Abstract: Software-based technologies for improving structured data collection, presentation, validation, and workflow management processes are disclosed, including the use of interpretable configuration files to define data objects, generate object-level and sub-object-level specifications for a forms-based interface, validation processes and a workflow-based interface. A back-end integration component maps the data objects, validation and workflow processes, and interface specifications to portions of a back-end database system.

Abstract: Systems and methods are disclosed for securing an enterprise environment by detecting suspicious software. A global program lineage graph is constructed. Construction of the global program lineage graph includes creating a node for each version of a program having been installed on a set of user machines. Additionally, at least two nodes are linked with a directional edge. For each version of the program, a prevalence number of the set of user machines on which each version of the program had been installed is determined; and the prevalence number is recorded to the metadata associated with the respective node. Anomalous behavior is identified based on structures formed by the at least two nodes and associated directional edge in the global program lineage graph. An alarm is displayed on a graphical user interface for each suspicious software based on the identified anomalous behavior.

Abstract: Techniques for executing one or more instances of a computer program using virtual machines, the computer program comprising multiple computer program portions including a first computer program portion. The techniques include determining whether an instance of any of the multiple computer program portions is to be executed; when it is determined that a first instance of the first computer program portion is to be executed, accessing first information specifying a first set of one or more virtual machine resources required for executing the first instance of the first computer program portion; determining whether any one of the plurality of virtual machines has at least the first set of virtual machine resources available; and when it is determined that a first of the plurality of virtual machines has the first set virtual machine resources available, causing the first virtual machine to execute the first instance of the first computer program portion.

Abstract: A mechanism is provided in a data processing system having a processor and a memory. The memory comprises instructions which are executed by the processor to cause the processor to implement a graphical editor for managing L-shaped swim lanes in a graphical view of an application process. The graphical editor receives a data serialization file representing a process flow of a software application. The graphical editor renders each synchronous node in the process flow in the graphical view of the application process. A swim lane rendering engine executing within the graphical editor creates an L-shaped swim lane for each asynchronous node in the process flow in the graphical view of the application process. The graphical editor presents the graphical view of the application process via an output device.

Abstract: Web-filtering operations may be implemented on the user device, rather than on a centralized proxy server, to improve reliability, performance, and/or security of the web-filtering operations. Some or all of the necessary functions related to web-filtering may be performed on the end user device to remove the complexity and security issues inherent with the current methodology. One technique for allowing operation of proxy servers on user devices is to install smart agents on the user device. The smart agents, under control of a management server, may configure the proxy server, issue trust certificates to applications on the device, and/or provide proxy access configuration (PAC) files to applications on the device.

Abstract: Aspects of the disclosure relate to processing systems using improved techniques for mapping events from user device to a cloud storage system. A computing platform, such as a cloud event mapping platform, may receive, at a task manager hosted on the computing platform, events to be processed. The computing platform may use the task manager to determine file objects corresponding to each event. The computing platform may use the task manager to determine a subset of the events to be processed by each dispatcher. The computing platform may use a first dispatcher to generate an event dispatch queue using a plurality of heuristics. After determining expiration of a delay corresponding to each event in the dispatch queue, the computing platform may dispatch each event in the dispatch queue for execution.

Abstract: This disclosure describes techniques for storing large files to file system volumes. In some examples, this disclosure describes techniques for storing files larger than a maximum file size allowed for File Allocation Table (FAT) file systems to a volume formatted according to a FAT file system. This disclosure describes techniques for handling calls associated with large files. In this manner, the techniques described here may support larger file sizes while being backwards compatible.

Abstract: Aspects of the present disclosure involve provisioning customers of an aggregator, such as a reseller, of a content delivery network (CDN). In one aspect, content requests to the CDN are processed in accordance with the virtual IP (VIP) address at which the request was received, according to a property template bound to the VIP where the template is selected by the customer and only involves discrete parameters for the reseller. In another aspect, cache fills of the network are processed without direct knowledge of the customer origin through a combination of some request attribute, e.g., alias host of the customer, and an attribute of the reseller to make a DNS request to a name server outside the CDN. Another aspect involves receiving a property template selection, an origin and an alias from a customer of the reseller, and providing appropriate DNS entries to validate the customer and provide origin information to the CDN.

Abstract: A system and method allows a matching system to mediate requests for information among different computer systems without storing information that can be used to log into those computer systems.

Abstract: Systems, methods, and computer-readable media for constructing a conversation model using documentation of an application programming interface (API) are disclosed. The conversation model can be used to train a natural language classifier. API endpoints may be represented in the API documentation as (verb, resource, element) tuples. These tuples can be converted into intent and parameters of the API endpoints can be converted into entities. In addition, example utterances may be created for each intent. The conversation model can be generated using the intents, example utterances, and/or entities.

Abstract: An electronic system is typically configured for crawling, via a machine learning model, into one or more API servers, wherein the one or more API servers comprise one or more versions of one or more APIs, capturing, via the machine learning model, information associated with the one or more versions of the one or more APIs, creating context objects associated with each of the one or more versions of the one or more APIs, receiving a real-time API request from a client system, processing the real-time API request received from the client system, and routing the real-time API request to an API version of the one or more versions.

Abstract: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution of the code, security issues that may be introduced due to the invocations of the network-based services. A system is provided that may analyze code to detect both direct invocations of services, as well as indirect invocations caused by the direct invocations. The system can compare permissions information for the code to both directly or indirectly invoked services to identify instances in which the code calls services not permitted by the permissions information. In some instances, the system can traverse a “call graph” of all services invoked by code either directly or indirectly to identify permissions errors through multiple levels of indirection.

Abstract: A mobile terminal and a method of supporting an object change for the same are provided. The mobile terminal includes a display unit for outputting at least one object, and a control unit for controlling at least one of directly displaying, in response to a signal for changing the output object into a second object having a similar function but being of a different type than the output object, the second object on the display unit without a screen transition, and for outputting, in response to a signal for changing the output object into a second object having a similar function but being of a different type than the output object, a guide frame on the display unit so as to facilitate change of the output object without a screen transition.

Abstract: A security system network comprises a cloud computing security system operable in a cloud computing network and a local security hardware system in signal communication with the cloud computing security system. The security system network further comprises a BCP module that includes a first input/output (I/O) terminal in first signal communication with the cloud computing network and a second I/O terminal in second signal communication with the local security hardware. The BCP module selectively establishes a third signal communication between at least one local client application and the local security hardware system so as to exchange data between the local security hardware system and the at least one local client application independently from an operational status of the first signal communication.

Abstract: A method and system for detecting performance regression in a software application is disclosed. The software application comprises a feature flag having at least two states, wherein in a first state a first version of a feature is provided and in a second state a second version of the feature is provided when the software application is executed. The feature flag is further wrapped in a timer for recording the time taken for the corresponding first and second versions of the feature to be provided.

Abstract: The present disclosure relates to integrating a plurality of applications with an infotainment system of a vehicle (101). A plurality of integration properties (206) is received from a plurality of applications. Each of the plurality of applications is associated with a projection technology and each of the plurality of application is developed in a respective development language and respective development platform. A plurality of generic behaviour of the plurality of integration properties (206) of the plurality of applications is identified. A projection model is created based on the plurality of generic behaviour of the plurality of integration properties (206) of the plurality of applications. A unified projection application is generated based on the projection model, to integrate the plurality of applications developed using respective development language and development platform with the infotainment system of the vehicle (101).

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: String comparison, including comparing strings with a rule, can be time consuming, and strings may not be suitable for analysis using machine learning algorithms. The present disclosure provides positionally-encoded representations of strings, such as binary matrices or arrays, that provide an encoded representation of the string. The encoding, and decoding, can be facilitated by an encoding schema, such as an encoding schema stored in the memory of a computer device. The encoding schema associates particular characters with particular positions in an array. The positionally-encoded string representations can be used for security applications, such as to determine whether an authorization token that includes at least one string complies with an authorization rule. The authorization rule can be specified as a positionally-encoded representation that defines a set of strings that comply with the rule.

Abstract: A distributed system is adapted to manage the performance of distributed processes. In one aspect, multiple stripes associated with a data item are stored in a distributed storage. The stored stripes include one or more stripes of redundancy information for the data item. A distributed process including at least one task is performed. During performance of the distributed process, a determination is made as to whether to perform an accelerated data retrieval operation. Responsive to a determination to perform an accelerated data retrieval operation, at least one of the one or more stripes of redundancy information for the data item is requested from the distributed storage. Other stripes associated with the data item may also be requested from the distributed storage. After a sufficient subset of stripes associated with the data item is received, the data item is reconstructed using the subset.

Abstract: Systems, methods and computer program products are described herein that enable an intelligent agent to automatically discover an application programming interface (API) exposed by a service, to obtain descriptive metadata associated with the API, and to generate, based on the metadata, natural language processing information and/or function call building information associated with at least one functionality of the service. In addition, the intelligent agent is enabled to use the natural language processing information to determine that a user intends to interact with the service based on at least one user input of the user and to use the function call building information to build a function call for interacting with the service based on the at least one user input of the user, and to place the function call to the service on behalf of the user.

Abstract: Various embodiments relate generally to data science and data analysis, computer software and systems, including a subset of intermediary executable instructions constituting an communication interface between various software and/or hardware platforms, and, more specifically, to an automated application interface governance platform to automate development, maintenance, and governance functions for application interfaces, such as harmonizing, validating, and/or replicating application program interfaces (“APIs”). For example, a method may include identifying a subset of application interfaces, synthesizing a data structure for each application interface, analyzing the data structure against other data structures to identify duplicative portions among multiple data structures, substituting a reference to a location into a portion of multiple application interfaces.

Abstract: A server includes a processor to execute a single generic composited layered image that includes an operating system layer and an application layer. A layering engine hooks into the user log-in process to capture a user identification of the user initiating the log-in process, and compares the user identification to a list of additional application layers that are to be available to different users based on their respective user identifications. The layering engine determines if at least one additional application layer is to be available to the user based on the compare, and creates a single user-specific composited layered image by mounting the at least one additional application layer to the single generic composited layered image if the at least one additional application layer is to be available to the user.

Abstract: Systems and methods to secure platform application services between platform client applications and platform services in an information handling system. The information handling system may include a client application that may transmit an application service request over an application services inter-process communication (IPC) channel. The information handling system may also include a server services application that may receive the application service request from the client application via the application services IPC channel. The server services application may query a publisher name of the client application and authenticate the client application based on the publisher name of the client application and a list of trusted client application publishers maintained by the server services application. When the client application is authenticated, the server services application may process the first application service request.

Abstract: A file server apparatus includes a second file system volume including cache data of a first file system volume stored in a shared file storage apparatus. The file server apparatus determines the operation type indicated by an access request to the first file system volume from a client. When the operation type is directory operation, the file server sends an instruction of directory operation to the shared file storage apparatus, and then transmits a completion response to the client. When the operation type is file operation, the file server apparatus executes a file operation in the second file system volume, transmits a completion response to the client, and then transmits a file operation instruction to the shared file storage apparatus.

Abstract: Systems, methods and non-transitory computer readable media may be provided for the management of data related to risk exposure. A system may be provided including one or more utilities configured to receive data from a plurality of data sources; a rules engine for applying one or more logical rules that are triggered by one or more conditions associated with the integrity of the received data; and one or more utilities configured to apply the one or more logical rules to validate received data and automatically request updated data from a subset of the plurality of data sources where the integrity of the received data does not meet a predefined threshold. Other systems may be provided including units configured for the determination of risk exposure, and the identification of a tiered risk exposure analysis. Corresponding methods and non-transitory computer readable media may be provided.

Abstract: The technology disclosed describes staging and deploying major releases, updates and hot fixes to service clouds spanning data centers that include hardware stacks. User-specified builds of deployable installations are received as file sets, and the installations are staged to local storage at the data centers. User-specified deployment launch specifications that specify multiple already-staged deployable installations and service clouds to execute a deployment are received; and asynchronous, concurrent deployment of the multiple deployable installations by the service clouds based on the deployment launch specification are launched.

Abstract: A system for integrating an endpoint management system and a virtual compute system is provided. The system may be configured to receive a first request to execute a proxy application programming interface (API) associated with a first resource of a plurality of resources maintained by the endpoint management system, determine, based at least in part on the first request and the proxy API, an API mapping definition associated with the proxy API, output a second request to execute a program code on the virtual compute system based on the API mapping definition associated with the proxy API, wherein the second request contains information associated with the first resource, receive a first response from the virtual compute system, wherein the first response contains information regarding the first resource, and output a second response based on the first response received from the virtual compute system.

Abstract: A method and architecture for using dynamically loaded plugins is described herein. The dynamically loaded plugin architecture comprises a parent context and a plugin repository. The parent context may define one or more reusable software components. The plugin repository may store one or more plugins. When a plugin is loaded, a child context may be created dynamically. The child context is associated with the plugin and inherits the one or more reusable software components from the parent context.

Abstract: Provided are methods and systems for determining the clinical significance of a genetic variant. The methods entail determining, for the variant, (a) a function score based on known impact of the variant on a biological function of a cell or protein, (b) a frequency score based on the frequency of the variant in a population, (c) a co-occurrence score based on how the variant co-occurs with a reference variant having known clinical significance relating to a clinical disease or condition, and (d) a family segregation score based on how the variant segregates with a disease or condition in a family; and aggregating, on a computer, the function score, the frequency score, the co-occurrence score, the family segregation score to generate a clinical significance score indicating the clinical significance of the genetic variant.

Abstract: Improved systems, methods, and techniques for generating representational state transfer (REST) requests from a client computer to a server computer. The disclosed techniques employ a REST application programming interface (also referred to as the “RESTful API”) for use in receiving the REST requests at the server computer from the client computer, and providing REST responses from the server computer to the client computer. The disclosed techniques further employ an intelligent REST client configured as a webpage (also referred to as the “intelligent REST client webpage”) that can be accessed by a browser running on the client computer, and transmitted or otherwise served by the server computer for display on the browser of the client computer. The intelligent REST client webpage may be employed by a user of the client computer for efficiently interacting with the RESTful API of the server computer.

Abstract: According to an embodiment of the present invention, a system filters a collection of application programming interfaces based on input data representing information of a document to be processed, and generates a pipeline of filtered application programming interfaces. Each filtered application programming interface is sequentially executed within the pipeline. The document may be processed through the pipeline and visualizations based on the processing of the document may be generated, allowing the pipeline to be refined to produce desired output data selected within the visualizations. Embodiments of the present invention further include a method and computer program product for generating a pipeline of filtered application programming interfaces in substantially the same manner described above.

Abstract: The disclosed embodiments provide a system for processing application-programming interface (API) calls. During operation, the system identifies a set of transformation rules that match one or more permissions associated with a first representation of a request to an API. Next, the system applies the set of transformation rules to a first set of fields in the first representation of the request to generate a second representation of the request, wherein the second representation of the request includes a second set of fields that is different from the first set of fields. The system then triggers processing of the request using the second set of fields by a service providing the API.

Abstract: A computing device manages a router. A manager engine is instantiated based on a manager engine definition and instantiates a manager ESPE based on a created manager ESP model. A router configuration file is created based on mapping information read from the manager configuration file that describes connectivity between an event publishing source and a source window of the manager ESPE. A router engine is instantiated based on the created router configuration file. A connector is started to receive an event based on the router configuration file. The event is received in the source window of the manager ESPE processed based on the manager ESP model. A third computing device is selected by the router engine based on a usage metric received from each window of a plurality of windows defined by a remote ESP model configured to further process the processed event when it is received.

Abstract: Methods and systems that facilitate automatic generation of Application Programming Interface (API) specification from web traffic. Methods include obtaining a plurality of API requests and responses to the plurality of API requests. Methods include processing these API requests and responses to API requests to identify one or more attributes, such as, for example, variables, query parameters, response status codes, and response schemas. Methods include identifying variables using a tree data structure to represent resource paths. Methods include identifying query parameters based on resource items in resource paths. Methods include determining that the API call does not conform to the API specification by comparing one or more attributes of the API call with the attributes of the API specification.

Abstract: A circuit board includes a flexible wiring board having a first section in one end and a second section next to the first section in a plan view; a plate-shaped reinforcing member embedded in the flexible wiring board in the first section; and a first multilayer wiring layer on a top surface of the flexible wiring board in the first section, the first multilayer wiring layer having an opening that exposes a portion of a top surface of the reinforcing member for mounting a device thereon.

Abstract: A cloud resource protection method, system, and computer program product include authenticating a user on a first computer that is part of a distributed system, based on the authentication, assigning to the user, on the first computer, a token indicating a set of permissions, receiving a directive from the user to initiate, via the first computer, the execution of a process associated with a class, based on the token, initiating, on a second computer, the execution of the process, with no further authentication, granting the process access to a data set, access to which is restricted to one or more of the plurality of classes, and providing a data item from the data set to the user.

Abstract: A method, system and product for improving acquisition process of GUI elements using user input. A method comprises obtaining a digital representation of a first version of a GUI that includes a GUI element, obtaining a digital representation of a second version of the GUI, obtaining an identified element that was identified, using an acquisition process operated on the second version of the GUI, as being estimated to correspond to the GUI element in the first version of the GUI. The first version of the GUI and the second version of the GUI may be displayed in parallel to a user. User input indicative of whether the identified element corresponds to the GUI element, based on the display, may be obtained. The acquisition process may be updated based on the user input.

Abstract: A cloud-based document scanning system includes a cloud computing platform having a cloud computing application and a cloud storage system. The system further includes a scanning device communicatively coupled over a network to the cloud computing platform, the scanning device configured to: accept a set of documents; generate a set of digital image files corresponding to the set of documents; store the set of digital image files; and upload the set of digital image files directly to the cloud storage system. Upon receiving a request from the scanning device, the cloud computing application is configured to: access the set of digital image files; apply image processing operations to the set of digital image files in accordance with a plurality of image processing parameters, generate a portable document format document based on the processed image files, and send the portable document format document to a user-selected destination.

Abstract: A schema for a hierarchical data structure may include application specific extensions to the schema applied to a hierarchical data structure. Class may be added to the schema by individual applications granted access to a hierarchical data structure. When an access request for an object of the hierarchical data structure is received, the class may be identified in the schema and applied to process the access request to the object. Different classes may be added by different applications without disrupting the utilization of the schema for accessing the hierarchical data structure of other applications.

Abstract: In some embodiments, a method includes receiving, at a processor of a server, a first application programming interface (API) call from a client device and providing an indication associated with the first API call as an input to a machine learning model such that the machine learning model identifies a set of parameters associated with a set of likely subsequent API calls. The method can further include receiving a second API call from the client device, identifying the second API call as an anomalous API call based on the second API call not meeting the set of parameters associated with the set of likely subsequent API calls, and sending a signal to perform a remedial action based on the identifying.

Abstract: A service-oriented modular system architecture. The service-oriented modular system architecture has plugins and an application programming interface (API) Nexus. The plugins abstract different functions in servers into pluggable business modules. Any numbers of API dispatchers can be registered on the API Nexus so that one business module in the plugins dynamically exposes the services, which can be provided at present, to other business modules in the plugins in a manner of API. Different functions in the server application are independently abstracted into different pluggable business modules, the separating effect of respectively encapsulating and separating different functions to obtain subservices is achieved, and different business modules are allowed to expose interfaces with each other for use.

Abstract: An information processing system includes a management apparatus that includes a first processor configured to store first information on an access token indicating that a right to call an application programming interface exists and second information on the application programming interface in a memory, and execute an exchange for a different access token by using the first information and the second information stored in the memory; and a client apparatus that includes a second processor configured to provide the application programming interface or use the application programming interface by utilizing the exchange for the different access token by the management apparatus.

Abstract: State-based I/O management is provided. A virtual bus driver of a virtual desktop infrastructure can employ containers to manage the state of an IRP that pertains to a redirected device. When an IRP that has been shared to a client terminal is cancelled, the virtual bus driver can update the state of a container associated with the IRP to prevent the IRP from being completed twice. In this way, devices for which IRPs are frequently cancelled can be redirected without concern that a cancelled IRP may result in improper system performance or a crash.

Abstract: The described technology relates to integrating events electronically scheduled in enterprise web applications and other event applications. A capability is provided for events created by an enterprise web application and events from other external event streams to be presented in a consolidated calendar in the enterprise web application. Capabilities are also provided for sharing the calendar among enterprise users and non-enterprise users, and for efficiently generating the shared calendar.

Abstract: A data processing apparatus comprises a plurality of data storage elements, each configured to store data. Mask storage circuitry stores a mask and processing circuitry executes one or more instructions. A data saver is configured, in response to a transactional start instruction, to select a subset of the data storage elements and to save a backup of the subset of the data storage elements. Mask control circuitry then updates the mask to indicate the subset of the data storage elements selected by the data saver. Finally, a monitor detects write or write attempts made to one of the data storage elements not indicated by the mask. Accordingly, a user need not save all data storage elements (e.g. registers) in a system or specify precisely which data storage elements must be saved in order to perform a transaction.

Abstract: A novel method of facilitating the authoring of content and the delivery of the authored content to different types of device is provided. The method supports the design of unique and aesthetically pleasing content while minimizes the amount of effort required from authors and/or publishers. The method does so by creating one single content presentation structure (CPS) for the authored content that is adaptable to different devices and different orientations. Such a universally adaptable content presentation structure is based on a standardized grid system that the publishers can easily become familiar with to author their content.

Abstract: Aspects of the present disclosure include an activation, consolidation, and transformation system (ACT) for a telecommunications network. A request is received to provision one or more devices in a network and includes a key and key value. The request is routed to a data source associated with the key or key value of the request. Data is queried from the data source and validated by the ACT. At least one template is identified from a plurality of digital templates based upon attributes of the data that is applied to the at least one template and the template transforms the data to an output. The output comprises instructions for configuring a device for a telecommunications service based on the request.

Abstract: Systems and apparatus including consumer electronic devices, including Internet of Things (IoT) connectivity and a reconfigurable embedded rules engine, include: a code base that has been minimized to reduce a memory footprint of the code base in a memory device; and wherein the code base performs operations comprising effecting cross-platform network communications functionality using a computer communications network interface, providing access to the cross-platform network communications functionality through a communications application programming interface (API), triggering network communications, using the communications API, in accordance with encoded device-operation rules comprising at least one encoded communication triggering rule, allowing changes to the encoded device-operation rules through a rules updating API, and checking whether the changes to the encoded device-operation rules received through the rules updating API comply with at least one of the processing resource constraints associated

Abstract: An application environment that implements native code functionality in progressive web applications. An application executing in a mobile device operating system of a mobile device, the application comprising a plug-in bridge and a first native plug-in, loads a first progressive web application (PWA) from a host device that hosts the first PWA. The first PWA invokes the first native plug-in via the plug-in bridge to implement a first operation on the mobile device.

Abstract: A method includes logically organizing, by an object hierarchy processor, data objects in a first hierarchy. A portion of the data objects in the first hierarchy logically includes groupings of other data objects. The object hierarchy processor physically organizes the data objects across two or more types of memory in a second hierarchy. Another portion of the data objects in the second hierarchy physically includes groupings of other data objects. Groupings of the data objects in the second hierarchy are dynamically moved across the two or more types of memory. Levels of access of the data objects are tracked using a data structure that maps groupings of the data objects in the first hierarchy onto metadata information including combined access frequencies of the data objects, and current number of accessors to the data objects, in each grouping of the data objects.