International Business Machines Corporation

Kyndryl, Inc.

Richard Daniel Gunjal

Ching-Yun Chao

Vijender Koorella

Shikhar Kwatra

Baiju Dhirajlal Mandalia

Pramod Verma

Joseph D Robinson

Dilip V Hardikar

Madhusudan Ramakrishna

Daniel Pacheco

Jeremy R Fox

Zachary A Silverstein

Nadiya Kochura

Sushain Pandit

Jeronimo Irazabal

Clement Decrop

Adam Lee Griffin

Tiberiu (Jim) Suto

Indervir Singh Banipal

Siddhartha Sood

Roopa Wilson

Balakrishan Sreenivasan

Pramond Verma

Subhra Kanti Bhakta

Pedro Andres Guzman Benavides

Balaji Muthusamy Pandurangan

Santosh Rajashekar

An embodiment may receive observed data from a monitored system. The embodiment may receive a request to generate a contextual report based on the observed data. The embodiment may identify a relevant persona corresponding to the request based on a series of linguistic cues. The embodiment may identify a list of suitable keywords based on the identified relevant persona. The embodiment may generate a persona-based contextual report for the observed data based on the identified relevant persona and the list of suitable keywords.

Generating persona-based contextual reports

Using an image analysis model within an image intended for distribution online, an image portion depicting personally identifiable information is identified, the personally identifiable information comprising image data usable to identify a specific individual. Using an online profile, a person depicted in the image portion is identified. A transaction is posted in a publicly-accessible distributed encrypted ledger, the transaction comprising an encrypted request to allow the image to be distributed online. According to a response to the request, the image portion is obfuscated, the obfuscating comprising altering data of the image portion, the altering making the image portion unusable to identify the person.

Ledger-based image distribution permission and obfuscation

Aspects of the present disclosure relate generally to software development environments and, more particularly, to systems, computer program products, and methods of automating software development, security, and operations (DevSecOps). For example, a computer-implemented method includes receiving, by a processor, a plurality of infrastructure as code files specifying a configuration of a runtime environment for a deployable image of source code in a continuous integration and continuous delivery pipeline for a cloud platform; generating, by the processor, compliance code for at least one file of the plurality of infrastructure as code files; building, by the processor, the deployable image of the source code in the continuous integration and continuous delivery pipeline according to the configuration specified by the plurality of infrastructure as code files and the compliance code; and deploying, by the processor, an instance of the image in the runtime environment.

Optimized build environment on cloud platforms for software development, security, and operations

An approach is provided for validating and managing certificates. A certificate is received. Information related to the certificate and additional information an additional data source are determined. A risk factor is rated based on the information related to the certificate and the additional information from the additional source. The certificate is validated based on the rating of the risk factor. A unique hashtag ID is generated for the validated certificate and recorded on a blockchain network.

Validating certificates

A method includes: receiving, by a processor set, a cloud architecture document; converting, by the processor set, the cloud architecture document to a graph including nodes; determining, by the processor set, cloud environment information for the nodes by analyzing textual content of the nodes using natural language processing; determining, by the processor set, additional cloud environment information for the nodes using domain ontology data; and creating, by the processor set, an Infrastructure as Code (IaC) document based on the cloud environment information and the additional cloud environment information.

Converting an architecture document to infrastructure as code

A method for Governance, Risk, Compliance (GRC) and security compliance in a cloud computing environment is provided. The method includes maintaining a cloud resource to be in a transient state that keeps the cloud resource from being visible to other cloud resources for a configured rule driven duration during which validations comprising the GRC and security compliance are applied to the cloud resource. The method further includes provisioning the cloud resource responsive to the cloud resource meeting a time-in-transient-state requirement and passing the GRC and security compliance. The maintaining step includes reusing reactive validations for further GRC and security compliance in a resource lifecycle leveraging Application Programming Interface (API) based lifecycle events during the transient state, and deriving a next set of configurable actions for provisioned resources by providing hooks to a provisioning service to get a compliance posture for the cloud resource in the transient state.

Shifting left GRC and security compliance leveraging transient cloud resources

A computer generates a profile, where the profile comprises one or more programs to monitor. The computer determines a baseline for each of the one or more programs by collecting one or more values associated with a normal operation for each of the one or more programs. The computer detects an anomaly based on deviation of the one or more values from the normal operation. Based on identifying a playbook for the anomaly, the computer applies the playbook on the program from the one or more programs. The computer organizes chat services based on identifying one or more members associated with the anomaly.

Autonomous contextual software support anomaly detection and playbook automation

Trustable delivery of a product uses a package with a printed label having a unique product ID, an RFID marker applied to the product that contains the ID, and a smart chip inside the product that contains the ID and a digital key. The ID from the RFID marker is compared to the label for initial validation of the package. The smart chip is further interrogated to generate an encoded value of the ID, such as a hash value, using the digital key. The hash value is then used to authenticate the ID, thereby verifying that the product as delivered is the original, untampered product. The product ID and the hash value are recorded in a blockchain ledger associated with the product. In this manner, the packaged product can be validated by any party in the delivery chain, e.g., manufacturer, seller, distributor, delivery service, and final recipient.

Trustable product delivery with RFID and smart chip

An example operation may include one or more of generating, by a first blockchain client, a transaction to a blockchain network to transfer a document, transferring over a private channel, by a second blockchain client, a first key to the first blockchain client, the private channel providing a point-to-point connection between the first and second blockchain clients, encrypting the document using a shared key, transferring, by the first blockchain client, the encrypted document over the private channel, generating, by the second blockchain client, a transaction to acknowledge receipt of the encrypted document, and transferring the shared key encrypted with the first key.

Database private document sharing

An example operation includes one or more of selecting, by a trust maintainer node, at least two blockchain nodes to be assigned as non-human intelligent nodes controlled by separate consortiums, identifying, by the trust maintainer node, a plurality of blockchain nodes that are not assigned as non-human intelligent nodes, assigning, by the trust maintainer node, a trust value to each of the plurality of the blockchain nodes based on voting histories of each of the plurality of the blockchain nodes to determine an overall trust value of a blockchain, and responsive to the overall trust value of the blockchain being below a minimum threshold, selecting at least one node from the plurality of the nodes to be assigned as the non-human intelligent node to increase the overall trust value of the blockchain.

Prevention of majority attacks

An approach is provided for managing resiliency of an application provided by a first service provider (SP). A fail condition indicating an outage of a first service of the first SP is detected. Based on a topology mapping the first SP to a second SP and the first service to a second service of the second SP, a first API provided by the first SP is determined to have provided the first service prior to the fail condition, and a second API provided by the second SP is determined to provide the second service. The first API is disabled and the second API is activated, thereby continuing to provide a functionality of the application that had been provided by the first service prior to the fail condition being detected, even though the first SP is experiencing the fail condition.

Application resiliency using APIs

An approach is provided for managing resiliency of an application. Based on information specifying services provided by service providers (SPs) which is stored in a configuration management database, a topology mapping a first service provided by a first SP to a second service provided by a second SP is generated. Each of the first and second services provides a functionality of the application. A fail condition of the first SP is detected. Based on the topology, a first API provided by the first SP is determined to have provided the first service prior to the fail condition, and a second API provided by the second SP is determined to provide the second service. The first API provided by the first SP is disabled and the second API is activated, thereby continuing to provide the functionality of the application even though the first SP is experiencing the fail condition.

Growing community of inventors

Bengaluru, India

Richard Daniel Gunjal