Abstract: A method, apparatus, non-transitory computer readable medium, and system for generating a video clip includes obtaining an input video and a transcript of the input video, wherein the transcript comprises a plurality of sentences. In some cases, a language model is configured to generate a subset of the plurality of sentences based on the transcript. Additionally, the language model generates a video clip based on the input video and a subset of the plurality of sentences, wherein the video clip comprises a portion of the input video.

Abstract: A system and method for automatic generation and automatic conduct of a chaos experiment in distributed applications includes a software application having a layer and a chaos configuration, a chaos engine having a chaos orchestrator, a chaos prompt generator having a prompt template composer, and a chaos engineering large language model. The chaos engineering large language model is configured to recommend chaos experiments for the chaos engine to process and to inject into the software application. The chaos engineering large language model is also configured to patch the software application in accordance with objectives and parameters developed in the system and method. The system and method may be automated through a trigger. The trigger may be the chaos engineering large language model recommending one or more chaos experiments to the chaos engine. The trigger may also be the implementation of one or more patches to the software application.

Abstract: A system and method for automatic generation and automatic conduct of a chaos experiment in distributed applications includes a software application having a layer and a chaos configuration, a chaos engine having a chaos orchestrator, a chaos prompt generator having a prompt template composer, and a chaos engineering large language model. The chaos engineering large language model is configured to recommend chaos experiments for the chaos engine to process and to inject into the software application. The chaos engineering large language model is also configured to patch the software application in accordance with objectives and parameters developed in the system and method. The system and method may be automated through a trigger. The trigger may be the chaos engineering large language model recommending one or more chaos experiments to the chaos engine. The trigger may also be the implementation of one or more patches to the software application.

Abstract: A system and method for securing an enterprise's software supply chain includes an enterprise, a build artifact, and a metadata extractor. The metadata extractor is configured to extract metadata from the build artifact and send the metadata to an enhanced software bill of materials generator. The enhanced software bill of materials generator may generate a software bill of materials based on the metadata. A know your system large language model (“KYS LLM”) is also provided. The KYS LLM is configured to be trained by the metadata and to receive a query from an actor. An enterprise blockchain is provided and may receive the metadata and a query. The enterprise blockchain may include an application programming interface configured to initiate a download of dependencies from the enterprise blockchain. A pipeline may be provided to receive the download of the dependencies from enterprise blockchain and deploy information from the download.

Abstract: A system and method for defense in depth, which employs a feedforward orchestrator, of at least one software delivery pipeline includes a security context and the feedforward orchestrator being configured to analyze the security context for each stage of the software delivery pipeline to mitigate security vulnerabilities. The system and method also implement security controls with at least one feedforward technique. Also, the feedforward orchestrator continuously employs feedback of the system to inform subsequent stages or subsequent layers of integration and deployment functions of the at least one software delivery pipeline.

Abstract: A system and method for continuous automated threat modeling which is based on prompt engineering using large language models includes a threat modeling engine, a threat prompt generator, and a continuous automation module configured to retrieve a threat prompt from the threat prompt generator and to perform a security assessment of the threat prompt on a continuous, automatic basis. In addition, the system and method each include integration with a large language model for generating threat models and mitigations pertaining to those threat models.

Abstract: A system and method for generating security and compliance-aware software delivery pipelines includes a dashboard for configuring and inputting an application profile and an application context. In addition, the system and method each include an application profiler captures, discovers, and stores one or more attributes of an application, along with a pipeline generator that receives information from the dashboard to ultimately generate at least one software delivery pipeline outfitted with security policies and compliance-aware guidelines.

Abstract: A system and method for continuously improving the cybersecurity rating of a firm includes a feed processor configured to parse at least one cybersecurity report and to feed for building an instance graph. The system may identify, measure, and monitor portfolio dimensions of public-facing digital artifacts. In addition, the system and method may each include the instance graph being compared by a correlation engine with a reference graph to generate automated or semi-automated remediation recommendations that may lead to continuous improvement of a cybersecurity rating for an organization or firm.

Abstract: A method for updating an application executing on a virtual machine includes replicating the virtual machine to produce a replica, applying an update to the replica that is scheduled to be made to the virtual machine, in parallel with the applying, updating one of the virtual machine and the replica so that a state of the virtual machine matches a state of the replica, and continuing execution of the application on one of the virtual machine and the replica.

Abstract: Threat intelligence management is provided in a security and compliance environment. A threat explorer platform or module of a security and compliance service may detect, investigate, manage, and provide actionable insights for threats at an organizational level. Working with a data insights platform that collects different types of signals (metadata, documents, activities, etc.) and correlates in a multi-stage evaluation, the threat intelligence module may provide actionable visual information on potential threats, affected areas, and actionable insights derived from internal threat data and external information using contextual correlation of data within the data insight platform. User experience may be dynamically adjusted at multiple levels based on context and allow users to drill down arbitrarily deep.

Abstract: A method for updating an application executing on a virtual machine includes replicating the virtual machine to produce a replica, applying an update to the replica that is scheduled to be made to the virtual machine, in parallel with the applying, updating one of the virtual machine and the replica so that a state of the virtual machine matches a state of the replica, and continuing execution of the application on one of the virtual machine and the replica.

Abstract: A method for updating an application executing on a virtual machine includes replicating the virtual machine to produce a replica, applying an update to the replica that is scheduled to be made to the virtual machine, in parallel with the applying, updating one of the virtual machine and the replica so that a state of the virtual machine matches a state of the replica, and continuing execution of the application on one of the virtual machine and the replica.

Abstract: Threat intelligence management is provided in a security and compliance environment. A threat explorer platform or module of a security and compliance service may detect, investigate, manage, and provide actionable insights for threats at an organizational level. Working with a data insights platform that collects different types of signals (metadata, documents, activities, etc.) and correlates in a multi-stage evaluation, the threat intelligence module may provide actionable visual information on potential threats, affected areas, and actionable insights derived from internal threat data and external information using contextual correlation of data within the data insight platform. User experience may be dynamically adjusted at multiple levels based on context and allow users to drill down arbitrarily deep.

Abstract: Methods, systems, and articles of manufacture for injecting faults at select execution points of distributed applications are provided herein. A method includes monitoring a run-time state of each of multiple components of a distributed application to determine one or more sequence of events that triggers a fault injection point at one of the multiple components; defining a fault injection scenario in a specification based on said monitoring, wherein said fault injection scenario comprises a description of one or more sequence of events during which an intended fault is to be injected to a target component of the multiple components at one selected event; and executing the fault injection defined in the specification to perform injection of the intended fault during run-time of the distributed application.

Abstract: A method for updating an application executing on a virtual machine includes replicating the virtual machine to produce a replica, applying an update to the replica that is scheduled to be made to the virtual machine, in parallel with the applying, updating one of the virtual machine and the replica so that a state of the virtual machine matches a state of the replica, and continuing execution of the application on one of the virtual machine and the replica.

Abstract: Methods, systems, and articles of manufacture for injecting faults at select execution points of distributed applications are provided herein. A method includes monitoring a run-time state of each of multiple components of a distributed application to determine one or more sequence of events that triggers a fault injection point at one of the multiple components; defining a fault injection scenario in a specification based on said monitoring, wherein said fault injection scenario comprises a description of one or more sequence of events during which an intended fault is to be injected to a target component of the multiple components at one selected event; and executing the fault injection defined in the specification to perform injection of the intended fault during run-time of the distributed application.

Abstract: A method, an apparatus and an article of manufacture for automated validation of compliance in a cloud server. The method includes remotely accessing a target cloud server to discover at least one configuration setting of the target cloud server, integrating the at least one configuration setting from the target cloud server with information from at least one back-end tool to produce compliance evidence, and automatically answering a set of at least one checklist question for activation compliance validation of the target cloud server based on the compliance evidence.