1436 results about "Data platform" patented technology

An illustrative data platform is disclosed that may receive, from an agent deployed in a cloud compute environment monitored by the data platform, data the agent has collected within the cloud compute environment in accordance with an agent operations ruleset. The data platform may determine, based on the data the agent has collected, an operational adjustment to the agent operations ruleset. Accordingly, the data platform may then direct the agent to implement the operational adjustment to the agent operations ruleset for use as the agent continues collecting data within the cloud compute environment in accordance with the agent operations ruleset. Corresponding methods, systems, and products are also disclosed.

Activity monitoring of a cloud compute environment based on container orchestration data may be performed by a data platform. For example, the data platform may obtain audit log data generated by a container orchestrator within a cloud compute environment, generate a data model based on the audit log data, and use the data model to monitor the activity for a security issue. The data model may be indicative of activity occurring with respect to one or more containerized applications executing within the cloud compute environment and the monitored activity may be activity with respect to the one or more containerized applications. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes scanning a compute environment associated with an entity and identifying one or more attack paths from a network to one or more datasets associated with the entity. The one or more attack paths each include a series of risk artifacts within the compute environment that can be exploited by an attacker to access the one or more datasets. The method further includes generating one or more attack path risk scores associated with the one or more attack paths and indicative of one or more levels of risk that the one or more attack paths could be exploited to access the one or more datasets. A risk mitigation operation associated with the one or more attack paths is performed based on the one or more attack path risk scores.

Data platforms described herein are configured to monitor a compute environment and to create and present composite events indicative of multifaceted security threats within the compute environment. Such a data platform may detect both a first event that occurs within the compute environment and is associated with a first alert score and a second event that occurs within the compute environment and is associated with a second alert score. The data platform may then identify an affiliation between the first event and the second event based on a predefined criteria of a multifaceted security threat. Based on the identifying of the affiliation, the data platform may present the first and second events as a composite event indicative of the multifaceted security threat and associated with a third alert score different from the first and second alert scores. Corresponding methods, systems, and products are also disclosed.

The invention discloses a charging pile intelligent control management platform, relates to the technical field of charging pile intelligent control, and can identify the peak and valley periods of the power grid load in advance by collecting and analyzing the power grid load data and the operation state of a charging pile in real time and combining a regression model of a load prediction and demand analysis module. The power output of each charging pile is dynamically adjusted through the charging pile scheduling and power adjusting module, the power grid resource distribution is optimized, the overload phenomenon is avoided, and the stability of power grid operation is improved. By monitoring and feeding back the charging behavior data of the user, the platform can reasonably plan the working state of the charging pile. Therefore, too fast loss of some charging piles due to continuous overload is avoided, resource waste of idle charging piles is reduced, the utilization efficiency of equipment is improved on the whole, and the service life of the charging piles is prolonged. By using the load prediction and demand analysis module, the platform can pre-judge the charging demand peak of the user and optimize the scheduling strategy in advance, thereby shortening the waiting time of the user.

Cloud compliance monitoring for a cloud compute environment managed by a container orchestrator may be performed by a data platform. For example, the data platform may obtain cluster configuration data from a control plane of a cluster that is managed by a container orchestrator within a cloud compute environment, obtain node configuration data from one or more compute nodes associated with a data plane of the cluster that is managed by the container orchestrator, and generate a compliance statement based on the cluster configuration data and node configuration data. The compliance statement may indicate a configuration posture of the cloud compute environment according to a compliance benchmark. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes accessing, by a data platform, an alert generation policy associated with an entity that deploys containers in a cloud environment, the alert generation policy modifiable by the entity and specifying criteria for providing alerts associated with one or more vulnerabilities associated with the containers; detecting, by the data platform based on a scan of a container included in the containers, a vulnerability associated with the container; determining, by the data platform, an attribute of the vulnerability; and generating, by the data platform when the attribute meets the criteria specified in the alert generation policy, an alert associated with the vulnerability.

An illustrative method includes identifying, based on a scan of a compute environment associated with an entity, a plurality of attack paths from one or more networks to one or more datasets associated with the entity and determining a set of one or more attack paths included in the plurality of attack paths that include a particular risk artifact. Based on one or more characteristics of the set of one or more attack paths, a risk score specific to the particular risk artifact may be determined and a risk mitigation operation associated with the particular risk artifact may be performed.

A disclosed data platform may be configured to access a custom policy developed by a particular client entity that uses the data platform. The custom policy may invoke a query that targets a target dataset ingested from a cloud environment and stored in a data store. The data platform may determine that the custom policy is likely to be of value to one or more other client entities, besides the particular client entity, that also use the data platform. In response to the determining that the custom policy is likely to be of value to the one or more other client entities, the data platform may generate a community policy based on the custom policy. The community policy may be available for use by the one or more other client entities. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes receiving, by a data platform configured to monitor the compute environment, runtime workload data collected by an agent deployed to the compute environment, wherein the runtime workload data comprises user space data collected from a user space of the compute environment and kernel space data collected from a kernel space of the compute environment. The method further includes performing, by the data platform, a monitoring operation based on the user space data and the kernel space data of the runtime workload data.

A data collection system is disclosed to be communicatively coupled to a data platform configured to perform security monitoring of a compute environment. A sub-kernel component of the data collection system may collect sub-kernel data accessible from a sub-kernel space below an operating system of a compute resource in the compute environment. The data collection system may manipulate the collected sub-kernel data to prepare the sub-kernel data to be used by the data platform in performing the security monitoring of the compute environment. The data collection system may then communicate the manipulated sub-kernel data to the data platform. Corresponding methods, systems, and products for compute environment security monitoring using data collected from a sub-kernel space are also disclosed.

The invention relates to the technical field of metadata generation, and discloses a data platform metadata automatic generation method based on a large model, which comprises the following steps of: firstly, performing unified standardization and preliminary grammatical analysis on an original SQL (Structured Query Language) code to obtain a structured intermediate representation; on the basis, preliminary blood relationship analysis based on rules is carried out, and simple column references are quickly identified and processed. For complex expressions which are difficult to accurately analyze by a traditional method, code snippets and context information of the complex expressions are accurately extracted and submitted to a large language model for deep semantic understanding and complex blood relationship analysis. And finally, integrating the complex consanguinity analyzed by the large model with the initial consanguinity list to form a comprehensive and accurate field-level consanguinity, and further generating complete data platform metadata. In this way, the defect that a traditional analysis tool understands complex semantics is effectively overcome, and the accuracy and integrity of metadata generation are remarkably improved.

The invention relates to the technical field of optical measurement and geometric position measurement, in particular to a remote multipoint monitoring system and method for roadbed surface settlement, and the system comprises a plurality of distributed monitoring nodes and a remote data platform; the monitoring node comprises a heterogeneous sensor group and an edge processing module which is connected with the sensor group and is used for carrying out local preprocessing and fusion on multi-source data; the wireless communication module is used for sending the data to a remote data platform; the power supply and maintenance module provides electric energy and supports node cleaning and environment adaptation; the remote data platform comprises a data receiving and storage unit, a data fusion and analysis unit, an early warning unit and a visual user interface. According to the invention, a multi-sensor fusion intelligent monitoring network is constructed, all-weather and high-precision remote monitoring of urban road subgrade settlement and associated crack deformation thereof is realized, settlement trend prediction and early warning are provided through AI analysis, and the initiative and safety guarantee level of urban road maintenance are improved.

An illustrative data platform is disclosed that may monitor a compute asset within a compute environment. This monitoring may include receiving registry data collected, by an agent deployed to the compute asset, from a registry space of the compute asset. Based on the registry data collected by the agent, the data platform may determine that a change within the registry space of the compute asset is associated with a security threat to the compute asset. Accordingly, based on the determining that the change within the registry space is associated with the security threat, the data platform may perform an action configured to facilitate remediation of the security threat. Corresponding methods, systems, and products are also disclosed.

Data platforms described herein are configured to monitor a compute environment and facilitate interactive analysis of multifaceted security threats within the compute environment. Such a data platform may determine that one or more assets within the compute environment are possibly being targeted by a multifaceted security threat and present an interactive user interface. The user interface may be configured to display an identifier indicative of the multifaceted security threat, a set of selectable evidence items each associated with a different facet of the multifaceted security threat and assessed based on the monitoring of the compute environment, and a presentation pane for displaying information. As such, the data platform may detect a selection of a particular evidence item from the set of selectable evidence items and, in response to the selection, populate the presentation pane with information related to the particular evidence item. Corresponding methods, systems, and products are also disclosed.

An illustrative method for operating an agent configuration may include providing an unprivileged agentless workload scanning configuration to collect non-runtime workload data associated with a workload deployed within a cloud environment, determining one or more properties of the workload based on the non-runtime workload data, and performing an operation with respect to a privileged agent configuration deployed within the cloud environment and configured to collect runtime workload data associated with the workload. Likewise, an illustrative method for operating an agentless configuration may include providing a privileged agent configuration to collect runtime workload data associated with a workload deployed within a cloud environment, determining one or more properties of the workload based on the runtime workload data, and performing an operation with respect to an unprivileged agentless scanning configuration deployed within the cloud environment and configured to collect non-runtime workload data associated with the workload.

An illustrative method includes accessing, by a data platform configured to monitor a compute environment, permissions data representative of a set of permissions that specify how an entity is entitled to interact with resources within the compute environment; collecting, by the data platform, runtime workload data representative of an actual interaction by the entity with the resources over a period of time; and performing, by the data platform based on the runtime workload data, an operation associated with modifying the set of permissions for the entity.

An illustrative agent deployed in a compute environment monitored by a data platform is disclosed. The agent may access kernel data generated by a kernel of an operating system used within the compute environment. Based on the kernel data, the agent may detect a launch of a new container entity of a set of container entities deployed to the compute environment and managed by a container runtime executing on the operating system. Based on the detecting of the launch of the new container entity, the agent may then provide, to the data platform, agent data that indicates the launch of the new container entity. Corresponding methods, systems, and products are also disclosed.

An illustrative method includes identifying, based on static workload data associated with a compute environment, one or more attack paths from a network to one or more datasets associated with an entity, accessing runtime workload data associated with the compute environment, and performing, based on the runtime workload data, a risk mitigation operation associated with the one or more attack paths.

An illustrative method for querying multiple datasets may include generating, based on models each associated with and defining attributes of a different datasets stored in a plurality of data stores, a semantic layer defining relationships between the models and that provides a centralized application programming interface (API) for exposing the datasets by way of a common query language, receiving, by way of the centralized API, a query request for information that depends on data included in multiple datasets included in the plurality of datasets, querying, based on the query request and the relationships between the models defined by the semantic layer, the multiple datasets, and presenting, based on the querying, a query result representative of the information that depends on the data included in the multiple datasets.

The invention relates to an SQL (Structured Query Language) optimization interaction method and device based on a deep learning framework large model. The method comprises the steps that a statement construction model used for generating and optimizing SQL statements is deployed in a target system; in response to a natural language demand input by a user in the target system, identifying key elements in the natural language demand, and verifying whether the key elements exist in an enterprise data platform connected with the target system in combination with the enterprise data dictionary; inputting the target key elements passing the verification into a statement construction model, and generating a target SQL statement and a corresponding performance optimization suggestion; converting the target SQL statement into a service execution step according to the execution logic, and generating service description information; displaying the target SQL statement and the corresponding generation progress to a user in real time in an interactive interface; and displaying performance optimization suggestions and / or business description information matched with the target SQL to a user in an interactive interface to assist the user in realizing SQL operation related to enterprise business.

An illustrative method includes tracking, by a data platform configured to monitor a compute environment, a plurality of identity transitions that occur over time with respect to an entity, wherein each of the identity transitions includes a transition by the entity from being associated with one identity to being associated with another identity, the one identity and the another identity having different permission sets with respect to resources within the compute environment; determining, by the data platform while performing the tracking, that an attribute of the plurality of identity transitions satisfies a predetermined criterion; and performing, by the data platform based on the attribute of the plurality of transitions satisfying the predetermined criterion, a remedial action associated with the entity.

A containerized agent that is deployed to a compute node of a compute environment and that executes in both user space and kernel space of the compute node is disclosed. The containerized agent collects data associated with a first container entity that is deployed to the compute node and that executes only in the user space of the compute node such that the first container entity is isolated from other entities executing in the user space of the compute node. The containerized agent also provides the collected data associated with the first container entity to a data platform that is monitoring the cloud compute environment using the containerized agent. Corresponding methods, systems, and products are also disclosed.

The invention relates to the technical field of database migration verification, in particular to a cross-data-platform database migration verification method and system applied to autonomous controllable transformation. The method comprises the following steps: configuring a source database and a target database in a data source management module; newly establishing a comparison task in the task management module; a comparison database is connected through a dynamic data source assembly, different databases are connected through JDBC, and comparison verification is executed after database connection parameters are configured; database comparison is carried out in the task management module, wherein the database comparison comprises data volume verification and data consistency verification; a comparison report is generated and stored in a built-in mode. The problem of data integrity in the cross-platform data migration process is solved, the system fully considers the difference between the MySQL database and the local database in character set, function and technical characteristics, data verification and comparison work after migration of the MySQL database source and various local target databases is supported, consistency verification before and after data migration is achieved, and the verification efficiency is improved. And the risk of data loss caused by data migration is avoided.

Example systems and methods monitor a cloud compute environment. An example method includes: opening, by an agent deployed in a cloud environment, a communication channel between the agent and a kernel of an operating system of a node within the cloud environment; determining, by the agent and via the communication channel, an event associated with a namespace of the operating system; determining, by the agent and based on the event, a status of a container associated with the node; and providing, by the agent to a data platform, a message indicative of the status of the container.

The invention provides a terminal operation and maintenance management method and platform for a medical big data platform, and the method comprises the steps: firstly collecting multi-mode historical operation and maintenance data of a platform terminal in a normal working state, and constructing a time sequence feature vector sequence after preprocessing and fusion; a deep sequence learning model training process is then utilized to learn the potential representation to capture the context state of the normal workflow mode and establish a reconstructed baseline model. Acquiring real-time operation and maintenance data of the terminal, constructing a feature vector, extracting potential context representation through the trained model, and calculating a reconstruction error; a current workflow state is identified based on the potential representation, and a context-aware anomaly metric value is calculated in conjunction with state information and reconstruction errors. And analyzing the time evolution characteristic of the abnormal metric value and comparing the time evolution characteristic with a preset abnormal mode criterion to judge whether the terminal has workflow abnormality, and if so, generating an early warning signal containing abnormal evolution characteristic description. The method has the effect of improving the operation and maintenance detection accuracy of the terminal.

The invention discloses a vertical retaining structure displacement automatic monitoring device and a monitoring method thereof, and relates to the technical field of displacement automatic monitoring, and the device comprises a data acquisition unit which is used for configuring monitoring nodes, obtaining sensor data monitored at the top of a retaining wall, and preprocessing the sensor data to obtain effective inclination angle data; the displacement conversion unit is used for recognizing and optimizing the attitude angle by using a dynamic Kalman filtering algorithm, and calculating a displacement value of the vertical soil retaining structure by combining the vertical distance from the bottom to the top of the soil retaining wall; the monitoring and early warning unit is used for uploading the displacement value of the vertical retaining structure to a remote data platform, constructing a monitoring network, analyzing and predicting the deformation trend of the retaining wall and triggering early warning according to an analysis result; and the battery management unit is used for providing battery state monitoring and management. The displacement of the top of the retaining wall can be accurately sensed and monitored through the inclination angle data, and comprehensive and accurate monitoring is ensured by adopting an attitude solver and a dynamic Kalman filtering algorithm.

The invention relates to a food safety risk analysis method and system based on big data. The method comprises the steps of collecting food full-life-cycle key data through Internet of Things equipment and a data platform, and completing data format standardization to form a structured data set; key risk factors are extracted through the structured data set, a risk factor weight matrix is constructed, and a primary risk value of the food sample is calculated; establishing a time sequence prediction model by using the primary risk value and historical time sequence data, calculating a risk change trend, and predicting a future risk fluctuation condition; calculating a food risk grade according to the primary risk value and the risk change trend, and generating a corresponding risk classification label; performing comparative analysis on the risk classification label and an actual supervision result, calculating a model deviation, and optimizing a risk calculation and trend prediction model based on a deviation result; the optimized analysis results are integrated, the risk level and the change trend are displayed through a graphical interface, and intelligent early warning prompts and intervention decision suggestions are provided.

The invention belongs to the technical field of network test equipment, and discloses network response test equipment and a test method thereof, and is characterized in that the network response test equipment comprises the following modules: a distributed multi-mode dynamic sensing probe used for capturing service flow characteristics and microsecond-level performance indexes of a network link in real time; the extensible data middle table is in data connection with the probe and is used for establishing a unified spatio-temporal index for cross-level performance data from a physical layer to an application layer; and the causal atlas analysis engine based on artificial intelligence is used for positioning a network fault root cause according to the cross-level performance data. According to the invention, an evaluation standard is automatically calibrated according to historical business load characteristics through an extensible data-in-station dynamic baseline threshold mechanism, so that a test environment completely fits complex scenes such as video burst frame transmission, database synchronization ACK, high-frequency transaction chain and the like, the simulation distortion of a traditional tool to business traffic burst and multi-protocol mixed characteristics is eliminated, and the test efficiency is improved. And the test result is ensured to accurately map the long-term stability requirement.

The invention provides an SMT patch correction system linked with AOI and a method thereof. The SMT patch correction system comprises a stokehole AOI detection module, a stokehole AOI detection module, a multi-dimensional sensing module, an intelligent data center module, an AI decision optimization module and a process simulation verification module. According to the method, the AOI detection data in front of and behind the furnace are fused through the intelligent data center module, the mapping relation of knowledge graph associated elements, the technology and offset data is constructed, a linkage closed loop is formed, and offset source tracing and full-process dynamic deviation correction are achieved; environmental parameters such as temperature, vibration and suction nozzle pressure are collected in real time through the multi-dimensional sensing module, and the environmental parameters are standardized through an intelligent data platform and then are included into correction logic of the AI decision optimization module, so that dynamic compensation of the influence of environmental factors on the mounting precision is realized; a deep learning and reinforcement learning cooperation strategy is adopted through the AI decision optimization module, parameters are dynamically optimized and corrected in combination with thermal deformation simulation and other multi-source information of the process simulation verification module, and the adaptability to different element types and production scenes is improved.