Abstract: A content rewriting system is described herein that allows web site administrators to setup rewriting of web responses in an easy and efficient manner. The system provides a configuration schema and an efficient workflow that enables web administrators to easily setup rules to modify HTML or other content without having a high performance penalty or losing flexibility. The content rewriting system applies regular expressions or wildcard patterns to a response to locate and replace the content parts based on the rewriting logic expressed by outbound rewrite rules. The system parses an initial response generated by a web application, applies one or more outbound rules to rewrite the response, and provides the rewritten response to a client that submitted a request for the response.

Abstract: According to one embodiment of the present invention, a system for determining related entities includes at least one processor. The system identifies one or more candidate entities for a data object associated with an entity based on one or more features. The entity and candidate entities are each associated with one or more features and each feature is associated with one or more behaviors. The identified candidate entities related to the entity are determined based on the associated behaviors of the features of the identified candidate entities and the entity. Embodiments of the present invention further include a method and computer program product for determining related entities in substantially the same manner described above.

Abstract: A questionnaire generation process presents a first subset from a set of questions of the questionnaire and receives first answers from a user. The first answers are used to determine whether the first answers are sufficient to give definite values to conditions of first rules, wherein the first rules have conditions for providing output. When the first answers are not sufficient, the conditions of the first rules can be used to identify a second subset of the questions, wherein the second subset of questions has second answers such that a combination of the first and second answers is sufficient to give definite values to the respective conditions of the first rules, and the second subset of questions can be presented to the user.

Abstract: A method of providing personal service assistance in a virtual universe is disclosed. The method provides a customer avatar (CA) access to a personal assistance avatar or personal customer service representative (PCSR) avatar, hereinafter PCSR avatar. Through the PCSR avatar, the CA communicates a need or requests for personal service assistance from a business or organization. The communication of the received request is processed to identify an appropriate business, organization or vendor that meets the need or request. The identified business, organization or vendor is contacted for a representative from the business to accede to the request from the CA. The representative from the business is allowed to assume control of the PCSR avatar to conduct the session necessary for rendering the assistance or transaction. Upon completion of the session, control of the PCSR avatar is reverted to that prior to the session.

Abstract: A method for non-intrusive event-driven prediction of a metric in a data processing environment is provided in the illustrative embodiments. At least one set of events is observed in the data processing environment, the set of events being generated by several processes executing in the data processing environment. A subset of the set of events are tracked for an observation period, the tracking resulting in bookkeeping information about the subset of events. A pattern of events is detected in the bookkeeping information. The pattern is formed as a tuple representing a process in the several processes, the metric corresponding to the process. A prediction model is selected for the tuple. The prediction model is supplied with the tuple and executed to generate a predicted value of the metric.

Abstract: A method of improving the accuracy and computation time of automatic image recognition by the implementation of association graphs and a quantum processor. A method of solving problems using a quantum processor by casting a problem as a quadratic unconstrained binary optimization (“QUBO”) problem, mapping the QUBO problem to the quantum processor, and evolving the quantum processor to produce a solution to the QUBO problem.

Abstract: A method and a computer-readable storage medium configured with instructions that when executed to carry out the method, and a computer system configured to carry out the method. The method includes storing a set of rules in computer-interpretable form in a processing system. The rules allow the expression of a range of possibilities for determination of recognition of items of content and a wide range of actions to take when such determination is made. Using the rules, a processing system can recognize content and possibly act on the recognition results, the recognition and acting according to the stored set of rules.

Abstract: Disclosed is a method and apparatus for matching regular expressions. A buffer of symbols giving a number of the last occurrence positions of each symbol is maintained. When two constants match on either side of a regular expression operator, the buffer of symbols is queried to determine if a member of the complement of the regular expression operator occurred between the two constants. If so, then the operator was not satisfied. If not, then the operator was satisfied.

Abstract: The specification describes data processes for analyzing large data steams for target anomalies. “Sequential dependencies” (SDs) are chosen for ordered data and present a framework for discovering which subsets of the data obey a given sequential dependency. Given an interval G, an SD on attributes X and Y, written as X?G Y, denotes that the distance between the Y-values of any two consecutive records, when sorted on X, are within G. SDs may be extended to Conditional Sequential Dependencies (CSDs), consisting of an underlying SD plus a representation of the subsets of the data that satisfy the SD. The conditional approximate sequential dependencies may be expressed as pattern tableaux, i.e., compact representations of the subsets of the data that satisfy the underlying dependency.

Abstract: A configuration system, method, and software program is provided for enabling users to create and use rule patterns to generate custom product-configuration rules. The method includes enabling a designer to submit example rules or template rules for a rule pattern. The designer is then able to select which variables will be customizable in instances of the rule pattern. A modeler is able to select the rule pattern from a rule pattern library as a basis for creating custom configuration rules for a product. In response to the modeler selecting the rule pattern from the library, a user interface is generated in which the customizable fields for each template rule in the rule pattern are displayed and the modeler is able to enter values for the customizable fields. Configuration rules are then generated for the product from the template rules and the values entered by the modeler for the customizable fields.

Abstract: A pattern analysis system and method that is robust against errors, misalignments and failures of process that may be caused by unexpected events. By performing multiple, redundant overlapping analyses with different operating characteristics and by actively testing for disagreements and errors, the invention detects errors and either corrects them or at least eliminates their harmful effects. The invention is especially effective in highly constrained situations, such as training a model to a script that is presumed correct or recognition with a highly constrained grammar or language model. In particular, it is effective when unexpected events may be rare but disastrous when they occur. The system and method handle errors that would otherwise be undetected as well as errors that would cause catastrophic failures.

Abstract: There is described a method for determining the processing sequence of components of a function plan for a sequentially operating automation system. Each component is allocated a component code in a reversible unambiguous manner and, while the components have a signal input and output connection, these should be applicable to a number of various function plans and thus minimize the reaction time of an automation system to process signals. The above is achieved, whereby the signal path in the function plan commences at an initial component in a recursive procedure in the forward direction and returns in the backward direction.

Abstract: A pattern matching accelerator (PMA) for assisting software threads to find the presence and location of strings in an input data stream that match a given pattern. The patterns are defined using regular expressions that are compiled into a data structure comprised of rules subsequently processed by the PMA. The patterns to be searched in the input stream are defined by the user as a set of regular expressions. The patterns to be searched are grouped in pattern context sets. The sets of regular expressions which define the pattern context sets are compiled to generate a rules structure used by the PMA hardware. The rules are compiled before search run time and stored in main memory, in rule cache memory within the PMA or a combination thereof. For each input character, the PMA executes the search and returns the search results.

Abstract: Feature and deployment recommendation systems and methods for content management systems comprises a vendor-site deployment and one or more customer-site deployments. The vendor-site deployment is configured to recommend an adaptation of any of the one or more customer-site deployments. The vendor-site deployment including a customer configuration repository adapted to store content usage metrics received from one or more customer-site deployments, an analytical engine configured to generate content usage patterns based on the stored content usage metrics, and a recommendation engine configured to recommend the adaptation.

Abstract: One embodiment accesses a binary decision diagram (BDD) representing a function having 4 variables, variables 1, 2, 3, and 4, wherein the BDD comprises 4 layers, layers 1, 2, 3, and 4, corresponding to the 4 variables, respectively; determines an optimum variable order of the BDD by performing at most 19 layer swaps during at most 13 iterations, wherein each of 6 iterations of the at most 13 iterations comprises: determines a first size of the layers 1 and 2 and a first size of the layers 3 and 4; swaps the layers 1 and 2 and the layers 3 and 4 concurrently; determines a second size of the layers 1 and 2 and a second size of the layers 3 and 4; and determines 1 variable order among 4 variable orders obtained during the iteration that yields a smallest size among the 4 variable orders obtained during the iteration.

Abstract: A method and system for approximate string matching are provided for generating approximate matches whilst supporting compounding and correction rules. The method for approximate string matching of an input pattern to a trie data structure, includes traversing a trie data structure to find approximate partial and full character string matches of the input pattern. Traversing a node of the trie data structure to process a character of the string applies any applicable correction rules to the character, wherein each correction rule has an associated cost, adjusted after each character processed. The method includes accumulating costs as a string of characters is gathered, and restricting the traverse through the trie data structure according to the accumulated cost of a gathered string and potential costs of applicable correction rules.

Abstract: A method and system is designed for processing alarms, that have been triggered by a monitoring system such as an intrusion detection system, a firewall, or a network management system, comprising the steps of entering the triggered alarms into an alarm log, evaluating similarity between alarms, grouping similar alarms into alarm clusters, summarizing alarm clusters by means of generalized alarms, counting the covered alarms for each generalized alarm and forwarding generalized alarms for further processing if the number of alarms covered satisfies a predetermined criterion. In the event of high rates of alarm messages, possibly containing many false alarms, a system administrator will therefore not be confronted with a flood of messages with little significance. Instead, only generalized alarms, more meaningful and smaller in number, are presented.

Abstract: A classification application identifies patterns and evidences within representative documents. The application constructs a classification rule according to an entity and an affinity determined from the patterns and evidences. The application processes the representative documents with the classification rule to evaluate whether the rules meet acceptance requirements. Subsequent to a successful evaluation, the application identifies confidence levels for patterns and evidences within other documents.

Abstract: Disclosed is a system in which Aan NFA conversion meansunit 21, receives the number of simultaneous/parallel processing characters from an input device 1 and, using a one-character transition finite automaton description matrix stored in an NFA description matrix storage unit 31 and a description matrix which is stored in an NFA conversion result matrix storage unit 32 as an intermediate conversion result, converts the finite automaton to a finite automaton whose transition condition is described in the number of characters subjected to simultaneous/parallel processing. The NFA conversion means 21 sequentially stores the intermediate result in the NFA conversion result matrix storage unit 32. When the conversion is completed, a result output meansunit 22 reads the resulting NFA description matrix from the NFA conversion result matrix storage unit 32 and outputs it to an output device 4.

Abstract: A system includes at least one piece of equipment. The system also includes a state detector adapted to measure one or more operating parameters of the equipment. The system has a signature generator adapted to encode a plurality of data streams from the state detector into an operating signature for the equipment.

Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.

Abstract: A method and apparatus for examining computer user activity to assess user psychology is provided. In one embodiment, a method for examining computer user activity to assess user psychology comprises monitoring the computer user activity in memory to generate, using at least one processor, pattern data associated with internet activity and comparing the pattern data in the memory with human behavior information using the at least one processor to identify personality indicia in the memory that reflects at least one psychological trait.

Abstract: To validate data, a plurality of strings that match a predetermined regular expression is extracted from the data. A validated subset of the strings is identified. To determine whether the validated subset has been falsely validated, it is determined whether the validated subset satisfies each of one or more predetermined criteria relative to the plurality of strings. In one embodiment, the subset is determined to be falsely validated if at least one of the criteria is satisfied. In another embodiment, the subset is determined to be falsely validated if all of the criteria are satisfied. The data are released only if the subset is determined to be falsely validated.

Abstract: A method and system that includes extracting event models from at least one personal planning source of a user, wherein a parameter of an event model includes event location; periodically receiving location information of at least one mobile device of the user; storing the location information in a location log; a pattern worker module maintaining user location patterns through the location log; generating a location prediction from the extracted event models and the user location patterns; a first content worker module checking if the location prediction meets a set of content requirements; if the set of content requirements is satisfied, initiating content retrieval from at least one service; and pushing the content to the mobile device.

Abstract: Computer resource utilization modeling for multiple workloads includes a computer obtaining resource utilization data, the resource utilization data having groups of computer resource utilization measurements made during time intervals for a plurality of workloads. The computer determines parameters representing a distribution of the computer resource utilization measurements for each of the groups to generate a baseline of distributions across the time intervals for each of the plurality of workloads. The computer sums the baselines of distributions for the plurality of workloads to generate a combined baseline of distributions across the time intervals for a combination of the plurality of workloads.

Abstract: Methods and systems for operation upon one or more data processors for efficiently processing communications based upon reputation of an entity associated with the communication.

Abstract: A system and method for a composite distance metric leveraging multiple expert judgments includes inputting a data distribution of multiple expert judgments stored on a computer readable storage medium. Base distance metrics are converted into neighborhoods for comparison, wherein each base distance metric represents an expert. The neighborhoods are combined to leverage the local discriminalities of all base distance metrics by applying at least one iterative process to output a composite distance metric.

Abstract: In some embodiments a controller is adapted to receive textual representation of content experienced by a user, to receive information about an interaction by the user with the content, and to determine a user model in response to the textual representation and the interaction. Other embodiments are described and claimed.

Abstract: An educational institution (also referred as a university) is structurally modeled using a university model graph. Such a model helps compare educational institutions at various levels—university level, department level, faculty member level, or student level. One of the requirements of comparison is to normalize the similarities and identify and elaborate the differences across multiple educational institutions. A way to achieve this is to model the educational institutions using comparable elements; specifically, the university model graph allows for such comparison as multiple educational institutions are modeled based on the same set of concepts and notions. A system and method for comparing educational institutions based on their respective university model graphs is discussed.

Abstract: A computer readable medium storing a program causing a computer to execute a process for adding image identification information is provided. The process includes: calculating first feature vectors for partial regions selected from a target image to be processed; and adding a piece of first identification information indicating content of the target image to the target image using a group of decision trees that are generated in advance on the basis of second feature vectors calculated for partial regions of a learning image and a piece of second identification information added to the entire learning image.

Abstract: A method for generating service rules corresponding to business data is disclosed. A plurality of business related data is gathered from various sources. The data is combined using a subjective logic technique. The data is then evaluated for temporal patterns. Finally a set of service rules corresponding to the combined business data are developed.

Abstract: A computer system provides a way to automatically generate compound commands that perform tasks made up of multiple simple commands. A compound command generation mechanism monitors consecutive user commands and compares the consecutive commands a user has taken to a command sequence identification policy. If the user's consecutive commands satisfy the command sequence identification policy the user's consecutive commands become a command sequence. If the command sequence satisfies the compound command policy, the compound generation mechanism can generate a compound command for the command sequence automatically or prompt an administrator to allow the compound command to be generated. Generating a compound command can be done on a user by user basis or on a system wide basis. The compound command can then be displayed to the user to execute so that the command sequence is performed by the user selecting the compound command for execution.

Abstract: Computer based method for generation of a graph representation of a rule set for searching data transiting a network using a graph-based search model. A set of rules that describe strings or patterns of data to be identified in the data set, is expressed as a graph. As blocks of the data set are obtained for processing, the state of the graph is updated based upon the value of the received data block. The transition to the next state depends upon both the current state and the received data block. As blocks of data are received and processed, the graph is traversed until one of the rules is identified.

Abstract: Some embodiments include a system, method, apparatus and means for managing information associated with risk. In some embodiments, information associated with risk is collected, analyzed, stored, and disseminated. According to some embodiments, the information associated with risk is utilized to identify risk.

Abstract: Systems and methods for indexing, associating or compositing data records and hierarchies from various information sources are disclosed. Embodiments of the present invention may provide the ability to link data records and thus to link data records to known hierarchies of data records. More specifically, embodiments of the present invention may provide the capability to associate data records in varying information sources and to thereby associate incoming data record with existing data records or existing data hierarchies such that an incoming data record may not only be associated with an existing data record comprising information about the same entity but may additionally be associated with other members of the data hierarchy in the same manner as the existing data record.

Abstract: The present invention implements, in a trend or pattern trigger device or system, the generation of hypotheses automatically while considering any collection of data by automatically assessing with templates or charts the presence of patterns in the data without a priori postulation of what the pattern might be. The trend or pattern examination templates or charts contain quantifiable thresholds for data or change in data so that trends or patterns in data can be discerned inductively and automatically without preconceived notions of what or where the patterns or trends might be.

Abstract: A method to identify a relationship between at least pairs of variables in a dataset generates a novel measure of dependence, referred to as a Maximal Information Coefficient (MIC), that captures a wide range of interesting associations (not limited to specific function types such as linear, exponential or periodic, or to all functional relationships), and that gives similar scores to equally noisy relationships of different types. MIC is based on the idea that if a relationship exists between two variables, then a grid can be drawn on a scatterplot of the two variables that partitions the data to encapsulate that relationship.

Abstract: A method for processing data includes encoding a finite automaton, which includes states and transitions between the states that express a plurality of predefined patterns, by grouping the states of the automaton into sets according to a common property shared by the states in each set, and assigning codes to the states according to the grouping. The codes are stored in an electronic memory, along with rules that are associated with the patterns. The automaton is traversed in order to identify one or more of the patterns in an input sequence of data elements by iteratively reading out the codes from the memory responsively to the data elements and to the codes that have been previously read out. Upon identifying a given pattern in the input sequence, an associated action is performed.

Abstract: Deployment pattern matching is implemented by accessing a target computing environment model that captures environment modeling parameters relating to resources and resource-resource relationships of a corresponding computing environment and expressing the target computing environment model as a model graph defined by target resource elements and resource-to-resource relationship links. Deployment pattern matching is further implemented by accessing a realization pattern that captures deployment parameters relating to resources and resource-resource relationships of a deployment of interest and expressing the realization pattern as a pattern graph defined by conceptual resource elements and constraints arranged by resource-to-resource relationship links and constraint links.

Abstract: Systems, methods and computer-readable media are disclosed for providing a framework for generating problem situations in a computer game. In one embodiment, the framework includes a data structure representing solution candidates, fact patterns, and a solution designator. The data structure also includes a chain of inference between the solution designator and each candidate. The computer game may generate a problem situation from the data structure and present the problem situation to a user playing the computer game.

Abstract: A decision stream in a hypothesis testing problem may be obtained by comparing a received data stream to a threshold. The threshold may be generated from a noise subset of the data stream based on certain characteristics of observed data. The probability distribution of the noise subset along with characteristics of the data stream may be used in determining the threshold. The determination of the threshold may be adaptive to maintain a user prescribed probability of error. A decision state machine may be used to control the manner in which noise characteristics are used to guide the hypothesis testing, increase the detection rate, and reduce the probability of error. The decision state machine evaluates the decision stream to determine falsely classified data samples and reclassify such items appropriately. The decision state machine may filter the decision stream to ensure that a lower decision error rate is achieved.

Abstract: A device includes a match element that includes a first data input configured to receive a first result, wherein the first result is of an analysis performed on at least a portion of a data stream by an element of a state machine. The match element also includes a second data input configured to receive a second result, wherein the second result is of an analysis performed on at least a portion of the data stream by another element of the state machine. The match element further includes an output configured to selectively provide the first result or the second result.

Abstract: A method, system, and computer usable program product for non-intrusive event-driven prediction of a metric in a data processing environment are provided in the illustrative embodiments. At least one set of events is observed in the data processing environment, the set of events being generated by several processes executing in the data processing environment. A subset of the set of events are tracked for an observation period, the tracking resulting in bookkeeping information about the subset of events. A pattern of events is detected in the bookkeeping information. The pattern is formed as a tuple representing a process in the several processes, the metric corresponding to the process. A prediction model is selected for the tuple. The prediction model is supplied with the tuple and executed to generate a predicted value of the metric.

Abstract: A solution for rapid evaluation of numerically large complex rules governing network and application transactions includes, at a network device, receiving network transaction record comprising a plurality of elements that characterize a network transaction, creating a hash of a result of concatenating the plurality of elements, and if the hash is found in a hash table comprising, for each network transaction rule, a hash of the plurality of elements comprising the rule, blocking the network transaction or alerting a network user that a prohibited transaction has occurred.

Abstract: Regular expressions used for searching for patterns in captured objects can be grouped into attributes. Such attributes can be associated with captured objects using tags stored in a database. In one embodiment, the present invention includes capturing an object being transmitted over a network, and determining that a regular expression appears in the object, the regular expression belonging to a group of one or more regular expressions associated with an attribute. If a regular expression associated with the attribute is found in the object, then an attribute field of a tag containing metadata related to the captured object is set to indicate the presence of the attribute in the captured object. The presence of the attribute in the captured object can now be determined from the tag, which can be stored in a database.

Abstract: A method and a device for distributing patterns to scanning engines for scanning packets in a packet stream are provided. The method includes providing a plurality of scanning engines and patterns, calculating a respective distance metric for every pair of patterns, and providing a plurality of distribution functions. Further, the method includes calculating a respective sum of the calculated distance metrics for distributing the patterns for each of the distribution functions, and utilizing the sums for selecting a distribution function of the D distribution functions for distributing the patterns to the M scanning engines. A device for implementing the method is also provided.

Abstract: The present invention presents two new model types and a new method for evaluating a model used in the control application. These include a compound model, a hybrid model and a directional change coefficient model. The present invention allows the mixing of models with different inputs and outputs and the switching between these models based criteria for measuring optimization accuracy. The present invention allows switching between these models. The compound model is a model type that allows zooming in on the process to model parts of the data space with higher fidelity or resolution without loosing the capability to model the complete data space. The modeler does not loose any functionally over a regular neural network, but instead gains the ability to define the conditions when the model should use network weights best matched to the defined local conditions. The hybrid model is an extended version of a compound model.

Abstract: An action is triggered by receiving information related to a predicted destination of a user, accessing a library that maps user actions to destinations, determining that at least one of the destinations in the library corresponds with the predicted destination of the user and at least one of the destinations in the library, identifying a user action, within the library, that is associated with the destination determined to correspond with the predicted destination of the user, and triggering the user action.

Abstract: A transformation process determines whether a predicate of a rule matches a given node of tree structured data containing a set of nodes and, when the predicate of a rule matches the given node, applies a function of an identified rule to the node to generate a compound result and an interim mutated output document, and when the compound result contains a next node, determines whether the next node is compared with the predicate of a next rule. The transform process includes determining that the next node is processed by a next rule, using the interim mutated output document as input, and determining whether a predicate of a rule matches the next node in a set of nodes. When the predicate of a rule matches the next node, a function of an identified rule is applied to the next node to generate a compound result and interim mutated output document. When the compound result does not contain a next node, a final mutated output document is generated.

Abstract: An object cache framework client selects a rule-set object in an object cache framework. The rule-set object comprises a rule-set (set of business rules). The object cache framework client evaluates criteria of the rule-set against properties of a plurality of rules engines. The object cache framework client determines if the properties of a rules engine, from a plurality of rules engines, satisfy the criteria of the rule-set. The object cache framework client supplies the rule-set object to the rules engine for execution of the rule-set.