Abstract: A method for detecting a current attack in a computerized environment is automatically performed by one or more computerized hosts (50) of the computerized environment. The method comprises generating a signature (22) which is specific for a type of activity in the computerized environment based on historic data (20, 21) of the activity, the signature (22) specifying averaged normalized numbers of occurrences of the activity per time frame of a plurality of recurring time frames. The method further comprises determining a threshold value for the activity based on the historic data of the activity and a statistical measure. The method further comprises monitoring current data of the activity in the computerized environment, and generating an attack detection alert based on determining that the current data of the activity exceeds the threshold value for a current time frame.

Abstract: Systems, methods, and computer program products for aggregating data from related database records. A booking folder database stores a plurality of booking folder records. Each booking folder record links reservation records and other data relating to a particular trip or group of trips by storing identifiers identifying the reservation records to be linked. To view or modify a trip, a client application may search the database for a booking folder record matching a search term. Based on the identifiers in the matching booking folder record, the client application may retrieve the linked reservation records, and aggregate the reservation records into a single booking folder view of the entire trip. To modify the itinerary of the trip, the client application may add or remove links from the booking folder record, or modify the linked reservation records.