Abstract: Systems and methods for automated digital filing includes classifying digital files and curating a number of corpora of digital files based on the classifications associated with each of the digital files. In response to the classification label associated with each distinct corpus of digital files, selectively executing a set of computer instructions associated with the classification label that, when executed, modifies a digital state of a target corpus of digital files.

Abstract: Each module of a plurality of modules receives intent metadata associated with a data product instance of a data mesh. Each module corresponds to a unique data governance category of a plurality of data governance categories and a request associated with data was intercepted at the data product instance. Each module receives policy metadata associated with the data governance category corresponding to the module. Each modules determines, based on the intent metadata and the policy metadata, whether the request is valid for the data governance category corresponding to the module. Each modules transmits an indication of whether the request is valid for the module.

Abstract: The technology disclosed relates to an introspector that scans an organization's accounts on cloud storage services and detects resources on the cloud storage services configured to store the organization's data, and identifies the detected resources in a resource list. The technology disclosed further includes an inline proxy that controls manipulation of the detected resources based on the resource list.

Abstract: Methods and systems for managing operation of endpoint devices are disclosed. The operation of the endpoint devices may be managed by deploying containers to the endpoint devices. The containers may include applications and/or other components. The applications may provide various desired services. The containers may also limit use of host endpoint devices based on activity profiles for the requestors of services provided by the applications and the services provided by the applications. The activity profiles may be used on historical information regarding similar requestors and similar services. At least some of the containers may be nested and may separately apply different sets of limits.

Abstract: A system for forensic file services is configured to receive data indicative of operations executed on a filesystem element stored on a computing resource associated with a first tenant, to and adjust the data according to an indicated database schema. The system is also configured to store the adjusted data in a record of a partition of a database, where the partition configured to store a history of operations executed on filesystem elements of computing resources associated with the first tenant. The system is further configured to receive a search request to search the database and to execute the search request on a second partition of the database to identify one or more matching records. The system is additionally configured to provide the identified records in response to the search request.

Abstract: The disclosure provides a data matching device and a data matching method. The data matching device includes a storage device and a processor. The storage device is configured to store a matching module and a data package module. The processor is coupled to the storage device and configured to receive raw data. The processor executes the data package module to generate structured and packaged data according to the raw data. The processor executes the matching module to match the structured and packaged data to a corresponding task logic. The data matching device and the data matching method in the disclosure may automatically perform data package and task matching.

Abstract: Provided herein are systems and methods for identifying personal identifiers in content. An entity engine may receive content to identify candidate personal identifiers. The entity engine may determine that a text string in the content matches to a data format specified in entity definitions corresponding to types of personal identifiers and a rule for finding a geographic or linguistic term in the content correlated to the specific type of personal identifier. Each entity definition may specify a data format for finding a specific type of personal identifier in content. The data format corresponds to a type of personal identifier. The entity engine may identify, according to a rule of the first entity definition, a geographic or linguistic term in the content correlated to the type of personal identifier. The entity engine may classify the text string as the type of personal identifier, for preventing data breach or exfiltration.

Abstract: Methods, apparatus, and processor-readable storage media for data archival recommendation systems using artificial intelligence techniques are provided herein. An example computer-implemented method includes processing data associated with database operations performed across multiple database storage zones in one or more databases; generating, using one or more artificial intelligence techniques and based at least in part on the processing of data associated with the database operations performed across the multiple database storage zones, one or more temporal-based data archival recommendations for at least a portion of the multiple database storage zones in the one or more databases; and performing one or more automated actions based at least in part on the one or more temporal-based data archival recommendations.

Abstract: Methods, servers, and computer program products are provided to link files stored in a data repository. A file to be stored in the data repository is received, via a network, from a terminal. The method includes determining whether the file has a file metadata card associated with the file. The method further includes responsive to the file having a file metadata card associated with the file: executing at least one rule responsive to receiving the file being stored in the data repository to validate the file metadata card. The method further includes responsive to a result of the at least one rule executed indicating a successful result, storing the file metadata card associated with the file and the file in the data repository.

Abstract: In accordance with various embodiments, described herein is a system (Data Artificial Intelligence system, Data AI system), for use with a data integration or other computing environment, that leverages machine learning (ML, DataFlow Machine Learning, DFML), for use in managing a flow of data (dataflow, DF), and building complex dataflow software applications (dataflow applications, pipelines). In accordance with an embodiment, the system can provide support for auto-mapping of complex data structures, datasets or entities, between one or more sources or targets of data, referred to herein in some embodiments as HUBs. The auto-mapping can be driven by a metadata, schema, and statistical profiling of a dataset; and used to map a source dataset or entity associated with an input HUB, to a target dataset or entity or vice versa, to produce an output data prepared in a format or organization (projection) for use with one or more output HUBs.

Abstract: The present application discloses a method, system, and computer system for providing access to information stored on system for data storage. The method includes receiving a data request from a user, determining data corresponding to the data request, determining whether the user has requisite permissions to access the data, and in response to determining that the user has requisite permissions to access the data: determining a manner by which to provide access to the data, wherein the data comprises a filtered subset of stored data, and generating a token based at least in part on the user and the manner by which access to the data is to be provided.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: Systems and methods described herein relate to the efficient handling of data purge requests in the context of a distributed storage system. A plurality of data purge requests is stored in a first data structure. The data purge requests may be grouped into batches that are processed at least partially in parallel. A first data purge request from the plurality of data purge requests is successfully processed, and is moved from the first data structure to a second data structure. Processing of a second data purge request from the plurality of data purge requests is unsuccessful. The second data purge request is retained in the first data structure. Purge status data is generated based on the first data purge request being in the second data structure and the second data purge request being in the first data structure. The purge status data may be presented at a user device.

Abstract: There is disclosed in one example a network interface card (NIC), comprising: an ingress interface to receive incoming traffic; a plurality of queues to queue incoming traffic; an egress interface to direct incoming traffic to a plurality of server applications; and a queuing engine, including logic to: uniquely associate a queue with a selected server application; receive an incoming network packet; determine that the selected server application may process the incoming network packet; and assign the incoming network packet to the queue.

Abstract: Techniques for leveraging efficient metadata communications to improve domain name system (DNS) security are described. The DNS service uses a hash value to uniquely identify a client, and detect any change in metadata in order to keep policies up-to-date for the client. In an example method a first DNS query for a client device is intercepted. A cryptographic hash function is applied to metadata associated with the client device to generate a hash value. The hash value is added to an additional records section of the first DNS query to generate a second DNS query. The second DNS query is transmitted to a DNS service. The metadata associated with the client device is transmitted to the DNS service on an out-of-band encrypted channel. A DNS response, including the hash value, is received from the DNS service and transmitted to the client device.

Abstract: Comprehensive matching allows for automated conversion from runtime policy rules to build time rules that can be applied to an IaC configuration file(s). API specifications of a CSP and resource models defined in an IaC configuration file(s) are parsed and tokenized. The tokenized API specifications are evaluated to identify, for each resource model, a most appropriate API specification for mapping fields. Based on the evaluation and token matching, tokens of the API specifications are mapped to the tokens of the IaC resource models to form a mapping model. In an implementation phase, a runtime policy rule converter replaces tokens of a runtime security policy rule query with IaC tokens based on the mapping index to convert the runtime security policy rule query into a buildtime security policy rule query that can be applied against the IaC configuration files.

Abstract: A method and apparatus for updating data router nodes in a distributed storage system are described. The method can include querying, by a first database agent of a database node, a cache data store for health status metrics of the cache data store. The method can also include storing, by the first database agent of the database node, the health status metrics in a data repository. Furthermore, the method can include obtaining, by a second database agent of a router node, the health status metrics from the data repository, and updating, by the second database agent of the router node, a database topology file based on the health status metrics.

Abstract: Systems, devices, and techniques are disclosed for data shards for distributed processing. Data sets of data for users may be received. The data sets may belong to separate groups. User identifiers in the data sets may be hashed to generate hashed identifiers for the data sets. The user identifiers in the data sets may be replaced with the hashed identifiers. The data sets may be split to generate shards. The data sets may be split into the same number of shards. Merged shards may be generated by merging the shards using a separate running process for each of the merged shards. The merged shards may be generated using shards from more than one of the two or more data sets. An operation may be performed on all of the merged shards.

Abstract: In response to determining that continuous data protection is to be enabled for a particular table of a database service, a service component verifies that automated transmission of change records of the table to a log-structured journal has been configured. A given change record comprises a before-image and an after-image associated with a committed database write, and is assigned a unique sequence number. In response to a determination to restore the table as of a specified point in time, a restore record set is identified from the journal with respect to a selected snapshot of the table. The restore record set includes change records which are not represented in the snapshot and are to be represented in the restored table. A restore result table is created using the selected snapshot and the restore record set.

Abstract: Techniques are provided for facilitating network devices to obtain configuration updates from a central configuration repository. Configuration update information is received regarding a configuration update in a configuration repository. A data tree is updated based on the configuration update information. An identifier unique to the update is generated. A determination is performed that network device properties of a network device correspond to a set of network device properties indicated for the configuration update information. A notification indicating the availability of the configuration update is sent over one or more networks to the network device.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: Technologies are described herein for media content recommendations. For example, a method of media content recommendations may include generating, by a plurality of machine learning algorithms, a first set of media content recommendations, a second set of media content recommendations, and a third set of media content recommendations. The method may also include generating a first playlist based on the first set of media content recommendations and the second set of media content recommendations, generating a second playlist based on the second set of media content recommendations and the third set of media content recommendations, and providing the first playlist and the second playlist to at least one of the one or more media applications.

Abstract: An apparatus may be configured to determine an industry object model for a data set of an enterprise; and generate an archive package for an archive time point by generating a set of global objects such that each global objects of the set of global objects is represented in the data set and for a respective data source of the set of data sources, generating a set of data source objects based on the industry object model, associating the set of data source objects with the set of global objects, and storing, in the archive package, the set of data source objects and the associated global objects for the respective data source.

Abstract: Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Abstract: A method for file locks in a distributed file system, performed by a storage system is provided. The method includes receiving, at a storage system having a distributed file system, a request for access of a file and locking the file, through one of a plurality of persistent file locks in the storage system. The method includes accessing the file, through the distributed file system, and unlocking the file, through the one of the plurality of persistent file locks.

Abstract: Disclosed herein are an apparatus and method for managing integrated storage. The apparatus includes a data distribution and storage unit for distributing data in order to store the data in integrated storage, including on-premises storage and cloud storage; a storage management unit for connecting to the integrated storage in order to store the data and providing information about storage tiering pertaining to the data; a data manipulation unit for providing the integrated storage as virtual data storage regardless of a location at which the data is actually stored; and a storage connection unit for providing a user with an interface for the created virtual data storage as a single virtual storage unit, wherein the information about storage tiering varies depending on the performance of storage, the time during which the data is used, and the frequency with which the data is accessed.

Abstract: This application relates to apparatus and methods for identifying and remediating poor user experiences on computing devices. In some examples, a user speed determination device is configured to receive a content delivery request for delivery of content to a user device. The computing is also configured to obtain user identification data, obtain user device data and determine a user device speed based on the user identification data and the user device data. The computing device then sends a user device speed indicator to a content delivery device to cause the content delivery device to deliver remediated content to the user device when the user device speed is determined to be less than a predetermined speed threshold. The user identification data can include an IP address and the user device data can include user agent data, user connection data and user resource timing data.

Abstract: An intent decomposition method includes sending, by a first network device, a first sub-intent target value to a second network device. The method also includes receiving, by the first network device, a first message from the second network device. The first message is used to indicate that the first sub-intent target value is not achieved by the second device. The first message includes a first measurement value of the second network device. The method further includes re-decomposing, by the first network device, an intent based on the first measurement value, and sending first sub-intent target values obtained through re-decomposition to the second network device and one or more other network devices different from the first network device and the second network device until all the first sub-intent target values obtained through re-decomposition are achieved or none of the first sub-intent target values obtained through re-decomposition are achieved.

Abstract: Artificial Intelligence-based (AI-based) modeling can be used to predict “Critical Times” when “bottlenecks” in a processing of data would occur. Moreover, for each one of the predicted Critical Times, it can be determined which one of multiple Computing Resources would cause the bottleneck, so that more precise measures can be taken and taken before a Critical Time, in an effort to prevent bottlenecks from happening in computing systems, especially more complex database systems with more demeaning service needs and requirements.

Abstract: A data storage system includes a tuner that obtains data samples for data storage operations of workloads and calculates feature measures for a set of features of the data storage operations over aggregation intervals of an operating period. It further (1) applies a cluster analysis to the feature measures to define a set of clusters, and assigns the feature measures to the clusters, and (2) applies a classification analysis to the feature measures labelled by their clusters to identify dominating features of each cluster, and generates workload profiles for the clusters based on the dominating features, and then automatically adjusts configurable processing mechanisms (e.g., caching or tiering) based on the workload profiles and performance or efficiency goals.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: A computer-implemented method can receive a hierarchy table comprising a plurality of records associated with objects organized in a hierarchical structure. The records comprise values corresponding to a plurality of displayable fields and specify value distributions among the objects. The method can specify one or more viewable fields at an input area of a graphical user interface, and display a plurality of nodes and a plurality of directional links connecting the displayed nodes on a display window of the graphical user interface. The displayed nodes represent objects whose associated records have unique combinations of values corresponding to the specified viewable fields. The directional links represent value distributions among objects represented by the displayed nodes. The method can display aggregated value distributed to or from objects represented by the displayed nodes. The viewable fields specify which of the displayable fields are visible on the displayed nodes.

Abstract: Systems and techniques for metadata quality monitoring and remediation are described herein. Metadata is obtained from a system of record. The metadata is normalized. The metadata is evaluated with an integrity rule to identify a discrepancy in an element of the metadata. The discrepancy is stored as an integrity gap in an integrity database. A notification is generated that includes identification of the element of the metadata and a description of the integrity rule. The notification is transmitted to a user identified based on the integrity rule.

Abstract: Whether a document file is tampered and the like can be determined without imposing a burden on a user. A hash value calculation unit 103 adds contents of update to an original document as incremental update in order of update, and calculates a hash value of the document file for each of the original document and a document for adding the updated content and a hash value of a document file the hash value and the document file ID, identifying the document file, of which are registered in a blockchain network. An ID acquisition unit 102 acquires the document file ID identifying a received document file, from the document file. A hash value acquisition unit 105 acquires the hash value stored in the latest block among blocks storing the document file IDs from the blockchain network. A tampering determination unit 106 determines whether the document file is tampered by determining whether the hash value calculated and the hash value acquired from the blockchain network 300 match.

Abstract: Automated negotiation agent adaptation is performed by detecting change in a utility function involved in automated negotiation between a supporting agent and an opposing agent while the supporting agent operates according to a first negotiation strategy model, generating a plurality of training samples from automated negotiation between the supporting agent and the opposing agent while the supporting agent operates according to a baseline negotiation strategy model, and training an initialized negotiation strategy model using the plurality of training samples to produce a second negotiation strategy model.

Abstract: Aspects related to a resource-constrained system are described herein that can provide object storage services after a service interruption is resolved, even if all of the transactions that were pending and incomplete prior to the service interruption have not yet been recovered and/or executed. For example, file systems implemented by computing systems of the resource-constrained system may treat each file or directory as a separate object. Thus, a transaction directed to one file may not affect the file's directory or other files in the directory. As a result, the resource-constrained system can achieve read-after-write consistency without first recovering and executing the pending, incomplete transactions. Instead, read-after-write consistency for an object can be achieved simply by completing any pending, incomplete transaction directed to that object.

Abstract: A hospital or laboratory network including analytical devices for performing in-vitro diagnosis and a gateway is proposed. The network is configured to send a data package request including information regarding the analytical devices from the gateway to a remote service platform, receive from the remote service platform information regarding available data packages, determine a selection of the available data packages to be downloaded from the remote service platform specific to the analytical devices in the network, request the selection of the available data packages from the remote service platform, download the requested selection of the available data packages from the remote service platform, and provide the requested selection of the available data packages to the analytical devices.

Abstract: A query is preprocessed for features identified by a Data Manipulation Language (DML) in the text of the query. A machine-learning algorithm uses the features as input and provides as output a predicted query parsing execution time needed by a query parser to parse the query. The predicted query parsing time is provided as input to a query optimizer. The query optimizer uses the predicted query parsing time as a factor in optimizing a query execution plan for the query. Subsequently, the query execution plan is executed against a database as the query.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: A method for protecting a client domain, for example against a computing attack, implemented in a client node of the client domain. The method includes: discovering at least one other client node of the client domain, called a discovered node; detecting a conflict between at least two management rules for the traffic associated with the client domain; and resolving the detected conflict, including: if one of the rules was installed by a the discovered node, modifying the rule or a state associated with the discovered node; and otherwise, obtaining, from a the discovered node, an item of information for identifying at least one node of the client domain that installed one of the rules; and detecting and/or resolving the conflict using information obtained during the discovery of the at least one other node of the client domain.

Abstract: Provided is a system for facilitating recovery of deleted computing resources in a cloud network environment. A centralized resource recovery service may be in network communication with a plurality of resource management services that are each configured to create, modify, or delete their respective computing resources such as data storage volumes, databases, compute instances, and the like. The resource recovery service may be configured to receive a delete request associated with a resource managed by one of the resource management services, and cause the resource to be retained in a recovery bin based on the resource satisfying one of a plurality of resource recovery conditions used to manage resource recovery across the resource management services.

Abstract: Provided is a storage system capable of properly deleting derivative data stored at a plurality of sites. A CPU executes a creation process of creating data based on data stored in a storage device at a local site and storing the created data in the storage device of a node at one of the plurality of sites. Further, the CPU collects, from each of the plurality of sites, history information created at each of the plurality of sites to indicate the history of each creation process. When deleting deletion-specified data, the CPU identifies deletion derivative data according to the history information created at each of the plurality of sites, and deletes the deletion-specified data and the deletion derivative data from the storage device at each of the plurality of sites. The deletion derivative data is derivative data derived from the deletion-specified data.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: An image forming apparatus includes an operation device; a storage that stores classification determination information and a user classification rule; a memory that stores instructions; and a processor. The processor executes the instructions stored to: input image data on a document; acquire the input image data on the document; acquire, from the acquired image data, feature quantity; and update the user classification rule. The user classification rule is information in which a criterion for classifying a document having specific feature quantity is set for each user in association with the specific feature quantity. When the user uses the operation device to perform a specific classification operation on image data on a document having the acquired feature quantity, the processor executes the instructions to change a criterion of the user classification rule of the user associated with the acquired feature quantity to a criterion corresponding to the specific classification operation.

Abstract: The technology disclosed relates to endpoint data loss prevention (DLP). In particular, the technology disclosed relates to enforcing data loss prevention policies at an endpoint without needing to perform content sensitivity scan at the endpoint.

Abstract: This disclosure relates to method and system for identifying Personally Identifiable Information (PII) through secret patterns. The method includes receiving user data from at least one data source through a plurality of communication channels. The user data includes PII and non-PII. The user data is associated with a user. The PII includes a plurality of personal identifiers. The method further includes identifying the PII in user data through a predictive model. The method further includes generating a secret pattern based on the PII identified through the predictive model. The secret pattern is an identifiable label. The method further includes adding the secret pattern to each of the plurality of personal identifiers in PII. The method further includes identifying each of the plurality of personal identifiers through the secret pattern in real-time, when user data is transmitted from the at least one data source to at least one data destination.

Abstract: A processing system including at least one processor may obtain a first ontology of a first type of data pipeline component, map the first ontology to a second ontology for a second type of data pipeline component that is stored in a catalog of data pipeline component types, provide a second data schema for the second type of data pipeline component as a template for a first data schema for the first type of data pipeline component, and add the first type of data pipeline component to the catalog of data pipeline component types, where the adding comprises storing the first ontology and the first data schema for the first type of data pipeline component in the catalog of data pipeline component types.

Abstract: A file management device comprising a memory; and a processor coupled to the memory and the processor configured to: a common feature extracting unit that extracts a feature common to a plurality of data files to which a same tag is provided from the data files; a tagging rule storage DB that stores a feature extracted by the common feature extracting unit and the tag provided to the data files in association with each other as a tagging rule; and a tag providing unit that provides a tag to a newly input data file based on the tagging rule stored in the tagging rule storage DB.

Abstract: A search query relating to a search for people and including one or more search terms is received. A search graph for the search is created from a previously created graph which is a directional graph in which people are represented by nodes and content is represented by nodes or edges. The search graph is generated by filtering out nodes or edges that represent content that is determined not to be relevant to the search terms in the search query; and, for the remaining content that is determined to be relevant to the search terms in the search query, adding to the graph a measure of the relevance of the content to the search terms. The search results are generated by operating on the search graph to identify people in the search graph who are sources of content that is relevant to the search terms.

Abstract: In some implementations, a device may receive a request to merge a first cloud computing instance with a second cloud computing instance to generate a multi-cloud computing instance. The device may access a first application programming interface to obtain a first configuration of the first cloud computing instance. The device may access a second application programming interface to obtain a second configuration of the second cloud computing instance. The device may generate a target configuration based on the first configuration or the second configuration. The device may instantiate a set of resources with the target configuration for the multi-cloud computing instance. The device may provide output identifying the multi-cloud computing instance.