Abstract: A server includes a triple processor with instructions executed by a processor to receive an input document, read and store document restrictions for the input document, specify a first triple permutation, and produce for each triple in the input document a record of the triple in accordance with the first triple permutation and the position of the triple in the document. The server also includes a query processor with instructions executed by a processor to receive a query, match components of the query to triples in a triple repository to form initial triples, remove triples from the initial triples in accordance with document restrictions associated with the triples to form final triples, and return the final triples.

Abstract: In one aspect, in general, a computer-implemented method includes receiving an order-dependent list of rules generating a binary decision diagram based on the order-dependent list of rules, the binary decision diagram including decision nodes that include expressions including Boolean operators and operands, and generating an order-independent list of rules based on the binary decision diagram.

Abstract: System and method for data cleansing are disclosed. The method comprises receiving one or more data records pre-categorized into one or more categories. Identifying at least one concept associated with one or more data records, and grouping, the at least one concept associated with the one or more data records into a plurality of category lists based on the predefined category associated with each of the one or more data records. Determining, one or more intersection sets based on a comparison between each pair of the plurality of category lists, wherein each intersection set comprises a set of one or more common concepts associated with a pair of category lists. The method comprises replacing each of at least one common concept of the set of one or more common concepts associated with each intersection set by a category name based on an occurrence rate of the common concepts.

Abstract: Methods and apparatus for extracting content from an email or email thread are provided. Any replied content is removed from the email based on at least one of known delimiters and known email thread patterns used for separating original and reply emails. Any signature content is removed based on at least one of generated signature patterns for the sender and known signature patterns. Any greeting content is removed based on at least one of generated greeting patterns for the recipient and known greeting patterns. Any sent from content identifying a device or an email client from which the email was sent is removed based on known sent from content. The remaining email text can then be output for further processing, such as analyzing the text for use in augmenting a sender's implicit profile, and analyzing the text for question or answer content on specific topics.

Abstract: Methods for identifying a case with a missing decision from a set of decision rules in violation of a decision requirement are provided. The set of decision rules and decision requirement are received, and a set of decisions made by the decision rules is obtained. A decision detection constraint graph is built, which represents, for each case used by the set of decision rules, whether each decision in the set of decisions is made or not by a decision rule in the set of decision rules. A decision requirement constraint graph is built from the decision requirement, which represents, for each case used by the set of decision rules, the decisions required. For each case used by the set of decision rules, the decision requirement constraint graph and the decision detection constraint graph for the case are used to identify if the case is a case with a missing decision.

Abstract: A network device receives a plurality of framework definitions corresponding to a respective plurality of device platforms, wherein each of the device platforms comprises at least one device. The network device generates a plurality of generalized framework definitions for each of the plurality of device platforms, wherein the plurality of generalized framework definitions comprise basic linguistic components corresponding to elements in the respective plurality of framework definitions. The network device receives data from the at least one device for each of the device platforms. The network device extracts data from the received data based on the plurality of generalized framework definitions. The network device automatically identifies contexts that include at least one device for each of the at least two device platforms based on the extracted data.

Abstract: A method may include receiving an extensible markup language schema definition (XSD) including multiple elements having a datatype. Each of the multiple elements may include an attribute profile defining a presence or an absence of at least one attribute. A first two or more of the multiple elements may include a first particular attribute profile. The method may further include generating a first grammar based on the XSD. The first grammar may be associated with encoding and decoding extensible markup language (XML) documents based on the XSD to and from efficient XML interchange (EXI) streams. The first grammar may also be associated with the first particular attribute profile. The method may further include associating each of the first two or more of the multiple elements with the first grammar.

Abstract: The present invention extends to methods, systems, and computer program products for detecting events from features derived from multiple signals. In one aspect, an event detection infrastructure determines that characteristics of multiple signals, when considered collectively, indicate an event of interest to one or more parties. In another aspect, an evaluation module determines that characteristics of one or more signals indicate a possible event of interest to one or more parties. A validator then determines that characteristics of one or more other signals validate the possible event as an actual event of interest to the one or more parties. Signal features can be used to compute probabilities of events occurring.

Abstract: Systems and methods of intelligent formation and acquisition of machine learning training data for implementing an artificially intelligent dialogue system includes constructing a corpora of machine learning test corpus that comprise a plurality of historical queries and commands sampled from production logs of a deployed dialogue system; configuring training data sourcing parameters to source a corpora of raw machine learning training data from remote sources of machine learning training data; calculating efficacy metrics of the corpora of raw machine learning training data, wherein calculating the efficacy metrics includes calculating one or more of a coverage metric value and a diversity metric value of the corpora of raw machine learning training data; using the corpora of raw machine learning training data to train the at least one machine learning classifier if the calculated coverage metric value of the corpora of machine learning training data satisfies a minimum coverage metric threshold.

Abstract: A method for managing a patient medical case. The method includes: identifying, within a patient medical image of the patient medical case, a first abnormal image region; retrieving, from a reference medical case (RMC) repository and before the patient medical image is displayed to a user, a first set of reference medical cases including reference medical images matching the first abnormal image region; displaying, within a GUI, the patient medical image and at least one of the first set of reference medical cases to the user; receiving, from the user after the patient medical image is displayed, a selection of a second abnormal image region within the patient medical image; retrieving, from the RMC repository, a second set of reference medical cases including reference medical images matching the second abnormal image region; and displaying, with the GUI, at least one of the second set of reference medical cases.

Abstract: A method, apparatus and computer-usable medium for implementing business rules. According to one embodiment, a computer-implementable method includes receiving business rules for an upper level business model. The business rules express at least one of a set of modalities consisting of necessity, possibility, impossibility, obligation, permission, and prohibition. The business rules are linked to the upper level business model by matching business vocabulary entries between the business rules and the upper level business model. The business rules are transformed to generate implementation code for the business process modeled by the upper layer business model.

Abstract: A statistics-based machine translation method is disclosed. The method generates probabilities of translation from a sentence to be translated to candidate translated texts based on features of the candidate translated texts that affect the probabilities of translation and a pre-generated translation probability prediction model. The features that affect probabilities of translation include at least degrees of semantic similarity between the sentence to be translated and the candidate translated texts. A preset number of candidate translated texts with highly ranked probabilities of translation are selected to serve as translated texts of the sentence to be translated. The method is able to go deep into a semantic level of a natural language when a machine translation model is constructed to avoid a semantic deviation of a translated text from an original text, thereby achieving the effect of improving the quality of translation.

Abstract: Template-driven data access is enabled. A collection of data model component identifiers that are accessible for use by view developers may be established. View developers may specify views of the data model with a view description language and may utilize accessible data model component identifiers to reference data model components that may be rendered in the views. The views may be in accordance with a Model-View-Controller (MVC) architecture. In contrast to a conventional MVC architecture, changes to a view do not require changes to a corresponding controller. For example, view developers may create, update, modify and delete views independent of the activity of controller developers. In accordance with at least one embodiment, there is a universal controller for views specified with the view specification language and/or utilizing the predefined collection of accessible data model component identifiers.

Abstract: Various embodiments include methods for detecting software attacks on a process executing on a computing device. Various embodiment methods may include monitoring structural attributes of a plurality of virtual memory regions utilized by the process, and comparing the monitored structural attributes to the expected structural attributes of the plurality of VMRs. Various embodiment methods may further include determining whether the monitored structural attributes represent anomalous behavior of the process based on the comparison between the monitored structural attributes and the expected structural attributes.

Abstract: Systems and methods automatically determine rules for detecting malware. A fingerprint representing a file is received. A set of nearest neighbor fingerprints from at least a set of malware fingerprints that are nearest neighbors are determined. The set of malware fingerprints are analyzed to determine a representative fingerprint. A malicious file detection rule is generated based, at least in part, on the representative fingerprint.

Abstract: For example, as indicated in the Incorporated Disclosures, rapid change from relatively little use of network bandwidth, to heavy overuse of network bandwidth (combined with a large number of endpoints attempting to access that network bandwidth) can often indicate an email virus or other maladjusted use of the system. In such cases, it could be appropriate to generate an alert, and bring the change to the attention of a human expert, or otherwise escalate the problem. Best practices In this Application, the phrase “best practices,” and variants thereof, can generally refer to business preferences (and to business rules imposed by management, or law or regulation), such as high utilization preferences often expressed by management. In such cases, one or more operators can enter descriptors of rules the system that it is desired the system follow, such as “processor cycle utilization >90%.

Abstract: A reasoning engine is disclosed. Contemplated reasoning engines acquire data relating to one or more aspects of various environments. Inference engines within the reasoning engines review the acquire data, historical or current, to generate one or more hypotheses about how the aspects of the environments might be correlated, if at all. The reasoning engine can attempt to validate the hypotheses through controlling acquisition of the environment data.

Abstract: An operation management apparatus includes a storage unit and a processor. The storage unit stores therein operation scenario execution information including a first operation scenario and parallel execution information. The first operation scenario indicates an order of execution of a plurality of operation manipulations for a plurality of servers. The parallel execution information indicates whether the respective operation manipulations are to be executed in parallel with another operation manipulation. The processor acquires availability information indicating whether the respective servers are available. The processor generates execution determination information on basis of the operation scenario execution information when the availability information indicates existence of an unavailable server. The execution determination information indicates whether respective first operation manipulations are to be actually executed in execution of the first operation scenario.

Abstract: Disclosed herein are an apparatus and method for security policy management, which manages a network access policy in order to integrate distributed security policies and to apply the integrated security policy in a smart grid environment. The apparatus for security policy management includes a rule set generation unit for generating a rule set by converting predefined access policy security rules, acquired from one or more systems, into a document in a standard format, a topology extraction unit for extracting a network topology from a network diagram of the one or more systems, and a standard policy generation unit for generating a standard policy by combining the generated rule set with the extracted topology.

Abstract: In one embodiment, a method includes, by one or more server computing devices, receiving state data of a client computing device. The state data includes event data indicating events generated by or occurring at the client computing device and context data associated with the event data. The context data indicates device states of the client computing device that each coincide with one or more of the events and indicate a context of the one or more of the events. The method also includes, by one or more server computing devices, ordering the events and the device states in the event and context data into a state-data-review structure and analyzing the state-data-review structure to generate one or more recommendations on operation of the client computing device.

Abstract: Methods and systems of managing workloads and resources for tenants structured as a hierarchical tenant queue defining a resource distribution policy. The tenants are modified and the system responds with dynamic adjustments to the hierarchical tenant queue and workload distribution. A rule-based workload management engine defines rules for actions for the workload to respond to the dynamic update.

Abstract: A method, apparatus and program product for generating a business rule model. In one embodiment, there is provided a method for generating a business rule model, comprising: extracting from source code of an application system a business flow executed by the source code, the business flow comprising a plurality of business procedures that are executed in an order; analyzing parts in the source code that are associated with various business procedures among the plurality of business procedures, building rule metadata describing business rules followed by various business procedures; and generating a business rule model followed by the business flow on the basis of the order and the rule metadata. In one embodiment of the present invention, there is provided an apparatus for generating a business rule model. Accordingly, a business rule model may be automatically generated from source code of an application system without manual manipulation.

Abstract: A method includes receiving data indicative of a number of times each of one or more rules was executed by a data processing application during processing of one or more records; based on the number of times each of the rules was executed by the data processing application, determining a content criterion for each of one or more particular fields; generating content for each of the particular fields based on the content criterion; and populating each of the particular fields with the generated content.

Abstract: According to an aspect of the inventive concept, there is provided a system for detecting vulnerabilities of communication protocol software, including: a field selection module selecting message fields of a communication protocol of an industrial control system; a value set configuration module configuring first value sets with respect to the respective message fields selected by the field selection module; a test case generation module generating first test cases by Cartesian product of the first value sets; a test module generating first code coverage data by testing the communication protocol software of the industrial control system based on the first test cases; and a code coverage analysis module analyzing the first code coverage data, wherein the field selection module selects concentration message fields which influence the first code coverage data among the message fields according to an analysis result of the code coverage analysis module.

Abstract: A method and system for interrupting interconnected processes are described. An interconnected process is a process that cannot progress unless another process is complete. A Supplier Information Management (SIM) computer is logically positioned between an accounts receivable computer and an accounts payable computer. The accounts receivable computer can use the SIM computer to perform business tasks that are processes interconnected with a profile management process. The profile management process ensures that the SIM computer has complete and up to date information about an entity using the accounts receivable computer. If the SIM computer does not have complete and up to date information, the processes corresponding to business processes are interrupted until such information is provided by the accounts receivable computer.

Abstract: Techniques are disclosed for reducing the amount of data associated with code signing files in a cloud-based computing environment. In one embodiment, a cloud-based code signing component receives a request to sign a current version of a file. The request includes differences between the current version of the file and a previous version of the file. The cloud-based code signing component reconstructs the current version of the file based on the differences between the current version of the file and the previous version of the file. The cloud-based code signing component signs the reconstructed file, and determines differences between the signed file and the reconstructed file. The cloud-based code signing component transfers the differences between the signed file and the reconstructed file to a user.

Abstract: Concepts and technologies disclosed herein are for managing opt-in and opt-out for private data access. According to one aspect disclosed herein, a mobile device can receive a request to obtain private data associated with a user of the mobile device and, in response to the request, determine whether an application program associated with the request is permitted to access the private data based upon a rule. The mobile device, in response to determining that the application program is permitted to access the private data based upon the rule, can instruct the application program to proceed to obtain the private data. The mobile device, in response to determining that the application program is not permitted to access the private data based upon the rule, can instruct the application program to avoid obtaining the private data.

Abstract: A tiered caching system (e.g., in an overlay network such as CDN) wherein SWR at an edge server therein is automatically set (preferably based on request rate), while SWR at a parent server therein has its SWR set at or near 0. Collectively, these SWR settings provide for a self-adjusting tiered caching system that optimizes both end user performance and the origin traffic offload.

Abstract: The invention relates to a communication system comprising a hearing aid, a communication unit, a relay server, a rule processing server, and at least one external device, wherein the rule processing server comprises a data communication interface to communicate with said relay server and with a plurality of external devices over a plurality of data communication channels, a rule processor, and a rule base comprising a set of rules, each rule defining an action to be triggered in response to a trigger event. Said rule processor is configured to generate an action request signal in response to an event signal representing a trigger event. Said action request signal is configured to cause an action of at least one of the hearing aid, the communication unit, the relay server or the external device, and wherein said action request signal carries information that designates at least one of said devices and at least one action to be performed of said at least one device.

Abstract: A non-transitory computer-readable recording medium contains an event processing control program for event processing that processes received event data in accordance with processing rules and outputs output data. The program causes a computer to execute a process that includes obtaining first assessment values pertaining to output data by the event processing for a first type of events, periodically by a first period. A correlation coefficient value of first and second received event data is periodically calculated by a second period longer than the first period. The first and second received event data are received event data of the first type and of a second type different from the first type, respectively. A second filtering condition pertaining to the second received event data is set based on the correlation coefficient value and a first filtering condition that pertains to the first received data and is specified from the assessment values.

Abstract: Task-oriented messages are presented to a user in an interactive format for disposition. Natural language processing techniques parse task-oriented messages for individual tasks, such as assignments, information requests, and requests for approval or authorization. A user interface provides a recipient of a task-oriented message with selectable tasks for individual, or group, disposition, such as respond, defer, delegate, mark answered, and ignore. Recipients are notified if an incomplete response is generated, such as when an identified task is not dispositioned.

Abstract: Various methods and apparatuses are described for performing high speed translations of data. In an example embodiment, record layout detection can be performed for data. In another example embodiment, data pivoting prior to field-specific data processing can be performed.

Abstract: A system for performing an ad hoc query comprising a query service operating on a processor and configured to receive an ad hoc query in a domain-specific language. A query parsing service operating on the processor and configured to receive a validate request and a parse request from the query service and to return a query object to the query service. A queryable interface operating on the processor and configured to receive the query object and to transmit the query object to one or more framework services for execution. New domain key words can be introduced dynamically and matched to registered queryable services to process queries containing those key words.

Abstract: Various embodiments of the invention provide methods, systems, and computer program products for bridging a third party onto a communication such as a telephone call or Web chat that is being conducted between a first party and a second party. Specifically, a contact, such as a telephone number or webpage address, is linked with the communication being conducted between the first and second parties and a text message is sent to the third party that includes the contact. For instance, in particular embodiments, this contact may be embedded in the text message so that the third party can simply select the contact from the text message to initiate being bridged onto the communication. Accordingly, the third party makes use of the contact to be bridged onto the communication so that the third party can converse with the first party and the second party.

Abstract: A computer-implemented system and method of predictive decision-making in an ad hoc network. The computer-implemented method includes receiving a set of rules into the ad hoc network and identifying a data set for each rule. The computer-implemented method also includes selecting a first and second node from the ad hoc network to process a first and second rule as a function of the identified data set according to an optimizing algorithm. The computer-implemented method also selects a third node to receive the processed results from the first and second nodes. An indication is provided of the processed results by the third node.

Abstract: Systems and methods, are provided for self-healing solutions to problems that occur during a software build. In one embodiment, build log data structures of build data, generated during execution of a software build of a software application, are automatically monitored. The build data is automatically analyzed to detect patterns that can result in build violations. Detected patterns are automatically matched to remediation solutions stored in a knowledge database. The remediation solutions are automatically applied to the software application.

Abstract: Systems, methods and articles of manufacture are disclosed for creating, reconfiguring, and reusing business scenarios. In one embodiment, a complex event processing (CEP) tool expert generates a business scenario template using a CEP tool. Once the business scenario template is generated, a business user may generate multiple business scenario instances from the business scenario templates, without using the CEP tool and without involvement from the CEP tool expert.

Abstract: Disclosed herein are systems, methods, and software for implementing runtime experiments with user interface configurations. In at least one implementation, an online application service receives access requests associated with various client applications attempting to access the online application service. In response to the access requests, the online application service communicates with an experiment control service to identify an experimental configuration in accordance with which to present a user interface to the online application service. The experiment control service selects the experimental configuration from various experimental configurations. The user interface is then presented in accordance with the experimental configuration identified for each of the client applications.

Abstract: A method for determining a cause of events detected in a plurality of interactions includes: identifying, on a processor, a plurality of elements in the interactions; detecting, on the processor, a plurality of sequences of elements in the interactions; mining, on the processor, the plurality of sequences for generating a set of supported patterns; computing, on the processor, association rules from the set of supported patterns; and returning the computed association rules.

Abstract: A method and computer system architecture for providing to a computer user or to a downstream system a means of converting the content of documents including legal, policy, and compliance statements, using symbolic logic, into a logic ontology, which enables users to reason through the content of laws, policies, and procedures by means of automated reasoning. The system additionally includes a process for easily searching or navigating multiple facets of legal, policy, and compliance documents.

Abstract: Conflict detection and resolution methods and apparatuses relate to the field of communications technologies. The conflict detection method includes: acquiring, by a controller, a flow path of a data flow on a network, where the flow path is used to indicate a path along which the data flow reaches an address in a destination address range from an address in a source address range through at least two intermediate nodes on the network, a first flow table rule is added to or deleted from flow tables of the at least two intermediate nodes, and the first flow table rule is any flow table rule; and determining, by the controller, whether a conflict exists according to an address range of the flow path and an address range of a security policy.

Abstract: A system may read source data corresponding to a source variable and apply a transformation to the source variable to generate an output variable. The transformation may include logic, and the output variable may be configured for ingestion into a big data storage format. The system may record lineage data of the output variable that comprises the transformation and/or the source variable. The system may also receive a request to generate a requested output variable. The requested output variable may be generated from a second transformation that is the same as the first transformation. The system may thus match the first transformation to the second transformation using the lineage data. In response to matching the first transformation to the second transformation, the system may deny the request. The original output variable may be returned in response to the matching the first transformation to the second transformation.

Abstract: A system is disclosed for delivering dynamically-rendered web experiences via implementing a provider interface in a provider framework where the interface defines supported behaviors for interfacing with external content in an external content repository, and where the interface defines at least one external object and specifies at least one method for implementing the supported behaviors for the object. The provider framework discovers supported behaviors upon instantiation of a provider implementation class embodied in implementation of the provider interface. A connection is engaged to the external repository with the supported behaviors using the interface to connect to and expose the external content. During web content delivery, the system accesses the provider connection and dynamically integrates external content with system-managed content in a delivered web page.

Abstract: A mobile computing device that lacks a network connection receives a low energy radio signal comprising a unique identifier assigned to the electronic device. The mobile computing device sends a query to a remote server computing device, the query comprising the unique identifier and information identifying a user of the mobile computing device. The mobile computing device receives a response from the remote server computing device, the response indicating that the user is authorized to access the electronic device. The mobile computing device notifies the user of a presence of the electronic device and establishes a wireless connection to the electronic device.

Abstract: A method of configuring a network security device includes receiving a changed set of network rules to replace a current set of network rules; using a plurality of network traffic events to perform a first simulation of according to the current set of network rules and a second simulation according to the changed set of network rules; comparing the results of the first and second simulation to identify changes in network traffic allowed and denied between the current set and the changed set of network rules; displaying the changes in allowed and denied traffic for review of the changed set of network rules; receiving an instruction to implement the changed set of network rules based on the review; and filtering network traffic according to the changed set of network rules.

Abstract: A process for determining a problematic condition while running software includes: loading a first pattern data set having a symptom code module, a problematic condition determination module, and a set of responsive action module(s), generating a runtime symptom code in response to a first problematic condition being caused by the running of the software on the computer, determining that the runtime symptom code matches a symptom code corresponding to the first pattern data set, determining that the first problematic condition caused the generation of the runtime symptom code, and taking a responsive action from a set of responsive action(s) that corresponds to the first problematic condition.

Abstract: Specifying rules for processing data included in fields of elements of a dataset includes rendering user interface elements associated with a respective condition. The user interface elements include: first subsets of user interface elements, at least some of which are associated with an input value derived from at least one field, and second subsets of user interface elements, each configured to receive user input associated with a respective condition. Conditions are applied to at least a first element of the dataset based on user input received from at least some of the user interface elements, in response to receiving user input for a first user interface element associated with a first field. Instructions are generated for applying one or more selected conditions associated with fewer than all of the user interface elements, the selected conditions including at least a condition associated with the first user interface element.

Abstract: A method of routing a voice communication from a web page to one of a plurality of queues includes determining a plurality of variables for routing the voice communication, and assigning a default value to each variable for the web page so that the voice communication can be routed to one of the queues regardless of whether the first value has been ascertained.

Abstract: The present invention relates to: a packet filtering apparatus that represents a rule set for packet filtering being a technique for preventing a cyber-attack, using a tree structure suitable for calculation of a logical expression, thereby improving processing efficiency; and a packet filtering method thereof. The packet filtering apparatus includes: a rule set containing a rule in which a condition and an action are associated with each other, and a Zero-Suppressed Binary Decision Diagram (ZDD) that represents a logical expression in which the condition of the rule is described using a logical variable; a packet analyzing unit to analyze a packet received from a network and extract collation information being a character string to be collated; and a filtering unit to collate the collation information extracted by the packet analyzing unit with the ZDD, execute the action associated with the condition that the collation information matches, and permit or deny communication of the packet.

Abstract: A system for automatically automatic workflow triggering using real-time analytics, comprising an analytics server that receives and analyzes interaction information and a workflow server that produces workflow events based on the analysis, sends workflow events to handlers for processing, retrieves workflow-related data, and produces workflow reports for review, and a method for automatically automatic workflow triggering using real-time analytics.