at a computing device comprising a computing device configuration is received. The deployment error is processed to determine a pattern of the deployment error. A match between the deployment error and a past deployment error is determined based on the pattern of the deployment error and a frequency of occurrence of the pattern within a set interval of time. An output indicating a solution for the deployment error is provided based on the match between the deployment error and the past deployment error. The solution for the deployment error is implemented by modifying the software configuration or the computing device configuration.

Abstract: The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes sending a block command for an object to each application in a multiple-application landscape that includes a master data distribution application. A blocking status is received from each application that indicates whether the application successfully blocked the object in response to the block command. An overall blocking status is determined based on the received blocking statuses. In response to determining that at least one application failed to block the object, an unblock command is sent to each application. An unblocking status is received from each application and an overall unblocking status is determined. In response to determining that at least one application failed to unblock the object, a redistribution request is sent to the master data distribution application to redistribute the object to applications that failed to unblock the object.

Abstract: In an example embodiment, a set of applications is provided that provides design-time, runtime, for form operations. A low-code or no-code form builder is provided as part of this set of applications. The low-code or no-code form builder is hosted on a business development platform (BTP), which is supported by multiple hyperscalers with rich control sets. Thus, the low-code or no-code form builder is able to provide an intuitive way of building forms using drag-and-drop functionality.

Abstract: According to some embodiments, systems and methods are provided, comprising an Application Programming Interface (API) source; a cluster including a master node and at least one worker node; a memory storing processor-executable program code; and a processing unit to execute the processor-executable program code to cause the system to: receive, at the cluster, an API from the API source; receive, at the cluster, a customer usage value for the received API; determine a load test injection pattern for the received API based on the customer usage value; schedule execution of a load test for the received API based on the determined load test injection pattern; and execute the load test on the at least one worker node. Numerous other aspects are provided.

Abstract: Disclosed is a framework for providing microservices for database with embedded container service in a container cloud platform. The framework includes a container cloud manager for performing distributed management of resources in a data center. The container cloud manager includes an orchestrator with a flexible job scheduler and operator pool. The flexible job scheduler and container cloud master form a flexible job management platform for managing jobs of the data center. The flexible job management framework can isolate various types of jobs as well as mix various jobs for efficient usage of hosts or resources in the data center. The operator pool includes optional components of a database. The orchestrator facilitates quick customization and release of database products, such as a HANA database with optional services, as requested by a user in the container cloud platform.

Abstract: Techniques and solutions are described for implementing virtual table schemas. A virtual table schema includes a logical pointer that is used to target a table that includes data and is defined according to the virtual table schema. Values assigned to the logical pointer can be used to target tables at different locations, such as in a federated database system or in a cache of a database management system of a central computing system. When data associated with the virtual table is requested, or prior to receiving the request, the data can be stored in a table in the cache. The logical pointer can be updated to reference the cache. If the cache is full, the table can be removed from the cache, and the logical pointer can be updated to reference a table at the federated database system.

Abstract: A method, a system, and a computer program product for retrieving data from an archived data storage. A query requiring access to data stored in at least one storage location in the plurality of storage locations is received. Based on the received query, at least one first storage location storing the data is determined. One or more hierarchical data models for accessing data stored in the first storage location is generated. The hierarchical data models include a plurality of nodes storing at least a portion in a plurality of portions of the data stored in the first storage location. Using the generated hierarchical data models, a first data responsive to the query is selected and combined with at least a second data stored in at least another storage location in the plurality of storage locations. The combined first data and the second data are retrieved.

Abstract: A method, a system, and computer program product for session based data persistency are described. A request to execute, by an executing computing server, a service of an application during a terminal service session initiated by an initiating computing server is received. Current session data including a session header and session attributes is captured. A difference between the current snapshot of the session data and a past snapshot of the session data, generated by the initiating computing server and stored by a persistence layer, is determined. The session attributes stored by the persistence layer are updated based on the difference between the current snapshot of the session data and the past snapshot of the session data to enable execution of the service of the application without requesting reauthentication.

Abstract: Techniques and solutions are provided for grouping of applications, including application content, or other content useable by a computer-implemented process. In particular, a consolidation space is provided as a lightweight mechanism for this purpose. Identifiers are received for multiple landscape elements, where a landscape element can be an application, application content, or other content. A given landscape element has a type and has one or more artifacts. A consolidation space is generated for at least first and second landscape elements having a first type. A consolidation artifact is generated in the consolidation space, where the consolidation artifact references respective first and second instances of a first artifact in the first and second landscape elements.

Abstract: A tainting engine can work in conjunction with a syntax attack detection template to identify when a threat actor attempts a malicious attack in a cloud application scenario. Non-intrusive instrumentation can be used to provide detection of an attempted attack regardless of whether the cloud application is vulnerable to such attacks. Detection of attempted attacks can be an important part of maintaining network security, even in cases where an application itself is not vulnerable to such attacks. Further details about the attempted attack can be assembled, and a variety of actions can be taken in response to detection.

Abstract: In an example embodiment, three roles are defined for each of the following: resource discovery: provider, aggregator, and consumer. The provider is the one whose resource information will be shared. Rather than the provider needing to implement the complicated API, however, an aggregator may provide that role. The aggregator defines the API and is able to gather resource information from potentially multiple providers (and also, in some embodiments, other aggregators). The consumer then accesses the aggregator to obtain resource information rather than directly accessing the provider.

Abstract: Systems and methods include reception of a request for access to a target domain, the request including a source Internet Protocol (IP) address, determination of whether the source IP address is one of a plurality of IP addresses indicated within stored first data, determination, if it is determined that the source IP address is one of the plurality of stored IP addresses, of whether the target domain is one of a plurality of domains indicated within stored second data, and forwarding, if it is determined that the source IP address is one of the plurality of stored IP addresses and the target domain is one of a plurality of domains indicated within stored second data, of the request to the target domain.

Abstract: A method may include identifying an identifier field included in a first datatype of a seed data sample associated with a source system. The identifier field may store a first value that enables a differentiation between different instances of the first datatype. A relationship field, which stores a second value that define a relationship between the first datatype and a second data type, may be identified. A synthetic data sample may be generated by populating the identifier field of the synthetic data sample with a synthetically generated value and the relationship field of the synthetic data sample with the second value. The synthetic data sample may be sent to a target system to enable a performance of a task at the target system. The synthetic data sample may supplement a volume and/or a diversity of the data that occurs organically at the source system.

Abstract: A method of intelligent accessibility testing includes generating a test case including a plurality of tests, for an application, to test, for the application, compliance with a plurality of accessibility requirements. The method includes generating a plurality of objects. The method includes executing, during generation of the plurality of objects, a first test of the plurality of tests to determine compliance with a first accessibility requirement of the plurality of accessibility requirements. The method includes executing, based at least on the plurality of objects, a second test of the plurality of tests to determine compliance with a second accessibility requirement of the plurality of accessibility requirements. The method includes providing, based on execution of the first test and the second test, a status of the first test and/or the second test indicating the compliance with the plurality of accessibility requirements. Related systems and articles of manufacture are provided.

Abstract: A method may include defining a rule identifying an event that triggers a change in a value of a metric. The defining of the rule includes generating a subscription to receive the event from an event stream. Occurrences of the event identified by the rule may be detected based on receiving the event from the event stream. In response to each occurrence of the event, the value of the metric and/or the change in the value of the metric may be evaluated. A notification may be sent to a software application consuming the metric based on the value of the metric and/or the change in the value of the metric satisfying a threshold. Related systems and computer program products are also provided.

Abstract: The present disclosure involves systems, software, and computer implemented methods for transaction auditing. One example method includes determining valid pixel-based pattern(s) that are included in valid reference images. Fraudulent pixel-based pattern(s) that are included in fraudulent reference images are determined. A request to classify an image is received. A determination is made as to whether pixel values in the image match a valid pixel-based pattern or a fraudulent pixel-based pattern. In response to determining that the pixel values match a valid pixel-based pattern, a likelihood of classifying the first image as a valid image is increased. In response to determining that the pixel values match a fraudulent pixel-based pattern, a likelihood that the image as a fraudulent image is increased. The image is classified in response to the request as either a valid image or a fraudulent image based on the likelihoods.

Abstract: The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object. An end-of-purpose query is provided to multiple applications that requests each application to determine whether the application is able to block the object. End-of-purpose statuses are received, in response to the end-of-purpose query, that each indicate whether a respective application is able to block the object. The end-of-purpose statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each application that instructs the application to locally block the object in the application.