Abstract: A method of identifying security risks in a computer system that includes several computers executing different applications is provided. The method receives event data about threat events associated with a set of applications executing on a set of computers in the computer system. The method, for each event, compares a set of parameters associated with the event with a set of historical parameters maintained for a similar event. The method, based on the comparisons, defines a normality characterization for each event to express a probability of an exploit of the application associated with the event. The method, based on the normality characterization, defines a prioritized display of security risks due to the threat events associated with the set of application.

Abstract: A method of determining a monetary loss due to security risks associated with a plurality of applications executing on a plurality of computers in a computer system is provided. The method assigns a set of loss levels from a plurality of loss levels to each application. Each loss level in the set of loss levels corresponds to a different type of risk associated to an application. The method define a presentation that identifies a total monetary residual risk of loss due to security risks for the plurality of applications by assigning a monetary value to the set of loss levels assigned to each application. The method receives an adjustment to a loss level for at least one application. The method defines a presentation that identifies a revised total monetary residual risk of loss based on the adjustment to said at least one loss level.

Abstract: A method of monitoring tasks for reducing security risks in a computer system comprising a plurality of computers executing a plurality of applications is provided. The method based on a set of login information, displays a set of risks for a set of applications that execute on the plurality of computers and an identification of a person in a hierarchy supervised by the logged-in person assigned to mitigate each risk. The method also displays the current status of each assigned mitigation.

Abstract: Some embodiments provide a system that provisions multidimensional data storage (MDDS) cubes. The system includes a data management module for (1) accessing data from a plurality of data storages and (2) providing the data from the plurality of data storages through a unified data source for a set of MDDS cubes. The system also includes a cube provisioning module to (1) access the data from the plurality of data storages through the unified data source and (2) based on the unified data source, provision the set of MDDS cubes to a set of MDDS clients for viewing the set of MDDS cubes' data.

Abstract: Some embodiments provide a cube viewer that renders a view for a cube stored in a multidimensional data storage (MDDS). The cube viewer separately stores cube data and the presentation data that relates to the presentation of the cube. The cube viewer uses the separated cube and presentation data to generate the view of the cube.

Abstract: Some embodiments provide a cube viewer for rendering multiple cube views. The cube viewer receives cube data in response to a query to a multidimensional data storage (MDDS) that stores a MDDS cube. The cube viewer generates first and second cube views for first and second subsets of the received cube data. The cube viewer displays the first cube view related to the first subset of cube data. In response to interactions with the first cube view, the cube viewer identifies the second subset of the cube data. The cube viewer displays the previously generated second cube view related to the second subset of cube data.

Abstract: Some embodiments provide a system that provisions multidimensional data storage (MDDS) cubes. The system includes a data management module for (1) accessing data from a plurality of data storages and (2) providing the data from the plurality of data storages through a unified data source for a set of MDDS cubes. The system also includes a cube provisioning module to (1) access the data from the plurality of data storages through the unified data source and (2) based on the unified data source, provision the set of MDDS cubes to a set of MDDS clients for viewing the set of MDDS cubes' data.

Abstract: Some embodiments provide a non transitory computer readable medium that stores a program, which when executed by at least one processing unit, defines a federated multidimensional data storage (MDDS) cube. The program includes sets of instructions that define (1) a first data source view (DSV) to derive data from a first data storage in an MDDS system, (2) a set of dimensions to derive data from the first DSV, (3) a second DSV to derive data from a second data storage in the MDDS system, and (4) an MDDS cube to derive data from the set of dimensions and the second DSV.

Abstract: Some embodiments provide a program that defines a set of data source views (DSVs) that each derives data from a subset of a set of data source objects. The program defines a set of dimensions that each derives data from a first DSV in the set of DSVs. The program defines a set of multidimensional data storage (MDDS) cubes that each derives data from a subset of the set of dimensions and a second DSV in the set of DSVs. The program generates a content pack that includes a set of DSV definitions for the set of DSVs, a set of dimension definitions for the set of dimensions, and a set of MDDS cube definitions for the set of MDDS cubes. The content pack for an MDDS system to process in order to provision the set of MDDS cubes to MDDS clients for viewing the set of MDDS cubes.

Abstract: Some embodiments provide a method for updating a cube view relating to a cube stored in a cube data storage. The method displays the cube view by rendering a first cube data set relating to a first set of entities associated with the cube. The method receives a user interaction with the cube view that identifies a second set of entities associated with the cube. The method renders a second cube data set related to the second set of entities. The method then uses results of the rendering of the second cube data set to modify only a first part of the cube view while maintaining a second part of the cube view that is based on the rendering of the first cube data set.

Abstract: Some embodiments provide a system for managing multidimensional data storage (MDDS) cubes. The system includes a content pack manager for processing a content pack that specifies (1) a set of multidimensional data storage (MDDS) cube definitions for a set of MDDS cubes, (2) a set of data sources that includes data for each of the MDDS cubes in the set of MDDS cubes, and (3) a content map that includes a set of relationships between data for the set of MDDS cubes and the set of data sources. The system includes an MDDS cube manager for provisioning, based on the content pack, the set of MDDS cubes to a set of MDDS clients for viewing the set of MDDS cubes.

Abstract: Some embodiments provide a method for rendering a cube view related to a cube stored in a multidimensional data storage. The method identifies a first portion of cube data that is stored in a cube cache and a second portion of the cube data that is not stored in the cube cache. Based on the identifications, the method retrieves the second data portion of the cube data by accessing the cube data storage. The method renders the cube view for display by using the first portion from the cube cache and the second portion retrieved from the multidimensional data storage.

Abstract: Some embodiments provide a program that identifies a set of data storages that includes data for a set of data consuming entities. For each data storage, the program identifies a set of data source objects that represents data in the data storage. The program provisions a unified data source that includes the identified sets of data source objects. The program provides the identified sets of data source objects through the unified data source to the data consuming entities in order for the data consuming entities to access the data in the set of data storages.