Abstract: Techniques for enabling access to external data of a user for facilitating communications via a communication platform are described herein. A user of the communication platform maintains external data with a third-party service provider. The communication platform receives, in association with a user account of the user, an indication of intent to grant the communication platform access to the external data and an authorization code (the “code”). The communication platform later receives, from the first user account, a request to access the external data. For example, the request can include an input corresponding to an intended recipient of a message. In response to the input, the communication platform sends a request, with the code, to the third-party service provider to obtain contact data associated with the intended recipient and causes the contact data to be presented in association with the message, such as in a “To” field of the message.

Abstract: Techniques described herein are used to support cross platform data sharing, access, and management between a communication process flow management platform and a communication platform. Specifically, techniques described herein support a communication process flow management platform detecting an event associated with a communication process flow that control electronic communications between a tenant and a set of users. The platform may generate a data object corresponding to the event. The data object may include metadata associated with the event. The platform may transmit, to a communication platform, a request that includes the data object. The request may be configured to cause an entry associated with the event to be posted into the communication platform.

Abstract: According to some implementations, compliance assessment metrics in a subset of two or more compliance assessment metrics are combined to form a combined compliance assessment metric. Each compliance assessment metric in the subset reflects a level of compliance of a set of rules with a different type of data privacy and/or data security laws, regulations, and/or policy. The set of rules are to manage personal data in an organization instance of a customer of a cloud-based software provider capable of hosting the organization instance in one or more datacenters in a plurality of different geographic regions. In addition, a dashboard, which is part of a data policy compliance service provided by the cloud-based software provider, is caused to be displayed and includes at least the combined compliance assessment metric.

Abstract: Methods, apparatuses, and computer program products are described. A system may run a set of Automated Structure processing (ASP) scripts on a program binary executable written in C-language without making changes to source-code. The system may generate a set of dictionary files indicating data structural information specifically for the C-language program based on running the set of ASP scripts on the program binary executable. The dictionary files may include a list of C-structures referenced and type definitions and structure layouts associated with the C-structures. The system may combine the data structural information with an ASP library to generate an extended ASP library, and may augment the program binary executable with the extended ASP library to generate an augmented program binary executable. The system may programmatically perform an introspection and data discovery procedure on a C-language program at run-time using the augmented program binary executable.

Abstract: Disclosed embodiments are related to information security and scripting-language technologies, and in particular, to technologies for providing secure membranes and cross namespace communication between isolated components in a scripting environment. Other embodiments may be described and/or claimed.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for tracking inbound email messages in association with database records. A first electronic mail message received via a network from a first client device is processed, where the first electronic mail message has a header including a message identifier. The message identifier is obtained from the header and parsed such that an encrypted portion and one or more unencrypted portions are obtained, where a first unencrypted portion of the unencrypted portions includes an entity identifier associated with a first database record of a database. A secret key associated with the first electronic mail message is obtained and the first electronic mail message is authenticated using the secret key, the encrypted portion of the message identifier, and at least one unencrypted portion of the unencrypted portions of the message identifier.

Abstract: Techniques are disclosed relating to installing and operating applications in a server-based application workspace. A computer system, while operating the server-based application workspace, may store subscription information indicating a user that is a developer for a particular application package, and one or more users that are subscribers for the particular application package. The computer system may further store lock data for the particular application package that indicates user permissions to edit at least one application component for the particular application package. Based on the lock data, the computer system may permit the developer to edit the at least one application component of the particular application package, and deny requests from the one or more users to edit the at least one application component.

Abstract: A computing platform is configurable to cause generating a workflow data object configured to represent a plurality of operations included in a workflow associated with a user, the workflow data object being generated based on a designated sequence of the plurality of operations. The computing platform is further configurable to cause receiving a verified status indicator associated with at least one of the plurality of operations, the verified status indicator including a verified credential generated in response to the user completing at least one of the plurality of operations. The computing platform is further configurable to cause updating the workflow data object in response to the receiving of the verified status indicator, the updating including a credential data object in the workflow data object, and updating a representation of the at least one of the plurality of operations based on the credential data object.

Abstract: Exemplary systems, methods, and apparatuses migrate tenants between instances in a cloud based computing environment. The exemplary system assigns a dedicated share on multi-tenant cloud computing services instances. The exemplary system further receives performance characteristics for each of the tenants, analyzes the performance characteristics, detects an anomaly in one of the plurality of tenants responsive to analyzing the performance characteristics, and evicts one of the tenants in which the anomaly was detected from the one or more instances. The exemplary system further re-assigns the evicted tenant to a dedicated share on one or more multi-tenant cloud computing services instances other than the instance to which it was assigned before eviction.

Abstract: The decoder network includes multiple decoders trained to generate different types of summaries. The lower layers of the multiple decoders are shared. The upper layers of the multiple decoders do not overlap. The multiple decoders generate probability distributions. A gating mechanism combines the probability distributions of the multiple decoders into a probability distribution of the decoder network. Words in the summary are selected based on the probability distribution of the decoder network.

Abstract: A method, apparatus, and system for data processing to support real-time equivalent user interaction generation is described. To support real-time equivalent user interaction generation, a user's interactions with a first user interface of an application at a first user device are identified, the identified user's interactions with the first user interface of the application at the first user device may be converted into equivalent user interactions with a second user interface of the application based at least in part on a configuration of the second user interface of the application at a second user device, and the equivalent user interactions with the second user interface of the application at the second user device may be implemented, wherein the configuration of the second user interface of the application at the second user device and a configuration of the first user interface of the application at the first user device are different.

Abstract: Adaptive field-level matching is described. A system identifies first elements in a field of a prospective record for a database, and second elements in the field of a candidate record, in the database, for matching the prospective record. The system identifies features corresponding to any of the first elements that are identical to any of the second elements, any of the first elements that are absent from the second elements, and any of the second elements that are absent from the first elements. A machine-learning model uses the features to determine a field match score for the candidate record's field. Another machine-learning model weighs the field match score and weighs another field match score for another field of the candidate record to determine a record match score for the candidate record. If the record match score satisfies a threshold, the system identifies the candidate record as matching the prospective record.

Abstract: According to some implementations, while a proxy routes production traffic to a first application (app) version that runs in a plurality of container orchestration system (cos) pods having first app version containers, configuration information is received including an identification of a second app version container image for a second app version. The second app version is an updated version of the first app version. Cos pods having second app version containers are brought up based on the second app version container image identified in the configuration information. Test and/or warmup traffic is caused to be routed to the second app version containers. Responsive to an indication regarding the routing of the test and/or warmup traffic to the second app version, causing a transition to sending production traffic to the second app version containers instead of to the first app version.

Abstract: Embodiments described herein provide methods and systems for training task-oriented dialogue (TOD) language models. In some embodiments, a TOD language model may receive a TOD dataset including a plurality of dialogues and a model input sequence may be generated from the dialogues using a first token prefixed to each user utterance and a second token prefixed to each system response of the dialogues. In some embodiments, the first token or the second token may be randomly replaced with a mask token to generate a masked training sequence and a masked language modeling (MLM) loss may be computed using the masked training sequence. In some embodiments, the TOD language model may be updated based on the MLM loss.

Abstract: System and methods are described for a server computing node including a processing device and a memory device. The processing device executes instructions stored in the memory device to receive a request to update a data object in a shared storage of a distributed computing system; get a current version identifier (ID) of the data object; get the data object identified by the current version ID from the shared storage; update the data object; write the updated data object to shared storage using a unique new version ID; and cause the conditional update of the current version ID of the data object to the new version ID.

Abstract: Systems and methods for performing user interface (UI) test automation may include receiving a document object model (DOM) associated with a web application, the web application having one or more web pages; generating a generic object representation of the web application based on the DOM using a page object model; generating a page object based on the generic page object representation in a first programing language; and storing the page object in the first programming language in a database to be accessed by test scripts associated with a UI test automation of the web application.

Abstract: Techniques are provided for identifying duplicate usages of configuration values in Network Management Interfaces (NMIs). Network administrators may inadvertently enter duplicate values such as Internet Protocol addresses in one or more NMIs. A browser extension captures a configuration value and determines whether it has been used already, such as by accessing a database with the value and a field type. If it has been used, summary and/or detailed information can displayed on the NMI describing the duplicate usages. The summary display can be a hyperlink which indicate a number of duplicate usages in other views and NMIs. When the hyperlink is selected, a pop-up display can provide detailed information by rendering the other views in a read-only mode, of a same NMI or other NMIs. To render the views, a Document Object Model and Cascading Style Sheet Object Model of the views can be accessed.

Abstract: Techniques are disclosed relating to automated operations management. In various embodiments, a computer system accesses operational information that defines commands for an operational scenario and accesses blueprints that describe operational entities in a target computer environment related to the operational scenario. The computer system implements the operational scenario for the target computer environment. The implementing may include executing a hierarchy of controller modules that include an orchestrator controller module at top level of the hierarchy that is executable to carry out the commands by issuing instructions to controller modules at a next level. The controller modules may be executable to manage the operational entities according to the blueprints to complete the operational scenario.

Abstract: Techniques and structures to prevent exhaustion of a database connection pool, including retrieving data from the database connection pool, monitoring the data to determine whether the connection pool is at risk of an exhaustion condition, analyzing the data to determine whether one or more clients accessing the database connection pool are offenders upon determining that the connection pool is at risk and throttling access to the one or more clients accessing the database connection pool upon determining the one or more clients to be offenders.

Abstract: Disclosed herein are system, method, and computer program product embodiments for detecting duplicates with exact and fuzzy matching on encrypted match indexes using an encryption key in a cloud computing platform. An embodiment operates by determining a match rule index value upon reception of a new record. The embodiment encrypts the match index rule value using the customer's encryption key and a deterministic encryption method and stores the encrypted match rule index value. Duplicate detection may be later performed by using the same deterministic encryption method to determine a cypher text for a candidate entry and comparing the ciphertext to the stored encrypted match indexes.

Abstract: The present disclosure is directed to updating a multi-tenant database concurrent with tenant cloning. In some embodiments, a computer system receives a request to perform an update operation on a multi-tenant database. The update operation includes updating database entries for a plurality of tenants. Responsive to receiving the request, the update operation is initiated. Performing the update operation includes accessing a list identifying database entries awaiting the updating. During the accessing of the list, the update operation holds a lock. When the lock becomes available for acquisition, a clone process is permitted to create, during performance of the update operation, a clone of a tenant's data within the database.

Abstract: Multiple systems, methods, and computer program product embodiments for password-less authentication using key agreement and multi-party computation (MPC). In one or more embodiments, following an authentication request received by a host computing device, the host computing device and a user computing device generate a shared key using a key agreement algorithm. Then, the host computing device generates a challenge that is encrypted using the shared key and transmitted to the user computing device. The user computing device decrypts the challenge after regenerating the shared key and sends the decrypted result to the host computing device as the challenge response. The authentication request is granted by the host computing device if the challenge and the challenge response match. New keys and a new challenge are generated for each authentication request. This process relies on public key cryptography eliminating the needs for passwords.

Abstract: Embodiments described herein provide document summarization systems and methods that utilize fine-tuning of pre-trained abstractive summarization models to produce summaries that more faithfully track the content of the documents. Such abstractive summarization models may be pre-trained using a corpus consisting of pairs of articles and associated summaries. For each article-summary pair, a pseudo label or control code is generated and represents a faithfulness of the summary with respect to the article. The pre-trained model is then fine-tuned based on the article-summary pairs and the corresponding control codes. The resulting fine-tuned models then provide improved faithfulness in document summarization tasks.

Abstract: Systems, methods, and apparatuses for implementing a metadata driven rules engine on blockchain using Distributed Ledger Technology (DLT) in conjunction with a cloud based computing environment are described herein.

Abstract: Techniques and structures to provide secure data transfer between entities in a multi-user on-demand computing environment. An electronic device may comprise at least one physical memory device, one or more processors coupled with the at least one physical memory device, the one or more processors configurable to create a scratch organization within the computing environment, receive, via a user interface, a metadata selection comprising a plurality of metadata resources which define a set of components for a service implemented in an origin organization of the multi-user, on demand computing environment, extract the plurality of metadata resources from the origin organization within the computing environment into a metadata bundle, and deploy the metadata bundle in the scratch organization. Additional subject matter may be described and claimed.

Abstract: System and methods are described for parsing log data items to find events in the log data items, wherein an event comprises at least a portion of a log data item matching an event definition; aggregating a plurality of performance metric definitions into a single expression; and generating a plurality of performance metrics from the events by applying the single expression to the events.

Abstract: Methods, systems, and devices for providing matching security between data stores are described. In a database system, an operational data store may store transactional datasets and an analytical data store may store analytics datasets generated based on the transactional datasets. For these analytics datasets to efficiently inherit the security configurations of the transactional datasets, security information may be embedded in datasets retrieved from the operational data store during a data acquisition procedure. This security information may be converted into an embedded multiple-value field for storage in the analytical data store. The analytical data store may receive a query for data in a dataset, and may determine security descriptors associated with the user sending the query. The analytical data store may then filter the data based on comparing these determined security descriptors with the security information in the multiple-value field, and may transmit a query response with the filtered data.

Abstract: Systems, methods, and computer-readable media are provided for data catalogs, metadata repositories, data discovery, and data governance, and in particular, for a canonical model-driven active metadata exchange for distributed data catalogues. Disclosed implementations include an application independent metadata repository with a Canonical Data Model (CDM). The CDM maintains a single set of use case agnostic mappings between data sources and the CDM. The physical mappings of a particular entity in the CDM are used to determine the different applications that are mapped to it and what objects or data structures that are exposed by that particular data source. Other embodiments may be described and/or claimed.

Abstract: Embodiments of apparatus, systems, and methods are described for creating, arranging, and displaying data mappings between two different data schemas in a graphical user interface (GUI). The GUI allows scaling of a data schema, automatic data sorting and grouping of objects in a schema, dynamic spacing of data mappings in the GUI, and customizable data map transformations to entities of a canonical data model. The GUI can limit the display of objects and fields to those that have been mapped into entity groups. The GUI can display mapped or unmapped fields to facilitate the mapping of additional fields or objects. The GUI displays visual logic connectors between objects and entities to summarize the relationship and number of mappings between the objects and entities. Objects and entities can be expanded and collapsed to show more granular relationship information. Instance-enabled canonical entities can be created to conceptually group fields.

Abstract: Approaches to zero-shot learning include partitioning training data into first and second sets according to classes assigned to the training data, training a prediction module based on the first set to predict a cluster center based on a class label, training a correction module based on the second set and each of the class labels in the first set to generate a correction to a cluster center predicted by the prediction module, presenting a new class label for a new class to the prediction module to predict a new cluster center, presenting the new class label, the predicted new cluster center, and each of the class labels in the first set to the correction module to generate a correction for the predicted new cluster center, augmenting a classifier based on the corrected cluster center for the new class, and classifying input data into the new class using the classifier.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for managing business deals. The mechanisms and methods for managing business deals may enable embodiments to provide a dynamic and interactive user-interface including any combination of contacts, accounts, opportunities, allowing users to create tasks, events, leads (e.g., from Data.com), reports, dashboards, instant messenger, external deal spaces, email service (e.g., Outlook), a cloud-based productivity suite for businesses that allows work on any device (e.g., Google apps), mobile access, private messaging, lead management, mass email templates, social media monitoring (e.g., from Radian6), role-based sharing and security, and/or additional storage, for example. In an embodiment, the number of contacts may be unlimited.

Abstract: Techniques are disclosed relating to managing distributed storage of data for various entities according to classifications for these entities. A database node of a distributed storage system may receive, from a first entity of a plurality of entities, a request to store a set of data. The database node may further obtain metadata associated with the first entity, wherein the metadata specifies one of a plurality of classifications for the entities. The database node may provide the set of data to one or more of a plurality of caches for storage. The caches may be located in two or more availability zones and are configured to store the set of data based on the classification for the first entity identified in the metadata associated with the first entity. The database node may also store the set of data in a shared object storage coupled to the database node.

Abstract: Techniques and structures to provide secure data transfer between entities in a multi-user on-demand computing environment. An electronic device may comprise at least one physical memory device, one or more processors coupled with the at least one physical memory device, the one or more processors configurable to create a scratch destination organization within the computing environment, receive, via a user interface, a metadata selection comprising a plurality of metadata resources, extract the plurality of metadata resources from an origin organization within the computing environment into a metadata bundle, and deploy the metadata bundle in the scratch organization. Additional subject matter may be described and claimed.

Abstract: Techniques disclosed herein relate to managing notifications to a user associated with a computing device. The notifications correspond to a response to an indication of an exception condition on the computing device. The response to the exception condition includes a plurality of steps, including computer-implemented steps in which data objects output a plurality of notifications for the user. These notifications are processed by a notification choreographer and used to prepare a unified status communication. The unified status communication is output to the user and depicts information corresponding to a plurality of the notifications.

Abstract: A hierarchical neural network for predicting out of stock products comprises an input layer that receives data from data sources that store disparate datasets having different levels of attribute detail pertaining to products for sale in stores of a retailer. A first level of neural networks processes the data from the data sources into respective learned intermediate vector representations. A second level comprises a concatenate layer that concatenates the learned intermediate vector representations from the second level into a combined vector representation. A third level comprises a feed forward network that receives the combined vector representation and outputs to the retailer an out of stock probability indicating which store and product combinations are likely to have out of stock products over a predetermined timeframe.

Abstract: A GraphQL server stores schemas for GraphQL APIs in a schema store, the schemas defining operations, types and fields of the APIs. Field resolvers are associated with the fields of the APIs to specify which of the data source is to be used to fulfill an API query request. When an event is detected that makes changes to a schema of any of the data sources, the schema store is accessed and an old field name is automatically replaced with a new field name in both the retrieved schemas and the field resolvers mapped to the retrieved schemas. Responsive to receiving an API request, it is determined whether the request has any field names that do not match the corresponding schema, and if so, the old field name is replaced with the new field name in the request.

Abstract: Various embodiments of methods for detecting anomalous activity in a computer network are disclosed. A method includes a computer system receiving an indication of a current session establishing a secure channel to a computing device within a network. The computer system evaluates information relating to the current session, as well as information relating to one or more other sessions. Using this information, the computing system performs monitoring to detect the presence of anomalous lateral movement within the network, for example based on detecting multiple user credentials. Based on the evaluating performed, the computer system generates a score for the current session and reports whether the score is indicative of anomalous lateral movement.

Abstract: Systems and methods are described for managing the application of data management actions to one or more data objects in a data store. The systems and methods extract at least a portion of a first set of data objects from a data store to a file, wherein a first data object of the first set of data objects comprises a first set of attributes and a set of data management actions. A second set of data objects is loaded into the data store. A confidence score is generated based on a comparison of the first data object of the first set of data objects and a second data object of the second set of data objects. A determination is made that the confidence score satisfies a condition. In response to the confidence score satisfying the condition, the set of data management actions is applied to the second data object.

Abstract: Disclosed herein are system, method, and computer program product embodiments for generating software artifacts operable across diverse platforms from a single conceptual data model. The conceptual data model may be enhanced with metadata that allows the creation of platform-specific logical data models containing additional metadata that is leveraged to create deployable software artifacts. An organization may subsequently modify the conceptual data model and all relevant software artifacts may be updated and redeployed across all integrated platforms. Such a conceptual data model further facilitates the creation of documentation describing data entities in the organization's technical infrastructure, the creation of mapping files for use by a data exchange system, and the processing of federated queries that gather data from multiple data stores across a data landscape.

Abstract: Disclosed herein are system, method, and computer program product embodiments for automatically cataloging updated Application Programming Interface (API) specifications with updated version numbers. The API specifications may have been previously published to an application exchange platform. An automatic cataloging tool installed at an API development system may identify an updated API specification committed to an API specification repository. The automatic cataloging tool may identify a base API specification that has been previously published and confirm that a change has been made. The base API specification may correspond to a particular API development branch that has been updated. The automatic cataloging tool may also apply a versioning strategy to automatically determine an updated version number for the updated API specification. The application exchange platform may then replace the previous API specification with the updated API specification and the updated version number.

Abstract: Disclosed herein are system, method, and computer-readable medium embodiments for providing the ability to automate identification of endpoints of an API for potential health checks based on machine learning and/or similarity search algorithms. The algorithms analyze an API specification according to the algorithm's training and/or search among reference APIs. Rather than having to manually generate health check tests for the web service, a test developer can interact with a test service through a web browser and provide the service an API specification. The test service then can automatically rank identified endpoints according to a ranking system as well as automate health checks by automatically preparing the health check code according to each identified endpoint.

Abstract: A computer implemented method manages access to resources of a cloud platform. The method includes retrieving, at a computing device of the cloud platform, context data and load policies for a requestor and an identified resource, combining, by the computing device, loaded policies with context data into a combined data structure, evaluating, by the computing device, a resource request and apply policies for requestor based on role of requestor using the combined data structure, generating, by the computing device, resource permissions for the requestor, and returning, by the computing device, resource permissions to the requestor.

Abstract: Methods, systems, and devices supporting detecting and processing conceptual queries are described. A device (e.g., an application server) may receive a search query from a user device. The search query may include one or more parameters. The device may tag the search query using one or more tags associated with the one or more parameters. In some examples, the one or more tags may be determined based on a neural network. The device may determine that the search query is supported as a conceptual query based on a tag of the one or more tags corresponding to a data object stored in a database. The device may then generate a database query in a query language based on the search query, retrieve a set of results for the search query using the database query in the query language, and transmit the set of results to the user device.

Abstract: Disclosed herein are system, method, and device embodiments for implementing dynamic codeless logging in an integration platform system. An integration platform may provide a declaratively-configurable asset pre-configured to implement a logging functionality associated with a log point, package the declaratively-configurable asset within an integration application, and receive a selection of the log point associated with the declaratively-configurable asset. In addition, the integration application may generate log information corresponding to the log point based on the selection of the log point and the logging functionality. Further, the integration platform may present the log information within a graphical user interface.

Abstract: A system deploys software artifacts in data centers created in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system allows service owners to define shared pipelines that can be invoked by multiple parent pipelines. The system receives an artifact version map associating datacenter entities with services targeted for deployment on the datacenter entities. The artifact version map specifies attributes associated with invocations of the shared pipeline. The system generates deployment pipelines based on the artifact version map. The deployment pipelines allow a parent pipeline that invokes the shared pipeline to specify attributes including version of the shared pipeline, versions of software artifacts used by the shared pipeline, values of parameters used by the shared pipeline, or promotion criteria used by the shared pipeline.

Abstract: A system and method for customized scheduling of sources, including breaking down a source of content into at least two categories, including posts and engagements, and gathering content related to a specific source. A scheduler handles scheduling of posts and engagement for a single source and entities that are due to be crawled are sent to a scheduling queue, in which each content type for a source can have its own queue. A process points to the correct scheduler queue in order to request content to be crawled, attaches to the proper queue, processes requests, queries the social network for content, parses the response and sends any new data to be saved to the system.

Abstract: Disclosed herein are system, method, and computer program product embodiments for slide grid snapping for presentations slides in a cloud collaboration platform. An embodiment operates by displaying a slide made up of rows and columns of pixels, receiving inputs to select and move an object, interpreting the movement, based on proximity to particular rows and columns, places the object along the particular row and column of pixels, and rendering the resulting slide. By serializing and coordinating design actions using the slide grid, the ease of design and the efficiency of the user experience may be enhanced. The grid system further allows users to comment anywhere in the document, associating those comments with objects or layers, and adjusting or moving the comments in response to grid-based actions.

Abstract: Techniques are disclosed in which a server computer system manages a database cache for multiple different tenants. The system may retrieve, from a database cache storing data for different tenants, a set of key-value entries and cache metadata for the set of key-value entries. Further, the system may identify, based on analyzing keys of key-value entries, tenants corresponding to respective ones of the set of key-value entries. The system may generate, based on the identified tenants and cache metadata for cache entries corresponding to the identified tenants, current usage metrics for the database cache. Based on the current usage metrics for the cache, the system may determine whether to adjust one or more operation parameters of the cache. Disclosed cache management techniques may advantageously allow for analysis of cache usage metrics for individual tenants and more efficient use of the cache (e.g., by altering cache parameters for individual tenants).

Abstract: Systems and method are provided for receiving, at a virtualized management operation engine (VMOE) of a distributed system, a management task request from a client for one or more services. The management task request may be to an orchestrator of a first application server of one or more application servers of the distributed system. The first application server having the orchestrator may determine whether the management task request is valid. The first application server having the orchestrator may generate a request message based on the valid management task request. A message bus may broadcast the generated request message to one or more agents of the one or more application servers of the distributed system. The one or more agents may execute an operation based on the request message when the request message is intended for the one or more agents.