Abstract: In an example, an apparatus may include a validation module configured to identify a security policy update from a security as code repository, wherein the identified security policy update is a candidate for deployment to a production environment having a plurality of attributes defined by an infrastructure as code repository; identify, from the plurality of attributes and using the infrastructure as code repository, individual attributes that correspond to the identified security policy update, wherein the identified individual attributes are identical to a subset of the plurality of attributes; generate a test environment based on the identified individual attributes; following deployment of the identified security policy update to the test environment, check for security exceptions or availability exceptions using the test environment; and output validation results based on a result of the checking.

Abstract: Media, methods, and systems are provided for scheduling a scheduled event within a synchronous multimedia collaboration session within a group-based communication system. A selected start time and a selected time duration may be received such that one or more users are added to the synchronous multimedia collaboration session within a channel of the group-based communication system at or near the selected start time. Upon expiration of the selected time duration, the one or more users may be automatically removed from the synchronous multimedia collaboration session to prevent the scheduled event from extending beyond an allocated time.

Abstract: Media, methods, and systems are disclosed for documenting synchronous multimedia collaboration sessions in a group-based communication system. A live synchronous multimedia collaboration session is detected. In response to the detecting, a first audio segment is received and transcribed into a first text segment. A collaboration thread associated with the live synchronous multimedia collaboration session is generated. In real time, a first message is posted based on the first transcribed text segment to the collaboration thread associated with the live synchronous multimedia collaboration session. Next, a second audio segment is received and transcribed into a second text segment. Finally, in real time and during the live synchronous multimedia collaboration session, a second message is posted to the collaboration thread based on the second transcribed text segment.

Abstract: Methods and systems are provided for automatically determining a need to invoke functionality of a feature of an application while using a primary application and for automatically invoking that functionality without user action. When input information is input into the primary application via a user interface of a user system, it can be received by an application server from a sender process at the user system, and a prefix that occurs before a text string can be identified. The text string that follows the prefix can be extracted by performing a matching analysis against a library of keywords and extracting a matching keyword. The text string comprises extracted text from the input information. The matching keyword can be matched to an entry that is mapped to a command that can be executed to generate an action that automatically invokes the functionality of the feature of the application without user action.

Abstract: Methods and systems are provided for processing a stream of incoming messages sent from a specific input message source and validating each incoming message of that stream before sending them to a specific target system.

Abstract: Database systems and methods are provided for securing an instance of a web application from vulnerabilities in third party libraries using a web application firewall. One method involves receiving, at a web application firewall between an application server and a client, vulnerability information associated with the web application, generating, at the web application firewall, executable code for securing the instance of the web application based at least in part on the vulnerability information, providing, by the web application firewall, the executable code to the client over a network, and thereafter detecting a vulnerable library associated with the instance of the web application, wherein the client executes the executable code to secure the instance of the web application in response to detecting the vulnerable library.

Abstract: Disclosed are methods, apparatus, systems, and computer readable storage media for interacting with components across different domains in a single user interface in an online social network. The user interface includes a first component and a second component, where the first component exposes content from a first database system at a first network domain and the second component exposes content from a second database system at a second network domain. A first interaction with the first component is received at a computing device, followed by a reference being provided in the second component, where the reference includes information related to the first interaction. A second interaction with the second component regarding the reference can be received at the computing device. Interactions between the components hosted on different database systems can occur through an application programming interface (API).

Abstract: Systems, methods, and devices are disclosed herein that provide management of usage of application program interfaces. A computing platform may be configurable to cause detecting a first action comprising an event at a user interface associated with an on-demand application hosted by the computing platform, and making, using a first application program interface (API), an asynchronous call for a data record in response to detecting the first action, the asynchronous call being made to a storage location of the computing platform. The computing platform may also be configurable to cause detecting a second action associated with the on-demand application, and determining if a synchronous call should be performed using a second API, the synchronous call being made in response to determining that a cache does not include the data record. The computing platform may also be configurable to cause generating a result responsive to the second action.

Abstract: Some implementations of the disclosed systems, apparatus, methods and computer program products may provide for determination of resource usage by tenants in a multi-tenant server system. Tenants may provide resource requests to a database of the multi-tenant server system and such resource requests may include context data. Periodic snapshots of the database may be performed to determine the pending resource requests received by the various tenants and, based on the snapshots and the context data, the resource usage of the various tenants, as well as the system as a whole, may be determined and forecasted for the future.

Abstract: System and method for de-centralized handling of high risk actions across coordinated systems. A monitoring system is used as an action advisor for performing the high risk actions at nodes across coordinated systems. The monitoring system advises performing the actions based on one or more monitoring signals corresponding to the coordinated systems. The process for performing the high risk actions is de-centralized. A metadata substrate system acts as a message broker between the monitoring system and coordinated systems.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for categorizing a sentence as a question. Rather than using a single model, several different models are leveraged to determine whether a sentence is a question. For example, the models can include an inverse text normalization (ITN) model, a sentence embeddings model, and a Term frequency inverse document frequency (TFIDF) model. The output of an ITN model is processed using a finite state transducer (FST) while the output of the sentence embeddings model and TFIDF model are processed using logistics regression (LR) models. A support vector machine (SVM) is then applied to the output of the FST and LR models to determine whether the sentence is a question.

Abstract: Apparatus and method for detection, triaging and remediation of unreliable message execution in a multi-entity (e.g., multi-tenant) runtime. The described system solves this reliability issues of message handlers in a multi-tenant distributed application runtime by automated metering, detecting, triaging, remediating, and notifying stakeholders, in a proactive way. Doing so increases system availability and improves customer experience, as we continue to increase the scale of our services across the planet. As services are scaled across the world, the implementations described provide the benefit of reducing total cost-of-ownership, by reducing the linear operational cost that would be needed if humans had to deal with message processing service issues.

Abstract: System and method for network address based blocking for multiple substrates. The method includes receiving a block request to block one or more network addresses. The method also includes storing the one or more network addresses in a block list at a database repository. The block list includes a data structure with advanced schema. The advanced schema is configurable to allow for downstream processing of the block list across multiple substrates. The block list is used to block incoming traffic from or outgoing traffic to the one or more network addresses at accounts across the multiple substrates.

Abstract: A user device may modify structure information for a user interface (UI) to display the content by allocating a portion of the UI to a preview element for an asset associated with the content based on a request for content related to an entity. The user device may retrieve a code library with functions for manipulating assets of the entity from a static resource for the user interface based on the modified structure information. The user device may generate the UI comprising a preview of the asset within a portion of the UI based on image data indicative of the asset received via a function of the code library and mapped to the preview element.

Abstract: A computing system tracks changes to software applications in a development environment. An embodiment of the system includes a processor and computer storage with executable instructions that cause the processor to perform operations including: permitting developer access to different web-based software applications in the development environment, wherein the applications are part of a defined development project; causing display of a GUI project bar, the GUI project bar having a counter arrangement that graphically tracks changes made to the applications in the development environment; and updating status of the counter arrangement in response to changes made to any of the applications in the development environment. Status of the counter arrangement is updatable within the development environment to maintain at least one running count of changes made to the applications.

Abstract: A device may provision two or more servers, each of the servers including a network interface. In addition, the device may enable the network interface in each of the provisioned servers, create a shared volume, assign the shared volume to each of the provisioned servers, and enable a clustering application on each of the provisioned servers to form a cluster comprising the provisioned servers, the cluster having a heartbeat via the network interfaces.

Abstract: In some embodiments, a method receives a definition that associates a compiler with a content type. The definition defines blocks that can be included in the content type. The method receives an input to create the content type on a platform. A compiler is selected from a plurality of compilers based on the compiler being associated with the content type in the definition. Compilers use different technologies to generate content, and the platform allows the plurality of compilers to be used. The method receives a model for creating content for the content type and processes the model using the compiler to create output for blocks in the model. The output for the blocks is rendered to display the content on a user interface.

Abstract: Systems, methods, and devices are disclosed herein that provide distribution of policies for computing platforms. A computing platform may be implemented using a server system, and the computing platform is configurable to cause receiving a policy data object at a first domain of the computing platform, the policy object identifying one or more security policies associated with the first domain, and determining if the policy data object should be implemented at the first domain based, at least in part, on a second domain identified by the policy data object. The computing platform is also configurable to cause determining if one or more changes should be made to the policy data object based, at least in part, on one or more properties of the first domain, and implementing the policy data object at the first domain by translating the policy data object from a generic syntax to a domain-specific syntax.

Abstract: Methods, systems, and storage media are described for software installation configuration. In particular, some implementations are directed to configuring software instances by identifying and executing select software processes using parameters generated based on configuration information from a user. Other implementations may be disclosed or claimed.

Abstract: The technology disclosed can query configuration management system data and includes cross table selection criteria and joined data return.

Abstract: Systems, methods, and devices are disclosed herein that provide security for requests sent to services in service meshes. A computing platform may be implemented using a server system. The computing platform is configurable to cause receiving a request from a service in a cloud-based computing environment, and identifying a chain of trust embedded in a portion of the request, the chain of trust being generated by one or more security entities in the cloud-based computing environment, the chain of trust identifying results of one or more security verification operations performed on the request. The computing platform is further configurable to cause determining if the chain of trust is a valid chain of trust based, at least in part, on one or more security policies, and sending the request to another entity in the cloud-based computing environment in response to determining the chain of trust is a valid chain of trust.

Abstract: Garbage collection roots for an application may be identified based on a garbage collector implemented in a programming environment. A garbage collection root may correspond with an object and a class definition. Retained memory values may be determined for the garbage collection roots via a graph dominator. A retained memory value may indicate an amount of memory employed by a garbage collection root. Application classes and associated class memory values may be determined. An application class may include one or more of the garbage collection roots associated with object class definitions positioned within a portion of a class definition hierarchy corresponding with the respective application class. A class memory value may aggregate the retained memory values for garbage collection roots included within an application class. A source of a change in memory usage between application versions may be identified based on the application classes and class memory values.

Abstract: Devices, systems and methods are provided for managing records. One method involves constructing a fuzzy match graph data structure with edges between different field values for a fuzzy matched field of a plurality of records in accordance with a matching rule, assigning unique identifiers to different subgraphs of field values within the fuzzy match graph data structure, determining a match key value associated with a respective record based on a respective unique identifier assigned to a respective subgraph of field values including a respective field value for the fuzzy matched field of the respective record, constructing a heterogenous graph data structure having edges between the respective match key values associated with the respective records of the plurality of records, identifying a subset of related records using the heterogenous graph data structure, and performing one or more actions on the subset of related records at a database system.

Abstract: Database systems and methods are provided for parallel processing heterogenous jobs at a database system. One method involves identifying database records corresponding to a batch of jobs and identifying, for the respective jobs, a respective set of related database records associated with the respective job based on a respective value for a metadata field of the respective database record corresponding to the respective job. The metadata field value uniquely identifies the respective set of related database records associated with the respective database record. The method divides the batch of jobs into chunks based on the respective sets of related database records associated with the respective jobs. Each chunk includes a respective subset of the batch of jobs having an aggregate workload based on the respective sets of related database records associated with the respective jobs of the respective chunk that is less than a chunking threshold.

Abstract: Usage of Pluggable Authentication Module (PAM) for time bound access control to any PAM enabled Linux application predicated by rules stored in an LDAP directory including a processor to execute computer-executable instructions for receiving a user information from a user interface indicative of a user, receiving an access request via PAM indicative of the user information, a time of invocation of the access request and the host server, querying a lightweight directory access protocol directory in response to the user information and the request, receiving a plurality of attribute values associated with the user information including a time bound access limit and a host access restriction information, and coupling an access success response to the pluggable access module in response to a host server access allowance indicated by the host access restriction information for the host service and the time of invocation being within the time bound access limit.

Abstract: Users may be authorized to access a second software environment with a second limited set of authorized users. The second software environment may include at a first point in time prior to the user access a subset of a first software environment that includes at the first point in time a first set of authorized users that was a superset of the second limited set. A determination may be made as to whether a first user has potentially been a member of the first set of authorized users. The determination may be made via a global filtering process with at least one first hash value associated with a login attempt by the first user whether.

Abstract: A recommendation service access a data matrix listing of products associated with product profiles, the data matrix having product entries that store sparse historical electronic activity. For a target product it is determined which other products should be used to boost the historical electronic activity of the target product based on a first subset of product profiles that share product characteristics with the target product. Similarity scores are computed between the product profile of the target product and the first subset of product profiles to identify a second subset of one or more products having a similarity score above a scoring threshold. The historical electronic activity of the target product is boosted using the historical electronic activity of the other products in the second subset. Association values are calculated between the target product and the other products in the second subset by based on the boosted activity.

Abstract: Server instantiation or deployment with at least an orchestrated post-deployment configuration service utilizing an exemplary framework providing script orchestration, logging, retry logic and environment-specific infrastructure and service configurations. At least one repository may store configuration scripts (or their equivalent), including first scripts associated with, e.g., a multi-tenant system, vendor, database provider, controller, etc., and second scripts associated with, e.g., a tenant, a database client, customer, etc. After instantiating or installing a server, it may be configured with orchestrated execution to ensure successful first server configuration, and then further configured with orchestrated execution of second scripts to ensure successful subsequent server configuration. Orchestration includes retry logic, logging, and reboot support to repeat or continue script execution after reboot, and the number of scripts series is arbitrary, e.g., there may first, second, third, etc.

Abstract: A header and a timestamp element for the header may be generated based on a request to process data for a page of a user interface. A tooltip with descriptive information for the timestamp element may be generated and displayed based on proximity of an interactive element to the timestamp element, and a page representation window may be displayed based on an interaction with the timestamp element. The page representation window includes a representation of the data field and its content that is indicative of how the data field and its content existed at a time of the request to process data. Moreover, an indicator of correspondence between the timestamp element and the page representation window may be displayed. Based on interaction with a settings indicator element, a header settings window for modifying settings for the header may be displayed with view options (e.g., all, custom, etc.) for data submissions.

Abstract: Disclosed herein are system, method, and computer program product embodiments for publishing an embedded web application with atomic version control. An embodiment operates by generating an updated version of an embedded code in response to receiving a request to publish an updated embedded web application. The embodiment then generates an embedding code and an application configuration corresponding to the updated version of the embedded code in response to a determination that the embedded web application was published successfully. The embodiment then stores the embedding code and the application configuration.

Abstract: Artificial intelligence (AI) technology can be used in combination with composable communication goal statements to facilitate a user's ability to quickly structure story outlines in a manner usable by an NLG narrative generation system without any need for the user to directly author computer code. Narrative analytics that are linked to communication goal statements can employ a conditional outcome framework that allows the content and structure of resulting narratives to intelligently adapt as a function of the nature of the data under consideration. This AI technology permits NLG systems to determine the appropriate content for inclusion in a narrative story about a data set in a manner that will satisfy a desired communication goal.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a dynamic chunk size for optimal batch processing. A system trains a machine learning model using historical data, the machine learning model having a plurality of weights, where each weight corresponds to one of a plurality of variables. The system determines a size of a subsequent data set. In addition, the system ascertains available resources. The system determines, using the machine learning model, an optimal batch size for the subsequent data set based, at least in part, on the available resources and the size of the subsequent data set. The system may then process the subsequent data set by performing parallel processing using the available resources according to the optimal batch size.

Abstract: Methods and systems are provided for declaratively configuring a process and a page for a particular service provider. User interface(s) can be displayed at a user system and include options for declaratively configuring different log in processes and log in pages for the particular service provider. After receiving a selection of one of the options to configure the log in process and the log in page, inputs can be received that specify a type of identifiers associated with a user to be verified as part of the log in process, and an identity verification process to define how the user will be verified as part of the log in process for the service provider.

Abstract: A method receives a definition for an attribute that is associated with an asset. Information from the asset is received for the attribute. A name for the attribute is received where the name is used as a key in a key value pair for the attribute in a database. The method stores a key value pair for the attribute in the database using the key of the name. The value is associated with the information received from the asset that is monitoring the attribute. Access is provided to the value for the attribute using the key to monitor the attribute for the asset.

Abstract: Media, methods, and systems of presenting and assigning interactive user statuses within a group-based communication system. The interactive user statuses may include links to resources and/or actuatable controls for accessing collaboration activities with other users. The interactive user statuses may be assigned manually or automatically based on user activity within the group-based communication system or within external applications.

Abstract: A method and system for monitoring the status of a requested network action for a browser has been developed. The method first receives a network request for an action to execute a script with the browser. Network activities of the browser are then monitored to ensure no network activities are present that change a document object model (DOM) data. The browser is monitored to ensure no mutation of the DOM data is taking place. The script is monitored to ensure that it is not blocked in a viewport of the browser. The script is executed when it is determined that, no network activities of the browser are present, no mutation of the DOM data is taking place in the browser, and the script is not blocked in the viewport of the browser.

Abstract: Artificial intelligence (AI) technology can be used in combination with composable communication goal statements to facilitate a user's ability to quickly structure story outlines using “explanation” communication goals in a manner usable by an NLG narrative generation system without any need for the user to directly author computer code. This AI technology permits NLG systems to determine the appropriate content for inclusion in a narrative story about a data set in a manner that will satisfy a desired explanation communication goal such that the narratives will express various ideas that are deemed relevant to a given explanation communication goal.

Abstract: Apparatus, method, and graphical user interface (GUI) for presentation and navigation of code path data. Code path data samples, including temporal data, related to a plurality of code paths of program code are used to render an interactive GUI including a set of graphical elements representing a corresponding set of code paths. Each graphical element indicates resource utilization changes associated with a respective code path over a time period. The set of graphical elements are visually arranged in a first dimension and the period of time is indicated in a second dimension. Different techniques are used to represent resource utilization over time including extending the graphical elements in a third dimension or changing a width of the graphical elements within a plane defined by the first dimension and the second dimension.

Abstract: A method for protecting against sensitive data disclosure includes receiving a user request to launch a web application in a web browser; loading code for the web application in the web browser; requesting session initialization from a web server; and receiving a dynamically and randomly generated URL map specific to a session from the web server, wherein the URL map identifies a plurality of randomly generated URL positions and for each URL position a randomly generated number of characters to skip. The method further includes modifying sensitive information associated with a URL in accordance with the URL map; transmitting the URL with the modified sensitive information to the web server; and receiving a requested data object from the web server, wherein the web server decoded the URL with the modified sensitive information to recover the sensitive information and used the decoded URL to access the data object.

Abstract: Apparatus and method for identifying code path contributors to resource utilization spikes. For example, in some implementations, stack trace data and profiling data are sampled from a plurality of code paths of an application to generate a plurality of code path samples, where the sampling is performed across a series of temporal windows. Processor utilization data is also sampled across a corresponding series of temporal windows. Correlations are detected between the code path samples and occurrences of processor utilization spikes to generate correlational scores for the plurality of code paths. A ranking of code paths is then generated in accordance with the correlational scores in which code paths relatively higher in the ranking are more likely to contribute to the occurrences of the processor utilization spikes than code paths relatively lower in the ranking.

Abstract: Database systems and methods are provided for assigning structural metadata to records and creating automations using the structural metadata. One method of assigning structural metadata to a group of conversation records involves receiving a user input modification pertaining to a group of semantically similar conversations, automatically reassigning a conversation to a different group of semantically similar conversations based on its representative utterance in a manner that is influenced by the user input modification, and automatically updating, at a database system, a record associated with the conversation to include metadata identifying the different group of semantically similar conversations.

Abstract: Techniques for providing application contextual information. One or more sets of database context identifiers corresponding to events that occur within the database are generated by the database. The one or more sets of database context identifiers have at least one application context field. A session identifier corresponding to a session to be monitored is sent from the application to the database. Information to be stored in the database with the session identifier is sent to the database. Database logs and application logs are correlated using at least the session identifier.

Abstract: Draft message object collaboration in a group-based communication platform is described. A request to generate a message object can be received from a first client associated with a first entity of a group-based communication platform. A first instance of a composition user interface, configured to enable a draft of the message object to be generated, can be presented via the first client and a request to add a second entity as a collaborator can be received. A second instance of the composition user interface can be presented via a second client of the second entity. A modification to the draft of the message object can be received and, in response to receiving the modification, the message object can be updated as presented via respective instances of the composition user interface.

Abstract: Embodiments described herein include apparatuses, computer program products, and methods for data management in a group-based communication system. Specifically, some embodiments address data management for group-based communication channel(s) accessible to any number of entities based on various data retention policies. In this regard, embodiments enable maintenance of data associated with multiple organizations accessing a group-based communication channel based on a single, shared data retention policy, or different data retention policies, for example based on authorship of the group-based communication message. In embodiments, a data retention policy may be assigned directly to an entity, or assigned to a higher-level or lower-level entity and function as a default data a retention policy for other entities associated therewith.

Abstract: In the present disclosure, systems and methods are described for allowing a non-code user to create to transform a database in an ETL pipleline. Specifically, as disclosed herein, a user can take a database and receive a ruleset to apply to the database in an ETL pipeline. The data linting system may take the database and extract a schema and a data sample from it. Further, the data linting system may use the schema and data sample to create two rulesets. With these rulesets, the data linting system combines them to create a final ruleset which may be validated using the data sample. The data linting system then sends the final ruleset and the validation report to the user. With this system, the user only needs to give it a database and will receive a ruleset that is able to be immediately used in an ETL pipeline.

Abstract: Methods, systems, and storage media are described for enabling the execution of design operations associated with service integrations. In particular, some implementations are directed to executing design operations using operation-specific processors. Other implementations may be disclosed or claimed.

Abstract: Database systems and methods are provided for assigning structural metadata to records and creating automations using the structural metadata. One method of assigning structural metadata involves determining a candidate group of semantically similar conversations based on unassigned conversations, determining a clustering performance metric associated with the candidate group based on a relationship between the candidate group and a plurality of existing groups of semantically similar conversations, and when the clustering performance metric is greater than a threshold, automatically assigning one or more unassigned conversations to the candidate group based on the representative utterances associated therewith and automatically updating one or more associated records at a database system to include metadata identifying the candidate group.

Abstract: Methods, systems, and storage media are described for real-time constraints for asynchronous message delivery. In particular, some implementations are directed to real-time constraints contained in the metadata of messages. Other implementations may be disclosed or claimed.

Abstract: Systems and techniques are described for a unified data pipeline interface. The pipeline interface provides an interface illustrating key metrics, activities, insight, and/or other categories. The pipeline interface provides such data as to a specific opportunity. The systems and techniques described herein allow for the determination, presentation, and standardization of such data through a specifically configured graphical user interface.

Abstract: Methods, systems, and storage media are described for providing network security across multiple functional domains. In particular, some implementations are directed to encapsulating data packets sent from one functional domain to another with fully qualified security group (FQSG) information to allow the destination domain to process the data packet based on the FQSG information from the source domain. Other implementations may be disclosed or claimed.