Abstract: Systems and methods for assessing, tracking and improving security maturity of an organization are provided. Described is a system for assessing security maturity of an organization. The system receives a list of data sources located across multiple jurisdictions for the organization, collects data sources/data using custom rules from a plurality of data sources of the list of data sources, determine criticality score for each of the plurality of data sources, calculates data source coverage and asset collection coverage, determines use case coverage, and determines security maturity score using a maturity score model. The maturity score model is a logistic equation which is a function of the data source coverage, the asset collection coverage, the criticality score associated with each of the plurality of data sources, the use case coverage, asset coverage by each the plurality of data sources.

Abstract: A method for recommending offerings to a business may include: receiving a request for recommended business offerings from a device; receiving business data associated with a business from the device, the business data comprising invoice data associated with the business; embedding the business data to a vector space to obtain a business vector, the vector space comprising a plurality of other vectors associated with other businesses; calculating a relation metric between the business vector and a vector of the plurality of other vectors, the vector being associated with a second business, the relation metric representing a degree of relation between the business and the second business; determining that the relation metric is above a pre-defined threshold value; and responsive to the determining, sending business data associated with the second business to the device, the business data associated with the second business comprising invoice data associated with the second business.

Abstract: Described are techniques for efficiently traversing a tree data structure to determine responses to queries by first dividing the tree data structure into linear chains of nodes. Linear chains may be formed by beginning at an initial node, including the child node of the initial node that has the largest number of descendant nodes, and proceeding to include child nodes associated with the largest number of descendant nodes until a node lacking child nodes is reached. Additional chains may then be formed by beginning at an initial node not included in previous linear chains and repeating the process. Responsive to a received query, traversal of each linear chain encountered along a query path may be performed more efficiently than other traversal algorithms that traverse a tree data structure until an end node is reached.

Abstract: A method, apparatus, and system are directed towards seeding a user's contacts for their online social network. The invention is arranged to automatically recommend to the user a set of seed contacts that the user may employ to invite to join their social network. The set of seed contacts may be harvested from the user's existing portal activities, as well as other sources. In one embodiment, the invention analyzes portal activity, such as email exchanges with the user, and the like, to determine a frequency of contact with the user. Other sources may include but not be limited to emails, names within an address book of the user, names within an address book of another person, a buddy list, an instant messaging list, an activity, a mailing list, an online discussion group, a membership in a category, chat group, and the like.

Abstract: Entries within a participant list of an electronic communications system may be categorized automatically into one or more groups based on attributes of users represented in the participant list. Categorizing users includes maintaining a list of identifiers that are selected by a first user and for which online presence information is made perceivable through the list. The list includes one or more categories into which the identifiers are categorized. At least one attribute associated with an identifier for which online presence information is to be made perceivable through the list and attributes stored relative to at least one of the categories are accessed. The attributes associated with the identifier are compared to the stored attributes. Based on results of the comparison, at least one category within the list that corresponds to the identifier is identified, and the identifier is categorized into the identified category.

Abstract: A system provides news alerts. For example, the system may receive topics of interest to users and periodically obtain news articles that originate from multiple sources of news articles and relate to the topics of interest to the users. The system may generate news alerts that include information associated with one or more of the news articles and provide the news alerts to the users.

Abstract: An multi-level privacy evaluation technology is described for increasing the performance of applications or services that experience high volumes of queries for data with privacy attributes. The multi-level privacy evaluation technology evaluates data using a subset of privacy policy rules and privacy information determined for the data at a backend server and thereby reduces the volume of data that need to be filtered at a frontend server. The multi-level privacy evaluation technology first applies an initial privacy check on a large data set at the backend to authoritatively filter out any data that a viewing user is not permitted to view or access and return as results a smaller data set that the viewing user may be permitted to view or access. A full privacy check is then performed at the frontend on the smaller data set, resulting in reduction in the overall cost of performing privacy checks and reducing latency in displaying data to the viewing user.

Abstract: A set of item-item affinities for a plurality of items is determined based on collaborative-filtering techniques. A set of an item's nearest neighbor items based on the set of item-item affinities is determined. A set of user feature-item affinities for the plurality of items and a set of user features is determined based on least squared regression. A set of a user feature's nearest neighbor items is determined based in part on the set of user feature-item affinities. Compatible affinity weights for nearest neighbor items of each item and each user feature are determined. Based on user features of a user and items a user has consumed, a set of nearest neighbor items are identified as a set of candidate items, and affinity scores of candidate items are determined. Based on the affinity scores, a candidate item from the set of candidate items is recommended to the user.

Abstract: Systems and methods are provided for intrusion detection. The systems and methods may include receiving transaction information related to one or more current transactions between a client entity and a resource server, accessing a database storing a plurality of transaction groups, analyzing the received transaction information with respect to information related to at least one of the plurality of transaction groups, and based on said analyzing, determining a possibility of an occurrence of an intrusion act at the resource server. The transaction groups may be formed based on a plurality of past transactions between a plurality of client entities and the resource server. Identity information of a user associated with the one or more current transactions may also be received along with the transaction information. The user may be associated with at least one of the plurality of transaction groups.

Abstract: Methods, apparatus, systems and computer program products are described and claimed that provide for automatically and positively determining that an associate accessing a business domain/application using an application-specific associate identifier is the same associate that is accessing another business domain/application using another application-specific associate identifier. Once the positive determination of same associate is made, a federated identifier key is generated and applied to all of the platforms in which the associate can be positively identified, so as to globally identify the associates across multiple enterprise-wide domains/applications. As such, the present invention eliminates the need to manually analyze associate data to determine if an associate interfacing with one domain/application is the same associate interfacing with another domain/application.

Abstract: Various embodiments of the disclosed subject matter include computer-implemented methods, computer-readable media, and computer systems configured to respond to a search query from a computer user. In response to receiving a search query from the computer user, search results are obtained. A plurality of user intents are identified according to the obtained search results. The obtained search results are then grouped according to the subject matter of the search results, where each group corresponds to one of the plurality of user intents. A first user intent (with the corresponding group of search results) is selected. A search results page is generated from the search results of the group the search results corresponding to the selected first user intent and the generated search results page is returned to the computer user in response to the search query.

Abstract: An application, such as a data store application, provides a filter query to manage access to a view of a data store. The application uses the filter query to restrict or shape access to the view. A user constructs the filter query using a query constructor component of the application. The application attaches the constructed filter query to the view. The application may extract the structure of the query and combine that with the original view to generate a filtered view result in place of the original view result.

Abstract: Methods and systems obtain manufacturer data from a device being evaluated. The manufacturer data includes a system description, a system object identification, and a device-type description. The system description includes a serial number having a format. The system object identification includes a standards manufacturer field established by a standards organization. The methods/systems evaluate the standards manufacturer field to identify the manufacturer, and rank multiple system object identifications based on the quantity of data within each system object identification. Additionally, the methods/systems match the format of the serial number to known manufacturer serial number formats. The foregoing allows the methods/systems to determine the original equipment manufacturer (OEM) of the evaluated device based on the manufacturer appearing in the data string, the rank for each system object identification, and the manufacturer appearing in the serial number format match.

Abstract: A system, method, and computer program product are provided for performing a string search. In use, a first string and a second string are identified. Additionally, a string search is performed, utilizing the first string and the second string.

Abstract: Customized content is presented to user of a browser. Textual input, such as a search term from a user is received by the browser and customized content is determined based on the textual input. Customized content includes user-specific content and general content. The user-specific content is content of potential interest to the user based on the textual input from websites that the user visited, bookmarked, searched, and shared, as well as from the user's social network connections. The general content, on the other hand, is of potential interest to a plurality of users, such as trending topics on the web. The determined user-specific content and general content are transmitted to the browser for presentation to the user.

Abstract: The present invention discloses a user personalized operating method and operating apparatus for use in a chemistry analyzer, the method comprises following steps: initiating the operating software of the chemistry analyzer; loading a profile, the profile comprising at least a database containing combinations of controls for respective users; retrieving configuration information of the function components from the database; and setting display interface and function components by the chemistry analyzer according to the configuration information. The present invention realizes different combinations of controls and display interface by use of the profile and thus operating software of different versions can be provided.

Abstract: Disclosed is a method for simultaneously finding matches for rules that require greedy matching and comprehensive matching by executing a single Deterministic Finite Automaton (DFA). DFAs annotations are used to enable a single DFA to represent rules that require greedy and comprehensive matching. DFA descents are performed from various positions in an input stream, match information is recorded and match results are selectively generated (filtered) to achieve the greedy or comprehensive match behavior required by individual rules.

Abstract: Systems and methods generate a business process control chart and process report card. A method includes generating process control chart data for a building process. The method further includes generating a summary record of sample data from the control chart data. The method includes determining a process grade for each process using the summary record. The method further includes generating a process report card including the determined process grade for each process.

Abstract: Techniques to track and store music played at venues are described. A computer implemented application may create venue profiles for one or more venues. A venue profile may comprise a venue name, venue address, and one or more music genres indicative of the type of music played at the venue. The computer implemented application may collect, in real-time, music data from the one or more venues. The music data may comprise venue data, a song title, an artist name, and a date, the music data indicative of music played at the one or more venues. The computer implemented application may store the venue profiles and music data in a database where the data may be mined. Other embodiments are described and claimed.

Abstract: This document describes techniques of user-based content filtering. The techniques receive content of a selected category from one or more sources, filter the content received from the one or more sources based on predefined settings for the user, and present at least some of the filtered content in a portion of a single user interface. By so doing, users can quickly and easily access filtered content via the single user interface.

Abstract: Methods and systems for determining computer optimization-based regimens and/or plans and/or programs for diet and health management are presented. A regimen and/or plan and/or program is generated by a computer (i) obtaining for an individual, a nutritional-based metabolic response as a function of time associated with a set of nutritional components, (ii) obtaining for the individual, an exercise-based metabolic response as a function of time associated a set of exercises available for performance by the individual, (iii) optimizing using computer optimization applied to the nutrition-based metabolic responses and the exercise-based metabolic responses, to determine a regimen defining for a time interval a sequence of one or more nutritional components to be ingested by the individual, and a sequence of one or more exercises to be performed by the individual, whereby one or more individual-based parameters are maintained in a predetermined range.

Abstract: Within the field of computing, many scenarios involve queries formulated by users resulting in query results presented by a device. The user may request to adjust the query, but many devices can only process requests specified in a well-structured manner, such as a set of recognized keywords, specific verbal commands, or a specific manual gesture. The user thus communicates the adjustment request in the constraints of the device, even if the query is specified in a natural language. Presented herein are techniques for enabling users to specify query adjustments with natural action input (e.g., natural-language speech, vocal inflection, and natural manual gestures). The device may be configured to evaluate the natural action input, identify the user's intended query adjustments, generate an adjusted query, and present an adjusted query result, thus enabling the user to interact with the device in a similar manner as communicating with an individual.

Abstract: A server receives a query specifying filter criteria from a client. The server obtains the object identifiers (IDs) for the data objects satisfying the query from one or more object identifier caches. The data objects are retrieved from one or more data sources using lookups based on object identifiers (IDs) obtained from the one or more object identifier (ID) caches. The retrieved data objects are returned to the client in response to the query.

Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for presenting event data in a heat-map interface. Event data describing user interactions with a content item can be gathered and used to generate the heat map. The gathered event data can be filtered prior to processing to exclude unnecessary or irrelevant event data. The event data can be filtered based on numerous criteria such as a determined type of user interaction, demographic data, location of the event data, content item, etc. Filtering rules can be based on an analysis of the content item to determine what event data to exclude and current performance of the system. The filtered event data can be presented in a heat-map interface that represents the frequency at which event data occurs on an item of content based on location. The event data is analyzed to determine optimization rules that dictate selection of content items.

Abstract: Devices, systems, and methods are disclosed which relate to enabling wireless communication between an information kiosk and a mobile device operated by a user. The user may operate the mobile device to request information from the kiosk, with the kiosk authenticating the user before displaying information. The authentication may involve a biometric identifier. The kiosk may provide information to the user via the display on the kiosk or on the mobile device. The profile may be regularly updated with the user's past queries, and other biographical information. Consequently, the user may be able to receive information pertinent to their needs without having to come into physical contact with the kiosk. Kiosks may be installed at public transit terminals such as bus stops, shopping centers or malls, attractions such as amusement parks, museums, etc.

Abstract: The present invention provides systems, methods, and software for automatically processing data included in a document and identifying and recommending citations matching the processed data. The system allows a user to select and submit text segment(s) for analysis and to select from a set of recommended citations a citation(s) that matches the text segment as well as profile data for inclusion in the document. One or more citation libraries or authority databases are queried to find citations for recommendation which best match the text segment selected and submitted by the author. The system automatically processes data submitted by an author to generate a set of recommended citations for consideration and for inclusion within a document while the document is presented by a document rendering application. A selected citation is then formatted and inserted in the document.

Abstract: An ancestry of a database metadata residing in a computer database is tracked by determining a lineage of all modifications performed on the database metadata. In one aspect, this is achieved by determining one or more attributes associated with the database metadata residing in a system database. Based upon the attributes, a database system table including corresponding tuple of the attributes is generated. Upon detecting a modification in the database metadata, a previous condition and a current condition of the attributes is recorded in the generated database system table. Upon receiving a request to track the ancestry of the database metadata, the database system table is queried to retrieve a lineage of the database metadata by retrieving one or more previous conditions and the current conditions of the attributes associated with the modification.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for deploying information reporting applications. In one aspect, a method includes receiving, from a design system of one or more computers, a template for a display screen for information reporting. Configuration information is received from the design system, the configuration information including one or more data parameters for accessing data stored in a database. A request for information reporting is received from a user system of one or more computers executing a display application. The data is accessed in the database according to the database parameters, and the data is provided to the user system for display in the display screen by the display application according to the template.

Abstract: Embodiments of the invention provide systems and methods for recording and handling an absence of an individual according to a multi-tier employment model. According to one embodiment, the method can comprise receiving absence information indicating a period during which an individual will be unavailable. A list of assignments affected by the absence can be generated based on the received absence information, work schedule information, and work assignment information defined in a work assignment tier of the multi-tier employment model. The generated list of assignments can be filtered based on the received absence information and work schedule information for each assignment of the list of assignments. A list of supervisors corresponding to the assignments of the filtered list of assignments can be generated and a notification of the absence can be provided to each of the supervisors in the list of supervisors.

Abstract: A query statement is received that requires at least one calculated attribute. Thereafter, a data flow graph is generated that includes a plurality of nodes for executing the query. At least one of the nodes corresponds to the at least one calculated attribute and has at least one level of child nodes. The data flow graph is generated by generating at least one filter for each of the nodes corresponding to the at least one calculated attribute and by pushing down the generated filters to a corresponding child node. Once the data flow graph is generated, execution of the query can be initiated using the generated data flow graph. Related apparatus, systems, techniques and articles are also described.

Abstract: Content ingest can comprise the storage of content and the logging of the descriptive and technical metadata necessary to identify and locate the content. The methods and systems provided herein relate to content ingest utilizing multiple phase processing to account for both standard and non-standard metadata.

Abstract: System for updating filtering rules for messages received by a plurality of users including a filtering rules database storing filtering rules for the users; means for distributing the filtering rules to the users; a user reputation database comprising a reputation weight for each user; and means for receiving and processing of user reports that indicate that a message belongs to a particular category. The means for receiving (i) calculates a message weight in its category based on a number of reports received from multiple users and a reputation weights of those users, (ii) decides whether the message belongs to the particular category if the message weight exceeds a predefined threshold, (iii) updates the filtering rules in the filtering rules database based on the deciding, and (iv) distributes the updated filtering rules from the filtering rules database to the users using the means for distributing.

Abstract: Embodiments relate to systems and methods for the enforcement of security profiles in a multi-tenant database. A multi-tenant database can be populated with data from different users or other entities. Different users may enjoy different sets of permissions to access, modify, store, and/or otherwise manipulate sets of data within the database. After authentication, a user's associated set of permissions are retrieved. When data is requested, matching tables or other objects located in the database are identified based on the user's query. Rather than retrieving matching tables or other objects directly, a meta data security engine can check the requesting user's permissions, and apply any filters or restrictions required by those permissions to the data present in the table(s). A substitution can be made of a table-valued function, including any filtered data entries, for the table itself. Flexible and granular data security rules can thereby be applied, transparently to the user.

Abstract: Methods and arrangements for object identification. An identification request is received from different objects of a network. Attributes and values of each object are ascertained, and at least one attribute-value pair from each object is filtered out. An ID is generated for each object based on at least one remaining attribute-value pair from the filtering.

Abstract: A method, system and computer program code for managing stored contents within a computing device is provided. The method includes tracking activities performed in the computing device responsive to user inputs. The method gathers data pertaining to the activities performed within a predefined interval of time. The method then creates content filtering rules based on the gathered data and displays the contents within the computing device based on the content filtering rules.

Abstract: Systems and methods for interest discovery of users. First information related to activities of a user of a service is collected via the communication platform. Second information associated with the user is identified based on the first information in accordance with one or more predetermined scales. A request for a filter to be created is generated based on the second information. Data is filtered with the generated filter to identify events. The identified events are sent to a predetermined destination.

Abstract: One or more techniques and/or systems are provided for populating and/or animating a spatial visualization, such as a map, a timeline, and/or other 2D and/or 3D visual representations of locations. The spatial visualization may be populated with events extracted from a data source (e.g., real-time events, news events, social network events, etc.), and may include relationships between events (e.g., based upon time, location, contextual similarity (e.g., social network check-in events at a restaurant), events referencing one another (e.g., an article describing a first event may comprise a hyperlink to an article describing a second event) etc.). Filter criteria (e.g., date, event type, location, etc.) may be applied to events and/or relationships when populating the spatial visualization. A sequence of events and corresponding relationships may be animated within the spatial visualization (e.g., as the events unfold over a (user) designated period of time).

Abstract: Systems, methods, and computer-readable storage media for providing a rich search experience utilizing entity-type characterization are provided. A search query is received and an entity type is determined for the query. A Web search is then performed for the query against a predefined list of sources determined to be authoritative for the determined entity type. The results of the source-specific searches are filtered based upon the entity type providing a filtered list of results that each pertains to an entity of the entity type determined to be associated with the query. The filtered list are then compared to a list of resolved entities to determine equivalent entities identified by different searched sources, the equivalent entities being combined into a single potential search result. The consolidated search results are then ordered based upon rank values. At least a portion of the results may then be presented to the user.

Abstract: A hybrid database table is stored as both a row and a column store. One or more techniques may be employed alone or in combination to enhance performance of the hybrid table by regulating access to, and/or the size of, the processing-intensive column store data. For example during an insert operation, the column store data may be searched for a uniqueness violation only after certain filtering and/or boundary conditions have been considered. In another technique, a hybrid table manager may control movement of data to the column store based upon considerations such as frequency of access, or underlying business logic. In still another technique, querying of the hybrid table may result in a search of the column store data only after an initial search of row store data fails to return a result.

Abstract: A system may include an address manager configured to map a data item including a plurality of attributes to a blocked Bloom filter (BBF) of a plurality of blocked Bloom filters. The system also may include a blocked Bloom filter (BBF) generator configured to map each attribute of the plurality of attributes to a corresponding block of the blocked Bloom filter.

Abstract: Techniques for providing contextually-relevant content include identifying content items accessed through a portal by a plurality of users, each user associated with one or more roles of a plurality of roles within the portal; updating a trace log to include information associated with the identified content, the information including associations between each identified content item and the role accessing each identified content item; receiving, from a user associated with a particular role of the plurality of roles, a search query through the portal for one or more content items; determining a plurality of search results responsive to the search query, the search results relating to the content items; for the particular role, filtering the plurality of search results based on the trace log; and generating a plurality of filtered search results for presentation through the portal.

Abstract: A search query is received that is associated with two or more data sources so that a source-specific query is generated for each data source using a data source definition associated with the corresponding data source and the search query. Thereafter, searches are executed for a first set of data sources using the corresponding source-specific queries. These search results from the first set of data sources are consolidated. In addition, searches are executed for a second set of data sources using the corresponding source-specific queries. These search results from the second set of data sources are then consolidated with the consolidated search results from the first set of data sources. In some implementations, at least one search comprises a main search followed by a sub-search that filters results from the main search. Related apparatus, systems, techniques and articles are also described.

Abstract: A solution monitoring system is provided for gathering, filtering, and analyzing information associated with solutions for managing monitoring, upgrades, and migrations. Telemetry may be recorded for various types of solution events and various properties of solutions as part of an add-in intelligence. Furthermore, add-in management tools are provided for administrators and end users.

Abstract: In one embodiment, a system includes one or more computing systems that implement a social networking environment containing a large number of heterogeneous objects type, each of the plurality of object types having varying features, the system implementing a generic object recommendation engine for scoring objects and recommending the objects to users of the social networking system. In particular embodiments, the user and content object features are fed as inputs into a heuristic model that generates an expected value for the content object and user. In particular embodiments, the object recommendation engine includes an online learner that may log a user's actions after the initial impression to determine the relatively degree of interest to the user.

Abstract: The present disclosure provides methods, devices, and computer-readable media for acquiring statistical access models. One or more embodiments include collecting data associated with a first access profile, collecting data associated with a second access profile, determining whether the data associated with the first access profile has a particular number of characteristics in common with the data associated with the second access profile, assigning a statistical access model associated with the second access profile to the first access profile based on the particular number of characteristics that the data associated with first access profile has in common with the data associated with the second access profile, and detecting an anomalous access event based on the statistical access model.

Abstract: In one embodiment, an approach to automated recurring concept extraction, from a plurality of input data models (schemas) is presented. The approach converts input data models to graphs, with typed elements. The graphs are mined for closed subgraphs that have a defined minimum support. The identified subgraphs can be filtered with a relevance metric. These subgraphs are converted to schemas or an appropriate representation, and stored for reuse in a repository. The repository can be used to automate further transformation or mapping of schemas presented to a system that uses the repository. In one example, the repository is used in a schema covering process to perform schema transformation.

Abstract: The present application provides for techniques for implementing data auditing embodiments that determine whether a query into a database is or has referenced forbidden data within the database. Various techniques are given for efficiently finding all tuples in a database referenced by a given query. A set of sensitive data is determined within a database and the set of sensitive data is employed to define a forbidden view within the database. Data within the database may be annotated to provide efficient identification of data access by query. Incoming queries may be analyzed and modified to propagate annotations for analyzing what data is or was accessed.

Abstract: Provided is a forensic index method by distributed processing, including: generating data to be divided by dividing data to be indexed according to predetermined division setting for distributed processing; allocating the generated data to be divided to a plurality of data processing units according to the predetermined division setting, extracting an index by filtering the allocated data to be divided in the plurality of data processing units, and generating divided index data including the extracted index; and generating an index database by merging the generated divided index data.

Abstract: A method and apparatus are implemented in one or more processors for processing various social media data received over a network for collection, analysis, and application to business logic and/or business applications. Based on personally identifying information of an account holder, social media data regarding the account holder is retrieved from one or more social media sources or a clearing house over the network. The retrieved social media data is processed (i.e., parsed and/or filtered, and validated) via certain criteria. A usefulness score for the social media data is computed based on various factors including at least one of an identity match value, a truth confidence value, and a context data relevance value. The social media data and its computed usefulness score can be presented to a user and business applications for further processing and treatment of the account holder.

Abstract: A method for storing event memorabilia is provided by an online service that receives over a wide-area network notification that a first user has registered to attend an event a sporting event, a concert). The service also receives over the wide-area network metadata associated with the event. The service locates a user profile associated with the first user and stores the metadata and an association between the metadata and the first user profile in a database. The service also grants the first user access to the user profile and the metadata associated therewith.