International Business Machines Corporation

Anca Sailer

Hidayatullah Habeebullah Shaikh

Andrzej P Kochut

Alla Segal

Yu Deng

Chang-Shing Perng

Bo Yang

Thomas E Chefalas

Alexei A Karve

Ignacio Silva-Lepe

Michael Reuben Head

Randy Allan Rendahl

Frank Andre Schaffa

Charles Otto Schulz

Gautam Kar

Tao Tao

Ruchi Mahindru

Sambit Sahu

Jim Alain Laredo

Rahul P Akolkar

Ajay Mohindra

Mahesh Viswanathan

Kirk Alan Beaty

Manoj Kumar Agarwal

Anindya Neogi

Manish Satyapal Gupta

Zhong Su

Hui Lei

Jonathan Paul Munson

Long Wang

Tian Cheng Liu

Xing Wei

Shubir Kapoor

Daniel Dean

Yexi Jiang

Yang Zhou

Clifford A Pickover

Paul R Bastide

Steven James Mastrianni

Gerd Breiter

Malgorzata Steinder

Salman Abdul Baset

Honglei Guo

Zhili Guo

Ali Anwar

Ching-Huei Tsou

Sunil Kumar Mishra

Mark Alan Brodie

Angel E Tomala-Reyes

Benjamin C Wisnewski

Ashwin Lall

Karen Appleby

Kevin Paul Julier

Mattia Tomasoni

Valentina Salapura

Fang Lu

Hariklia Deligianni

Komminist S Weldemariam

Yang Song

Chin Ngai Sze

Nataraj Nagaratnam

Jing Min Xu

Arun Kumar

Xiao Xi Liu

Soumitra Sarkar

Minkyong Kim

Liangzhao Zeng

Muhammed Fatih Bulut

Eric William Brown

Ramesh Ambat Gopinath

Daby Mousse Sow

Messaoud Benantar

Thao Ngoc Nguyen

James R Doran

Manish Sethi

Grzegorz Michal Swirszcz

Eric W Brown

Pei Ni Liu

Christopher John Butler

Maria Eleftheriou

Harini Jagannathan

Yichong Yu

Abdulhamid Adebowale Adebayo

Jingwei Yang

Philippe Mulet

Ramamurthy Vaidhyanathan

Yuji Watanabe

Priya A Ashok Nagpurkar

Kathiravan M Ramaswami

Deng Yu

David L Lillethun

Sharif Tarequr Rahman

Mujeebur Rahman

A topology graph for a computing system can be collected. An environment and application policy posture for at least one regulation relevant to the computing system can be collected. A plurality of penetration tests can be generated, the plurality of penetration tests determined based on the at least one topology graph for the computing system and the environment and application policy posture for the at least one regulation relevant to the computing system. The plurality of penetration tests can be run against the computing system, the plurality of penetration tests determining a plurality of threat vectors and at least one threat linkage between at least two of the plurality of threat vectors. The threat vectors and the at least one threat linkage between the at least two of the plurality of threat vectors can be output.

Compound threat detection for a computing system

One or more systems, devices, computer program products and/or computer-implemented methods of use provided herein relate to compliance mapping, and more particularly to aggregated mapping of one or more sets of context-based compliance data with standard compliance data, such as from a target domain and one or more associate domains. A system can comprise a memory that stores computer executable components, and a processor that executes the computer executable components stored in the memory, wherein the computer executable components can comprise a mapping component that can map a compliance control for a target domain based on a model trained by an active learning process that incorporates a plurality of contexts representing relationships between entities and associate domain specific dependencies.

AI-assisted compliance mapping

A computer-implemented method for Continues Integration and Continues Deployment (CICD) pipeline security check is provided according to embodiments of the present disclosure. In the method, a plurality of events is executed sequentially to create a CICD pipeline. The plurality of events is monitored. Moreover, a security status of the CICD pipeline is determined based on the monitored events and a model for predicting the security status of the CICD pipeline.

Continues integration and continues deployment pipeline security

A method includes receiving, by a computing device, security definitions from an owner of a cloud deployment; receiving, by the computing device, a customer profile having intents to use the cloud deployment; assessing, by the computing device and using automated assessment tools, compliance of the cloud deployment with the security definitions in view of the intents; generating, by the computing device, a compliance posture using the assessment; and providing, by the computing device, the compliance posture to a reviewer.

Compliance aggregation

A compliance discovery and integration process is implemented in association with a cloud-based security and compliance platform and associated CI/CD framework. The process assumes an existing DevOps-based deployment of a product, such as an enterprise application that executes in a runtime production environment. The technique of this disclosure addresses the problem of misalignment between a compliance policy and the product's post-deployment regulation posture by providing tools and methods that enable pro-active augmentation of governance and compliance policy during the pre-deployment phase and with respect to a next deployment of the product (e.g., a next or updated version). Thus, when the product is later deployed in its next deployment, its regulation posture (post-deployment) is already consistent with the compliance policy.

Discovering and using application deployment dependencies to augment governance and compliance policy

A mechanism is provided in a data processing system comprising a processor and a memory, the memory comprising instructions that are executed by the processor to specifically configure the processor to implement a repetitive portion identification and weighting engine. A machine learning model is trained for weighting repetitive portions of patient electronic medical records (EMRs). A repetitive portion identification component applies a plurality of templates to clinical notes of a patient EMR to identify one or more candidate portions that match at least one of the plurality of templates. A content analysis component performs content analysis on the one or more candidate portions to determine whether each given candidate portion is relevant. A weighting component assigns a relative weight to each given candidate portion based on relevance. A cognitive summary graphical user interface (GUI) generation component generates cognitive summary reflecting at least a subset of the one or more candidate portions of the patient EMR. The mechanism outputs the cognitive summary in a GUI to a user.

Identifying repetitive portions of clinical notes and generating summaries pertinent to treatment of a patient based on the identified repetitive portions

Methods and systems for secure data analysis include determining that analysis provider access rules and data provider access rules are compatible. Analysis software is received from an analysis provider and a dataset is received from a data provider. The analysis software is executed on the dataset to generate an analysis output, with access to data in the dataset being constrained by the analysis provider access rules and the data provider access rules. An output of the analysis is sent to the analysis provider.

Secure data analysis

The present invention relates to a method, computer system, and computer program product for data processing based on a response strategy. According to the method, a performance value of a server is determined in response to receiving at least one request to the server. A response strategy for the at least one request is determined based on the determined performance value. At least one response is provided to the at least one request according to the determined response strategy.

Request response based on a performance value of a server

A geographic location to which a user intends to travel, medical information pertaining to the user and conditions at the geographic location that impact health of human beings can be identified. A health impact model can be created for the user, the health impact model analyzing the determined conditions at the geographic location in a context of the accessed medical information pertaining to the user. Based on the analyzing by the health impact model, a score can be assigned to an anticipated health impact on the user of the identified conditions at the geographic location. If the score assigned to the anticipated health impact on the user of the identified conditions at the geographic location exceeds a threshold value, at least one action for the user can be automatically initiated and controlled.

Travel health optimization simulating health impact of intended user travel using cognitive analytics based on conditions at a geographic location

An approach is provided that receives multimedia content and extracts a set of metadata from the content. The extraction of metadata includes performing image analysis on the multimedia content. The approach then analyzes the set of metadata with the analysis resulting in a set of regulations that apply to the multimedia content. The approach compares the set of metadata to the set of regulations and allows publication of the multimedia content when the comparison reveals that the multimedia content is in compliance with the set of regulations, and inhibits publication of the multimedia content when the multimedia content fails to comply with the set of regulations.

Control point compliance prediction based on regulation in multi-media

Techniques are provided for identifying interactions between natural medicines and modern medicines. A corpus of information is analyzed pertaining to interactions of natural medicines with modern medicines for treating a condition. A mapping is created, wherein natural medicines are mapped to modern medicines for treating the condition. An on-line clinical trial study group is created, allowing participation by users, wherein a participation in a group is allowed for a selected set of users based on a group medication usage profile. Information from participants in each group is collected, and the collected information is analyzed.

Identifying potential medicinal interactions for online clinical trial study groups

Aspects of the present disclosure relate to medical treatment management. Medical data associated with a user is received. A medical condition of the user is identified based on the medical data. Object data of a plurality of objects in a vicinity of the user is received. The object data is analyzed to determine an identity and characteristics of each object of the plurality of objects. The plurality of objects are compared to medical tools in a medical database using the characteristics within the object data. A subset of objects matching to respective medical tools are then identified. A medical procedure utilizing at least one object of the subset of objects to address the medical condition is identified. A recommendation is then transmitted that the medical procedure should be used to address the medical condition using the at least one object.

Medical treatment management

Automatic determination of underlying reasons for lack of treatment adherence is provided. In various embodiments, patient information for a patient is retrieved. The patient information comprises a treatment plan. A failure of compliance with the treatment plan by the patient is determined from the patient information. The failure of compliance and the patient information are evaluated to determine one or more potential cause of the failure of compliance. The one or more potential cause is provided to a user for review.

Automatic determination of underlying reasons for patient failures to adhere to patient care plans

The present disclosure provides techniques for data transmission. According to one technique, a request from a data sender for sending data to a data receiver is received, wherein the request comprises a content indicating a verification code. Then, a first solution to the verification code based on the request can be obtained. The verification code can be sent to the data receiver. A second solution to the verification code can be received from the data receiver, wherein the second solution is generated by the data receiver. Transmission of the data from the data sender to the data receiver can be enabled in response to the first solution consistent with the second solution.

Data transmission based on verification codes

One or more processors scan to identify component resources of a record retention system and determine relationships among the component resources and data stored on the component resources. Rules corresponding to retention of record data stored on the component resources are received, and a deletion action is determined in response to receiving a request by a user for deletion of record data from the record retention system and the rules corresponding to the retention of data. The one or more processors perform the deletion action on the user's record data associated with the request and compliant with the rules corresponding to the retention of the data among the component resources of the record retention system, and the one or more processors record the deletion action and information associated with the deletion action in a deletion log of the record retention system.

Retention rule compliance of record deletion based on deletion log

Growing community of inventors

Scarsdale, NY, United States of America

Anca Sailer