13370results about "Software simulation/interpretation/emulation" patented technology

Using user feedback for attack path analysis in an anomaly detection framework, including: performing an attack path analysis for a cloud deployment; receiving, from a user, user feedback for an attack vector of the attack path analysis; and initiating, based on the user feedback, a workflow for modifying one or more parameters for generating the attack path analysis.

Methods, apparatuses, and products for providing a code analysis feedback loop for code created using generative AI, including: performing a code analysis on code generated by a generative AI model; determining, based on the code analysis, whether the code satisfies one or more conditions; responsive to the code failing to satisfy the one or more conditions, until the code satisfies the one or more conditions, repeatedly updating the code by receiving, from the generative AI model, updated code based on a previously performed code analysis; and providing the code generated by the generative AI model.

Guiding query creation for a generative artificial intelligence (AI)-enabled assistant, including: receiving, via a natural language interface for a security framework monitoring a cloud deployment, a natural language input comprising one or more entity identifiers; gathering information based on the one or more entity identifiers; providing, to a generative artificial intelligence (AI) model, a prompt based on the natural language input and comprising the gathered information; and receiving, from the generative AI model, a response to the prompt.

Systems and methods for customer environment integration with anomaly detection systems are disclosed. The methods include receiving cloud computing environment data for the cloud computing environment; generating, based on the received cloud computing environment data, a set of commands for generating cloud computing infrastructure for anomaly detection, the set of commands including one or more commands for generating a first set of anomaly detection infrastructure elements within the cloud computing environment and for generating a second set of anomaly detection infrastructure elements at the anomaly detection system; and initiating an execution of the set of commands.

Architecture for a generative artificial intelligence (AI)-enabled assistant, including: receiving, via a natural language interface for a security framework monitoring a cloud deployment, a natural language input; selecting, by a delegator generative artificial intelligence (AI) model and based on the natural language input, a particular generative AI model from a plurality of selectable generative AI models; prompting the particular generative AI model based on the natural language input; and providing, via the natural language interface and in response to the natural language input, a response from the particular generative AI model.

The invention discloses an AI model automatic deployment platform based on a containerization technology, which relates to the technical field of automatic deployment of an artificial intelligence model, and comprises a container construction and intelligent configuration module, a transmission and cache management module, a security and multi-version warehouse module, a resource scheduling and optimization module and a deployment and interface management module, the container construction and intelligent configuration module adopts a three-layer mirror image construction strategy of a base layer, a framework layer and a model layer. According to the invention, all the modules cooperate to form a closed loop, after the container construction module generates an incremental packet and the incremental packet is subjected to security signature verification, the transmission module distributes the incremental packet according to network quality, the resource scheduling module dynamically adjusts bandwidth and quota, and the deployment module starts the container and monitors the container in real time. The problems of efficiency, safety and resource optimization of model deployment in an edge environment are solved, and cross-platform compatibility and service continuity are improved.

The invention discloses an agent platform resource management method and device based on a cloud native architecture and a medium, and the method comprises the steps: packaging an agent application into an independent container instance based on a containerization technology, and deploying the container instance to a target node; acquiring task demand information of the intelligent agent in real time, and generating a dynamic scheduling scheme by combining the resource state data and through a multi-target optimization algorithm so as to allocate the task to a target container instance; according to a matching function of the capability vector of the intelligent agent and the task demand vector, calculating the integrating degree of the intelligent agent and the task so as to generate a collaborative decision-making result and issue the collaborative decision-making result to the target intelligent agent; the resource utilization rate and the task execution state of the intelligent agent are monitored, an elastic telescoping mechanism or task rescheduling is triggered according to feedback data monitored in real time, and a resource allocation strategy is dynamically adjusted.

Providing a customizable generative artificial intelligence (‘AI’) assistant, including: identifying one or more customizations for the generative AI assistant, the generative AI assistant configured to receive information describing a monitored deployment and a natural language input, the generative AI assistant further configured to generate a response to the natural language input; and modifying, based on the one or more customizations, the generative AI assistant.

Analyzing log data from multiple sources across computing environments, including: re receiving log data from multiple sources; identifying, by an anomaly detection framework, an anomaly based on the log data; and providing an alert for the anomaly.

An illustrative data platform is disclosed that may receive, from an agent deployed in a cloud compute environment monitored by the data platform, data the agent has collected within the cloud compute environment in accordance with an agent operations ruleset. The data platform may determine, based on the data the agent has collected, an operational adjustment to the agent operations ruleset. Accordingly, the data platform may then direct the agent to implement the operational adjustment to the agent operations ruleset for use as the agent continues collecting data within the cloud compute environment in accordance with the agent operations ruleset. Corresponding methods, systems, and products are also disclosed.

Activity monitoring of a cloud compute environment based on container orchestration data may be performed by a data platform. For example, the data platform may obtain audit log data generated by a container orchestrator within a cloud compute environment, generate a data model based on the audit log data, and use the data model to monitor the activity for a security issue. The data model may be indicative of activity occurring with respect to one or more containerized applications executing within the cloud compute environment and the monitored activity may be activity with respect to the one or more containerized applications. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes scanning a compute environment associated with an entity and identifying one or more attack paths from a network to one or more datasets associated with the entity. The one or more attack paths each include a series of risk artifacts within the compute environment that can be exploited by an attacker to access the one or more datasets. The method further includes generating one or more attack path risk scores associated with the one or more attack paths and indicative of one or more levels of risk that the one or more attack paths could be exploited to access the one or more datasets. A risk mitigation operation associated with the one or more attack paths is performed based on the one or more attack path risk scores.

Computer-implemented systems and methods use a Large Language Model (LLM) for converting a legacy computer program in a first language to a human-language description of the legacy computer program, which description can be validated as being an accurate description of the legacy computer program. Once validated, the human-language description can be converted, again using an LLM, to a computer program in a target programming language. An LLM can also be used to generate test scripts for the new target-language program to test the performance of the target-language program in a production environment. An LLM can also be used to reconcile outputs from the legacy program to the new target program, such as on a function-by-function basis. If the differences between the outputs (if any) are sufficiently negligible, the legacy computer program can be decommissioned, and the new, target language program can be used in production.

Data platforms described herein are configured to monitor a compute environment and to create and present composite events indicative of multifaceted security threats within the compute environment. Such a data platform may detect both a first event that occurs within the compute environment and is associated with a first alert score and a second event that occurs within the compute environment and is associated with a second alert score. The data platform may then identify an affiliation between the first event and the second event based on a predefined criteria of a multifaceted security threat. Based on the identifying of the affiliation, the data platform may present the first and second events as a composite event indicative of the multifaceted security threat and associated with a third alert score different from the first and second alert scores. Corresponding methods, systems, and products are also disclosed.

An AI orchestration system dynamically manages multiple artificial intelligence (AI) agents within a cloud computing environment to efficiently process user requests. A model orchestration subsystem determines whether a request is handled locally using a domain-specific database or by invoking one or more AI agents. The system maintains AI agents in active and inactive states, provisioning computing resources for inactive agents as needed. Real-time model metrics guide the selection of target AI agents, and if a degrading performance trend is detected, the system preemptively spins up additional AI instances. The system provisions processor cycles, memory, and network bandwidth through a cloud-based resource manager, instantiates containerized execution environments or virtual machines, and performs automated load balancing among AI instances.

Using natural language queries to conduct an investigation of a monitored system, the method comprising: receiving a natural language input; generating, by a large language model and based on the natural language input, a first query directed to one or more tables of a plurality of tables; generating, based on the first query, one or more second queries each directed to a different table of the one or more tables; and presenting, via a user interface, a response to each of the one or more second queries.

The invention discloses a self-adaptive cloud management platform system based on intelligent resource scheduling and container arrangement, and relates to the field of computer information management. The system comprises a refined resource scheduling and adaptive optimization module, a containerized application life cycle management and dynamic container arrangement module, a high-precision operation and maintenance monitoring and self-healing mechanism module based on big data analysis, and a dynamic resource allocation and elastic scaling strategy module of an intelligent scheduling engine. The system takes a containerization technology as a core, realizes centralized management and monitoring of cloud computing resources, can realize dynamic intelligent resource scheduling and optimization, accelerates application deployment, improves system flexibility, strengthens operation and maintenance monitoring and platform safety guarantee, and comprehensively improves resource optimization and cost effectiveness. The resource scheduling efficiency is improved, the application deployment is simplified, the operation and maintenance monitoring is enhanced, and efficient resource management is realized through an adaptive optimization technology.

Techniques for configurable telemetry data processing via observability pipelines are described. A user may configure an observability pipeline for particular sources of telemetry data such as a containerized application in a provider network. The observability pipeline configuration can identify telemetry data sources, types of telemetry data to be processed, as well as zero, one, or more processing functions to act upon the telemetry data before being sent to one or more destination systems specified in the configuration. Telemetry data collection agents can be automatically configured for use and subsequently halted when no longer needed.

This application relates to the field of home kitchens, and discloses a social public opinion risk intelligent prediction system, including: a data collection module, which is used to collect text, image and video data from multi-source heterogeneous data sources in real time, including social media, news websites, forums, blogs and self-media; a data preprocessing module, which is used to clean, normalize, segment and tag the collected data to form a structured data set; an advanced natural language processing module, which is used to use the pre-trained Transformer model and graph neural network to perform deep semantic analysis on the pre-processed text data, and extract entity, relationship and context semantic features. By integrating advanced natural language processing, deep learning and multimodal data fusion technology, the system can monitor and accurately predict social public opinion in real time, quickly capture emergencies and public opinion changes, and deeply analyze complex semantics and emotional tendencies.

The invention relates to the technical field of continuous integration and continuous delivery, and discloses a Jenkins continuous integration method based on Kubernetes. According to the method, a Jenkins server is deployed in a Kubernetes cluster to serve as a control plane, a construction environment is created through a preset multi-container Pod template, and a Pod containing a plurality of containers is dynamically created based on the Pod template, so that each container executes different construction tasks. Containers in the Pod realize collaboration through sharing a network namespace and a storage volume, and a Jenkins server monitors task execution states of the containers in the Pod and performs dynamic scheduling according to task priorities and cluster load states. And after the task is completed, automatically destroying the Pod and releasing cluster resources. According to the method and the device, dynamic expansion and contraction of a construction environment and efficient parallel execution of tasks are realized, the problem that a traditional Jenkins static resource pool is difficult to deal with load changes is solved, the resource utilization rate is improved, the expandability of the system is enhanced, and an efficient and reliable solution is provided for an enterprise-level continuous integration system.

Cloud compliance monitoring for a cloud compute environment managed by a container orchestrator may be performed by a data platform. For example, the data platform may obtain cluster configuration data from a control plane of a cluster that is managed by a container orchestrator within a cloud compute environment, obtain node configuration data from one or more compute nodes associated with a data plane of the cluster that is managed by the container orchestrator, and generate a compliance statement based on the cluster configuration data and node configuration data. The compliance statement may indicate a configuration posture of the cloud compute environment according to a compliance benchmark. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes accessing, by a data platform, an alert generation policy associated with an entity that deploys containers in a cloud environment, the alert generation policy modifiable by the entity and specifying criteria for providing alerts associated with one or more vulnerabilities associated with the containers; detecting, by the data platform based on a scan of a container included in the containers, a vulnerability associated with the container; determining, by the data platform, an attribute of the vulnerability; and generating, by the data platform when the attribute meets the criteria specified in the alert generation policy, an alert associated with the vulnerability.

Reducing amounts of data ingested into a data warehouse, including: determining a duration associated with a subject described by event data provided to a data ingestion pipeline; determining, based on the duration, an interval for providing next event data; and providing, based on the interval, the next event data.

The invention relates to the technical field of data access security, and discloses a container mirror image security management method and system, and the method comprises the steps: constructing a container mirror image, generating a differential encryption key through a strategy center, carrying out the encryption strategy of a kernel dependence layer, a runtime environment layer, an application code layer and a sensitive configuration layer, and forming a hierarchical protection basis. If an access request is triggered, firstly collecting equipment fingerprints and geofence information and evaluating an environmental risk score, verifying access authority and an access scene matching degree through attribute-based encryption, analyzing operation track characteristics in real time, identifying an abnormal mode, and if the three-layer verification is passed, generating a temporary access token; according to the method, access request authority is verified, a temporary access token is matched, key fragments are synthesized, a master key is only temporarily generated in a memory and encrypted and stored, and through combination of a double-layer encryption channel and inner-layer and outer-layer defense, the anti-attack ability of container mirror image transmission is improved, and man-in-the-middle attack and data tampering are effectively coped with.

The invention discloses a virtual machine scheduling method in a distributed environment based on deep reinforcement learning, and belongs to the technical field of cloud computing resource scheduling. According to the method, the defects of a traditional method in multi-objective optimization and mixed action space collaborative decision-making are overcome by constructing a mixed action space joint decision-making mechanism. The method specifically comprises the following steps: establishing a mixed action space containing discrete node selection and continuous resource allocation, filtering invalid nodes by adopting a dynamic mask mechanism, and ensuring resource ratio constraint through projection gradient descent; designing a hierarchical reward function to realize multi-target dynamic balancing, and dynamically adjusting the priorities of energy consumption, load balancing and SLA guarantee based on an adaptive weight strategy; a multi-agent collaborative framework is provided, cross-node topological dependence is captured by using a graph attention network, and dynamic fusion of spatio-temporal characteristics is realized through cross attention in combination with LSTM coding time sequence load characteristics; a course learning strategy and a priority experience playback mechanism are introduced to improve training efficiency and strategy robustness.

An illustrative method includes identifying, based on a scan of a compute environment associated with an entity, a plurality of attack paths from one or more networks to one or more datasets associated with the entity and determining a set of one or more attack paths included in the plurality of attack paths that include a particular risk artifact. Based on one or more characteristics of the set of one or more attack paths, a risk score specific to the particular risk artifact may be determined and a risk mitigation operation associated with the particular risk artifact may be performed.

The invention relates to the technical field of automatic deployment of cloud computing platforms, in particular to a self-adaptive deployment method and system oriented to a credential heterogeneous environment. Aiming at three technical bottlenecks of low multi-CPU architecture adaptation efficiency, frequent software dependence conflicts and complex security baseline configuration in a localization process, a heterogeneous computing resource intelligent scheduling engine and a dynamic security policy generation mechanism are innovatively provided. The method comprises the following steps: constructing a heterogeneous resource portrait through a hardware feature automatic identification technology, and realizing component installation sequence optimization based on a DAG dependency relationship analysis algorithm and Kahn topological sorting; and creating an adaptive network security policy, and sensing the firewall state of the target system in real time through a probe. Compared with a traditional deployment mode, the method supports cross-architecture compatibility, solves the problem of dependency conflicts, improves deployment efficiency, and guarantees consistency and safety of the system.

A disclosed data platform may be configured to access a custom policy developed by a particular client entity that uses the data platform. The custom policy may invoke a query that targets a target dataset ingested from a cloud environment and stored in a data store. The data platform may determine that the custom policy is likely to be of value to one or more other client entities, besides the particular client entity, that also use the data platform. In response to the determining that the custom policy is likely to be of value to the one or more other client entities, the data platform may generate a community policy based on the custom policy. The community policy may be available for use by the one or more other client entities. Corresponding methods, systems, and products are also disclosed.