Abstract: A computing device operates a first thread for a first layer of a plurality of layers of an application that are operated by different threads. The computing device maintains a first parameter that is shared by the first layer of the application and a second layer of the application. The second layer is operated by a second thread that is identified by a first address. When the first parameter is locally updated at the first thread, the computing device updates a local copy of the first parameter at the first thread and providing the locally updated first parameter to the second thread by using the first address. When the first parameter is remotely updated at the second thread, the computing device receives the remotely updated first parameter and updating the local copy of the first parameter at the first thread based on the received remotely updated first parameter.

Abstract: A data analytics system configured to perform operations is disclosed. The operations can include creating, in response to instructions received from a user, a first pipeline. This pipeline can be configured to extract data from an append-only first data store, extract identifying characteristics from the extracted data, provide the identifying characteristics to an identity service, and receive a tenancy identifier from the identity service. The pipeline can further be configured to create a data object in a second data store using the extracted data; create a tenancy object in a metadata store, the tenancy object associated with the data object, the metadata store implementing a hierarchical data object ownership graph; and associate the tenancy object with a parent object in the hierarchical data object ownership graph. The data analytics system can then tear down the first pipeline.

Abstract: Methods and systems described herein may include processing a change data capture stream in parallel and optimizing the write operations contained in the change data capture stream such that the write operations may be written to a change table in parallel. Processing the change data capture stream may include decoding the transaction data contained in the change data capture stream in parallel. After the transaction data in the change data capture stream has been decoded, the transaction data may be analyzed to identify write operations that write to the same row. Write operations that write to the same row may be merged into a single write operation. The merging of write operations may be performed until each write operation writes to a different row. The write operations may then be written to the change table in parallel.

Abstract: One embodiment of the present invention provides a switch. The switch includes a storage device, one or more line cards, and a control card. A respective line card includes one or more ports and forwarding hardware. The control card determines routing and forwarding tables for the switch, and comprises processing circuitry and a management module. The management module manage a tunnel or virtual network at the switch. During operation, the control card determine an event associated with layer-2 operations of the switch. The control card refrains from notifying the management module regarding the event and notifies a first line card in the one or more line cards regarding the event. The first line card then updates a layer-3 forwarding entry in the corresponding forwarding hardware based on the notification.

Abstract: The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object. An end-of-purpose query is provided to multiple applications that requests each application to determine whether the application is able to block the object. End-of-purpose statuses are received, in response to the end-of-purpose query, that each indicate whether a respective application is able to block the object. The end-of-purpose statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each application that instructs the application to locally block the object in the application.

Abstract: Example methods and systems are directed to existence checks on rows within a database. A page data structure stores bitmap data for the rows in the page. A row within the page corresponds to a single bit in the bitmap data. To determine if a row has been deleted, the page data structure for the page containing the row is located and the bit for the row in the page data structure is checked. An array of page data structures is created, indexed by a hash of the page identifier. In the event of a hash collision, a linked list of page data structures is used, sorted by page identifier.

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

Abstract: Methods, non-transitory computer readable media, and platform-as-a-service (PaaS) server devices are disclosed that obtain commit metadata from a version control system (VCS) via communication network(s). The VCS is located on-premises and is associated with an enterprise and the commit metadata comprises an indication of file(s) committed to the VCS by enterprise user(s). A determination is made that at least a portion of the indication for at least one of the file(s) matches a stored pattern. The one of the file(s) comprises a configuration file. Contents of the configuration file are retrieved from the VCS via the communication network(s). The contents comprise configuration data associated with information technology infrastructure associated with the enterprise. A database associated with an instance of a platform is updated to include at least a portion of the configuration data. The platform instance is associated with the enterprise and hosted within a PaaS environment.

Abstract: A method for managing a data center includes: intercepting a data transfer request; making a determination that the request is valid; initiating, based on the determination, a data transfer operation by sending a notification to a client; analyzing a data package to infer components of the package, in which the package comprises data chunks and client-based hash values (CBHVs) associated with the data chunks; generating, based on the analysis, data center-based hash values (DCHVs) corresponding to the data chunks; populating a hash mapping lookup table to store the CBHVs and DCHVs; obtaining storage location information of the data chunks from storage; updating, based on the information, a storage location map; and initiating notification of a user of the client about completion of the operation.

Abstract: In one aspect, a method includes receiving merchant profile data describing attributes of merchants; generating, using one or more machine-trained models and the merchant profile data, a respective first profile for each merchant of the merchants; generating, using the one or more machine-trained models, a respective second profile for each of the plurality of merchant services using at least one type of description for each of the plurality of merchant services, wherein the respective first profile for each merchant and the respective second profile for each of the plurality of merchant services are numerically comparable; identifying a list of merchant service recommendations for at least one of the merchants using generated first profiles and second profiles; and configuring a merchant computing device of the at least one merchant with at least one merchant service selected by the merchant from the list of merchant service recommendations.

Abstract: A computing system includes a memory device, a persistent storage device, and a processor. The persistent storage device includes a filesystem having filesystem objects and a protection system stored thereon. The protection system includes a filesystem minifilter driver and a protection service. The minifilter driver intercepts an input/output (I/O) event directed to a target filesystem object and extracts system event metadata from the I/O event. The system event metadata includes an identifier of the target filesystem object. The system event metadata is transmitted to the protection service and recorded in a record file. A backup copy of the target filesystem object created. The I/O event is released after recordation of the system event metadata and creation of the backup copy, thereby enabling the I/O event to be performed on the target filesystem object. During a system restore operation, the target filesystem object is replaced with the backup copy.

Abstract: Affinity scores are computed for a plurality of user accounts, each affinity score quantifies an affinity of a user account to a content creator of one or more digital objects hosted in a content hosting platform. Each affinity score is computed by collecting interaction data for the user account corresponding to the content creator, normalizing the collected interaction data using a total activity data of the user account on the content hosting platform and attribute data associated with the content creator, and generating the affinity score using the normalized interaction data.

Abstract: Protecting data privacy in secure multi-party computation and communication is provided. A method of protecting data privacy includes determining a differential privacy configuration, determining a number of iterations based on a first parameter and a second parameter, and for each of the number of iterations generating a random value and a random noise data; generating a first message and a second message; and performing a transfer based on the first message, the second message, and an input data to output one of the first message and the second message. The method also includes generating a first noise data based on the random noise data in each of the number of iterations, generating a first share based on a first dataset and a second dataset, applying the first noise data to the first share, and constructing a result based on the first share and a second share.

Abstract: A system is provided for transfer of digital resources using an integrated resource platform. In particular, the system may comprise a networked platform that may be accessible by one or more users to access digital resources (e.g., non-fungible tokens stored on a distributed register). The platform may further display a graphical user interface through which the user may take various actions with respect to such digital resources, including the ability to view metadata associated with the resources or to transfer the resources. In this regard, the platform may integrate multiple different types of distributed registers and/or legacy computing systems such that the user may access the digital resources along with the functions associated therewith.

Abstract: To accelerate the data processing of a processor, a coprocessor subsystem can be used to offload data processing operations from the processor. The coprocessor subsystem can include a coprocessor and an accelerator. The accelerator can offload operations such as data formatting operations from the coprocessor to improve the performance of the coprocessor. The coprocessor subsystem can be used to accelerate database operations.

Abstract: A system and method for the preparation of electronic publications or “ePubs” that provide a rich multimedia experience to readers using any of a variety of user devices, without requiring those individuals wishing to prepare such ePubs to install proprietary client applications on the computing device used to prepare the ePubs, and without the need to download a large portion or all of the ePub to enable viewing on an electronic device of an end-user.

Abstract: A computing system includes a server. The server is communicatively coupled to a data repository and is configured to store a data in the data repository. The server is further configured to create, via a visual information flow creation tool, at least one information flow object, wherein the at least one information flow object comprises a flow, a sub-flow, an Action, or a combination thereof. The server is also configured to interface with the at least one information flow object via a front-end application programing interface (API), a back-end API, or a combination thereof. The server is additionally configured to execute the at least one information flow object via the front-end API, the back-end API, or a combination thereof, and to retrieve results obtained by executing the at least one information flow object via the front-end API, the back-end API, or the combination thereof.

Abstract: Methods, systems, computer-readable media, and apparatuses are described for sending different update times corresponding to a same version of a resource. A computing device may provide a version of a resource in response to requests from a plurality of different devices, and may indicate different update times for the version of the resource. The different update times may be based on times associated with the requests from the plurality of different devices.

Abstract: Systems and methods for podcast playback in a system including a playback device and a mobile device as a system controller are disclosed. In one embodiment, a playback system comprising a first playback device and a mobile device, the mobile device comprising computer-readable medium having stored thereon instructions executable to perform a method comprising capturing user input selecting an alarm function, capturing user input selecting a time for playing an alarm on the first playback device, capturing user input selecting a podcast channel, updating the graphical user interface to reflect the selected podcast channel, capturing user input specifying what order to play podcast episodes from the selected podcast channel, and starting playback of a first podcast episode on the first playback device according to the specified order to play podcast episodes by the previous user input and the selected time for playing an alarm.

Abstract: Disclosed herein is a computer-implemented method of processing a query using a columnstore comprising a plurality of segments, the method comprising: receiving a query comprising a parameter; determining a key corresponding to the parameter; identifying a mapping structure, from a plurality of mapping structures, relating to said key, wherein each mapping structure corresponds to a respective segment of the columnstore; interrogating the identified mapping structure to determine a value corresponding to the key, wherein the value identifies an entry of an index table of a plurality of index tables that corresponds to the respective segment, wherein the entry of the index table identifies a row of the respective segment of the columnstore relating to the parameter; and retrieving data relating to the parameter from a data source based on data stored in the entry of the index table.

Abstract: The disclosed method is performed by a cloud system for changing a registration of a network access device. The method includes initiating a change of a registration of a network access device. The registration is stored at a cloud system and indicates ownership of the network access device by a first user. The method further includes receiving an authorization from the first user to dissociate the ownership of the network access device by the first user, and receiving an indication of a physical reset occurring locally at the network access device. The physical reset allows the first user to dissociate the ownership of the network access device. The method further includes, upon receiving both the authorization by the first user and the indication of the physical reset, releasing the ownership by the first user of the network access device at the cloud system.

Abstract: Methods and systems are disclosed for optimizing record placement in defragmenting a graph database. Issues with fragmented data within a graph database are addressed on the record level by placing data that is frequently accessed together contiguously within memory. For example, a dynamic rule set may be developed based on dynamically analyzing access patterns of the graph database, policies, system characteristics and/or other heuristics. Based on statistics regarding normal query patterns, the systems and methods may identify an optimal position for certain types of edges that are often traversed with respect to particular types of nodes.

Abstract: Example embodiments involve a metrics collection system for collecting software usage metrics from one or more client devices at deployments. A computer, such as a server configured to execute the metrics collection system, collects software usage metrics (e.g., as a metrics submission from a client device) of the software product at the deployment, identifies a metrics type of the software usage metrics collected, assigns the software usage metrics to a metrics category, and calculates and updates a metrics score of the metrics category, based on the software usage metrics collected.

Abstract: Protecting sensitive data in snapshots, including: creating a transformed snapshot portion by applying a transformation specified in an access policy to one or more data objects contained within the portion of the stored snapshot, wherein the stored snapshot is a copy of data in a storage system at a particular point in time prior to a request to access the snapshot; and providing access to the transformed snapshot portion.

Abstract: A data store maintains a collection of data using a log-based storage structure. In response to a request to delete an item from the collection, the database management system adds a tombstone entry to the log-based storage structure, with additional metadata associated with the tombstone. Access to the tombstone metadata is provided to a client of the data store. The tombstone is deleted from the log-based storage structure after expiry of a time-to-live period.

Abstract: A database session in an active standby server on which an active standby database resides receives a DML statement. The session is suspended while the statement is redirected over a database link to a primary database on which the statement is executed. Information associated with execution of the statement is communicated to the session in the active standby server. Redo records describing changes to the contents of the primary database are applied to the active standby database and control is returned to the session. Prior to commitment of a transaction including the statement, a query directed to data to which the statement was directed is received at the active standby server from a client and executed on the active standby database absent use of a database link based on whether information associated with a database session associated with the client matches the information associated with execution of the statement.

Abstract: Protecting data privacy in secure multi-party computation and communication is provided. A method of protecting data privacy includes determining a differential privacy configuration, determining a number of iterations based on a first parameter and a second parameter, and for each of the number of iterations generating a random value and a random noise data; generating a first message and a second message; and performing a transfer based on the first message, the second message, and an input data to output one of the first message and the second message. The method also includes generating a first noise data based on the random noise data in each of the number of iterations, generating a first share based on a first dataset and a second dataset, applying the first noise data to the first share, and constructing a result based on the first share and a second share.

Abstract: A method of controlling resynchronization of a source database and a target database may comprise detecting that a connection between the source database and the target database has been restored. Based on the detecting, the method may also comprise identifying a first edit flag for a first row in a first table on the source database. Based on the identifying, the method may also comprise sending the first row from the source database to the target database. Based on the sending, the method may also comprise clearing the first edit flag for the first row.

Abstract: Embodiments of the present disclosure relate to sharing database roles using hidden roles. A database role may be generated within a database container having a plurality of data objects, wherein the database role exists exclusively within the database container. A set of grants to a particular subset of the plurality of data objects of the database container may be assigned to the database role and the database role may be granted to the share object. The share object is mounted within a consumer account to generate an imported database container within the consumer account, the imported database container including an imported copy of the database role. The imported copy of the database role may be granted to each of one or more account level roles of the consumer account to share the particular subset of the plurality of data objects without creating proxy objects in the consumer account that represent the particular subset of the plurality of data objects.

Abstract: A distributed database system can implement a column-based database system and a row-based database system for processing data. The row-based database system can store data organized into key value pairs, and data to be processed by the row-based database system is converted to a key-value format compressing keys that correspond to values. The distributed database system can perform serialization and compression in converting the data to the key-value format for efficient data storage performance. The distributed database system can unpack portions of the converted serialized compressed data in response to queries that process a portion of serialized compressed data without unpacking the entire converted dataset.

Abstract: A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

Abstract: Discussed herein is a technique for replication of keys across regions of a cloud infrastructure. A first vault is created in a first region. The first vault stores a plurality of records, each of which is associated with a key and corresponding metadata. A second region, different from the first region, is selected where replication of the plurality of records is desired. A second vault is created in the second region. The plurality of records are relayed from the first vault to the second vault, so that each of the plurality of records is replicated in the second vault based on an entropy value of the record. A mutation operation executed with respect to the first vault is stored as a new record in the first vault. The new record is transmitted to the second vault, which is updated to reflect the mutation operation performed on the first vault.

Abstract: Physical storage devices (PSDs) of a protection group cluster (PGC) may be represented by a protection group matrix (PGM) having a plurality of rows and a plurality of columns, where each row corresponds to a PSD of the PGC, and each column corresponds to a partition of each PSD. The value specified in each cell at an intersection of a row and column specifies the protection group of the PGC to which the partition of the PSD represented by the column and row, respectively, is (or will be) assigned. In response to one or more of PSDs being added to a PGC, the PGM may be reconfigured, including adding new rows, and transposing portions of columns to the new rows, or transposing portions of rows to portions of columns of the new rows. Protection members of the PGC may be re-assigned based on the reconfiguration.

Abstract: Disclosed are a method for data synchronization between a host side and a Field Programmable Gate Array (FPGA) accelerator, a Bidirectional Memory Synchronize Engine (DMSE), a FPGA accelerator, and a data synchronization system. The method includes: in response to detection of data migration from a host side to a preset memory space, generating second state information according to first state information in a first address space, and writing the second state information to a second address space (S201); and in response to detection of the second state information in the second address space, calling Direct Memory Access (DMA) to migrate data in the preset memory space to a memory space of a FPGA accelerator, and copying the second state information to the first address space, so as to implement synchronization (S202).

Abstract: Software-based orchestration of communication payloads in satellites. In an embodiment, a payload model of a satellite payload, defined in a data modeling language (e.g., YANG) and representing a configuration for the satellite payload, is received. The configuration specifies a setting for at least one component of the satellite payload. The payload model is translated into one or more satellite commands for configuring the satellite payload according to the configuration represented in the payload model, and the satellite payload is reconfigured using the satellite command(s).

Abstract: A data migration and integration system is disclosed. In various embodiments, the system includes a memory configured to store a mapping from a source schema to a target schema; and a processor coupled to the memory and configured to migrate to a target schema an instance of source data organized according to the source schema, including by using a chase engine to perform an ordered sequence of steps comprising adding a bounded layer of new elements to a current canonical chase state associated with migrating the source data to the target schema; adding coincidences associated with one or more of the target schema data integrity constraints and a mapping from the source schema to the target schema; and merging equal elements based on the coincidences; and repeat the preceding ordered sequence of steps iteratively until an end condition is met.

Abstract: A cybersecurity infection detection system and method of use. In some embodiments, the system and process provide improved network security, computer security, or both, through mutually assured, defense in depth approaches. In some embodiments, one or more of defense in depth, collaborative attack detection, remediation, component redundancy, component self-monitoring, and component self-replacing are combined to effect an enhanced cybersecurity system. In some embodiments, the cybersecurity system and method include, but are not limited to, one or more of one or more probes, monitors, configuration ledgers, signature ledgers, audit ledgers, configuration controllers, message engines, switchboards, and a public-private key infrastructure.

Abstract: A method, apparatus, and non-transitory computer-readable storage medium for generating and presenting information identifying relationships between entity instances in a database that has a plurality of entity structures.

Abstract: A configuration of a security system is optimized based on revising metadata categories and one or more associated properties which comprise the metadata categories included in at least one rule used by the security system. The optimized configuration is transmitted to the security system. A current configuration of the security system is update. An indication of the update being successful is received.

Abstract: A storage system includes a first storage device that includes a first memory and a first processor coupled to the first memory; and a second storage device that includes a second memory and a second processor coupled to the second memory, wherein the first processor is configured to: when migrating data in object units, generate dummy data that corresponds to the data instead of the data in object units, and transmit management information used to manage an object and the dummy data to the second storage device, and the second processor is configured to: store the management information in a storage unit in association with the object, and discard the dummy data.

Abstract: Embodiments of the present invention relate to methods, systems, and computer program products for user behavior management. In embodiments, a group of states of a user of an application system within a previous time period may be obtained. A state in the group of states may be associated with a privilege of the user for accessing resources in the application system during the previous time period. A feature of the user may be generated based on the group of states. A privilege of the user at a current time may be managed in the application system based on the feature. With these embodiments, the user behavior may be managed according to various aspect of the user's historical states and thus the user may be managed in a more accurate and effective manner.

Abstract: A method for deduplicating data comprising: obtaining, from a metadata node and by file system client executing on a client application node, a data layout; generating, by the client application node, a fingerprint for the data stored on the client application node; generating, by a memory hypervisor module executing on the client application node, at least one input/output (I/O) request specifying a location in a storage pool, wherein the location is determined using the data layout; issuing, by the memory hypervisor module, the at least one I/O request to the storage pool, wherein processing the at least one I/O request results in at least a portion of the data being stored at the location; and after issuing the at least one I/O request to the storage pool, transmitting the fingerprint to the metadata node, wherein the metadata node attempts to deduplicate the data using the fingerprint.

Abstract: Aspects of the present disclosure relate to mapping content delivery. A client device provides, to a map management server, a request for a map of a geographic region. The client device receives, from the map management server, an identification of tiles for the map. The client device provides, to a first tile server, a request for the tiles for the map. In response to receiving the tiles from the first tile server: the client device displays the map of the geographic region based on the tiles.

Abstract: Embodiments of the invention are directed to a system, method, or computer program product structured for synthesizing and building infrastructure platforms.

Abstract: This application relates to a system for verifying data access and a method thereof. In one aspect, the system includes a service module for receiving a data access request for an original data from a client, and sending a first verification data to the client. The system also includes a verification module for receiving a first data eigenvalue corresponding to the original data from the service module, and generating a first verification fingerprint corresponding to the first data eigenvalue. The system further includes a data module for generating the first verification data by receiving the first verification fingerprint to embed into the original data, and generating a first integrity value by hashing the first verification data. The system further includes a verification database for storing data access information comprising the first data eigenvalue, the first verification fingerprint and the first integrity value in one record identified as the original data.

Abstract: In one aspect, a method includes receiving merchant profile data describing attributes of merchants; generating, using one or more machine-trained models and the merchant profile data, a respective first profile for each merchant of the merchants; generating, using the one or more machine-trained models, a respective second profile for each of the plurality of merchant services using at least one type of description for each of the plurality of merchant services, wherein the respective first profile for each merchant and the respective second profile for each of the plurality of merchant services are numerically comparable; identifying a list of merchant service recommendations for at least one of the merchants using generated first profiles and second profiles; and configuring a merchant computing device of the at least one merchant with at least one merchant service selected by the merchant from the list of merchant service recommendations.

Abstract: Approaches for a model-driven tool-agnostic reporting approach are provided. In one example, a report request is received from a business intelligence reporting application, from which a graphical template and query template are created, wherein the graphical template comprises the visual presentation of data responsive to the request and the query template specifies how the data responsive to the request is to be computed. The report created by the approaches described herein is compatible with multiple business intelligence reporting applications.

Abstract: A representation of a workflow comprising a plurality of tasks is obtained. An execution of an instance of the workflow is initiated. The execution comprises selecting, with respect to a particular task of the workflow, a particular execution resource option from a set comprising at least a first execution resource option and a second resource execution option. A result of the execution is stored.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: The presence of new unread electronic messages received, that is, messages received since unread messages were last reviewed, is provided by indicia presented to the user. These indicia can take various forms, such as by bolding, flashing, changing the size or color of a count of unread messages, and/or the unread message icon. Alternatively, a separate indication, such as a second count representing the number of new unread electronic messages received, or some other symbol, such as an explanation point, can be displayed.