Abstract: Web applications, systems and services, which are prone to cyber-attacks, can utilize an adaptive fuzzing system and methodology to intelligently employ fuzzer technology to test web site pages for vulnerabilities. A breadth first search and minimal fuzzing testing is performed on identified pages of a web site looking for either a vulnerability or the potential for a vulnerability. Heuristics are gathered and/or generated on each tested web page to determine a vulnerability score for the page that is an indication of the page's potential for hosting a vulnerability. When a page is discovered with a vulnerability score that indicates the page has the potential for a vulnerability a depth first search and expanded fuzzing testing is performed on one or more branches of the web site that begin with the page with the potential vulnerability.

Abstract: Query suggestions are generated based on a Breadth-First-Search having a configurable decaying radius. A computer system receives an initial set of semantically similar queries. The computer system expands the set to include related terms. The set of related terms is included in the initial set. The expansion process is repeated for each query or related term in the set. The radius may be reduced for each subsequent related term added to the query. The process may stop when the radius reaches a specified threshold, e.g., a predetermined number of queries or terms for the set is reached. The set includes the related terms and search queries. The set may be used for, among other things, suggesting related terms to a researcher, improving search engine performance, or selecting appropriate advertisements.

Abstract: Query suggestions are generated based on a Breadth-First-Search having a configurable decaying radius. A computer system receives an initial set of semantically similar queries. The computer system expands the set to include related terms. The set of related terms is included in the initial set. The expansion process is repeated for each query or related term in the set. The radius may be reduced for each subsequent related term added to the query. The process may stop when the radius reaches a specified threshold, e.g., a predetermined number of queries or terms for the set is reached. The set includes the related terms and search queries. The set may be used for, among other things, suggesting related terms to a researcher, improving search engine performance, or selecting appropriate advertisements.

Abstract: Systems and methods are provided for monitoring the performance of a network with respect to providing results for user requests. A user request can correspond to a search query, an entry of a uniform resource locator (URL) or other address for a document on a network, or another type of request. A plurality of user requests are aggregated, such as based on logs of search query or browsing activity. A representative group of user is selected and then submitted in order to evaluate the results provided. Based on a heuristic analysis of the results, an alert can be provided to indicate potential performance problems in the network environment.

Abstract: Web applications, systems and services, which are prone to cyber-attacks, can utilize an adaptive fuzzing system and methodology to intelligently employ fuzzer technology to test web site pages for vulnerabilities. A breadth first search and minimal fuzzing testing is performed on identified pages of a web site looking for either a vulnerability or the potential for a vulnerability. Heuristics are gathered and/or generated on each tested web page to determine a vulnerability score for the page that is an indication of the page's potential for hosting a vulnerability. When a page is discovered with a vulnerability score that indicates the page has the potential for a vulnerability a depth first search and expanded fuzzing testing is performed on one or more branches of the web site that begin with the page with the potential vulnerability.

Abstract: Outlier images—those images that differ substantially from other images in a set—can be automatically identified. One or more penalty values can be assigned to each image that quantifies how different that image is from others in the set. A threshold can be determined based on the set of penalty values. Each image whose penalty values are above the threshold is an outlier image. The penalty values can be the sum of per-pixel penalty values multiplied by the number of pixels with nonzero penalty values. A per-pixel penalty value can be the difference between a color value for that pixel and a predetermined range of color values, based on corresponding pixels in other images. The per-pixel penalty value can be determined for each component color and then optionally summed together. The threshold penalty values can be adjusted to provide for greater, or less, sensitivity to differences among the images.

Abstract: An image may be accepted from a vendor, and the image may be submitted to an image analysis system. The image analysis system may determine whether the image is a not found image or a true image. The determination may occur in a variety of ways by examining the color and intensity characteristics of an image. After the analysis, a determination is received from the image analysis system of whether the image is a not found image or a true image.

Abstract: Outlier images—those images that differ substantially from other images in a set—can be automatically identified. One or more penalty values can be assigned to each image that quantifies how different that image is from others in the set. A threshold can be determined based on the set of penalty values. Each image whose penalty values are above the threshold is an outlier image. The penalty values can be the sum of per-pixel penalty values multiplied by the number of pixels with nonzero penalty values. A per-pixel penalty value can be the difference between a color value for that pixel and a predetermined range of color values, based on corresponding pixels in other images. The per-pixel penalty value can be determined for each component color and then optionally summed together. The threshold penalty values can be adjusted to provide for greater, or less, sensitivity to differences among the images.

Abstract: An image may be accepted from a vendor, and the image may be submitted to an image analysis system. The image analysis system may determine whether the image is a not found image or a true image. The determination may occur in a variety of ways by examining the color and intensity characteristics of an image. After the analysis, a determination is received from the image analysis system of whether the image is a not found image or a true image.

Abstract: A simulation may be performed to assess availability of a service in the event of various types of failures. A specification may describe a behavior to be induced on a machine, and a formula under which availability is to be measured. A controller processes the specification and dispatches a request to induce the behavior to a machine on which the behavior is to be induced. An agent on that machine may look up a routine in a simulation library and may use the routine to induce the behavior. Data, such as performance counter values, are collected before, during, and/or after occurrence of the behavior, and are transmitted back to the controller. A report generator applies the formula contained in the specification to the data received to calculate the availability metric, and produces a report containing that metric.

Abstract: Techniques are described herein for determining whether data sets of real information in databases indicate PII information. The data sets are stored in a first table and parsed for keywords related to the names of data items in the sets. The keywords are stored in the second table in a many-to-many relationship with related data items in the first table. The number of times the keywords are parsed from the data items is counted, as well as the number of times each keyword is associated with a PII-designated data item. The counted numbers are then used in analyzing new data sets to identify the likelihood that the new data sets contain any PII data items.

Abstract: Information such as financial information related to one or more accounts of one or more business units is compiled. The compiled information is converted into a predefined format and is uploaded on a database. One or more views of the information included in the database are generated based on user privileges. Customized views of the information are used by one or more users to monitor the performance of business units.

Abstract: A simulation may be performed to assess availability of a service in the event of various types of failures. A specification may describe a behavior to be induced on a machine, and a formula under which availability is to be measured. A controller processes the specification and dispatches a request to induce the behavior to a machine on which the behavior is to be induced. An agent on that machine may look up a routine in a simulation library and may use the routine to induce the behavior. Data, such as performance counter values, are collected before, during, and/or after occurrence of the behavior, and are transmitted back to the controller. A report generator applies the formula contained in the specification to the data received to calculate the availability metric, and produces a report containing that metric.

Abstract: A system or method receives a request to generate a test token. The request identifies a token template that contains information regarding the token to be generated. The system or method identifies the information contained in the token template and generates the requested token based on the information contained in the token template. The generated token may be a defective token.

Abstract: A system, method and computer program product to manage attestations. The attestations may be required for documents that include, for example, balance sheet accounts including financial information related to one or more business units of an organization. The system includes a database and one or more user interfaces. The database includes information related to one or more documents. The user interfaces are connected to the database and enable the users to interact with the database. The users may provide a positive or negative attestation corresponding to each document. Further, the users may add comments related to, for example, the positive or negative attestation. The attestations made by the users may be recorded in the database for future reference.

Abstract: Information such as financial information related to one or more accounts of one or more business units is compiled. The compiled information is converted into a predefined format and is uploaded on a database. One or more views of the information included in the database are generated based on user privileges. Customized views of the information are used by one or more users to monitor the performance of business units.

Abstract: A system or method receives a request to generate a test token. The request identifies a token template that contains information regarding the token to be generated. The system or method identifies the information contained in the token template and generates the requested token based on the information contained in the token template. The generated token may be a defective token.

Abstract: A system is disclosed for implementing a corporate business continuity plan in which a plurality of governance rules are maintained and updated for one or more business locations. The governance rules establish business continuity responsibilities that are, in turn, assigned to designated employees for periodic or occasional action. Each designated employee is responsible for performing their assigned business continuity responsibilities and submitting statuses of such responsibilities to the system according to established timelines. One or more business continuity readiness indicators are then generated based on the submitted statuses.