Abstract: In general, techniques for data access control are described, in which a policy engine implements and applies a declarative policy framework that can represent and reason about complex privacy policies. By using a common data model together with a formal shareability theory, this declarative policy framework enables the specification of expressive policies in a concise way without burdening the user with technical details of the underlying formalism of a data querying application or other knowledge representation scheme. The policy engine may be deployed as the policy decision point in a data access control system that also includes a policy enforcement point. The policy engine includes user interfaces for the creation, validation, and management of privacy policies. The policy engine may interface with systems that manage data requests and replies by coordinating policy engine decisions and access to databases.

Abstract: The described technology is generally directed towards mapping doubly mapped storage clusters to resources of a real storage cluster in a way that provides high performance. In one aspect, the doubly mapped storage clusters are divided into logical columns, with each logical column corresponding to a doubly mapped node, and having a column height corresponding to a number of storage resources (e.g., disks multiplied by disk extents) managed by that doubly mapped node. The columns are logically positioned within a logical profile having dimensions of the real storage cluster. For example, the logical columns can be selected based on column height, and placed in the logical profile based on free disk extents of the nodes, greatest number of free disk extents first. Once logically positioned, the logical columns in the logical rectangle establish the mapping (e.g., embodied in a mapping table) that results in high performance.

Abstract: Methods, systems, and apparatuses are described that can encode connection information between consumers and providers for displaying to users. In an example aspect, a distributed control system includes a production network configured to perform automated control operation. The production network can include one or more data extraction nodes and a plurality of devices in communication with the data extraction nodes. The data extraction nodes are configured to collect data from the plurality of devices. The data indicates connection information associated with the plurality of devices. The system can further include a screen configured to display a plurality of interfaces that include the plurality of devices represented as consumers and providers. In some cases, the screen defines a single desktop monitor or a mobile device display.

Abstract: Systems, methods, and computer-readable media for designing network performance and configuration include determining one or more use cases for a network to be provisioned, based on at least one or more business verticals related to a customer of the network. A data plane scale is determined from the use cases and an initial data plane scale generated using a linear regression on one or more data plane parameters. The data plane parameters include a platform type, feature set, packet size, or software version of the network. A control plane scale is determined from the use cases and an initial control plane scale generated using a linear regression on one or more control plane parameters of the network. The control plane parameters include a platform type, feature set, or software version of the network. The network is provisioned for the data plane scale and the control plane scale.

Abstract: A method, system and computer program product for performing a search from another individual's social perspective. A name or a portion of a name of an individual known by the user is received. A directory search is then performed pertaining to the individual known by the user. After the user identifies the known individual from the directory search results, a selection to perform a directory, content or document search from the known individual's social perspective is received. Such a search may be performed based on the social network of the known individual. In this manner, by performing such searches from the social perspective of the known individual, such as the individual who disclosed the name of the individual who the user would like to contact, the user will be more likely to identify the correct individual, content or document in a more efficient manner.

Abstract: Techniques to provide secure access to a cloud service are disclosed. In various embodiments, enterprise mobility management (EMM) data associated with a set of enterprise users of mobile devices associated with an enterprise is received. Cloud service data associated with use of a cloud service of the cloud service provider by users associated with the enterprise is received and correlated with the EMM data. Usage of the cloud service by said users associated with the enterprise is analyzed, including one or both of access of the cloud service using one or more unmanaged devices and access of the cloud service using one or more unmanaged mobile apps.

Abstract: A computer-implemented method for monitoring the security of a computing network which includes a plurality of hosts and a plurality of edges which link connected hosts. The method comprises capturing and storing first and second network state information at first and second times respectively. The method comprises comparing the first and second network state information to detect a change in the security of the network during the time window between the first and second times. The method further comprises storing security change data which is indicative of the change in the security of the network during the time window for a user to monitor the change in the security of the network.

Abstract: A system and method for performing context-based actions in an electronic device is provided. The method includes selecting one or more first graphical objects in the electronic device, detecting a drag-and-drop event on the selected one or more first graphical objects involving manipulation of the one or more first graphical objects over one or more second graphical objects, and identifying a context associated with each of the one or more first graphical objects and the one or more second graphical objects in response to the detected drag-and-drop event, wherein the context of the one or more first graphical objects is shared with the one or more second graphical objects. Furthermore, the method includes performing one or more actions in the electronic device based on the identified context.

Abstract: Techniques for an optimization service of a service provider network to generate an architecture diagram that represents an architecture of a web-based application. The optimization service may use the architecture diagram to determine modifications or changes to make to the application. For example, the optimization service may compare the architecture diagram with optimized architecture diagrams that represent application best practices, and determine the modifications or change to make to the application to optimize the application and bring the application in-line with best practices. Further, the optimization service may use the architecture diagram to generate a visualization, and provide the user account with the visualization of the architecture diagram to show users their application architecture.

Abstract: A method of preventing a subject communication device 1021 . . . N from accessing a resource when it is determined to be counterfeit. The method involves delivering the web page component to a subject communication device 1021 . . . N in response to a request. The web page component is adapted to retrieve actual values of a plurality of attributes from the subject communication device 1021 . . . N. Reference values of the plurality of attributes are retrieved from a device property store 110 and the method determines that the subject communication device 1021 . . . N is counterfeit when at least one of the actual values of the plurality of attributes is different to the reference value of that attribute.

Abstract: Systems and methods are provided for allowing stakeholders in the video production industry to perform location scouting and other film-related processes via virtual reality devices. Imagery can be collected from a plurality of different physical locations. Subsequently, directors, location managers, directors of photography, production designers, and others, can virtually view each of the different physical locations using a virtual reality device. Attributes regarding the physical locations that are relative to filming can also be collected and provided to the users.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for automatically defined groups for document distribution are disclosed. In one aspect, a method includes the actions of accessing document data for a document having content that is adjustable based on geographic locations of objects. The actions further include determining multiple object types specified by the document data, the multiple object types indicating types of objects that are discoverable using the document. The actions further include obtaining object location data indicating locations associated with objects. The actions further include identifying objects having the determined object types that are associated with locations in a particular geographical area. The actions further include obtaining attributes of the identified objects from one or more databases.

Abstract: Aspects include receiving a search request, comparing at least one term of the search request to a plurality of metadata items, wherein each metadata item of the plurality of metadata items is associated with a respective asset of a plurality of assets, generating a plurality of scores, wherein each score of the plurality of scores is associated with a respective asset included in the plurality of assets, and wherein a value of each score of the plurality of scores is based on an identification of a user, selecting at least one asset of the plurality of assets in accordance with the plurality of scores and in accordance with at least one threshold, providing the at least one asset to a communications device that is associated with the user, and providing at least a portion of a metadata item included in the plurality of metadata items to the communications device.

Abstract: Systems and methods described herein provide a network tool that discovers device configurations for selected enterprise sites and automatically organizes the data to assist users, so they can build intents for network function policies in enterprise networks. An intent builder performs device discovery of network function (NF) instances in a customer network; retrieves configuration elements from the NF instances; normalizes the configuration elements; and generates a graphical user interface with rule paths based on the configuration elements. The network device receives, via the graphical user interface, user input to map source Internet protocol (IP) addresses in the rule paths to a user label and to map destination IP address in the rule paths to an application label. Based on the user input, the network device presents, via the graphical user interface, consolidated intents and generates vendor-agnostic policy rules from the consolidated intents.

Abstract: A content management system provides a mechanism for multi-file check-in features useful for content management. The content management system provides a way for users to check in multiple files in a single action. The system allows users to either select assets (e.g., files) or drag and drop multiple assets to be checked in. The assets being checked in are automatically matched with checked out assets, and once matched, unlocked.

Abstract: Unsupervised or supervised machine learning (“ML”) techniques discussed herein can be used to classify browsers as one or more types of browser or within one or more browser groups.

Abstract: Deploying applications in a computing environment. A method of the disclosure includes determining that a first computing device has been added to a computing environment comprising a plurality of computing devices. The first computing device includes a first component is not included in the plurality of computing devices. The method also includes determining, by a processing device, whether a performance of a first application may be improved in view of the first computing device and a plurality of benchmark applications. The first application is within the computing environment. The method further includes recompiling the first application for execution on the first computing device, in response to determining that the performance of the first application may be improved.

Abstract: Modeling space consumption of a migrated VM is disclosed, including: obtaining aggregated effective historical space usage data associated with a plurality of VMs at a storage device; using the aggregated effective historical space usage data to generate one or more predicted metrics of space usage at the storage device; and using the one or more predicted metrics of space usage to potentially migrate a VM with respect to the storage device.

Abstract: Methods, apparatus, systems, and articles of manufacture are disclosed to improve containerized application visibility. An example apparatus includes a container application manager to build an inventory of the containerized application, the containerized application including a virtual machine, the virtual machine hosting one or more containers, and a network topology builder to invoke a virtual machine agent of the virtual machine to obtain network traffic events from the one or more containers to generate network topology information associated with the containerized application based on the inventory, generate a network topology for the containerized application based on the network topology information, build the visualization based on the network topology, the visualization including the inventory and the network topology information, and launch a user interface to display the visualization to execute one or more computing tasks.

Abstract: Provided is a process to detect a web-browser address bar in a UI layout based on communications with an accessibility application program interface (API) of an operating system and detect navigation events in the same via the accessibility API.

Abstract: A method and apparatus are disclosed herein for automatically creating a comparison layout using series matching based on image similarity.

Abstract: A job executing on a computer system according to a scheduler configuration may be monitored. Responsive to determining that the job completed executing, a difference between an allocated resource allocated to the job and the job's actual resource usage may be computed. Responsive to determining that the difference meets a criterion, the scheduler configuration may be reconfigured to reduce the allocated resource for a submitted job associated with a given user.

Abstract: System, method, and computer product embodiments are described for querying a database using natural language queries (NLQ) to produce actionable results in an answer card. The method allows a user to take further action with the answer card by editing the card contents, manipulating the way data is displayed, or querying the answer results for more details of the data. By the method, the user may continue exploration of the data, use the results to collaborate with others, or build a story from the data in a presentation format, such as a dashboard, while maintaining access to the real-time data of the database through the answer card. System and computer product embodiments implement the method.

Abstract: Improvement of customer experiences during online commerce is accomplished by providing unique experiences to customers as a result of anticipating customer needs, simplifying customer engagement based on predicted customer intent, and updating system knowledge about customers with information gathered from new customer interactions. In this way, the customer experience is improved.

Abstract: Various embodiments are generally directed to techniques for automated software testing, such as by verifying operations are complete based on user interface and/or network traffic indications, for instance. Some embodiments are particularly directed to utilizing a network sniffer to detect specific network traffic to verify completion of network requests and/or responses associated with an operation included in a workflow for performance by a software under test (SUT). In many embodiments, the detection of specific network traffic may be used to accurately time operation durations and/or efficiently perform workflows to evaluate the SUT.

Abstract: The system manages aggregating posts to a media feed to provide timeline updates. The system identifies a composite post of the media feed that corresponds to a first post and a second post. The composite post includes a content item and composite information. The system identifies at least one trigger to interact with the composite post. The trigger may be provided by a user or from the system itself. The system determines an action based on the at least one trigger and based on one or more composite criteria. The composite criteria may include rules or norms for managing interactions. The system generates modified composite information based on the action and the composite information. The system also generates a modified media feed for output. For example, the system may display a modified media feed with information regarding the first post and the second post.

Abstract: An analyzer module (AM) within a same protected network and on-premise with a server detects and distinguishes between types of Denial-of-Service (DoS) attacks. The AM tracks whether test messages, which include test request messages that a signal generation module (SGM) is configured to transmit to the server according to a predefined time schedule to allow the AM to detect and distinguish between types of DoS attacks, are timely received. The AM is aware of the predefined time schedule according to which the SGM is configured to transmit the test request messages to the server. The AM detects an occurrence of a DoS attack and identifies the type of the DoS attack based upon the result of the tracking indicating that a number of the test messages have not been timely received.

Abstract: The representative embodiments discussed in the present disclosure relate to techniques with which data packet loss, such as Transmission Control Protocol (TCP) packet loss, may be detected. More specifically, in some embodiments, by detecting a TCP packet with an enabled selective acknowledgement (SACK) signal, the loss (e.g., drop) of an additional TCP packet may be determined. Moreover, using information included in the detected TCP packet, an operational efficiency of a cloud computing system and/or a component of the cloud computing system may be determined.

Abstract: A design software, e.g., a graphical user interface (GUI) software, may be used to design and/or configure a load control system. The design software may be executed on a network device (e.g., a personal computer, a laptop, a tablet, or a smart phone). The design software may allow for easy configuration of load control panels and effortless multiplication of configured panels during the design of the load control system. Each load control panel may have a plurality of control devices, such as load control devices (e.g., power modules, dimming modules, and/or switching modules), system controllers, and/or power supplies. The design software may allow for the configuration of load control panels having different types and numbers of control devices. In addition, the design software may allow for the multiplication of load control panels having the same configuration (e.g., the same type and number of control devices).

Abstract: A remote location monitoring system, for example, a home monitoring or weather monitoring system may include one or more sensors and/or receivers at a remote location such as a residence or business to be monitored. The sensors and receivers may communicate with a central server via a gateway device, and may be controlled by users locally or remotely via the server. Users may register to receive remote notifications of weather events and other home monitoring events. Users may also access remotely sensors and receivers to configure alerts, notifications, and automatic responses for the devices and integrated appliances at the remote location.

Abstract: A system and method are disclosed for gathering information relating to a system being monitored, modeling various aspects of the system to present it on a useful console, and further for controlling the system using a monitoring and control interface. In an aspect the system and method employ combinations of graphics architectures, including advanced video gaming technology and methods in previously-unknown configurations, to achieve an effective monitoring and control architecture.

Abstract: The visualization of progress of a distributed computational job at multiple points of execution. After a computational job is compiled into multiple vertices, and then those multiple vertices are scheduled on multiple processing nodes in a distributed environment, a processing gathering module gathers processing information regarding processing of multiple vertices of a computational job, and at multiple instances in time in the execution of the computational job. A user interface module graphically presents a representation of an execution structure representing multiple nodes of the computational job, and dependencies between the multiple nodes, where the nodes may be a single vertex or a group of vertices (such as a stage).

Abstract: A method of adjusting visual content. The method comprises: identifying when a client device captures at least one of an image and a video file; analyzing textual content in a plurality of content providing network sources, available via a network, to identify at least one current event; acquiring at least one demographic characteristic of a user of the client device; selecting one or more visual content editing functions based upon the at least one demographic characteristic and according to the at least one current event; and supplying the one or more selected visual content editing functions to the client device.

Abstract: A sensor calibration system includes a plurality of sensors and a user interface configured to receive user-provided locations of at least two sensors of the plurality of sensors. The sensor calibration system further includes a motorized apparatus including a drive system, at least one detector, and a localization system. The sensor calibration system further includes a controller communicatively coupled to the user interface and the motorized apparatus. The controller is configured to determine a whether each of at least two sensors is a key sensor based on the user-provided locations. The controller is configured to determine a path for the motorized apparatus based on the user-provided locations. The controller is further configured to determine a position of each sensor based on the location of the motorized apparatus when each sensor is detected by the at least one detector.

Abstract: A network visualization service may auto-generate graphical, dynamic, and interactive network diagrams of the infrastructure (resource instances, connections, etc.) of clients' virtual private networks as implemented on a provider network. A network diagram may include representations of various virtualized components of a client's virtual private network, as well as relationships among and connections between and among the various components. The diagram may also display logical and/or geographical groupings of the virtual resources in the client's virtual private network. The service may track changes to the virtual private network and update the diagram accordingly. The diagram may provide a user interface via which the client may select particular graphical objects on diagram to display additional information about a respective resource instance or connection and/or to change the client's virtual private network configuration via the network diagram.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for combining updates of a social network feed. In some implementations, a feed of a social networking system can be configured to share feed items associated with an enterprise record. The feed items can include a first update associated with a first user. A first request to share a comment on the first update can be processed. A second request to share a first post in a feed can be processed. The first post can be related to the first update based on a first attribute conforming to a second attribute. A combined update can be generated based on the first post being related to the first update. The combined update can be displayed in a feed.

Abstract: A system and method to manage a plurality of devices has been described. Initially a device manager server in a cloud device management system, sends a selection of one or more device monitoring parameters to retrieve device monitoring data from a device from the plurality of devices. Next a device monitoring data is received corresponding to the selected one or more device monitoring parameters retrieved from the device and stored in a log database, and a metric database at the cloud device management system. Next one or more device monitoring data-based operations are executed at the cloud device management system based on the device monitoring data stored at the log database and the metric database. Finally, the result of execution is displayed at a console of the cloud device management system.

Abstract: Managing the lifecycle of a cloud service modeled as a topology decorated by a number of policies includes with a processor, generating a topology or the realized topology, the topology or the realized topology representing a cloud service, associating a number of lifecycle management actions (LCMAs) with a number of nodes within the topology or the realized topology, and with a lifecycle management engine, updating the topology or the realized topology by associating a number of policies with the number of nodes within the topology or the realized topology.

Abstract: Systems and methods are provided for managing a flashlight function on a mobile electronic communications device having a curved display surface that includes a front screen area, one or more edge screen areas and a back flashlight. By way of example, the disclosed technique entails detecting that the user has turned on the flashlight function, determining whether the back flashlight is facing toward the user, and enabling the back flashlight when it is determined that the back flashlight is not facing toward the user. When it is determined that the back flashlight is facing toward the user, a flashlight on a screen edge facing away from the user is enabled.

Abstract: A data pipeline including a plurality of graph pipeline paths is obtained. Each of the graph pipeline paths may include pipeline nodes, at least one of the pipeline node may have at least two inputs. Each of the inputs may comprise outputs of two or more other pipeline nodes. A linear pipeline path interface is provided for creating and presenting a linear pipeline path of the data pipeline. The linear pipeline path may include pipeline nodes, each being limited to a single input and a single output. The linear pipeline path interface may be limited to interacting with linear pipeline paths. A graph pipeline interface is provided for presenting and modifying the data pipeline. The linear pipeline path interface may be switched to the graph pipeline interface in response to a first user input.

Abstract: A computer system for analyzing page tags of a website. The system may include a processor in communication with a database; and a storage medium. The storage medium may store instructions that, when executed, configure the processor to: access the website, the website comprising plurality of page tags; generate a collected tag record by aggregating the page tags, the collected tag record comprising collected elements; request, from the database, a benchmark tag record, the benchmark record comprising benchmark elements, the benchmark tag record being based on historic page tags stored in the database; generate a result tag record, the result tag record indicating at least one of matches or mismatches between the benchmark tag record and the collected tag record; and display at least one of the result tag record or an analysis result, the analysis result representing an aggregation of the result.

Abstract: A visualization engine is configured to generate a network visualization that represents the evolution of a network over time. The visualization engine generates the network visualization based on a network dataset that describes various nodes within the network, and links between those nodes, over a sequence of time intervals. Initially, the visualization engine generates a stable simulated network based on initial network data, and then subsequently animates changes to that simulated network that derive from differences between the initial network data and subsequent network data. The visualization engine visually indicates changes to different nodes in the network via color changes, size changes, and other changes to the appearance of nodes.

Abstract: A user plane function receives from a session management function, a first message requesting at least one quality of service (QoS) report for a data flow of a wireless device. The first message comprising: a first information element indicating a QoS event; and a second information element indicates a latency value for the QoS event. A user plane function sends to the wireless device, monitoring packets for monitoring a packet transmission latency of the data flow. The user plane function determines an occurrence of the QoS event based on the packet transmission latency of the data flow and the latency value. The user plane function sends to the session management function, a second message comprising a third information element indicating the occurrence of the QoS event for the data flow.

Abstract: Experience fingerprints can be generated that are unique but correspond to a recognizable fingerprint template, where each fingerprint can correspond to a word of a visual language. Image data can be captured that includes a representation of an experience fingerprint, and the fingerprint can be analyzed by a remote system or service to determine an experience to be provided. The experience can be a general experience to be provided for any request relating to a specific fingerprint received over a period of time, or the experience can be selected, modified, or generated based upon contextual information for the request, such as information for a user or device submitting the request. The experience can include audio, video, text, or graphical content, as may be presented using one or more devices.

Abstract: A method and apparatus for controlling and coordinating a multi-component system. Each component in the system contains a computing device. Each computing device is controlled by software running on the computing device. A first portion of the software resident on each computing device is used to control operations needed to coordinate the activities of all the components in the system. This first portion is known as a “coordinating process.” A second portion of the software resident on each computing devised is used to control local processes (local activities) specific to that component. Each component in the system is capable of hosting and running the coordinating process. The coordinating process continually cycles from component to component while it is running.

Abstract: A device (10) for editing an electronic medical record (EMR) is provided. The device includes a mobile device (12) including a touch-sensitive display (14), a communication link (16), and at least one electronic processor (18) programmed to cause the mobile device to perform an EMR data entry method. The method includes: displaying a medical document (20) on the touch-sensitive display: overlaying an EMR data entry fillable form (22) having user-editable fields (24) on the touch-sensitive display as a partially transparent overlay (26) superimposed on the displayed medical document; transferring text content (28) from the medical document into at least one of the user-editable fields of the overlaid EMR data entry fillable form; and after filling out the overlaid EMR data entry fillable form by operations including at least the transferring, uploading at least the content of the user-editable fields of the filled out EMR data entry fillable form to an EMR (32) via the wireless communication link.

Abstract: Real time security, integrity, and reliability postures of operational (OT), information (IT), and security (ST) systems, as well as slower changing security and operational blueprint, policies, processes, and rules governing the enterprise security and business risk management process, dynamically evolve and adapt to domain, context, and situational awareness, as well as the controls implemented across the operational and information systems that are controlled. Embodiments of the invention are systematized and pervasively applied across interconnected, interdependent, and diverse operational, information, and security systems to mitigate system-wide business risk, to improve efficiency and effectiveness of business processes and to enhance security control which conventional perimeter, network, or host based control and protection schemes cannot successfully perform.

Abstract: A machine-implemented method for the intelligent, adaptive routing of computations in heterogeneous GPU computing environments is provided herein. The method is implemented by a machine as a series of machine-executable steps that cause the machine to route mathematical and statistical computations in engineering, scientific, financial, and general-purpose applications to the processor, or a plurality of processors, that is best able to process the computations.

Abstract: An image forming apparatus to form an image on a recording material includes a first collecting unit, a second collecting unit, and a changing unit. The first collecting unit collects information regarding the image forming apparatus. The second collecting unit collects information regarding a user using the image forming apparatus. The changing unit changes an image forming operation forming an image on a recording material based on the information regarding the image forming apparatus collected by the first collecting unit and the information regarding the user collected by the second collecting unit.

Abstract: A system comprising a computer-readable storage medium storing at least one program and a method for generating graphical representations of event participation flows are presented. In example embodiments, the method includes determining an event participation flow for participants of a subject event, and causing presentation of a graphical representation of the event participation flow in the user interface. The method may further include receiving a user selection of a filter via the user interface, and filtering the graphical representation of the event participation flow in accordance with the user selected filter.