Abstract: A technique is directed to ascertaining application test coverage. The technique involves receiving a command to test an application having a set of unmarked sections and a set of marked sections. The command includes a selection parameter that requests at least one of unmarked section coverage results and marked section coverage results. The technique further involves running a test procedure that operates the application to generate section coverage data. The technique further involves, after running the test procedure, generating application coverage results from the section coverage data. The application coverage results describes test procedure coverage of at least one of the set of unmarked sections of the application and the set of marked sections of the application based on the selection parameter of the command.

Abstract: A system for automatically monitoring efficacy of security controls in a computer network, including a probe engine configurable with at least one set of rules relating to access permissions to data in the computer network, at least one security probe forming part of the probe engine and operative to automatically place, at at least one storage location within the computer network and with access permissions that are non-compliant with the at least one set of rules, simulated data corresponding to the data in the computer network and attempt to access the simulated data following the placement thereof, using access privileges satisfying the non-compliant access permissions, and a security monitoring and reporting module operative to provide a user sensible output indicating at least whether the attempt to access the simulated data was successful and, if so, reporting mitigating activities by the security controls in response to the successful attempt.

Abstract: A diagnostics collection script is included in a container image. When an original instance of the container fails, a new instance of the container is started using the container image using a Docker compose YAML file having the diagnostics collection script as an entrypoint. The diagnostics collection script is configured to collect the logs of the original (now failed) container during the container start operation. In this manner, the container is able to be started in a safe mode and is isolated to only run the diagnostics collection script without disturbing the container's original settings. By recreating the exact environment of the failed container, and running diagnostics on the environment, it is possible to obtain the log files from the original container as well as to implement diagnostic operations on the environment of the original container, which can then be used to help diagnose why the original container failed.

Abstract: Techniques are provided to prevent or allow the execution of a file from a copy device, such as a shadow copy device, depending on whether the file includes malicious code or trusted code. Redirection techniques may be used to cause a file (stored in the copy device) to be analyzed for malicious code at an original volume, rather than being analyzed at or executed from the copy device.

Abstract: Techniques are described for providing a policy refiner application used to analyze and recommend modifications to identity and access management policies created by users of a cloud provider network (e.g., to move the policies toward least-privilege permissions). A policy refiner application receives as input a policy to analyze, and a log of events related to activity associated with one or more accounts of a cloud provider network. The policy refiner application can identify, from the log of events, actions that were permitted based on particular statements contained in the policy. Based on field values contained in the corresponding events, the policy refiner application generates an abstraction of the field values, where the abstraction of the field values may represent a more restrictive version of the field from a policy perspective. These abstractions can be presented to users as recommendations for modifying their policy to reduce the privileges granted by the policy.

Abstract: In aspects of display photo update recommendations, a catalyst is identified for updating a display photo of a user on a social media website. Further, a first collection of photos that are associated with the catalyst are retrieved from a photo gallery maintained in memory of a computing device. Using a machine learning model trained on a second collection of display photos utilized by connections of the user on the social media website, one or criteria are determined for display photos. Moreover, candidate display photos that satisfy the one or more criteria are identified from the first collection of photos and output to the photo gallery.

Abstract: A method includes generating a surgical plan for installation of a structure at a bone and controlling a controllable guide structure to guide a cutting tool to sculpt the bone and the structure based on the surgical plan. Sculpting the bone provides the bone with a bone mating surface and sculpting the structure provides the structure with a structure mating surface. The method also includes installing the structure on the bone by engaging the structure mating surface of the structure with the bone mating surface of the bone.

Abstract: Techniques are described for determining a likelihood that a customer communication is fraudulent using one or more machine learning models. For example, a computing system includes a memory and one or more processors in communication with the memory. The one or more processors are configured to: receive a set of emotion factor values for communication data of a current communication associated with a customer, wherein each emotion factor value indicates a measure of a particular emotion factor in the current communication; classify, using an emotion variance model running on the one or more processors, the current communication into an emotional fraud category based on the set of emotion factor values for the current communication associated with the customer; and determine a risk score for the current communication indicative of a probability that the current communication is fraudulent based on at least the emotional fraud category for the current communication.

Abstract: This disclosure relates to multispecific antibodies (e.g., bispecific antibodies) or antigenbinding fragments thereof. In one aspect, the multispecific antibodies or antigen-binding fragments thereof binds to CD3, Claudin 18.2, or a combination thereof.

Abstract: An apparatus to facilitate hardware enhancements for double precision systolic support is disclosed. The apparatus includes matrix acceleration hardware having double-precision (DP) matrix multiplication circuitry including a multiplier circuits to multiply pairs of input source operands in a DP floating-point format; adders to receive multiplier outputs from the multiplier circuits and accumulate the multiplier outputs in a high precision intermediate format; an accumulator circuit to accumulate adder outputs from the adders with at least one of a third global source operand on a first pass of the DP matrix multiplication circuitry or an intermediate result from the first pass on a second pass of the DP matrix multiplication circuitry, wherein the accumulator circuit to generate an accumulator output in the high precision intermediate format; and a down conversion and rounding circuit to down convert and round an output of the second pass as final result in the DP floating-point format.

Abstract: Techniques for personalized digital content generation are described and are implementable to generate digital content based on content that depicts a scene from one or more locations and content that depicts one or more individuals. The described implementations, for instance, enable generation of a personalized photo album for a user depicting the user at the one or more locations. The described implementations further enable generation of an itinerary including personalized digital content. In an example, an input including a location is received. Environment content is generated that depicts a scene of the location. User content is generated that includes a representation of one or more individuals. Personalized content is then generated by incorporating the representation of the one or more individuals into the scene, and the personalized content is output for display. The personalized content is further usable to generate a personalized itinerary for a user.

Abstract: In aspects of variable concurrent access to content of a device by multiple devices, content of a primary device is detected as being accessed concurrently by a primary user via the primary device and by a secondary user via a secondary device communicatively coupled to the primary device. Unrestricted access to the content of the primary device is provided to the primary device and restricted access to the content of the primary device is provided to the secondary device. The restricted access prevents the secondary user from accessing a subset of the content of the primary device. A first portion of the content of the primary device is output via the primary device. Further, a second portion of the content of the primary device is caused to be output by the secondary device while the primary device outputs the first portion of the content.

Abstract: A method, computing device, and non-transitory machine-readable medium for detecting malware attacks and mitigating data loss. In various embodiments, an agent is implemented in the operating system of a storage node to provide protection at the bottommost level in a data write path. The agent intercepts write requests and observes file events over time to detect anomalous behavior. For example, the agent may monitor incoming write requests and, when an incoming write request is detected, determine whether the file is associated with a malware attack risk based on an analysis of an encryption state of data in the file.

Abstract: Techniques for notification handling based on identity and physical presence are described and may be implemented to determine whether to route a notification from a first device (e.g., a mobile device) to a second device (e.g., a display device) for output at the second device. Generally, the described implementations utilize sensor data captured at a physical location to detect and/or identify persons present at the physical location and to determine whether to route notifications between devices based on the detected persons/identities.

Abstract: Techniques for personalized product recommendations based on an itinerary are described and are implementable to generate a recommendation for a good and/or service based on product data associated with a destination. The described implementations, for instance, enable generation of a recommendation for a user to acquire the good and/or service prior to visiting the destination based on digital content associated with the destination. The described implementations further enable generation of synthetic digital content that depicts the user at the destination with the good and/or service. Additionally, the techniques described herein include a monitoring system that is operable to detect a development related to the destination, and generate an updated recommendation based on the development.

Abstract: In some examples, a device includes a first processing core comprising a resistive memory array to perform an analog computation, and a digital processing core comprising a digital memory programmable with different values to perform different computations responsive to respective different conditions. The device further includes a controller to selectively apply input data to the first processing core and the digital processing core.

Abstract: A data storage method and system comprising: at least two servers that comprise a storage volume and configured to run an operating system designated to host data accessible and exposable over a data plane (DP) network, at least one orchestrator configured to interact with each of said servers and designated to control a control plane (CP) of said DP network, wherein each server is configured to manage its own DP components, wherein the orchestrator is configured to utilize the CP in order to take at least one consistency group snapshot, and further configured to manage an suspension and resumption in order to provide a consistent snapshotting of the volumes in a particular point in time.

Abstract: The present invention relates to eliciting an immune response in a subject by sole administration of an adjuvant, wherein the adjuvant is associated with a population of polymersomes.

Abstract: Techniques for digital content capture recommendations are described and are implementable to generate a recommendation for a digital content capture at a particular location based on capture data stored in a database. The described implementations enable generation of a recommendation including a suggested location, time of day, date, and/or various device configuration settings to capture an instance of digital content such as a photograph. For instance, a request for a recommendation for a digital content capture at a particular location is received. A database including capture data associated with digital content captured at the particular location is accessed, and the recommendation is generated based on the capture data. The recommendation is then displayed in a user interface of a client device.

Abstract: A method implements evidence network navigation. The method includes receiving a user input corresponding to an entity of an ontology library; and generating an evidence graph using the user input, wherein the evidence graph includes an evidence node representing the entity from the ontology library and includes an evidence edge representing a file that includes the entity in a result graph, and wherein the result graph includes a result node representing the entity and a result edge representing a semantic relationship of the result node in a sentence from the file. The method further includes presenting the evidence graph.