Abstract: An approach to generating end-to-end visualizations of invocations from coarse granular application programming interface (API) requests within a containerized environment may be presented. A coarse-granular API request may be intercepted. The coarse-granular API request may receive a unique identifier, which will be assigned to all invocations associated with the coarse-granular API request. Any invocations associated with the coarse-granular API within the containerized environment may be monitored. Detected invocations resulting from the coarse-granular API request may be annotated with a sequence number and the unique ID of the associated coarse-granular API request. An invocation flow for the coarse-granular API request may be generated based on the unique ID, relationship between the invocations and microservices, and the sequence number of the invocations.

Abstract: Techniques are disclosed for implementing system calls in a virtualized computing environment. An interface is configured to abstract partitions in the virtualized computing environment. A system call is received that is to be executed across a system boundary in a localized computing environment. Based on a declarative policy, one or more of a device type, device path, or process identity associated with the system call is determined. The system call is executed in the virtualized computing environment.

Abstract: An example operation may include a method comprising one or more of receiving a VNF instance creation request from a NFVO, retrieving one or more VNFC Module LCM scripts and software loads, reserving one or more NFVI VM/container resources required for a VNF instance, instantiating one or more VNFCIs associated with the VNF instance wherein installation includes at least one or more of deploying the one or more VNFC module LCM scripts and software loads to the one or more reserved NFVI VM/containers, installing the VNFC modules on the one or more VM/containers, and starting the VNFC modules on the one or more VM/containers, sending a VNF instance creation completed notification.

Abstract: The present disclosure involves systems, software, and computer implemented methods for resolving data location for queries in a multi-system instance landscape. One example method includes receiving a request for data for at least one entity that includes a qualified identifier that includes a system tenant qualifier and a local identifier. The system tenant qualifier identifies a system tenant in a multi-system tenant landscape and the local identifier identifies an entity instance of an entity in the system tenant. A routing policy table configured for the multi-system tenant landscape is identified and a cell is located in the routing policy table that corresponds to the entity and the system tenant. A routing policy is determined for routing the request based on the cell. The routing policy is used to determine a target system tenant to which to route the request and the request is provided to the target system tenant.

Abstract: Disclosed embodiments are directed at systems, methods, and architecture for providing execution order and execution for plugins installed on an API gateway associated with a microservices application. In application architectures where features of microservices are implemented as plugins and migrated to an API gateway, the relevant APIs are able to be built lighter weight than otherwise. However, the migration of the features to plugins introduces the potential for error states in the microservice application. To resolve the potential issues, the API gateway takes into consideration a set of native instructions in each of the plugins to determine the execution order thereof. The execution order is determined dynamically in response to requests by the APIs of the microservice application.

Abstract: A system determines that resource activity notifications, including at least a first notification and a second notification, are to be sent to a client device operated by a user. The first notification includes a first user interface element, and the second notification includes a second user interface element. The system determines, based on content of the resource activity notifications, that a subset of the resource activity notifications are contextually related, the subset including at least the first notification and the second notification. The system provides the first subset of the resource activity notifications to the client device as a first group, thus enabling the user to operate a user interface of the client device to select the first user interface element to take a first action and to select the second user interface element to take a second action.

Abstract: Disclosed is an execution information sharing system that duplicates execution information to a provider target (and other targets) as it is being loaded to a consumer target. A consumer account of a data sharing platform executes an application shared with it by a provider account of the platform. Consumer and provider configurations indicating consumer and provider targets respectively are generated. The consumer configuration and provider configurations are provided to an event context to generate a first and second event unloaders respectively, wherein the event context maintains a mapping linking both the first event unloader and the second event unloader to the application. In response to receiving execution information from the application, the first event unloader and the second event unloader are retrieved. The execution information is then written to the consumer target and the provider target using the first event unloader and the second event unloader respectively.

Abstract: A data processing method and apparatus, where one or more applications run in an operating system of a first device, there is a plurality of paths between the first device and a second device, and the paths correspond to the one or more applications. In a data receiving process, the one or more applications obtain data on the paths through a system call, and further obtain data in a plurality of packets from at least one path. In a data sending process, the one or more applications distribute data to corresponding paths through a system call.

Abstract: A method and system for automatically retrieving and integrating one or more supplemental software programs into at least one of an existing software program may include receiving a request to open a document via the existing software program, retrieving a list of supplemental software programs for the document, the list of supplemental software programs including an identification for each of the supplemental software programs and an application source from which the supplemental software programs can be retrieved, embedding the list of supplemental software programs into a data structure for the document, embedding a program for processing the list of supplemental software programs into a data structure for the document, and transmitting the data structure to a component for processing. The program is configured to retrieve the supplemental software programs from the application source and automatically integrate the supplemental software programs into the data structure.

Abstract: A method is described. The method includes calculating electric and/or magnetic fields in free space in response to: i) respective positions and motions of one or more charges and/or one or more current loops in the free space; ii) charges on nodes in the electrical circuit in the free space; iii) charge motions in the electrical circuit. The method includes calculating new respective positions and motions of the one or more charges and/or one or more current loops in the free space in response to respective forces applied to the one or more charges and/or the one or more current loops by the electric and/or magnetic fields. The method includes calculating new charges on nodes within the electrical circuit and new charge motions within the electrical circuit in response to the new positions and motions of the one or more charges and/or one or more current loops in free space, the charges on the nodes in the electrical circuit and the charge motions in the electrical circuit.

Abstract: Methods and systems for securing an application programming interface (API) are presented. The method comprises: receiving API workflow data associated with an API testing tool and generating a scan configuration file using the API workflow data; crawling the collection of API requests by identifying and retrieving a link associated with the collection of API requests; and crawling the link to generate a crawled link response. The method also includes executing one or more vulnerability tests on the crawled link response including applying at least one passive detection rule to the crawled link response and fuzzing the link. The fuzzed link may be transmitted in a request to an application server following which scan data indicative of at least one vulnerability associated with a response from the application server may be generated. The scan data may be used to generate a vulnerability report.

Abstract: Some embodiments provide a method for distributing a set of parameters associated with policies for authorizing Application Programming Interface (API) calls to an application. For a previously stored hierarchical first document that comprises a first set of elements in a first hierarchical structure, the method receives a hierarchical update second document that comprises a second set of elements in a second hierarchical structure corresponding to the first hierarchical structure, wherein at least a subset of elements in the first and the second documents correspond to the set of parameters for evaluating API calls. The method receives a first set of hash values for elements of the first document that are not specified in the second document, and generates a second set of hash values for a set of elements specified in the second document. The method generates an overall hash for the second document by using the received first set of hash values and the generated second set of hash values.

Abstract: Embodiments are directed to managing operations over a network. An event associated with network operations may be provided. A hash function may generate key values that correspond to words included in message information associated with the event. A message vector may be generated based on the key values such that each component in the message vector that corresponds to a key value is set to one. Group vectors may be determined such that each group vector is associated with an event group. Similarity scores may be generated for the group vectors based on the message vector and the group vectors such that each group vector corresponds to a separate similarity score. If the similarity scores exceed a threshold, the event may be associated with event groups associated with a group vector that correspond similarity score that exceeds the threshold.

Abstract: In an example, a method can include determining, at a first inter-partition messenger, a message type for a message generated by a first application. The first inter-partition messenger and the first application can reside on a first virtual machine. The method can include identifying, at the first inter-partition messenger, a second application that is to receive the message based on the message type and message subscription data, generating, at the first inter-partition messenger, message routing data for routing of the message from the first virtual machine to the second virtual machine, causing, at the first inter-partition messenger, the message to be routed from the first virtual machine to the second virtual machine based on the message routing data, and receiving, at the second inter-partition messenger, the message for use thereof by the second application. The second inter-partition messenger and the second application can reside on the second virtual machine.

Abstract: This application discloses an authorization revocation method and an apparatus, and relates to the communications field. An example method includes: receiving, by a first entity, an authorization revocation request message from a second entity, wherein the authorization revocation request message carries an identifier of an application programming interface (API) invocation entity; and sending, by the first entity, an authorization revocation response message to the second entity based on the authorization revocation request message, wherein the authorization revocation response message indicates that authorization revocation succeeds or fails.

Abstract: In some examples, a computing device may receive a user request and may determine a user jurisdiction associated with the received user request. Based at least on a request type and the user jurisdiction, the computing device may select a first policy file from among a plurality of policy files, the plurality of policy files preconfigured for respective different combinations of at least the request type and the user jurisdiction to contain at least one data action for instructing at least one respective target subsystem to perform the at least one data action in response to a respective user request. In addition, the computing device may send, based on a data action included in the first policy file, at least one instruction to at least one target subsystem.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for automated management of campaigns using scripted rules.

Abstract: Embodiments of this application relate to the field of communications technologies, and disclose an application programming interface (API) topology hiding method, a device, and a system. A common API framework core function (CCF) receives, from a topology hiding request entity, a request message that includes information about an API and that is used to request to hide an API exposing function (AEF) that provides the API. Based on the request message, a topology hiding entry point used by an API invoker to invoke the API is determined. An identifier of the API and an identifier of the AEF that provides the API are sent to the topology hiding entry point so that the topology hiding entry point hides the AEF that provides the API.

Abstract: This disclosure relates to method and system for generating and rendering a customized dashboard. The method includes initiating a schema-less dashboard canvas through a frontend application that invokes a server-less library. The method further includes integrating a set of widgets selected by a user, from the plurality of native widgets and from the plurality of third-party widgets, with the schema-less dashboard canvas using the server-less library. The method further includes generating metadata for each of the set of widgets based on a corresponding configuration performed by the user. The method further includes associating the metadata with a user account of the user for subsequent rendering of the customized dashboard for the user.

Abstract: A system, comprising a memory and a processor, where the processor is in communication with the memory, is configured to receive a request to determine a compatibility of a first version of an application programming interface (API) with a second version of the API. Next, a model of the first version of the API and a model of the second version of the API is retrieved. Each of the models is parsed to determine a first set of functionality of the first version of the API and a second set of functionality of the second version of the API. The first set of functionality is mapped to the second set of functionality to determine differences between the first set of functionality and the second set of functionality. The compatibility of the first version of the API with the second version of the API is determined based on the differences.