Abstract: Optimization of job execution includes generating a hash tree for an initial dataset, executing a data processing job against the initial dataset, the job including a set of calculations against data of the records of the initial dataset, generating, based on a modification to the initial dataset to produce a modified dataset, a hash tree for the modified dataset, comparing the hash tree for the initial dataset to the hash tree for the modified dataset, and identifying one or more blocks of the modified dataset that are updated compared to the initial dataset, and re-executing the job against the modified dataset. The re-executing performs only those calculations that use data of the records of the one or more blocks that are updated compared to the initial dataset, and does not perform other calculations that do not use data of the records of the one or more blocks.

Abstract: A method, computer program product, and a system where a processor(s) intercepts a query from a client targeting a database. The processor(s) analyzes the query to determine contextual data relevant to the query and determines, based on a data masking policy, if a portion of results responsive to the intercepted query should be provided to the client as masked data. When the processor(s) determines that the portion of the results should be provided to the client as masked data, the processor(s) determines computing resources managing data comprising the results responsive to the intercepted query. The processor(s) executes the query on the computing resources by obtaining the masked data via coprocessors deployed on the computing resources, where the coprocessors mask the portion of the results. The processor(s) returns query results comprising the portion of the results masked by the coprocessors, to the client.

Abstract: Methods and systems for moving a dataset from a relational database to a non-relational database are disclosed. A method includes: copying, by a computing device, source datafiles from a relational database to each of a plurality of region servers associated with a non-relational database; generating, by the computing device, at least one table in the non-relational database from the copied source datafiles; and accessing, by the computing device, the at least one table in the non-relational database by reading raw data stored in a relational database format from the copied source datafiles on one of the plurality of region servers associated with the non-relational database.

Abstract: A method of masking data includes disabling, by one or more processors of a computer system, operation of a data structure that includes at least one data index. The method includes masking, by the one or more processors of the computer system, the data structure in a table with an isomorphic function, and enabling, by the one or more processors of the computer system, operation of the data structure.

Abstract: An approach is provided for encrypting data. Using an encryption function, values of keys in a first database table are encrypted. The encryption function is determined to be homomorphic to sorting operators. A decryption function that decrypts the encrypted keys is determined to be homomorphic to sorting operators. Responsive to the encryption and decryption functions being determined to be homomorphic, a merge join operation is selected. The merge join operation operates on the first database table and a second database table and includes the decryption function in a joining condition. Using the merge join operation, an execution of a query is optimized. The query accesses one or more data items in the first or second database table.

Abstract: A method for managing access to a web application. A request is received, by a computer system, including a tenant identifier for a tenant within a universal resource locator for the web application on a server in the computer system from a browser. A set of session cookies for the web application from the browser is received, by the computer system, wherein the set of session cookies has tenant identifiers and session identifiers. A session cookie in the set of session cookies corresponding to the tenant identifier within the universal resource locator as a selected session cookie is selected, by the computer system, when the session cookie corresponding to the tenant identifier is present in the set of session cookies. The selected session cookie is used, by the computer system, to handle the request.

Abstract: A method, computer system, and a computer program product for ensuring integrity of records in a NoSQL database including a first table and a second table is provided. The present invention may include the first table having first records representing respective first entities and the second table having second records representing respective second entities. The present invention may include using a hash table associating each second entity of the second table with the respective hash or summary hash values of first records for reading the second records of the second table.

Abstract: Optimization of job execution includes generating a hash tree for an initial dataset, executing a data processing job against the initial dataset, the job including a set of calculations against data of the records of the initial dataset, generating, based on a modification to the initial dataset to produce a modified dataset, a hash tree for the modified dataset, comparing the hash tree for the initial dataset to the hash tree for the modified dataset, and identifying one or more blocks of the modified dataset that are updated compared to the initial dataset, and re-executing the job against the modified dataset. The re-executing performs only those calculations that use data of the records of the one or more blocks that are updated compared to the initial dataset, and does not perform other calculations that do not use data of the records of the one or more blocks.

Abstract: A computer-implemented method includes: receiving, by a computer device, a database query of a database from a database client; determining, by the computer device and based on the database query, a to-be-masked portion of data; sending, by the computer device, the database query to a federated database system for the to-be-masked portion of the data; receiving, by the computer device and in response to the sending, masked resultant data from the federated database system; and forwarding, by the computer device, the masked resultant data to the database client. The to-be-masked portion of the data is masked in at least one view of the database residing on the federated database system.

Abstract: Discovering and identifying resource dependencies. Resources are discovered and managed as configuration items, wherein selected configuration items are each assigned a Uniform Resource Identifier (URI) object. The assigned URI-objects are included in configuration data structures. The configuration data structures are stored in a configuration management system. A resource accessor address and an access point address are assigned. Further, an access resolve entry object is provided that provides a function for address translations, wherein the access resolve entry object includes at least a part of the resource accessor address and at least a part of the access point address, each of them in the URI-object form.

Abstract: A method for managing access to a web application. A request is received, by a computer system, including a tenant identifier for a tenant within a universal resource locator for the web application on a server in the computer system from a browser. A set of session cookies for the web application from the browser is received, by the computer system, wherein the set of session cookies has tenant identifiers and session identifiers. A session cookie in the set of session cookies corresponding to the tenant identifier within the universal resource locator as a selected session cookie is selected, by the computer system, when the session cookie corresponding to the tenant identifier is present in the set of session cookies. The selected session cookie is used, by the computer system, to handle the request.

Abstract: Discovering and identifying resource dependencies. Resources are discovered and managed as configuration items, wherein selected configuration items are each assigned a Uniform Resource Identifier (URI) object. The assigned URI-objects are included in configuration data structures. The configuration data structures are stored in a configuration management system. A resource accessor address and an access point address are assigned. Further, an access resolve entry object is provided that provides a function for address translations, wherein the access resolve entry object includes at least a part of the resource accessor address and at least a part of the access point address, each of them in the URI-object form.