Sap Ag

Sap Se

Udo Peter Klein

Frank Brunswig

Martin Hartig

Daniel Hutzel

Steffen Tatzel

Guenter Pecht-Seibert

Daniel Goldmann

Jochen Mayerle

Joachim Fitzer

Oliver Klemenz

Jan Teichmann

Thomas Gauweiler

Jens Odenheimer

Abhay A Tiple

Thomas Wieczorek

Timo Hoyer

Steffen Rotsch

Stefan A Baeuerle

Bare Said

Gerrit Simon Kazmaier

Bernhard Thimmel

Meinolf Block

Thomas Fiedler

Ulrich Bestfleisch

Gregor Karl Frey

Frank Renkes

Stefan Rau

Martin Kaiser

Martin Scholz

Marcel Hermanns

Vladislav Bezrukov

Ralf Dentzer

Michael Meyringer

Daniel Wachs

Lukas Melzer

Holger Knospe

Christian Behrens

Jens Weiler

Dirk A Giebel

René Dehn

Sanu Koshy

Daniel Zimmermann

Heiko Steffen

Oliver Sievi

Paul Volker

Thomas Moser

Michael Segler

Susan Marie Thomas

Uwe D Klinger

Olaf Duevel

Steffen Riemann

Herbert Stegmueller

Clemens Jacob

Friedhelm Krebs

Tim Gaiser

Achim Seubert

Detlef Pluemper

René Gross

Peter Januschke

Michael Wagener

Oliver Knaup

Michael Kusber

Richard Lindner

Philipp Scholl

Holger Handel

Harald Hengelbrock

Urlich Bestfleisch

A method for configurable in-application event logging may include receiving, from a client device, one or more user inputs specifying at least one of an event of interest associated with an operation of a software application and a data to collect in response to the event of interest. A logging agent may be configured, based on the user inputs, to respond to the specified event of interest by generating one or more log messages including the specified data. The logging agent may be as a first programming code embedded within a second programming code implementing the software application such that the logging agent is able to access a context of each executing instance of the software application. Related systems and computer program products are also provided.

Configurable in-application event logging service

Techniques and solutions are described for detecting malicious database activity, such as SQL injection attempts. A first machine learning classifier can be trained by comparing processed and unprocessed user input, where a difference between the two can indicate suspicious or malicious activity. The trained classifier can be used to analyze user input before query execution. A second machine learning classifier is trained with a data set that includes call stack information for an application requesting execution of a dynamic query and query statistics associated with processing of the query at the database. The query of the application can be correlated with a corresponding database query by hashing the application query and the database query and comparing the hash values, where matching hash value indicate a common query. The trained classifier can monitor execution of future queries to identify queries having anomalous patterns, which may indicate malicious or suspicious activity.

Machine learning detection of database injection attacks

Provided is a system and method for generating job posting content through machine learning. In one example, the method may include storing text content of previous postings, receiving target attributes of a candidate that is a subject of a new posting, identifying, via a machine learning model, a subset of previous postings from among the previous postings which are most closely related to the new posting based on the target attributes of the candidate with respect to content of the previous postings, and detecting text objects from the identified subset of previous postings and outputting a display of the detected text objects.

Machine-learning creation of job posting content

A containerized application is initialized in a cloud-based computing environment. Thereafter, the containerized application obtains environment variables encapsulating credentials. The containerized application stores the environment variables in a secret store of the containerized application. The environment variables are later wiped upon completion of the storing of the environment variables. Related apparatus, systems, techniques and articles are also described.

Cloud container security framework

Provided are systems and methods for visualizing spatio-temporal data of a user location. In one example, the method may include receiving spatio-temporal movement information of a first user device associated with a first user, and receiving spatio-temporal movement information of a second user device associated with a second user, identifying a point in time when the first user and the second user could have met based on the received spatio-temporal movement information of the first and second user devices, outputting, via a user interface, a first timeline indicating movement of the first user device over time and a second timeline indicating movement of the second user device over time, and displaying a visual indicator with respect to the first and second timelines indicating the identified point in time when the first and second users could have met.

Visualization of spatio-temporal location

Described herein includes a software testing system that optimizes test case scheduling to efficiently and speedily analyze a block of code. The system enhances the performance of software testing by implementing a test controller using test statistics to optimize testing performance. The test controller may use the test statistics to determine relevant test cases to execute, and to provide better and/or faster feedback to users.

Optimized testing system

Integrity of a physical object is verified by receiving, data encapsulating a request to verify the integrity of the physical object. Subsequently, a data structure is accessed that includes a plurality of linked segments each characterizing an entity within a supply chain for the physical object. Each segment includes a respective predecessor field and a respective hash value. All of the segments can be iterated through in reverse chronological order to confirm, for each segment, whether a value for the predecessor field is equal to a hash value in a hash field in an immediately previously segment, the hash value being a hash of all values of the particular segment. Data characterizing the iteration can then be provided. Related apparatus, systems, techniques and articles are also described.

Cross-system object tracking platform

Disclosed herein are system, method, and computer program product embodiments for providing enterprise resource textual analysis. An embodiment operates by receiving a request to search a document management system for a keyword. One or more relevant documents of the document management system associated with the keyword are identified. The keyword is compared to a data dictionary corresponding to an enterprise system associated with the document management system. Contextual search results including the one or more relevant documents and a relationship between the keyword and data of the enterprise system are provided.

Enterprise resource textual analysis

Disclosed herein are system, method, and computer program product (computer-readable device) embodiments for implementing fine-grained SQL authorizations. An embodiment operates by determining, via a database query execution engine, that a database program unit may include a plurality of operations. Moreover, at least one first operation of the operations may correspond to a first privilege requirement, at least one second operation of the operations may correspond to a second privilege requirement, and the first privilege requirement may differ in scope from the second privilege requirement. Via the database query execution engine, the plurality of operations may be executed in accordance with each corresponding privilege requirement of each operation.

Fine-grained SQL authorizations

An alias key is generated for each person identification (ID) in a database table. The alias key us used to lookup the corresponding person ID in the database table. In addition, for each alias key, a temporary alias key is generated that is used to lookup the corresponding alias key in the database table. A plurality of queries are received from at least one remote client that each specify at least one of the temporary alias keys. Data is later transmitted to the at least one remote client that is responsive to the queries. Related apparatus, systems, techniques and articles are also described.

Data protection management system compliant identification handling

Virtualized infrastructure instances are provided for running applications where electronic documents are rendered. The documents may comprise active content associated with risk of security issues. The documents are pre-processed to determine required software functionality for rendering. An index table including documents' characteristics relevant for displaying is generated. The characteristics include a correspondingly defined application for rendering a document, an OS for running the application, other. An identification of a document is received for displaying in a UI application separate from the virtualized instances. The first document is rendered on a virtualized instance from the infrastructure instances. The virtual instance is selected based on requirements for rendering the requested document, such as compatible application and OS. The rendered first document at the virtualized instance is displayed at the UI application on a virtual screen. The request for displaying is received by a user in a document analysis scenario.

Virtualized server side rendering

Location information for a plurality of target subjects can be depicted as a plurality of routes with indications of respective contemporaneous locations of the target subjects at a point in time. A graphical slider can be used to update the visualization to depict contemporaneous locations of the target subjects at a different point in time. A point on one of the routes can be activated to update the visualization to depict contemporaneous locations of the target subjects at a different point in time. Metrics for characteristics of the location data can be displayed proximate the slider. Other features provide a user interface that allows for a rich set of visualization functionality.

Visualization of spatial motion activities for E-forensics

An integrity check for a first file is initiated. In response, a first key corresponding to the first file is obtained. The first file is hashed to determine that the first key is not equivalent to the hashed first file. A second key is then obtained that corresponds to the hashed first file. A second file is then obtained using the second key. This second file is hashed to determine whether the second key is equivalent to the hashed second file. Integrity of the first file is confirmed if the second key is equivalent to the hashed second file or integrity of the first file is rejected if the second key is not equivalent to the hashed second file. Related apparatus, systems, techniques and articles are also described.

Data storage system file integrity check

Growing community of inventors

Nußloch, Germany

Udo Peter Klein