Abstract: One example method includes receiving authorization from a human user to collect data concerning an interaction of the human user with a computing element, interacting with the human user, collecting data concerning the interaction, analyzing the collected data, generating trust and confidence information, concerning the human user, based on analysis of the collected data, and storing the trust and confidence information.

Abstract: Hardware trust boundaries in a data confidence fabric are provided. Nodes in a data confidence fabric are provisioned with identifies and confidence scores. Hardware-based trust insertion technologies are applied to data in the data confidence fabric. Protocols allow nodes to join the data confidence fabric and be aware of other nodes. Paths of data can be graphed and audited.

Abstract: A trust broker is disclosed for a data confidence fabric. The trust broker evaluates the trustworthiness of data flowing through a network that includes a data confidence fabric. The trust broker evaluates a baseline confidence score and generates a workorder to improve the baseline confidence score in a measurable way. The trust broker may implement the workorder and ensure that the trust improves in the data confidence fabric.

Abstract: One example method includes deploying a group of bots in a computing environment that includes a group of nodes, each of the bots having an associated attack vector with respect to one or more of the nodes, receiving, from each of the bots, a report that identifies a node attacked by that bot, and a result of the attack, and adjusting, based on the bot reports, a confidence score of one or more of the attacked nodes.

Abstract: A method for managing data includes obtaining, by an indirection logic service, a data request for data, wherein the data request specifies a ledger entry, identifying an indirection logic entry stored in the indirection logic service based on the ledger entry, obtaining a selection of trust data from a client, wherein the ledger entry comprises metadata of the trust data, and initiating communication between the client and a local trust manager based on the selection of trust data, wherein the trust data was generated by the local trust manager.

Abstract: In general, in one aspect, the invention relates to a method for managing data, the method includes performing, by a data confidence fabric (DCF) node, a trust operation with a remote DCF node, updating, based on the trust operation, a trust level associated with the remote DCF node to obtain an updated trust level, integrating, based on the updated trust level, the remote DCF node into a DCF processing path to obtain a second DCF processing path, wherein the DCF processing path comprises the DCF node, and processing data using the second DCF processing path.

Abstract: In general, in one aspect, the invention relates to a method for managing data, the method includes obtaining, by a data management system, a first resource usage of a local data system associated with a first data confidence fabric (DCF) pipeline, wherein the first DCF pipeline is associated with a first workload, obtaining second resource usage of the local data system associated with a second DCF pipeline, wherein the second DCF pipeline is associated with a second workload, analyzing the first resource usage and the second resource usage to obtain a workload ranking, and performing an action set based on the workload ranking.

Abstract: Aspects of annotating data are disclosed. As data is ingested to a data confidence fabric, analytic values, which includes tags or annotations, are attached to or associated with the data by an analytic insertion mechanism. The analytic values allow the data to be used by applications including machine learning algorithms immediately. Feedback from the applications allow the analytic insertion mechanism to improve and generate more valuable analytic values and to generate higher confidence scores for the analytic values.

Abstract: One example method includes determining a spatial distribution of devices in a three dimensional physical environment, determining a polling frequency for each of the devices, receiving data generated by the devices, evaluating the data, and assigning a trust score to the data. The devices may take the form of respective sensors operable to sense a physical attribute of the three dimensional physical environment. A Fourier transform may be employed to determine the polling frequency.

Abstract: A social overlay is provided that allows an application to seek human input when performing high-risk decisions. The overlay allows an application to obtain data confidence scores when performing operations and to obtain human confidence scores that can be used to seek input from users with high confidence scores. This allows applications to improve performance and avoid situations where an automated application may make a wrong decision that does not account for the associated risk.

Abstract: A trust broker is disclosed for a data confidence fabric. The trust broker evaluates the trustworthiness of data flowing through a network that includes a data confidence fabric. The trust broker evaluates a baseline confidence score and generates a workorder to improve the baseline confidence score in a measurable way. The trust broker may implement the workorder and ensure that the trust improves in the data confidence fabric.

Abstract: A method for managing data includes obtaining, by an indirection logic service, a data request for data, wherein the data request specifies a ledger entry, identifying an indirection logic entry stored in the indirection logic service based on the ledger entry, obtaining a selection of trust data from a client, wherein the ledger entry comprises metadata of the trust data, and initiating communication between the client and a local trust manager based on the selection of trust data, wherein the trust data was generated by the local trust manager.

Abstract: Techniques are provided for dynamic communication protocol control in a communication environment. For example, a request is sent by a given processing node of a plurality of processing nodes to a computing system. Each of the plurality of processing nodes is operatively coupled to the computing system. Each of at least a subset of the plurality of processing nodes is configured to communicate via at least a first communication protocol with which each of the subset of the plurality of processing nodes share bandwidth. The request seeks usage of a given amount of additional bandwidth associated with the first communication protocol by the given processing node from one or more of the subset of processing nodes. One or more of the subset of processing nodes can then decide to cede the additional bandwidth to the given processing node and convert to using another communication protocol.

Abstract: A compute node currently operating within a given computing environment and currently enabled to support at least a first communication protocol obtains one or more instructions for enabling the compute node to support a second communication protocol. In response to the one or more instructions, one or more configuration parameters associated with the compute node are automatically reconfigured to support the second communication protocol. An automatic determination is made, in the given computing environment within which the compute node currently operates, whether or not to certify the compute node for the second communication protocol.

Abstract: One example method includes deploying a group of bots in a computing environment that includes a group of nodes, each of the bots having an associated attack vector with respect to one or more of the nodes, receiving, from each of the bots, a report that identifies a node attacked by that bot, and a result of the attack, and adjusting, based on the bot reports, a confidence score of one or more of the attacked nodes.

Abstract: One example method includes receiving authorization from a human user to collect data concerning an interaction of the human user with a computing element, interacting with the human user, collecting data concerning the interaction, analyzing the collected data, generating trust and confidence information, concerning the human user, based on analysis of the collected data, and storing the trust and confidence information.

Abstract: Hardware trust boundaries in a data confidence fabric are provided. Nodes in a data confidence fabric are provisioned with identifies and confidence scores. Hardware-based trust insertion technologies are applied to data in the data confidence fabric. Protocols allow nodes to join the data confidence fabric and be aware of other nodes. Paths of data can be graphed and audited.

Abstract: In general, in one aspect, the invention relates to a method for managing data. The method includes obtaining, by a local data manager, a first data confidence fabric (DCF) configuration file, where the first DCF configuration file is associated with a first DCF pipeline and a first workload. The method further includes registering the first DCF pipeline in a DCF pipeline registry, obtaining a data set, identifying the first DCF pipeline using the DCF pipeline registry, and processing the data set based on the first DCF pipeline to obtain first processed data.

Abstract: In general, in one aspect, the invention relates to a method for managing data. The method includes obtaining, by a local data manager, a first data confidence fabric (DCF) configuration file, where the first DCF configuration file is associated with a first DCF pipeline and a first workload. The method further includes registering the first DCF pipeline in a DCF pipeline registry, obtaining a data set, identifying the first DCF pipeline using the DCF pipeline registry, and processing the data set based on the first DCF pipeline to obtain first processed data.

Abstract: In general, in one aspect, the invention relates to a method for managing data, the method includes performing, by a data confidence fabric (DCF) node, a trust operation with a remote DCF node, updating, based on the trust operation, a trust level associated with the remote DCF node to obtain an updated trust level, integrating, based on the updated trust level, the remote DCF node into a DCF processing path to obtain a second DCF processing path, wherein the DCF processing path comprises the DCF node, and processing data using the second DCF processing path.