Abstract: Described herein is a system and method for providing an integrated function editor, for use with a data analytics environment. The function editor can be utilized to create and register functions available within a cloud infrastructure or cloud environment, for use within a data analytics environment. Such functions available for use within the cloud infrastructure or cloud environment can be displayed for the user, and used, for example, in data analytics workbooks, to create an interface or API that allows connection of the data analytics environment to a cloud infrastructure database.

Abstract: Techniques are described for generating a composite display of multiple user interface elements, each of which presents datasets corresponding to the operational parameters of computing resources even though the computer resources may operate in different computing environments. In some cases, the composite display includes a feature that enables a comparison of operational performance data between a target measurement period relative to a selectable reference period. The reference period may be manually selectable from a menu of candidate time periods or identified and/or selected by the system based on a similarity between data characteristics in the target measurement period and a baseline measurement period.

Abstract: Techniques for selecting a runbook to recommend for remediating a detected event are disclosed. When a system detects an event, the system obtains metadata associated with the event. The metadata provides information about the event and a system topology of the system in which the event occurred. The system generates a recommendation for a runbook to remediate the event based on one or both of characteristics of the event and characteristics of the topology in which the event occurred. The system compares a system topology to system topologies associated with previously-executed runbooks. The system recommends one of the previously-executed runbooks to remediate a detected event based on determining that the topology associated with the previously-executed runbook is similar to the topology of the system in which the event occurred.

Abstract: An electronic form management system is programmed to: (i) provide a planning UI configured to enable a planning user to assign conditions of approval to a planning application during a planning phase, each condition of approval includes a completion status and one or more conditions to which a permit application is subject during a permitting phase; (ii) provide a permitting UI configured to enable a permitting user to administer the permit application during the permitting phase; (iii) update a completion status of at least one condition of approval data element of the plurality of conditions of approval data elements in response to a condition being satisfied; (iv) calculate an aggregate completion status of a set of conditions of approval data elements; and (v) cause to be displayed at least one graphical interface element representing the calculated aggregate completion status of the set of conditions of approval data elements.

Abstract: A system for data partitioning based on discovery of discrete partitioning information. The system can receive data sets in table format from source system. The data can be stored in the source system to be partitioned and transmitted from the source system to a target system. The system can determine a respective partitioning column for each data set. The system can determine a number of partitions. The system can determine, for each data set, a respective set of discrete values from the plurality of discrete values of the respective partitioning column. The number of the discrete values of the set of discrete values can be based at least in part on the number of partitions. The system can the discrete value sets with each other. The system can determine a final set of discrete values based at least in part on the comparison.

Abstract: Embodiments monitor one or more inventory items corresponding to a vehicle. Embodiments generate a trip plan including, for the vehicle, a start location, an end location, and one or more stops, and for each of the inventory items, a pickup location and a drop off location corresponding to the one or more stops. Embodiments, for each of the inventory items, detect that the vehicle has entered the pickup location based on the trip plan and in response automatically link a sensor to the inventory item. Embodiments, for each of the inventory items, detect that the vehicle has entered the pickup location based on the trip plan and in response automatically unlink the sensor from the inventory item.

Abstract: An identity management and authorization system (IMAS) receives a request to download an application to a user device associated with a user. The IMAS downloads, to the user device, a template application instance corresponding to the requested application, the template application instance having a reduced functionality than the requested application. The IMAS receives, from the user device, a request to register to the downloaded template.

Abstract: Techniques are provided for creating a “ubiquitous search index” which allows for full-text as well as value range-based search across all columns from multiple database tables, multiple user-defined unmaterialized views, and external sources. In one implementation, the data is indexed in a peculiarly constructed schema-based JSON format without duplicating data. The techniques maintain eventual consistency with the normalized source of truth database tables, and do not have a significant impact on the performance of transactional Data Manipulation Language (DML) operations.

Abstract: One or more engine instances are executed on each host to form an engine cluster. A plurality of control instances are executed on a first set of hosts to form a control cluster and comprise a control instance leader and one or more control instance followers. In response to a first host indicating a failure of a neighbor host, a pair-wise focused investigation is initiated to check peer-to-peer connections between the first host and the neighbor host. In response to one or more additional hosts indicating failures of neighbor hosts while the pair-wise focused investigation is being performed, a wide investigation is performed to check connections between the control cluster and the plurality of hosts. One or more hosts are added to an eviction list and an eviction protocol is performed to evict the one or more hosts from the engine cluster using the eviction list.

Abstract: A method, apparatus, and product to provide a parser for property graph queries with precise error reporting and auto-completion based on information from property graph schemas. The approach generally comprises analysis of graph queries prior to their execution to identify issues prior to execution. In some embodiments, the approach includes any of: use of a property graph schema to determine whether names in a received property graph query exist within a corresponding property graph; determining whether the property graph query includes a comparison of mismatched data types; providing an autocomplete suggestion feature for assistance in resolving errors or corresponding to a cursor position within a query string; or evaluation of a property graph query to determine whether it would return an empty result. In some embodiments, property graph query analysis is performed using a context aware approach.

Abstract: In accordance with an embodiment, described herein are systems and methods for automatic generation of business intelligence (BI) data models using data introspection and curation, as may be used, for example, with enterprise resource planning (ERP) or other enterprise computing or data analytics environments. The described approach uses a combination of manually-curated artifacts, and automatic generation of a model through data introspection, of a source data environment, to derive a target BI data model. For example, a pipeline generator framework can evaluate the dimensionality of a transaction type, degenerate attributes, and application measures; and use the output of this process to create an output target model and pipeline or load plan. The systems and methods described herein provide a technical improvement in the building of new subject areas or a BI data model within much shorter periods of time.

Abstract: Disclosed is an improved approach to implement the XA architecture, which permits a TM to call back to a RM via an AP. This approach avoids the need for the TM to maintain authentication/authorization credentials for each RM that will be contacted by the TM. This approach therefore also eliminates the need to establish a direct connection between the TM and the RM. An approach is also provided to integrate a traditional XA application with an XA transaction.

Abstract: A ledgered repository of persistent data objects is replicated on a network of persistent storage systems (PSSs) by transactions recorded across multiple blockchains. The blockchains are replicated on each of the PSSs. Using multiple blockchains enables greater parallelism; however, use of the multiple blockchains requires using measures that ensure that transactions distributed across multiple blockchains are applied in way that ensures a level of transactional consistency. Furthermore, the measures are efficient, thereby reducing overhead of maintaining a level of transactional consistency and increasing throughput of applying the transactions using multiple blockchains.

Abstract: Methods, systems, and computer readable media for synchronization of policy data between network functions in telecommunications networks. A method includes receiving, at a first network function in a telecommunications network, a subscription request from a second network function. The subscription request specifies a subscription for updates to policy data objects maintained by the first network function. The method includes sending a notification response to the second network function. The notification response includes, for each policy data object, a custom header including a respective entity tag for the policy data object. The method includes receiving a resource request from the second network function. The resource request specifies a first policy data object and includes a first entity tag for the first policy data object. The method includes sending a synchronization result to the second network function specifying whether or not the entity tag match.

Abstract: The present disclosure relates to systems and methods for distributing decentralized compute resources. Compute resource metadata that identifies a set of decentralized compute resources can be received. A request to use one or more compute resources can be received. A digital twin can be generated. The digital twin can facilitate identification of a particular compute resource, and the digital twin can be representative of potential interactions between a receiver entity and a set of provider entities. An interaction can be initiated between the receiver entity and a particular provider entity. The interaction may involve allocating the particular compute resource from the particular provider entity to the receiver entity in response to the request.

Abstract: A systematic explainer is described herein, which comprises local, model-agnostic, surrogate ML model-based explanation techniques that faithfully explain predictions from any machine learning classifier or regressor. The systematic explainer systematically generates local data samples around a given target data sample, which improves on exhaustive or random data sample generation algorithms. Specifically, using principles of locality and approximation of local decision boundaries, techniques described herein identify a hypersphere (or data sample neighborhood) over which to train the surrogate ML model such that the surrogate ML model produces valuable, high-quality information explaining data samples in the neighborhood of the target data sample.

Abstract: Techniques for modifying queries in a set of nested queries are disclosed. A graphical user interface displays a query detail region alongside a nested query display region. The graphical user interface includes functionality to provide for modification of queries in the nested set of queries. Based on a selection by a user, a query modification tool promotes a query attribute from a child query to one or more parent queries. Based on another selection by a user associated with one query in the set of nested queries, the system deletes an attribute from each query in the set of nested queries. Responsive to a selection to create multiple conditions for a query rule, the system modifies the functionality of the user interface to enable entry of multiple condition characteristics. Based on a further selection, the system creates the multiple conditions for the query rule.

Abstract: A document repository may be searched for documents that are similar to a source document. Multiple queries may be generated based on a type of the source document, and the results may be combined in a unified response. User behavior may then be monitored, and implicit and explicit feedback may be gathered to evaluate the performance of the search. The gathered feedback may indicate how relevant each of the result documents are in comparison to the original source document. This feedback may then be used to adjust search parameters for the source document type, such that the performance of subsequent searches may be improved. A model may also be trained to classify implicit feedback using explicit feedback received from users.

Abstract: A computing device may receive a plurality of scanning requests with at least one scanning request in the plurality identifying a target address of a target network. The computing device may for at least a subset of the plurality of scanning requests: generate a scanner instance and a virtual network interface card (VNIC) in response to the scanning request. The scanner instance and the VNIC communicating with a routing namespace that can communicate with two or more scanner instances simultaneously. Until the target address has been scanned: one or more packets can be sent from the scanner instance to the target address via the routing namespace and VNIC. The one or more packets can be wrapped in one or more packet wrappers identifying the target address and the target network. In response to the target address being scanned, the scanner instance and VNIC can be decommissioned.

Abstract: Systems and method for SaaS/PaaS resource usage and allocation in an analytic applications environment. An exemplary method can provide an analytic applications environment, a control plane comprising a server, the control plane further comprises a provisioning component and a console interface, a data warehouse, and a monitoring agent. The method can provision an instance of the data warehouse in the context of a tenant, the provisioned instance of the data warehouse having an initial size. Upon the provisioning the instance of the data warehouse, the method can add adding an entry to a metrics repository of the monitoring agent, the added entry indicative of the initial size of the provisioned instance of the data warehouse, the added entry being tagged, the tag being indicative of the tenant. The method can monitor, by the monitoring agent, an amount of data stored at the provisioned instance of the data warehouse.

Abstract: Techniques are described for identifying successful adversarial attacks for a black box reading comprehension model using an extracted white box reading comprehension model. The system trains a white box reading comprehension model that behaves similar to the black box reading comprehension model using the set of queries and corresponding responses from the black box reading comprehension model as training data. The system tests adversarial attacks, involving modified informational content for execution of queries, against the trained white box reading comprehension model. Queries used for successful attacks on the white box model may be applied to the black box model itself as part of a black box improvement process.

Abstract: Techniques discussed herein include providing a cloud computing environment in which applications are deployed by a deployment orchestrator using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). Components of a data plane may be used to deploy containers to micro-virtual machines. A container runtime interface (CRI) may receive a deployment request from the deployment orchestrator. A container networking interface of the data plane may configure network connections and allocate an IP address for the container. A container runtime of the data pane may generate and configure the container with the IP address and run the container within a micro-virtual machine that is compatible with the container orchestration platform.

Abstract: Techniques for accelerating query execution by optimizing data transfer between storage nodes and database nodes are provided. In one technique, a compute node receives a database statement and transmits a set of one or more selection criteria associated with the database statement to a storage node. Based on the database statement, the storage node retrieves a set of data blocks from storage. Each data block comprises multiple rows of an index-organized table (IOT), each row comprising a key section and a non-key section. The storage node applies the set of selection criteria to a data block, resulting in a modified data block. The storage node generates a modified header data for the modified data block and transmits the modified data block to the compute node.

Abstract: Techniques for UNDO and REDO operations in a computer-user interface are disclosed. The techniques enables users to configure entities for UNDO and REDO operations. The techniques also enable users to roll back individual entity to an immediate previous state in one UNDO operation and subsequently to the other previous states. Other entities are not affected by the UNDO operations to the entity.

Abstract: The present disclosure relates to a framework that provides execution of serverless functions in a cloud environment based on occurrence of events/notifications from services in an entirely different cloud environment. A target agent obtains a notification from a source agent, where the target agent is deployed in a target cloud environment and the source agent is deployed in a source cloud environment that is different than the target cloud environment. The target agent determines a function that is to be invoked based on the notification. Upon successfully verifying whether the target agent is permitted to invoke the function that is deployed in a target customer tenancy of the target cloud environment, the target agent invokes the function in the target customer tenancy of the target cloud environment.

Abstract: Herein is a machine learning (ML) explainability (MLX) approach in which a natural language explanation is generated based on analysis of a parse tree such as for a suspicious database query or web browser JavaScript. In an embodiment, a computer selects, based on a respective relevance score for each non-leaf node in a parse tree of a statement, a relevant subset of non-leaf nodes. The non-leaf nodes are grouped in the parse tree into groups that represent respective portions of the statement. Based on a relevant subset of the groups that contain at least one non-leaf node in the relevant subset of non-leaf nodes, a natural language explanation of why the statement is anomalous is generated.

Abstract: The present embodiments relate to systems and methods for automatic sign in upon account signup. Particularly, the present embodiments can utilize a federated login approach for automatic sign in upon account signup for a cloud infrastructure. Specifically, the signup and sign in service (also known as SOUP) and an identity provider portal can be configured such that the nodes are aware of each other as Security Assertion Markup Language (SAML) partners. After new account registration, the signup service can redirect the user browser to a cloud infrastructure console to start with a federated login flow, where a sign in service can issue a SAML authentication request, and redirects it to signup service. Responsive to validating the browser using a SAML authentication process, the browser can be automatically signed into the new account and allowed access the account relating to the cloud infrastructure service.

Abstract: Systems and methods for support server high availability with network link bonding for cloud overlay networks are disclosed herein. The method can include selecting a compute instance, identifying a plurality of Network Virtualization Devices (“NVD”) for association with the compute instance, and creating a number of Virtualized Network Interface Cards (“VNIC”), each of which VNICs can reside in one of the plurality of NVDs. The method can include overlaying an IP address of the compute instance to each of the VNICs, such that each of the VNICs share a common IP address, designating a network path formed by one of the VNICs in one of the NVDs as an active network path and another of the network paths as an inactive network path, and activating the inactive network path when the active network path fails.

Abstract: Example embodiments facilitate augmenting a client-side worksheet of a spreadsheet with context information retrieved from non-direct ancestor worksheets of the client-side worksheet. A spreadsheet plug-in enables retrieval of the context information from a server system, e.g., cloud-based database, via one or more web services. In a specific embodiment, the context information represents one or more data dimensions, e.g., worksheet columns, retrieved via the server system form one or more remote databases and populated into one or more non-direct ancestor worksheets (e.g., grandparent worksheets, great grandparent worksheets, etc.). Then those data dimensions are displayed in the client-side descendant worksheet. The user can now efficiently edit the worksheet while viewing relevant context information in the worksheet.

Abstract: Techniques are disclosed for training a machine learning model to identify and rank entities relative to a set of requirements. The trained machine learning model may present an array of interface elements (e.g., icons) in a graphical user interface (GUI), where the interface elements represent corresponding entities. These interface elements are arranged in the GUI based on their corresponding ranks. The ranks of entities, and therefore the locations of corresponding interface elements are based, at least in part, on a degree of match between values of a subset of entity attributes and a corresponding subset of the set of requirements. The machine learning model may be further trained by receiving a user input that changes a location of a particular user interface element within the graphical user interface displaying the ranked user interface elements.

Abstract: Aspects of the present disclosure include implementing fabric availability and synchronization (FAS) agents within a fabric network. In one example, a first FAS agent executing on a first network device may receive, from a second network device, a command to modify a configuration of a second network device. The first FAS may upgrade the configuration of the first network device based on the command from a current configuration to a new configuration. The first FAS agent increment a state identifier associated with the configuration of the first network device to a new state identifier associated with the new configuration. The first FAS agent may then transmit a control packet that includes the new state identifier. A second FAS agent executing on the second network device may receive the control packet and execute the command to update the configuration of the second network device to the new configuration.

Abstract: Techniques for generating an interactive visualization tool for building nested queries are disclosed. The interactive nested query visualization tool allows a user to observe, analyze, and modify query characteristics and attributes of a set of nested queries. A system displays an interactive visual depiction of a set of nested queries. Visual representations of the nested queries are positioned relative to each other based on the relationships between the nested queries. The system displays, simultaneously with the set of nested queries, editable fields for a selected query. The system modifies a functionality of a user interface based on which of the nested queries is selected.

Abstract: A computer comprising multiple processors and non-uniform memory implements multiple threads that perform a lock operation using a shared lock structure that includes a pointer to a tail of a first-in-first-out (FIFO) queue of threads waiting to acquire the lock. To acquire the lock, a thread allocates and appends a data structure to the FIFO queue. The lock is released by selecting and notifying a waiting thread to which control is transferred, with the thread selected executing on the same processor socket as the thread controlling the lock. A secondary queue of threads is managed for threads deferred during the selection process and maintained within the data structures of the waiting threads such that no memory is required within the lock structure. If no threads executing on the same processor socket are waiting for the lock, entries in the secondary queue are transferred to the FIFO queue preserving FIFO order.

Abstract: The disclosed embodiments provide a system that detects sensor anomalies in a univariate time-series signal. During a surveillance mode, the system receives the univariate time-series signal from a sensor in a monitored system. Next, the system performs a staggered-sampling operation on the univariate time-series signal to produce N sub-sampled time-series signals, wherein the staggered-sampling operation allocates consecutive samples from the univariate time-series signal to the N sub-sampled time-series signals in a round-robin ordering. The system then uses a trained inferential model to generate estimated values for the N sub-sampled time-series signals based on cross-correlations with other sub-sampled time-series signals. Next, the system performs an anomaly detection operation to detect incipient sensor anomalies in the univariate time-series signal based on differences between actual values and the estimated values for the N sub-sampled time-series signals.

Abstract: Techniques for real-time expense auditing and machine learning are disclosed. An expense auditing system trains a machine learning model to compute audit risk scores as a function of expense descriptions. The auditing system receives an expense description associated with an employee. The expense auditing system computes, using the trained machine learning model, an audit risk score associated with the expense description. The expense auditing system compares the audit risk score with an audit trigger. The audit trigger includes one or more conditions that, when satisfied, identifies expense descriptions that are at risk of being audited. The expense auditing system determines that the audit risk score satisfies the audit trigger. Responsive to determining that the audit risk score satisfies the audit trigger, the expense auditing system alerts the employee that the expense description is at risk of being audited.

Abstract: A method for performing a location and velocity check at an SEPP to protect against a spoofing attack includes receiving an SBI request message relating to authentication of UE. The method further includes querying a database NF to obtain previous authentication information for the UE, the previous authentication information including a previous network identifier and a previous authentication time for the UE. The method further includes receiving a response from the database NF, the response including the previous network identifier and the previous authentication time.

Abstract: In accordance with an embodiment, described herein is a system and method for use with a data analytics or other computing environment, for on-demand fetching of backend server logs into a frontend environment, such as for example a browser. Such on-demand log fetching can be specific to the working context that is for current session and current request; and can be accomplished by appending a parameter or flag to a current request. For each step associated with an instruction being performed, the method can create a timestamp within one or more log files associated with the instruction; and fetch the one or more log files associated with the instruction. Performance logs are then included with a dashboard response, and logged into the browser's console.

Abstract: The present embodiments relate to providing near real-time communications from a public network to a private network. A first computing device in a public network can obtain data packets to be provided to the private network from an application executing on the first computing device. A trust module executed by the first computing device can authenticate the user, application, and the data packets to be provided to the private network and add metadata relating to the sending user, recipient user, etc. The data packets can be forwarded to the private network via a cross-domain system (CDS). The metadata and the digital signature on the data packets can be verified by a trust module executing on a second computing device in the private network. The second computing device can receive the data packets and store the data packets for subsequent actions to be performed in the private network.

Abstract: A cloud-based security solution that provides a robust and secure framework for managing and enforcing security policies related to various resources managed in the cloud is disclosed. The cloud-based security solution is implemented by a centralized application programming Interface (API) system and a security zone policy enforcement system in a cloud service provider infrastructure. The centralized API system receives an API request that identifies an operation to be performed on a resource in the CSPI. The system determines, from the API request, compartment information and context information associated with the resource. Responsive to determining the compartment information and the context information associated with the resource, the system determines that the resource resides in a compartment that is associated with a security zone. The system then processes the API request and transmits a result of processing of the API request to a user of the centralized API processing system.

Abstract: Routines are used to connect bot queries entered via a bot interface and database queries executed on a database. Each routine is associated with routine configurations, including (a) query attributes associated with bot queries that trigger the routine, (2) a database query executed or to be executed for the routine, and/or (3) display settings for displaying information returned from the database query in a bot response. Each routine is configured to generate an output structured data object (SDO) indicating information returned from the database query and the display settings applicable to the information. The output SDOs from the various routines are transmitted to the bot application via a single API endpoint. The routine configurations are entered by a design user through one or more design user interfaces rendered by an integrative configuration application module.

Abstract: A data object has a lock and a condition indicator associated with it. Based at least partly on detecting a first setting of the condition indicator, a reader stores an indication that the reader has obtained read access to the data object in an element of a readers structure and reads the data object without acquiring the lock. A writer detects the first setting and replaces it with a second setting, indicating that the lock is to be acquired by readers before reading the data object. Prior to performing a write on the data object, the writer verifies that one or more elements of the readers structure have been cleared.

Abstract: Methods, systems, and computer readable media for reporting a reserved load to a network function in a communications network are disclosed. One method includes determining, by a NF service producer, a current compute load metric value for the NF service producer operating in a communications network and detecting a number of active sessions supported at the NF service producer. The method further includes deriving a reserved compute load metric value corresponding to a predicted number of subsequent service requests at the NF service producer based on the number of active sessions and a predictive reserved load percentage value and calculating an adjusted reported compute load metric value amounting to a sum of the current compute load metric value and the reserved compute load metric value.

Abstract: Techniques for implementing an infrastructure orchestration service are described. A configuration file for a deployment to a first execution target and a second execution target can be received. A first safety plan can be generated for the first execution target that comprises a first list of resources and operations associated with deployment at the first execution target. Approval of the first safety plan can be received. A second safety plan can be generated for the second execution target that comprises a second list of resources and operations associated with deployment at the second execution target. A determination can be made whether the second safety plan is a subset of the first safety plan. If the determination is that the second safety plan is a subset of the first safety plan, the second safety plan can automatically be approved and transmitted to the second execution target for deployment.

Abstract: A computer comprising one or more processors and memory may implement multiple threads that perform a lock operation using a data structure comprising an allocation field and a grant field. Upon entry to a lock operation, a thread allocates a ticket by atomically copying a ticket value contained in the allocation field and incrementing the allocation field. The thread compares the allocated ticket to the grant field. If they are unequal, the thread determines a number of waiting threads. If the number is above the threshold, the thread enters a long term wait operation comprising determining a location for long term wait value and waiting on changes to that value. If the number is below the threshold or the long term wait operation is complete, the thread waits for the grant value to equal the ticket to indicate that the lock is allocated.

Abstract: Techniques discussed herein manage backups of a service cell (SC). Each SC may include a data plane that is isolated from other SCs and comprises a distributed computing cluster (a cluster). A manifest that specifies one or more backup policies may be used to generate a full backup or a partial backup of a data set stored by the cluster. In accordance with the manifest, a signal may be sent to nodes of the cluster. In response, the nodes may transmit locally-stored data (e.g., data segments) to specified locations at a remote storage. The system may maintain a mapping of which segments correspond to data that was stored in the cluster at a time corresponding to a full or partial backup.

Abstract: The illustrative embodiments provide a consensus protocol with a priority-based leadership election approach. Each server or node in the cluster has an associated priority based on the capabilities and capacities of the servers. The leadership election is divided into two phases: a term increase phase and an election voting phase. A candidate sends a message to peers in the cluster to determine whether all peers agree to allow the candidate to increase the term number. If there is no opposition, then the candidate increases the term number and then proceeds to the election voting phase. Each peer determines whether the candidate requesting the term increase has a log that is up to date. If the log of the candidate is equally as advanced as the peer's log, then the peer approves or opposes the term increase based on a priority comparison.

Abstract: A scanner service can be configured to scan one or more nodes associated with a container management service. The container management service can be configured to manage a set of services by allocating managed containers associated with the set of services to the one or more nodes. The scanner service can be configured to identify vulnerabilities of processes running on the one or more nodes. The vulnerabilities can be attributed to the containers and/or the associated services rather than to the nodes. The scanner service is aware of the container management service and communicates vulnerabilities of associated containers.

Abstract: In accordance with various embodiments, described herein is a system (Data Artificial Intelligence system, Data AI system), for use with a data integration or other computing environment, that leverages machine learning (ML, DataFlow Machine Learning, DFML), for use in managing a flow of data (dataflow, DF), and building complex dataflow software applications (dataflow applications, pipelines). In accordance with an embodiment, the system can provide data governance functionality such as, for example, provenance (where a particular data came from), lineage (how the data was acquired/processed), security (who was responsible for the data), classification (what is the data about), impact (how impactful is the data to a business), retention (how long should the data live), and validity (whether the data should be excluded/included for analysis/processing), for each slice of data pertinent to a particular snapshot in time; which can then be used in making lifecycle decisions and dataflow recommendations.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting partitions in a multitenant application server environment. In accordance with an embodiment, an application server administrator (e.g., a WLS administrator) can create or delete partitions; while a partition administrator can administer various aspects of a partition, for example create resource groups, deploy applications to a specific partition, and reference specific realms for a partition. Resource groups can be globally defined at the domain, or can be specific to a partition. Applications can be deployed to a resource group template at the domain level, or to a resource group scoped to a partition or scoped to the domain. The system can optionally associate one or more partitions with a tenant, for use by the tenant.

Abstract: Techniques are described for invoking and switching between chatbots of a chatbot system. In some embodiments, the chatbot system is capable of routing an utterance received while a user is already interacting with a first chatbot in the chatbot system. For instance, the chatbot system may identify a second chatbot based on determining that (i) such an utterance is an invalid input to the first chatbot or (ii) that the first chatbot is attempting to route the utterance to a destination associated with the first chatbot. Identifying the second chatbot can involve computing, using a predictive model, separate confidence scores for the first chatbot and the second chatbot, and then determining that a confidence score for the second chatbot satisfies one or more confidence score thresholds. The utterance is then routed to the second chatbot based on the identifying of the second chatbot.