Abstract: A method of persisting results of executing search queries across multiple data sources comprises obtaining a first data object as a result of executing a first search query against one or more data sources of a plurality of heterogeneous data sources; receiving a first request to store the first data object in a repository, a specific data source of the one or more data sources and the repository having different data models; determining that a repository data object with which the first data object resolves does not exist; generating a specific repository data object as a stub data object for the first data object, comprising: creating a unique identifier based on one or more data object properties that uniquely identify the first data object; and utilizing the unique identifier in the repository as a key or index value for the specific repository data object; storing the specific repository data object.

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: A computer-implemented method comprises creating a plurality of access group identifiers each associated with one or more user account identifiers, and a plurality of classification markings each representing a different level of security classification of an electronic document; associating each account identifier with at least one classification marking; indexing, for each particular electronic document, one or more access group identifiers and one or more classification markings; receiving a search query specifying one or more document properties; obtaining a first set of classification markings associated with the search query; executing a search of the indices using a covering query that requires a specified minimum number of matches between the first set of classification markings and a second set of classification markings associated with a particular document satisfying the one or more document properties to obtain a result set of electronic documents; providing the result set in response to the searc

Abstract: A computer-implemented method comprises creating and storing a plurality of different access group identifiers each associated with one or more user account identifiers, and a plurality of different classification markings each representing a different access restriction for an electronic document, and associating each of the user account identifiers with one or more of the classification markings; indexing each particular electronic document among a plurality of different electronic documents in association with values of one or more of the access group identifiers and with an inverse list of values of the classification markings that apply to the particular electronic document in a classification index; receiving a search query that specifies one or more attributes of electronic documents; obtaining one or more first classification markings, among the plurality of classification markings, which are associated with a particular user account identifier that is associated with the search query; executing a sea

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: In an embodiment, a computer-implemented method comprises receiving a plurality of identifiers of first versions of electronic documents that have been stored in a distributed data storage system and queuing the identifiers in a queue table of a database; obtaining, from the queue table, a set of the identifiers of the first versions of the electronic documents; invoking, using the set of the identifiers, a query indexing function of a search engine system and receiving a set of matching identifiers of electronic documents, from among the set of identifiers, that match queries that have been registered using the query indexing function; storing the matching identifiers in a last-processed table; processing second versions of the electronic documents associated with the matching identifiers, using the query indexing function; updating a feed associated with a user account to show messages referring to the first versions of the electronic documents in response to determining that the second versions of the elec

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: A Standard Initial Margin Model (SIMM) is calculated and provided as an overall initial margin for non-cleared derivatives. In certain embodiments, using at least one computing device, information associated with a plurality of risk classes is acquired, and a delta margin, a vega margin, and a curvature margin for each risk class based on the acquired information associated is determined. The at least one computing device calculates initial margin for each risk class by summing the respective delta margin, the respective vega margin, and the respective curvature margin. The at least one computing device determines whether product classes will be used in calculating the overall initial margin, calculates the overall initial margin using an equation based on the determination, and provides the overall initial margin. The amount of the initial margin call for the underlying derivatives contract may then be generated based on the calculated initial margin.

Abstract: A Standard Initial Margin Model (SIMM) is calculated and provided as an overall initial margin for non-cleared derivatives. In certain embodiments, using at least one computing device, information associated with a plurality of risk classes is acquired, and a delta margin, a vega margin, and a curvature margin for each risk class based on the acquired information associated is determined. The at least one computing device calculates initial margin for each risk class by summing the respective delta margin, the respective vega margin, and the respective curvature margin. The at least one computing device determines whether product classes will be used in calculating the overall initial margin, calculates the overall initial margin using an equation based on the determination, and provides the overall initial margin. The amount of the initial margin call for the underlying derivatives contract may then be generated based on the calculated initial margin.

Abstract: Methods and apparatuses related to federated search of multiple sources with conflict resolution are disclosed. A method may comprise obtaining a set of data ontologies (e.g., types, properties, and links) associated with a plurality of heterogeneous data sources; receiving a selection of a graph comprising a plurality of graph nodes connected by one or more graph edges; and transforming the graph into one or more search queries across the plurality of heterogeneous data sources. A method may comprise obtaining a first data object as a result of executing a first search query across a plurality of heterogeneous data sources; resolving, based on one or more resolution rules, at least the first data object with a repository data object; deduplicating data associated with at least the first data object and the repository data object prior to storing the deduplicated data in a repository that has a particular data model.

Abstract: An endpoint computer in an enterprise network is configured to detect computer security threat events, such as presence of a computer virus. Upon detection of a threat event, the endpoint computer generates computer security threat data for the threat event. The threat data may include user identifiable data that can be used to identify a user in the enterprise network. The endpoint computer encrypts the user identifiable data prior to sending the threat data to a smart protection network or to an enterprise server where threat data from various enterprise networks are collected for analysis. The endpoint computer may also encrypt an identifier for the threat data and provide the encrypted identifier to the smart protection network and to an enterprise server in the enterprise network. The enterprise server may use the encrypted identifier to retrieve the threat data from the smart protection network to generate user-specific reports.

Abstract: Files of computer documents are classified into confidential levels without extracting and analyzing contents of the files. Files created by particular users may be clustered into groups of files based on file characteristics, such as file type (e.g., file extension) and file naming convention. A prediction confidential score may be generated for each group of files. A log of a file retention resource may be consulted to identify files created by users. A file created by a user may be assigned a prediction confidential score of a group of files having the same file characteristic as the file and created by the same user. The prediction confidential score may be used to determine a confidential level of the file when the file is found to be inaccessible.

Abstract: In one embodiment, an authentication protocol used in a network security service is performed over non-secure connection, such as HTTP. A router subscribing to the service may send a service request for information about a URL to a server computer providing the service. The service request may be included in a first data set posted by the router to the server computer. The first data set may be described by an HTML form and include an encrypted device authenticator used by the server computer to validate the router. The first data set may further include a server authentication code. In responding to the service request, the server computer returns the server authentication code to the router along with information about the URL. The response may be in a second data set, such as an XML document sent by the server computer to the router over an HTTP connection.

Abstract: A method and apparatus for improving the system response time when URL filtering is employed to provide security for web access. The method involves gathering the attributes of the user, and pre-populating a local URL-rating cache with URLs and corresponding ratings associated with analogous attributes from a URL cache database. Thus, the cache hit rate is higher with a pre-populated local URL rating cache, and the system response time is also improved.

Abstract: An endpoint computer in an enterprise network is configured to detect computer security threat events, such as presence of a computer virus. Upon detection of a threat event, the endpoint computer generates computer security threat data for the threat event. The threat data may include user identifiable data that can be used to identify a user in the enterprise network. The endpoint computer encrypts the user identifiable data prior to sending the threat data to a smart protection network or to an enterprise server where threat data from various enterprise networks are collected for analysis. The endpoint computer may also encrypt an identifier for the threat data and provide the encrypted identifier to the smart protection network and to an enterprise server in the enterprise network. The enterprise server may use the encrypted identifier to retrieve the threat data from the smart protection network to generate user-specific reports.

Abstract: Content, such as confidential information of an organization, may be protected by automatically categorizing the content. The automatic categorization may be performed by calculating a sensititiy score of the content, the sensitivity score being indicative of whether or not the content is confidential. The sensitivity score may be compared to a threshold. Metadata of the content may be provided to collaborating computers outside the computer network where the content was created. The collaborating computers may compare the metadata to received content to determine if the received content discloses confidential information described by the metadata.

Abstract: In one embodiment, an authentication protocol used in a network security service is performed over non-secure connection, such as HTTP. A router subscribing to the service may send a service request for information about a URL to a server computer providing the service. The service request may be included in a first data set posted by the router to the server computer. The first data set may be described by an HTML form and include an encrypted device authenticator used by the server computer to validate the router. The first data set may further include a server authentication code. In responding to the service request, the server computer returns the server authentication code to the router along with information about the URL. The response may be in a second data set, such as an XML document sent by the server computer to the router over an HTTP connection.

Abstract: Methods and apparatus for rating Uniform Resource Locators (URLs) are disclosed. The method includes determining a request size pertaining to a length of the URL to be rated and for generating a rating request message containing the URL. The rating request message is a DNS (domain name system) message if the request size is less than or equal to a predefined size limitation, and the rating request message is a HTTP (hypertext transfer protocol) message if the request size is greater than the predefined size limitation.