Abstract: A computer-implemented method for analysis of data from multiple data sources and a computing system therefor is provided. The method includes receiving a query instance. The query instance may be processed to generate one or more relational query instances based, at least in part, on the query instance. The generated one or more relational query instances may be distributed among one or more nodes. Each of the generated one or more relational query instances may be processed by at least one node of the one or more nodes to extract data from at least one data source of multiple data sources in communication therewith corresponding to the one or more relational query instances. One or more insights may be generated based on the extracted data. The one or more insights generated may be stored in relevant cache to be retrieved therefrom.

Abstract: Techniques of generating short answers for queries by a search engine include performing a training operation on a corpus of training data to train the score prediction engine, the corpus of training data including candidate passages providing short answers for display in callouts and remaining respective passages, from which a top scoring short answer is generated. In such implementations, the corpus of training data further includes the remaining respective passages and the respective titles of the candidate passage and remaining respective passages.

Abstract: A system and method and for retrieving assets from a personalized asset library includes receiving a search query for searching for assets in one or more asset libraries, the one or more asset libraries including a personalized asset library; encoding the search query into embedding representations via a trained query representation machine-learning (ML) model; comparing, via a matching unit, the query embedding representations to a plurality of asset representations, each of the plurality of asset representations being a representation of one of the plurality of candidate assets; identifying, based on the comparison, at least one of the plurality of the candidate assets as a search result for the search query; and providing the identified plurality of candidate assets for display as the search result. The plurality of asset representations for the one or more assets in the personalized content library are generated automatically without human labeling.

Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program. The program may generate a visualization comprising a set of data from a data model. The set of data comprises a set of measure values categorized according to a plurality of dimensions. The program may receive a request to rank the set of measure values based on a first dimension in the plurality of dimensions and a second dimension in the plurality of dimensions. The program may in response to receiving the request, generating a query for a subset of the set of data for the visualization. The query comprises a set of conditions. The program may send the query to a computing system for processing. The program may receive, from the computing system, the subset of the set of data. The program may update the visualization to include the subset of the set of data.

Abstract: A method, an apparatus, a device and a storage medium for embedding user app interest are provided. The method includes: acquiring a user existing app installation list and a user app installation list within a predetermined time window, where the app includes app ID information and app category information; inputting the existing app installation list and the app installation list within the predetermined time window into a pre-trained user app interest embedding model to obtain a user app interest embedding vector. By combining the user existing app installation list information and the user recent app installation list information, the user app interest embedding vector may simultaneously reflect the user long-term interest and the user short-term interest.

Abstract: A system and a method are disclosed for identifying a subjectively interesting moment in a transcript. In an embodiment, a device receives a transcription of a conversation, and identifies a participant of the conversation. The device accesses a machine learning model corresponding to the participant, and applies, as input to the machine learning model, the transcription. The device receives as output from the machine learning model a portion of the transcription having relevance to the participant, and generates for display, to the participant, information pertaining to the portion.

Abstract: An R-tree index merging and updating method and apparatus based on a Hilbert curve, and a medium. The method comprises: S1, acquiring a first R-tree to be merged and a second R-tree into which the first R-tree is to be inserted; S2, querying a node for insertion, for each merged leaf node in a leaf node level of the first R-tree by means of a “top to bottom” hierarchical query algorithm; S3, inserting, according to an order of the Hilbert values, spatial objects included in each leaf node in the first R-tree into the node for insertion that is determined in S2, thereby merging the two R-trees; and S4, for the second R-tree after merging, updating information stored in each node level by level according to an order from a leaf node to a root node.

Abstract: The present disclosure is directed to continuous data profiling (CDP). Entities may house large amounts of disorganized and/or duplicative data. To organize and standardize data across a data set, the data may be profiled. However, profiling large data set can be inefficient and give rise to security problems, as profiling datasets typically requires exporting a dataset to a third-party profiling runtime environment. To remedy these issues, the present disclosure is directed to a continuous data profiling platform that comprises a CDP manager communicatively coupled to a client's database. The CDP manager provides access to a CDP API that may install CDP tools on a client's native database environment, enabling the database management system to profile datasets within the client's native database environment, which results in a more efficient use of computing resources and more secure process of profiling datasets.

Abstract: Systems and methods are provided for presenting a supplemental content asset on a secondary device that is relevant to a primary content asset that is being presented on a primary user device, to enhance the user experience of the primary content asset. A relevant supplemental content asset may be selected based on characteristics of the primary content asset and/or user profile information. Presentation of the supplemental content asset and primary content asset may be coordinated and synchronized by exchange of messages between the primary user device and secondary device.

Abstract: Embodiments are described herein that involve a computing device initiating playback of a particular media item on a media playback system that is registered to a particular account of a social media service. The computing device may query the social media service for one or more accounts of the social media service that are registered to respective media playback systems that have played the particular media item on at least a threshold number of occasions and have not yet been connected to the particular account of the social media service within the social network. The computing device may receive the queried one or more accounts of the social media service and cause a graphical interface to display one or more respective selectable indications of the received one or more accounts of the social media service.

Abstract: A processor may generate a workstation characteristics model of a workspace. A processor may generate respective user profiles for each of one or more users. Each of the respective user profiles may include user data associated with a respective user. A processor may assign, based on the respective user profiles, a respective risk level to each of the respective user profiles. A processor may compare each of the respective risk levels to a risk threshold level. A processor may apply a user characteristic model. A user characteristic model may be based on each of the respective risk levels and the workstation characteristics model. A processor may assign each of the one or more users to respective workstations based on the user characteristic model.

Abstract: An image data collecting apparatus includes: an acquisition unit that acquires position information of a plurality of mobile bodies on which a photographing device is mounted, and a selecting unit that acquires, for each mobile body, the position information acquired for the plurality of mobile bodies, information indicating photographing ranges of the photographing devices mounted on the plurality of mobile bodies, and position information of a predetermined object, and selects a mobile body on which a photographing device that outputs collection target image data is mounted from the plurality of mobile bodies on the basis of the acquired information; a transmitting unit that transmits a collection instruction for image data which is a photographing result of the photographing device mounted on the mobile body to the selected mobile body; and a receiving unit that receives the image data transmitted from the mobile body having received the collection instruction.

Abstract: A processor may query a database of media compositions with a query specifying at least one attribute from among a plurality of attributes of media compositions. In response to the querying, the processor may receive a returned plurality of the media compositions having the at least one attribute. The processor may arrange the returned plurality of the media compositions into a sequence according to at least one of the plurality of attributes. The processor may render the sequence into a metacomposition, which may be displayed by at least one display device.

Abstract: Computing systems methods, and non-transitory storage media are provided for receiving a first representation of an unstructured data entity. The first representation includes an indication of a detection. The unstructured data entity is part of a corpus. Next, second representations of the unstructured data entity are received and resolved according to a consensus. Next, any discrepancies between the first representation and the resolved second representations are determined. The any discrepancies include any difference in an existence or an absence of the detection, in a relative position of the detection, or in a type or a classification of the detection. Next, feedback regarding the any discrepancy is received. Next, the first representation is selectively modified, or selectively prompted to be modified, based on the any discrepancy and the feedback.

Abstract: A streaming platform reader includes: a plurality of reader threads configured to retrieve messages from a plurality of partitions of a streaming platform, wherein each message in the plurality of partitions is associated with a unique identifier; a plurality of queues coupled to the plurality of reader threads configured to store messages or an end of partition signal from the reader threads, wherein each queue includes a first position that stores the earliest message stored by a queue; a writer thread controlled by gate control logic that: compares the identifiers of all of the messages in the first positions of the queues of the plurality of queues, and forwards, to a memory, the message associated with the earliest identifier; and wherein the gate control logic blocks the writer thread unless each of the queues contains a message or an end of partition signal.

Abstract: The present disclosure provides a data processing method performed by an electronic device. The method includes: obtaining first and second service behavior features, and a service scenario feature of an object from service history data associated with the object; generating first and second service embedding vectors and a scenario representation vector according to the first and second service behavior features and the service scenario feature; obtaining first and second weights of the first and second service embedding vectors according to the scenario representation vector and the first and second service embedding vectors; generating first and second service feature vectors according to the first and second service embedding vectors and the first and second weights of the first and second service embedding vectors, respectively; and obtaining an object embedding vector according to the first service feature vector and the second service feature vector.

Abstract: In some embodiments, a multimodal computing system receives a query and identifies, from source documents, text passages and images that are relevant to the query. The multimodal computing system accesses a multimodal question-answering model that includes a textual stream of language models and a visual stream of language models. Each of the textual stream and the visual stream contains a set of transformer-based models and each transformer-based model includes a cross-attention layer using data generated by both the textual stream and visual stream of language models as an input. The multimodal computing system identifies text relevant to the query by applying the textual stream to the text passages and computes, using the visual stream, relevance scores of the images to the query, respectively. The multimodal computing system further generates a response to the query by including the text and/or an image according to the relevance scores.

Abstract: A method of processing an information, an electronic device, and a storage medium are provided, which relate to a field of an artificial intelligence technology, in particular to a field of a knowledge graph technology. An implementation includes: determining a first information, in response to receiving a first query request; querying an information associated with the first information from a current graph database, so as to obtain a first query result; determining at least one federation node, according to at least one of the first query result and the first information; and sending a second query request to the at least one federation node, so that the at least one federation node queries an information associated with a second information in the second query request from a graph database corresponding to the at least one federation node, so as to obtain at least one second query result.

Abstract: A text editor or a plugin thereto automatically generates authorship tokens to identify content authored by a human author or an artificial author. The authorship tokens are applied to the work while the work is being produced. Thus, subsequent review of the work can identify regions produced by a human author and other regions produced by an artificial intelligence.

Abstract: Visual search in an operating system of a computing device can process and provide additional information on the content being provided for display. The computing device can include an operating system that includes a visual search interface that obtains and processes display data associated with content currently being provided for display. The visual search interface can generate display data based on the current content provided for display, process the display data with one or more on-device machine-learned models, and provide additional information to the user. The visual search interface may transmit data associated with the display data to perform additional data processing tasks. Application suggestions may be determined and provided based on the visual search data.

Abstract: Systems, computer program products, and methods are described herein for generating, extracting, classifying, and formatting object metadata using natural language processing in an electronic network. The present disclosure is configured to identify at least one input source, comprising at least one input data; parse the at least one input data; output, by an extraction layer, at least one product metadata and a term importance score associated with the input data to a metadata storage, the extraction layer comprising an NLP attribute extraction model; assemble, by an assignment layer, a corpus of text data and key phrases based on the product metadata from the extraction layer, the assignment layer comprising an NLP classification model; classify and verify, by the assignment layer, the product metadata; and output, by a generative layer, at least one generative metadata to the metadata storage, the generative layer comprising a pretrained generative NLP model.

Abstract: Systems and techniques for patent and prior art analysis are described herein. An issued independent claim of the identified patent is electronically retrieved. A pre-allowance published independent claim of the identified patent is electronically retrieved. The issued independent claim is automatically compared to the pre-allowance published independent claim using at least one unique keyword. A search query string is formulated comprising the at least one unique keyword. A search query is executed to a prior art database comprising a set of prior art documents using the search query string to identify a result prior art document set. An owner of each prior art document of the result prior art document set is identified. The owner is automatically ranked based on a number of keywords from the search query string owned by the owner. A user interface is output to a user comprising a visualization of the rank of the owner.

Abstract: Methods and systems for rending medical images within a web browser application. The web browser application retrieves a worklist and automatically determines an image study from the worklist to be cached. The web browser application retrieves at least one medical image included in the image study. The web browser application creates a web database for storing the at least one medical image within the browser application. When a user selects a medical image for display within the web browser, the web browser application determines whether the medical image is stored in the web database. When the medical image is stored in the web database, the web browser application retrieves the medical image from the web database. When the medical image is not stored in the web database, the web browser application retrieves the medical image from a remote image repository.

Abstract: Systems and methods are described herein for updating links between keywords associated with a trending topic. Control circuitry may identify a plurality of communications associated with a plurality of users, the plurality of communications being related to a topic. The communications may comprise, for example, emails, text messages, online social media posts, websites or portions of a website, or any other online communication. The control circuitry may determine whether the topic is trending and increase a strength of association between a first symbol associated with the topic and a second symbol associated with the topic such that when a search query is received that includes the first symbol, search results related to the second symbol have a higher probability of being returned.

Abstract: A document-oriented database system generates an optimal query execution plan for database queries on an untyped field included in a collection of documents. Each untyped field is configured to store one or more scalar data values. The system generates histograms for scalar data values stored in untyped fields. Responsive to receiving a query statement for fetching or updating data value stored in one of the untyped fields, the system assigns a cost to each operator associated with the query statement based on the histogram, compares the costs assigned to the operators, and generates a query execution plan based on the comparison, and query the database using the query execution plan.

Abstract: A content generator system receives a request to generate content for a target entity, and one or more keywords. The content generator system retrieves, for the target entity, a current stage identifier linking the target entity to a current stage within a multi-stage objective. The content generator system generates an input vector including the current stage identifier, a target stage identifier, a token embedding comprising the one or more keywords, and a position embedding for each of the one or more keywords, the target stage identifier associated with a target stage within the multi-stage objective different from the current stage. The content generator system generates output text content for the target entity by applying a generative transformer network to the input vector. The content generator system transmits the output text content to a computing device associated with the target entity.

Abstract: Systems and methods for preserving storage efficiency during restoration of data from the cloud are provided. In one embodiment, a CBMAP is maintained that maps cloud block numbers (CBNs) to respective corresponding block numbers of a volume of a data storage system in which previously restored data has been stored by a previously restored file. By making use of the CBMAP during the restoration process, storage of duplicate file data blocks on the volume may be avoided by sharing with a current file being restored a reference to the corresponding file data block previously stored on the volume and associated with the previously restored file. In addition to preserving storage efficiency, use of the CBMAP facilitates avoidance of repeated GET operations for data associated with CBNs previously retrieved from the cloud and stored to the volume, thereby reducing data access costs as well as latency of the restore operation.

Abstract: In one aspect, the present disclosure relates to a method for reducing fraud in computer networks, the method including receiving, from each of a plurality of user devices, a request to block an ad displayed within a web browser installed on the user device, the request comprising image data and a forwarding URL associated with the ad; storing crowdsourced ad blocking data based on the received requests to block ads; receiving a request for a list of blocked ads; generating a list of blocked ads based on analyzing the crowdsourced ad blocking data, wherein analyzing the crowdsourced ad blocking data comprises identifying ads blocked by at least a threshold number of users; and sending the list of blocked ads to a first user device, the first user device comprising a browser extension configured to prevent ads within the list of blocked ads from being rendered in a browser.

Abstract: A computer-implemented method for dynamically modifying at least one visualization, the method comprising: receiving data from at least one database, receiving configuration data from at least one user, based on the received data, generating at least one report that includes at least one visualization based on the received data and the configuration data, receiving at least one annotation from at least one additional user, the at least one annotation including one or more tokens, transmitting at least one search query to the at least one database, the at least one search query including at least one of the one or more tokens, in response to transmitting the at least one search query, receiving updated visualization data from the at least one database, and displaying the updated visualization on one or more user interfaces of one or more user devices.

Abstract: A bot automatically compiles transaction information for a consumer from merchants that sell products in various categories and merchants that sell products in only a single category. The bot categorizes the consumer's purchases from the merchants and determines percentages of consumer spending in each category. The bot may obtain a category for purchases from merchants selling a single category of items based on a merchant identifier such as a merchant code. For other merchants, the bot may obtain category information from the merchant or from an analysis of a category code, or a product or service description or identifier. The categories and percentages of the consumer's purchases may be provided by the bot to the consumer or to a third party. The bot may provide special offers and promotions to a consumer based on the compiled category information and percentage spending by the consumer by category.

Abstract: A method includes receiving, at a container registry, a container image including a set of files, determining that at least one file of the set of files is a duplicate of a previously stored container image file at the container registry. The method further includes storing the container image at the container registry with the at least one file of the plurality of files that is a duplicate of the previously stored container image file removed from the container image.

Abstract: A database system stores data in a bi-temporal index that maintains recordation time and a validity time for recorded values. The index for a given key may be append only, such that the stored data for the key doesn't require modification of previously-recorded data for given validity times. The bi-temporal index comprises a key-value data store that allows values to be recorded for a specific key, validity time, and recordation time. To retrieve a value, a request presents a query with a key, subject time, and observation time. Queries look for values with a validity time most recent to and before the queried subject time and a recordation time, associated with the validity time, most recent to and before the queried observation time. The queries prioritize the validity time over the recordation time and returns the value that satisfies the query request.

Abstract: Systems and methods for text description-based generation of avatars for Artificial Intelligence (AI) characters are provided. An example method includes receiving a description of a face of an AI character, where the description is in a free-text format and where the face of the AI character is rendered by an AI character model in a virtual environment; acquiring at least one parameter of the AI character model, where the at least one parameter corresponds to at least one facial feature of the face of the AI character; analyzing the description to generate at least one value for the at least one parameter; and assigning the at least one value to the at least one parameter.

Abstract: A method for presenting an associated conflict block comprises obtaining a first conflict file comprising a plurality of first code blocks, wherein a second code block of the first code blocks comprises a first code snippet of a current version of the second code block, a second code snippet of a basic version of the second code block, and a third code snippet of a to-be-merged version of the second code block. A first instruction triggered on a user interface for activating a to-be-processed code block is received, wherein a first type of the to-be-processed code block is of an unresolved conflict block or a single-side change block. A fourth code snippet comprised in the to-be-processed code block and indexes of N associated code blocks of the to-be-processed code block is presented on the user interface.

Abstract: A deep learning-based Java program internal annotation generation method and system is provided. The method includes acquiring items with a Stars number ranked in the top, and extracting corresponding internal annotations and method statement lists; obtaining an <annotation, target code> pair; selecting an annotation in a Verb-dobj form; obtaining a code context associated with a target code segment; preprocessing the annotation, the target code, and the context to obtain a triplet dataset; randomly dividing the constructed dataset into a training set, a validation set, and a test set, and constructing an encoder-decoder network at the same time; enabling the training set in division to be used for model training, performing evaluation on the validation set to obtain a model with the best effect on the validation set as a target model; and predicting data in the test set with the obtained target model to generate a predicted annotation.

Abstract: A user device stores a local application including initial search records and an initial search function. Each initial search record includes an application link that opens an application page and search data that describes the application page. The initial search function is configured to select from the initial search records. The user device executes the local application to request and receive search update data from a remote system. The search update data includes updated search records and an updated search function. The user device updates the initial search records and the initial search function with the updated search records and the updated search function. The user device receives a search query from a requesting application, selects a set of updated search records based on the search query and the updated search function, and provides a response to the requesting application including application links from the set of updated search records.

Abstract: Aspects described herein may provide systems, methods, and device for facilitating language learning using videos. Subtitles may be displayed in a first, target language or a second, native language during display of the video. On a pause event, both the target language subtitle and the native language subtitle may be displayed simultaneously to facilitate understanding. While paused, a user may select an option to be provided with additional contextual information indicating usage and context associated with one or more words of the target language subtitle. The user may navigate through previous and next subtitles with additional contextual information while the video is paused. Other aspects may allow users to create auto-continuous video loops of definable duration, and may allow users to generate video segments by searching an entire database of subtitle text, and may allow users create, save, share, and search video loops.

Abstract: Techniques allow a computer to responsively search for graph shapes similar to a user-selected graph shape much faster. Data can be pre-processed and stored as vectors, along with an index. The index can be used to find similar vectors that represent graph shapes similar to a user-selected shape in a computationally efficient manner. Vectors of multiple resolutions can be used to anticipate different sizes of a graph that a user can select, and comparisons can be repeated and refined. When a satisfactorily small number of candidate vectors are determined, more computationally intensive distance calculations can be performed on data reconstructed from the vectors.

Abstract: An operations management system and related method obtains user activity information representing user interactions with the operations management system responsive to an incident, the incident belonging to a category of incidents. The method represents the user activity information as an itemset. The method further processes the itemset with a mining algorithm to identify one or more items of information frequently accessed for the incident. The method yet further associates the identified one or more items of information with the category of incidents.

Abstract: In some embodiments, a computer system is described. In some embodiments, the computer system receives, from a client application, a first request to access a collection of applications associated with an operation, wherein the collection of applications is associated with at least one third-party entity. In some embodiments, the computer system receives a selection of an application associated with a third-party entity from the collection of applications. In some embodiments, in response to receiving the selection, the computer system identifies a set of data comprising an aggregation of data stored on a plurality of databases required to perform the operation associated with the application. In some embodiments, the computer system determines that the application has access to the aggregation of data. In some embodiments, the computer sends a request to perform the operation to the application. In some embodiments, the computer system receives a set of results based on the performance of the operation.

Abstract: Systems and methods are directed to generating a synoptic video from one or more documents. The system receives an indication to generate the synoptic video and in response, accesses the one or more documents and user preferences of a user that are derived by the network system. The one or more documents are analyzed to determine relevant text content, whereby the analyzing includes tagging the relevant text content. Based on the user preferences, the system generates the synoptic video that summarizes the tagged relevant text content. The content and style of the synoptic video is based on a user style indicated by the user preferences. For example, the user preference can determine a depth of the summarized content, a type of audio or text used, an amount of images to provide, and an amount of summarized text to provide. The synoptic video can then be displayed to the user.

Abstract: Disclosed are embodiments for providing a domain-specific visualization of message content. Unclassified messages are received for a sender and a real-time classifier is used to assign categories to the messages. User interactions with email can then be used to generate a ranked list of domain-specific senders. This ranked list of senders and classified emails can then be used to provide a domain-specific view to a user. Further features (e.g., aggregated content pages by sender, dynamic call-to-action buttons, message previews etc.) can then be built on top of the ranked senders and messages.

Abstract: Methods, systems, and apparatus for efficient image analysis. In some aspects, a system includes a camera configured to capture images, one or more environment sensors configured to detect movement of the camera, a data processing apparatus, and a memory storage apparatus in data communication with the data processing apparatus. The data processing apparatus can access, for each of a multitude of images captured by a mobile device camera, data indicative of movement of the camera at a time at which the camera captured the image. The data processing apparatus can also select, from the images, a particular image for analysis based on the data indicative of the movement of the camera for each image, analyze the particular image to recognize one or more objects depicted in the particular image, and present content related to the one or more recognized objects.

Abstract: Systems and methods to detect attacks on the clocks of devices. In time sensitive networks are described. Particularly, the disclosed systems and methods provide detection and mitigation of timing synchronization attacks based on key performance indicators related to the protecting transmission windows in data streams of the time sensitive networks.

Abstract: An automated system and method for assessing and rating accessibility are provided. A processor collects raw data corresponding to geographical objects obtained from sensors, the raw data including tagged and non-tagged data; operates on the raw data to extract features and reduce dimensionality of the raw data, thereby generating processed data having extracted features; generates accessibility data from the processed data; uses supervised machine learning techniques to develop models from the processed data; and implements the models and generates accessibility tags based on the extracted features. A database is configured to store geographical data related to the geographical objects and the accessibility tags corresponding to the geographical locations. An API is configured to access the database and provide a user interface for a user device to use an application to display the accessibility data and the accessibility tags on the user device customized to a disability.

Abstract: Systems and methods for management of event metadata. The methods may include maintaining a plurality of data storage systems in communication with an external metadata management system. The methods may also include operating the metadata management system to store tagged event metadata corresponding to the plurality of data storage systems. Event metadata corresponding to a data storage system includes information associated with at least one data operation event executed on data residing in that data storage system.

Abstract: A method for executing a dynamically generated operation in a parallel processing framework may include executing the dynamically generated operation sequentially for a threshold quantity of times before initiating a compilation operation to generate precompiled code for the dynamically generated operation. Upon generating the precompiled code, execution of the precompiled code may be parallelized by determining, based on a quantity of time required to execute the precompiled code on a portion of a dataset, a task size. The execution of the precompiled code may be divided, based on the task size, into one or more tasks. Moreover, a corresponding quantity of worker threads may be allocated to perform the one or more tasks in parallel. Related methods and computer program products are also provided.

Abstract: Subject matter disclosed herein may relate to systems, devices and/or processes for computer implemented modeling of a multi-event process. In an embodiment, the method may include loading into one or more computer memory devices, a digitized representation of events of the multi-event process, in which a first one or more of the plurality of events is linked to a previous first one or more or of a second one or more of the plurality of events and generating a first visual representation of one or more visual indicators to represent progress of the first one or more of the plurality of events. The method may additionally include computing a respread progress profile of the first one or more events based, at least in part, on one or more modified attributes of the first one or more or of the second one or more of the plurality of events.

Abstract: Systems, methods, apparatuses, and computer program products for human or bot activity detection. The method may include, collecting time-series data on one or more events occurring on a webpage. The method may also include deriving classifications of the one or more events. The method may further include performing functional transformations of the time-series data. In addition, the method may include determining potential features of the one or more events based on a combination of the classifications of the one or more events, and results of the functional transformation. Further, the method may include training a machine learning model with the potential features. The method may also include determining, via the machine learning model, bot behavior and non-bot behavior of the one or more events.

Abstract: A method performed in real-time includes receiving and storing time-based data over a specific time period and dividing the specific time period into a plurality of time windows. The method further includes determining that data associated with two or more proximate time windows are within a predetermined variance of one another and responsive to the determination: generating a mathematical function representative of the data associated with the two or more proximate time windows, deleting the data associated with the two or more proximate time windows, and generating a representation of the deleted data from the mathematical function. In certain embodiments, the data comprises empirical network telemetry data.