Abstract: In one embodiment, the present disclosure includes a method for determining a location of a user. In one embodiment, the method includes receiving operation data including character fields and a first identifier. A query that includes the first identifier is sent to a data store. In response to the query, operation types and corresponding count values are received. Character fields from the operation data are converted into tokens. For each of the tokens, a likelihood value and a second identifier specifying a respective machine learning parameter is retrieved. A machine-learning algorithm is configured based on the count values, and the likelihood values and specified parameters are processed by the configured machine-learning algorithm to determine whether the operation data corresponds to the geographic location of a user.

Abstract: Some embodiments may be associated with a cloud-based computing environment. A WASM runtime may execute as serverless functions on an entity (VM or container) dynamically selected based on a data store location (associated with data locality and/or gravity). The WASM runtime may include one or more sandboxes each running a WASM module. A database service may access the data store, and the database service may execute on the same entity as the WASM runtime. In some embodiments, an orchestration layer selects the entity based on a default policy or user-defined custom rules in accordance with exposed attributes (CPU load, memory load, read/write mixture, etc.). According to some embodiments, the serverless functions execute in a multi-tenant fashion. Moreover, the WASM runtime process may use instruction set secure enclaves to secure an access host such that, even if a root is compromised, an attacker cannot access a sandbox memory heap.

Abstract: A method, a system, and a computer program product for executing a takeover process. A takeover process of a primary computing system by a secondary computing system is triggered. The secondary computing system stores transaction data replicated from the primary computing system. Writing of a redo log of transaction data of one or more transactions into storage by the primary computing system is suspended. The redo log is written by the primary computing system prior to the suspending is transmitted to the secondary computing system. The takeover process of the primary computing system by the secondary computing system is executed upon receiving and persisting the redo log at the secondary computing system.

Abstract: Compilation is initiated of previously-compiled code in which only a subset of the previously-compiled code was modified since a previous compilation. Thereafter, modified code corresponding to the subset of the previously-compiled code that was modified since the previous compilation is identified. Further, dependent code within the previously-compiled code that is dependent on the modified code is also identified. Using this information, only the identified modified code and the dependent code can be compiled. In some variations, at least a portion of the other parts of the previously-compiled code can be reused. Related apparatus, systems, techniques and articles are also described.

Abstract: Configuration data is received characterizing configuration information of at least one application process executing on a target system. The configuration data includes a first table, a second table, and a third table. The first table includes a first conditional dependency on the second table and a second conditional dependency on the third table. The receiving is performed prior to transmission of the configuration data to the target system for application of the configuration data to the target system. At least one validation definition including a header and table elements specifying the first conditional dependency and the second conditional dependency is determined using the configuration data. Whether to validate the configuration data to ensure consistency within the target system is determined using the at least one validation definition. The determination of whether to validate the configuration data is provided. Related apparatus, systems, techniques and articles are also described.

Abstract: The present disclosure pertains to validation of runtime objects for a software deployment using a certificate. After creating the runtime objects during a build process, a certificate may be generated based on the runtime objects. The certificate may include a fingerprint of the runtime objects that may be used before deployment to determine whether the runtime objects have been changed. Before deployment, the runtime objects and the certificate may be obtained and the certificate may be validated. In addition, the runtime objects may be validated using the fingerprint included in the certificate. For instance, the fingerprint may be re-generating based on the runtime objects for deployment. The runtime objects may be validated by comparing the re-generated fingerprint to the fingerprint in the certificate. The runtime objects may be deployed if the certificate and the runtime objects are valid.

Abstract: The present disclosure involves systems, software, and computer implemented methods for accessing an object store. One example method includes providing a persistency factory object configured to provide access to multiple types of persistency adapters. Each type of persistency adapter is configured to interface with a particular object store. A persistency adapter request is received from a consumer. A type of adapter to provide is determined. A determination is made that the consumer is configured to interface with a first object store and that a first persistency adapter class is associated with the first object store. A run-time reference to an instance of the first persistency adapter class is provided to the consumer. A first object store operation request to perform a first object store operation is received. The instance of the first persistency adapter class interfaces with the first object store to fulfill the first object store operation request.

Abstract: Techniques and solutions are described for translating strings in a human language that are associated with code, such as code that declares user interface elements in association with which the strings can be displayed. The strings can be embedded in code, or can be included in files that are accessed by the code or used in creating executable code. Strings can be extracted from data, such as files, received in a translation request. After translation, such as by a human translator or using automatic translation, the translation results can be provided in response to the translation request. The translation process can be automated, such that changes to files in a code repository can trigger a translation request. Disclosed technologies can facilitate the production of programs that are localized using different human languages.

Abstract: Systems and processes for identifying a pointer in an image of an analog instrument are provided herein. An instrument contour in the image corresponding to the analog instrument may be identified. A plurality of candidate pointer contours in the image may be identified and screened using one or more geometric property screening techniques including an evaluation of a geometric area, a distance parameter, and/or a gravity center of the plurality of candidate pointer contours. Principal component analysis (PCA) may be performed to select an identified pointer contour from among the reduced plurality of candidate pointer contours. A linear regression model may be applied to pixel points in the contour area of the identified pointer contour and a slope and angle of an associated pointer represented by the identified pointer contour may be determined based on an output of the linear regression model.

Abstract: Some embodiments provide a program that receives a set of clusters generated from a set of geo-enriched data. The program further identifies a subset of the set of clusters that intersect a map extent of a map. Upon determining that a number of geo-enriched data represented by the subset of the set of clusters is greater than a threshold number, the program renders the map extent of the map to include the subset of the set of clusters. Upon determining that the number of geo-enriched data represented by the subset of the set of clusters is not greater than the threshold number, the program further sends a query for a subset of the set of geo-enriched data that is within the map extent, receives the subset of the set of geo-enriched data and renders the map extent of the map to include the subset of the set of geo-enriched data.

Abstract: Downtime resulting from converting a software program from a source system to a target system, is forecast, explored, and optimized. A benchmark for a practice conversion test run (including a downtime component) is received as a first input and displayed for exploration. A second input is received comprising a statistic stored in a conversion database and reflecting a prior actual software conversion process run. The benchmark and the statistic are processed with reference to an expert rule set, to generate an optimized result comprising an updated benchmark having a changed downtime component. The updated benchmark including the changed downtime component, is displayed. Processing may occur in conjunction with further input comprising an acceptance of a generated recommendation, and/or changing a data volume of the practice conversion test run. Embodiments may feed back to the conversion database, statistics resulting from a formal software conversion run conducted according to the optimized result.

Abstract: Disclosed herein are system, method, and computer program product embodiments for optical character recognition (OCR) pre-processing using machine learning. In an embodiment, a neural network may be trained to identify a standardized document rotation and scale expected by an OCR service performing character recognition. The neural network may then analyze a received document image to identify a corresponding rotation and scale of the document image relative to the expected standardized values. In response to this identification, the document image may be modified in the inverse to standardize the rotation and scale of the document image to match the format expected by the OCR service. In some embodiments, a neural network may perform the standardization as well as the character recognition using a shared computation graph.

Abstract: System, method, and various embodiments for providing contextualized character recognition system are described herein. An embodiment operates by determining a plurality of predicted words of an image. An accuracy measure or each of the plurality of predicted words is identified and a replaceable word with an accuracy measure below a threshold is identified. A plurality of candidate words associated with the replaceable word are identified and a probability for each of the candidate words is calculated based on a contextual analysis. One of the candidate words with a highest probability is selected. The plurality of predicted words including the selected candidate word with the highest probability replacing the replaceable word is output.

Abstract: Systems, methods, and computer media for securing software applications are provided herein. Using deceptive endpoints, attacks directed to API endpoints can be detected, and attackers can be monitored or blocked. Deceptive endpoints can be automatically generated by modifying valid endpoints for an application. Deceptive endpoints are not valid endpoints for the application, so if a deceptive endpoint is accessed, it is an indication of an attack. When a deceptive endpoint is deployed, accessing the deceptive endpoint can cause an alert to be generated, and an account, user, or device associated with accessing the deceptive endpoint can be blocked or monitored.

Abstract: A method, a system, and a computer program product for performing key management configurations. One or more encryption keys for encrypting one or more data payloads for accessing one or more databases are received. The received encryption keys are compared to a plurality of encryption keys associated with the databases. Based on the comparison, a configuration of at least one database is changed using the received encryption keys. The changed configuration is stored.

Abstract: Technologies are described for facilitating data workload capture, workload replay, and comparing the performance of a plurality of database systems. A plurality of requests for database operations are received from one or more database clients. The requests for database operations are executed. For the plurality of requests for database operations, execution context information is generated for a plurality of execution contexts. For the plurality of requests for database operations, a plurality of performance measures are generated. The execution context information and the performance measures are stored in a workload capture store, such as a file. The workload capture file is useable to replay the captured workload at a second database system using at least a portion of the execution context information and at least a portion of the performance measures.

Abstract: A method and system including receiving a main input stream for a compressed file at an application server, wherein the main input stream includes two or more file streams; extracting a file-type extension from each file stream input stream; determining the file-type extension is supported; determining, for each file stream with the supported file-type extension, a signature for the file stream with the supported file-type extension is valid; determining, for each valid file stream, a size of the file is less than a threshold level; and storing the valid file stream on a storage device when the size of the file is less than the threshold level. Numerous other aspects are provided.

Abstract: Techniques and solutions are described for implementing virtual domains. Computing resources in a computing environment are determined and assigned to one or more virtual domains. One or more data structures can be located in a given virtual domain. The computing resources assigned to a virtual domain can be dynamically reconfigured without affecting processes that submit tasks to be performed on data structures in the virtual domains. Tasks can be submitted to a dispatcher, which can determine the appropriate virtual domain for the task and forward the task to the determined virtual domain. Tasks are received by virtual domains and assigned to worker threads, which can access a data structure specified for a given task.

Abstract: Various examples are directed to systems and methods for identifying database records in a database table. A database management system receives a search request comprising a first set of strings associated with a first column of the database table and a second set of strings associated with a second column of the database table. The database management system selects a set of first column keywords using the first set of strings and executes a first tier query at the database table. Responsive to determining that no database record returned by the first tier query has a relevance score greater than a threshold value, the database management system executes a second tier query at the database table.

Abstract: Techniques and solutions are described for storing and processing metadata models using a metadata hub that can be accessed by a plurality of computing systems. The metadata hub can receive requests to retrieve or store metadata models. The metadata models can be converted between first and second formats. In some cases, the second format can be a relational format, such as a representation of a metadata model as one or more records in one or more database tables. The metadata hub can be used to compare metadata models, including comparing a metadata model provided by a client system with one or more metadata models stored in a repository maintained by the metadata hub. In at least some cases, the metadata model provided by the client system is not stored. The repository can be queried to find related metadata models, or to find metadata models meeting specified search criteria.