Abstract: A system and method for tracking event occurrences among applications executing on a mobile device is provided. When an action is initiated, the first application generates a first notification indicator and records it with a notification server. When the action is performed by, for example, a second application, the second application generates a second notification indicator and registers it with the notification server. The notification server may then notify the first application or other entities of the occurrence of the action.

Abstract: At least one per-pattern non-deterministic finite automaton (NFA) may be generated for a single regular expression pattern and may include a respective set of nodes. Nodes of the respective set of nodes of each per-pattern NFA generated may be distributed for storing in a plurality of memories based on hierarchical levels mapped to the plurality of memories and per-pattern NFA storage allocation settings configured for the hierarchical levels, optimizing run time performance for matching regular expression patterns in an input stream.

Abstract: A data processing method and a computer system. The computer system may perform discretization processing on a data sample to obtain a data sample in a matrix form, train the data sample in the matrix form according to a preset classification method to obtain a classification rule set, and after converting the classification rule set into a classification rule set that can be recognized by a data decision-making platform, provide the classification rule set to the data decision-making platform, so that the data decision-making platform can perform data decision-making according to the classification rule set that is obtained by the computer system by conversion and can be recognized by the data decision-making platform. All the foregoing processes are automatically completed by the computer system, which avoids human participation.

Abstract: The embodiment of this disclosure may include a rule engine that adds a plurality of objects into a working memory, and processes the plurality of objects through a plurality of rules stored in a rule repository. Then, the rule engine may create a rule network comprising a root node and a child node based on the plurality of rules, and associate the root node with a predetermined list of object references. The rule engine may build a multi-object sub-token based on the plurality of objects that satisfy the predetermined list of object references. Then, the rule engine may pass the multi-object sub-token from the root node to the child node.

Abstract: A computer-implemented method of increasing the online conversion rate of potential users to a computer-hosted service is described. The method includes a computing device receiving a browser request from a potential user, the computing device receiving user-specific data as part of the browser request. The computing device inputs the user-specific data into a conversion model executed by the computing device and outputs a conversion score for the potential user based on the model. The computing device sends to the browser a marketing intervention if the conversion score falls below a pre-determined threshold value.

Abstract: An approach is provided in which a knowledge manager locates centroids in a high-dimensional vector space that are closest to a new image feature set and performs nearest neighbor searches on feature sets included in clusters corresponding to the located centroids. The knowledge manager then selects feature sets closest to the new image feature set based on the nearest neighbor searches and in turn, marks images corresponding to the selected closest features sets as similar images to a new image corresponding to the new image feature set.

Abstract: Detecting a denial-of-service attack on a graph database is provided. In response to receiving a request to process a graph query on the graph database from a client device via a network, a graph query pattern of the graph query is determined. In response to determining that the graph query pattern of the graph query matches a stored graph query pattern that lead to a previous denial-of-service attack on the graph database, the graph query is identified as the denial-of-service attack on the graph database. Then, the request to process the graph query is denied by dropping the graph query.

Abstract: Computer controlled method, network server (42, 43, 44, 46, 48) and system (40) for detecting data patterns in a data stream (36) received by a computer (30). The data stream (36) comprising a plurality of data symbols. The computer (30) executes a finite automata (10) comprising a plurality of states (11, 12, 13, 14, 15) including a start state (11) and at least one accepting state (15). State transitions (16) are triggered by a data symbol (17a) according to a state transition register (17) and the method comprises the steps of determining (21), by the computer (30), from a data symbol register (18) whether a data symbol of the data stream (36) is comprised in a group of data symbols not resulting in an accepting state (15), and triggering (22), by the computer (30), a transition (16) to the start state (11) for data symbols comprised in the group and a transition (23) to a state (12, 13, 14, 15) according to the state transition register (17) for detecting the data pattern otherwise.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for managing access to data based on information associated with a physical location of a user. These mechanisms and methods for managing access to systems, products, or data based on information associated with a physical location of a user can enable improved data management efficiency, enhanced data management accuracy, decreased data management costs, decreased licensing costs, increased security, additional marketing opportunities, etc.

Abstract: A production rules engine comprises: a class loader for loading a production rule ontology into a rule engine; a class loader for loading production rules into the rule engine, wherein a production rule comprises a rule and an action defined in the production rule ontology; instance creation logic for creating instances of production rules; a reasoner for executing the production rules and for locating an instance of a production rule having an inconsistency between an action to change the ontology and the existing ontology and for executing the production rules after inconsistencies have been fixed; a constraint engine for locating a solution to an inconsistent ontology; and a fixer for updating the inconsistent ontology with the located solution.

Abstract: The disclosure includes a system and method for generating weighted clustering coefficients for a social network graph. The system includes a processor and a memory storing instructions that when executed cause the system to: receive social graph data associated with a social network, the social graph data including nodes, edges that connect the nodes and weights associated with the edges in a social graph, determine a first probability of existence of an edge in the social graph based on the weights, determine a second probability that a first node forms a triangle with two neighbor nodes, and compute a weighted clustering coefficient for the first node based on the first and second probabilities.

Abstract: Deep learning is used to identify specific, potential risks of missed diagnosis for a patient and reporting the risk to healthcare provider. The system involves mining and using existing electronic health records for specific medical diagnosis to train one or more deep learning algorithms, and then examining the internal electronic health record of the patient with the trained algorithm, to generate a scored output that will enable a healthcare provider to be alerted to potential risks of a missed diagnosis.

Abstract: A method of modeling a graphical user interface (GUI) based application as a deterministic finite-state machine may include generating dummy error state and a dummy error output in a finite-state machine. The method may further include modeling a response to an action that is unavailable on a screen of a graphical user interface (GUI) based application as a transition to the dummy error state in the finite-state machine while producing the dummy error output in the finite-state machine.

Abstract: The disclosure is directed to written content generation. A method for generating written content in an application in accordance with an embodiment includes: receiving a query from a user; importing data from at least one data source in response to the query; ranking the imported data based on a plurality of ranking factors to determine a relevance of the imported data; automatically generating written content using at least a portion of the imported data based on the determined relevance of the imported data; and automatically customizing the written content based on a file format of the application.

Abstract: Similarity analysis of software is disclosed. An input file is received. Pairs of files that consist of the input file and files included in a corpus are categorized into one of a possible match and a mismatch. Those pairs classified as possible matches are analyzed using a pairwise component analysis.

Abstract: Historic inverse probability estimators are created for a graph based on all-distance sketches associated with each node of the graph. The historic inverse probability estimators include adjusted weights for each node. Graph operations such as closeness centrality are estimated using the historic inverse probability estimators. The historic inverse probability estimators can also be applied to element streams and can be used to estimate a number of unique elements in received in the element stream.

Abstract: A computing device processor may be configured with processor-executable instructions to implement methods of using behavioral analysis and machine learning techniques to identify, prevent, correct, and/or otherwise respond to malicious or performance-degrading behaviors of the computing device. As part of these operations, the processor may perform multifactor authentication operations that include determining one or more of a transaction type criticality value, a user confidence value, a software integrity confidence value, and a historical behavior value, using the one or more of these values to determine a number of authentication factors that are be evaluated when authenticating a user of the computing device, and authenticating the user by evaluating the determined number of authentication factors.

Abstract: Techniques that optimize performance of simultaneous localization and mapping (SLAM) processes for mobile devices, typically a mobile robot. In one embodiment, erroneous particles are introduced to the particle filtering process of localization. Monitoring the weights of the erroneous particles relative to the particles maintained for SLAM provides a verification that the robot is localized and detection that it is no longer localized. In another embodiment, cell-based grid mapping of a mobile robot's environment also monitors cells for changes in their probability of occupancy. Cells with a changing occupancy probability are marked as dynamic and updating of such cells to the map is suspended or modified until their individual occupancy probabilities have stabilized.

Abstract: A method and system that includes extracting event models from at least one personal planning source of a user, wherein a parameter of an event model includes event location; periodically receiving location information of at least one mobile device of the user; storing the location information in a location log; a pattern worker module maintaining user location patterns through the location log; generating a location prediction from the extracted event models and the user location patterns; a first content worker module checking if the location prediction meets a set of content requirements; if the set of content requirements is satisfied, initiating content retrieval from at least one service; and pushing the content to the mobile device.

Abstract: A fleet of databases may comprise subsets of databases sharing a common schema for replication, horizontal partitioning and other applications. Events related to potential deviations from a desired schema may be monitored. Automated means may be employed to detect variations from a desired schema. An intermediate representation of database schema may be formed and used to compare database schemas. Subclasses and allowed versions of desired schemas may be defined. Security attributes related to schema inspection and modification may be mapped to enable selected operations on schema.

Abstract: The invention relates to a compiler and a method for compiling control logic for a plurality of devices of a networked control system, particularly to the automated assignment of control logic to devices. The invention provides with a compilation an automatic assignment procedure of an executable runtime code to devices of a networked control system. The assignment process of control logic to the devices may take various optimization criteria into account which include various distribution aspects, e.g. network resources or capabilities, such as available bandwidth or reliability of the network links, and device resources or capabilities, e.g. CPU, memory, power source or sleeping behavior which may influence the observed behavior of the devices, e.g. due to transmission delay or data packet loss.

Abstract: In embodiments, apparatuses, methods and storage media (transitory and non-transitory) are described that are associated with user profile selection using contextual authentication. In various embodiments, a first user of a computing device may be authenticated and have an access control state corresponding to a first user profile established, the computing device may select a second user profile based at least in part a changed user characteristic, and the computing device may present a resource based at least in part on the second user profile. In various embodiments, the computing device may include a sensor and a user profile may be selected based at least in part on an output of the sensor and a previously stored template generated by a machine learning classifier.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include receiving, by a computer, application code including a set of software elements, and identifying dependencies between the software elements. Based on the dependencies, a respective ranking score can be calculated for each of the software elements, the respective ranking score for a given software element indicating a likelihood that the given software element is configured as an application programming interface (API).

Abstract: A method for detecting and locating occurrence in a data stream of any complex string belonging to a predefined complex dictionary is disclosed. A complex string may comprise an arbitrary number of interleaving coherent strings and ambiguous strings. The method comprises a first process for transforming the complex dictionary into a simple structure to enable continuously conducting computationally efficient search, and a second process for examining received data in real time using the simple structure. The method may be implemented as an article of manufacture having a processor-readable storage medium having instructions stored thereon for execution by a processor, causing the processor to match examined data to an object complex string belonging to the complex dictionary, where the matching process is based on equality to constituent coherent strings, and congruence to ambiguous strings, of the object complex string.

Abstract: Features are disclosed for using a neural network to tag sequential input without using an internal representation of the neural network generated when scoring previous positions in the sequence. A predicted or determined label (e.g., the highest scoring or otherwise most probable label) for input at a given position in the sequence can be used when scoring input corresponding to the next position the sequence. Additional features are disclosed for training a neural network for use in tagging sequential input without using an internal representation of the neural network generated when scoring previous positions the sequence.

Abstract: Electronic label processor compares bioinformatic values to determine pharmaco-genomic mutation associated with host. Label display indicates pharmaco-genomic mutation, which is network-accessible for modified medical message. Bioinformatic values are determined preferably at different times.

Abstract: An advanced intelligence engine (AIE) for use in identifying what may be complex events or developments on one or more data platforms or networks from various types of structured or normalized data generated by one or more disparate data sources. The AIE may conduct one or more types of quantitative, correlative, behavioral and corroborative analyses to detect events from what may otherwise be considered unimportant or non-relevant information spanning one or more time periods. Events generated by the AIE may be passed to an event manager to determine whether further action is required such as reporting, remediation, and the like.

Abstract: Approaches for detecting network intrusions, such as malware infection, Trojans, worms, or bot net mining activities includes: identifying one or more threat detections in session datasets, the session datasets corresponding to network traffic from a plurality of hosts; determining a layered detection score, the layered detection score corresponding to a certainty score and threat score; determining a layered host score, the layered host score corresponding to a certainty score and threat score; and generating alarm data comprising the layered detection score and the layered host score. In some embodiments, the network traffic may be received passively through a network switch; for example, by “tapping” the switch. Other additional objects, features, and advantages of the invention are described in the detailed description, figures and claims.

Abstract: A system and method for identifying unauthorized uploaded content that has been uploaded before a validated live reference stream has been ingested is disclosed herein. The live reference stream is compared against the indexed uploaded content repeatedly as the live reference stream is received. The matching process is done once per a time period until a match meeting a minimum match duration threshold is identified. The match is then determined to be unauthorized, and a claim is issued against the unauthorized uploaded content. The time period can be based on a utility based analysis that factors the computational costs of repeated matching versus the diminishing value of the live reference stream as time progresses.

Abstract: A system, a method, and a computer readable media for identifying a user-initiated log file record in a log file are provided. The log file has a user-initiated log file record and a repeating pattern of log file records automatically generated by a software program. The system allows a user to identify first and second timestamp values corresponding to first and second times which identify a time interval of interest in the log file. The system further analyzes the log file to identify the user-initiated log file record having a timestamp value between the first and second timestamp values. The system further identifies the repeating pattern of log file records in the log file.

Abstract: Embodiments of the invention provide for controlling message flow across a parallel computer system having multiple compute nodes by selectively grouping compute nodes of such a system into node pools and assigning message flow control policies to nodes in the node pools. The message flow control policies specify logging and/or tracing activities to be performed by instances of applications running on nodes assigned to the node pools. As the application is executed, logging and/or tracing messages are generated on the compute nodes according to message flow control policies assigned to the nodes. Optionally, the message flow is analyzed, the message flow control policies are adjusted, and duplicate messages are eliminated.

Abstract: A system, method, computer program product, and base station for coordinating communication of data packets between a user device and an application server are described. According to one aspect, the base station includes a memory and a computer processor operatively coupled to the memory, to a radio transmitter, and to a radio receiver. The computer processor is configured to detect the application type of a data packet, determine an inactivity time based on the detected application type, and transition the user device to an idle state based on the determined inactivity time.

Abstract: Lockless burst trie indexing inserts marker nodes into a linked list of data and marker nodes, each marker node corresponding to a symbol in an ordered data sequence stored in the data nodes. A trie structure contains entries that represent the symbols of the marker nodes and point to the corresponding marker nodes. The trie structure can contain multiple levels of entries that are linked together in a hierarchy to represent subsets of the data sequences.

Abstract: A medical decision making support apparatus performs the inference processing of obtaining an inference result by performing inference processing associated with medical diagnosis based on a plurality of pieces of input medical information, and the calculation processing of calculating the degree of denial or affirmation of the inference result in association with each of a plurality of partial sets including each medical information extracted from the plurality of pieces of medical information as an element. The medical decision making support apparatus presents a user an inference result obtained by the inference processing and negative information indicating medical information included in a partial set, of the plurality of partial sets, for which the degree of denial is calculated by the calculation processing.

Abstract: Systems and methods for cookware detection are provided. One example system includes a vision sensor positioned so as to collect imagery depicting a cooktop. The system includes one or more processors and one or more non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations. The operations include obtaining a frame of imagery depicting the cooktop and using a classifier to classify the frame of imagery as either depicting cookware or not depicting cookware. When the frame is classified as depicting cookware, the operations include performing one or more operations in response to the detected cookware.

Abstract: A context of a mobile device is determined. A context preference of a user associated with the mobile device is determined. The context of the mobile device and the user context preference is transmitted to another node and responsively returned data is received. Available free space in the mobile device is determined. All data whose timestamp is within a predetermined threshold is cached. The data is cached in at least a portion of the free space.

Abstract: In one embodiment, a method receives a query for analyzing data in a database. The query includes a first level calculation that is performed before a second level calculation. The method determines an operator in the query configured to explicitly remove group by information for a reference characteristic in the first level calculation where the group by information is specified for the reference characteristic in the second level calculation. The first level calculation is performed by removing the group by information for the reference characteristic for the first level calculation to determine a first level calculation result and the second level calculation is performed using the first level calculation result using the group by information for the reference characteristic to determine a second level calculation result.

Abstract: Techniques are described for employing a substantially self-balanced append tree data structure to store and access information. The append tree data structure is a hierarchical data structure in which a leaf node or a parent node may be added to expand the append tree data structure. The determination to add a leaf node or a parent node may be based on a counter for leaf nodes present in the append tree data structure. Nodes in the append tree data structure may be blocks in memory, with each block corresponding to a plurality of positions that may be employed to tracking message identifiers in a messaging service.

Abstract: Systems and method for performing intelligent flash management are disclosed. A controller may determine if a write pattern exists between a set of writes associated with a first data chunk and a set of writes associated with a second data chunk based on whether a number of writes for first data chunk is equal to a number of writes for second data chunk; a degree to which a sequence of logical block address for the first data chunk matches the sequence of logical block addresses for the second data chunk; and a degree to which a size of each write for the first data chunk matches a size of each write for the second data chunk. The controller may then perform storage management operations based on whether or not a write pattern exists.

Abstract: A method of providing biometric authorization comprising enabling a user to log into an account, and determining whether there is a hold on the account. When there is a hold on the account, informing the user of the hold, and enabling the user to respond to a transaction that caused the hold. The method, in one embodiment further comprising prompting the user to enter a biometric authentication, in conjunction with the response, and processing the unblock request in real-time upon receiving and validating the biometric authentication.

Abstract: In a document classification device 100, a sample document extraction condition storage unit 160 stores sample document extraction conditions 160-1 set for each of classification categories for extracting partial text according to the classification categories from an input document 301 input by a document input unit 110. A document matching unit 120 matches the input document 301 against the sample document extraction conditions 160-1. Based on a result of matching by the document matching unit 120, a document extraction unit 130 extracts the partial text from the input document 301 according to the classification categories. A learning unit 140 performs predetermined machine learning using as a sample document the partial text extracted by the document extraction unit 120, and thereby generates classification rules 150-1.

Abstract: A method of ranking curations includes receiving a query. The method also includes calculating, based on the query, a content similarity measurement for each of multiple curations. The method also includes extracting, from each of the curations, multiple curation-specific features. The method also includes calculating a curation credit measurement for each of the curations based on the extracted curation-specific features. The method also includes ranking each of the curations based on the corresponding content similarity measurement and the corresponding curation credit measurement.

Abstract: Embodiments provide an automated knowledge management service. A method includes receiving, at a computer processor that implements the knowledge management service, a request for information from a requesting entity. The method also includes generating, by the computer processor, a search query to search for the information across multiple compartmentalized data sources that are non-local to the automated knowledge management service, searching the multiple compartmentalized data sources for the information, and retrieving the information from one of the multiple compartmentalized data sources. The method further includes determining an access channel for transmitting the information, formatting the information to correspond to a format recognized by the access channel, and transmitting formatted information to the requesting entity.

Abstract: Systems and methods allow an on-line game to extract information relevant to a specific need of a game platform or service platform. The specific need relates to management and use of digital content, and is addressed by designing and playing an on-line collaborative game. The rules of the game intend to solve a specific task dictated by the specific need. Players' responses to the game generate a wealth of information related to a specific task objective, such as ranking, sorting, and evaluating a set of digital content items. To compel participation in a game, players can be rewarded with monetary value rewards. As a game illustration, an image selection game (ISG) that exploits human contextual inference is described in detail. The information extracted from ISG is a list of key-image associations, relevant for the task of image sorting and ranking.

Abstract: Described are techniques for capturing and analyzing snapshots of virtual machines. One or more computers may automatically obtain snapshots of virtual machines as they are executing to form a pool of virtual machine snapshots. The virtual machine snapshots are then read to obtain a set of features properties of the virtual machine snapshots, including information about a running guest operating system, software installed on the virtual machine, metadata about the virtual machine itself, and others. The features or properties are analyzed, in one embodiment using a machine learning algorithm, to automatically compute and store information about the virtual machines.

Abstract: Illustrative embodiments improve upon prior machine learning techniques by introducing an additional classification layer that mimics human visual pattern recognition. Building upon classification passes that extract contextual information, illustrative embodiments look for hints of high-level semantic categorization that manifest as visual artifacts in the document, such as font family, font weight, text color, text justification, white space, or CSS class name. An improved lightweight markup language enables display of machine-categorized tokens on a screen for human correction, thereby providing ground truths for further machine classification.

Abstract: Configurable testing of a computer program includes: storing a set of one or more testing specifications, and attribute information defining one or more attributes of a recognizable portion of the computer program; and processing, using at least one processor, the computer program according to at least a first testing specification associated with the computer program. The processing includes: traversing a representation of the computer program that includes elements that represent recognizable portions of the computer program, and while traversing the representation, recognizing recognizable portions of the computer program, and storing values of attributes, defined by the attribute information, of the recognized portions of the computer program.

Abstract: According to one aspect, a computer-readable recording medium stores therein an extracting program 330a causing a computer to execute a process. The process includes based on event data obtained by associating a plurality of events stored in a storage unit and an occurrence time of each event, sequentially adding an event to a first pattern obtained by associating the plurality of events and the occurrence order of each event, and sequentially generating a second pattern which includes the first pattern and occurs in the event data; and extracting a pattern which satisfies a predetermined condition from the generated second pattern.

Abstract: Techniques for disambiguating data using contextual and historical information include determining that data is potentially associated with two or more classifications of a plurality of classifications; obtaining contextual information associated with the data; obtaining historical information associated with a user of the computing system; and determining that the data is more likely associated with one classification of the two or more classifications than other classifications of the two or more classifications based on the contextual information and the historical information.

Abstract: Apparatus and methods for salient feature detection by a spiking neuron network. The network may comprise feature-specific units capable of responding to different objects (red and green color). The plasticity mechanism of the network may be configured based on difference between two similarity measures related to activity of different unit types obtained during network training. One similarity measure may be based on activity of units of the same type (red). Another similarity measure may be based on activity of units of one type (red) and another type (green). Similarity measures may comprise a cross-correlogram and/or mutual information determined over an activity window. During network operation, the activity based plasticity mechanism may be used to potentiate connections between units of the same type (red-red). The plasticity mechanism may be used to depress connections between units of different types (red-green). The plasticity mechanism may effectuate detection of salient features in the input.