Abstract: Systems and methods for application development include predicting a probable set of risks (e.g., security risks, financial risks, legal risks etc.) and risk mitigations for software development or deployment risk management. The system records user activity with respect to assigning risks and risk mitigations to application components. The system utilizes user inputs and characteristics of the modelled application as well as the user inputs and characteristics associated with past development and deployment of similar applications in order to predict a probable set of risks and/or risk mitigation actions.

Abstract: To facilitate distinguishing between topics which belong to the same or similar semantic fields, previously-known domain information is modeled with a bipartite graph. The bipartite graph created for the software security domain indicates a set of risks and a set of mitigation actions. A topic categorization system utilizes the bipartite graph to identify which risks and mitigation actions were discussed in a conversation by first using existing NLP techniques to extract relevant topics from conversation text and subsequently mapping the topics to the bipartite graph. A security assessment report identifying potential security threats and corresponding mitigation actions is generated based on the resulting mappings. Conversation fragments which were extracted and mapped are included in the assessment report.

Abstract: Techniques are disclosed herein for implementing risk-adaptive system development. A model generator generates a displayed system model comprising displayed system components. A cycle generator determines a risk management cycle comprising a multiple risk management phases. The cycle generator generates a displayed risk management interface which includes multiple displayed risk management phases that are selected and sequenced within the displayed risk management interface based, at least in part, on the determined risk management cycle. The cycle generator further generates component objects that each correspond to a respective one within a set of the system components that have been selected for risk analysis. A display device displays each of the component objects within a respective one of the displayed risk management phases.

Abstract: A method includes performing by a processor of a server: receiving a requirement description of a service for a software application, generating a migration graph that comprises vertices representing candidate service providers for the service, respectively, identifying migration capability information between the vertices of the migration graph by connecting a portion of the vertices with edges, generating a centrality metric for each of the vertices of the migration graph based on the migration capability information and a number of edges terminating at the respective vertex, grading the candidate service providers based on one of the migration capability information and the centrality metric, and deploying the service using one of the candidate service providers responsive to grading the candidate service providers receiving an architecture description for a software application that identifies a plurality of generic services, receiving a requirement description for the software application that comprises

Abstract: A method includes performing operations as follows on a processor: receiving a description of a plurality of products, each product in the plurality of products having a local geographic feature that is configurable in one of a plurality of geographic configurations, receiving a description of priorities associated with the plurality of products, generating a risk based on the priorities, generating a risk mitigating treatment based on the risk, generating, for each of the plurality of products, a plurality of product localization scores corresponding to the plurality of geographic configurations, respectively, each of the plurality of product localization scores indicating a relative amount of the risk mitigated by the risk mitigating treatment with the local geographic feature having the respective geographic configuration, generating a plurality of global localization scores based on the plurality of product localization scores, each of the plurality of global localization scores corresponding to the plura

Abstract: Determining potential harm associated with a network endpoint external to an enterprise includes receiving information about a network-based communication by a resource of the enterprise directed to the network endpoint external to the enterprise, and calculating a plurality of individual scores related to a risk associated with the network-based communication, wherein each individual score corresponds to a different category of risk. The determination also includes receiving data specifying a policy related to rules defined by the enterprise regarding usage of cloud services; calculating a composite risk score related to the network-based communication, wherein the composite risk score is based on the individual scores and the policy; and notifying an entity of the enterprise about the composite risk score.

Abstract: Determining potential harm associated with a network endpoint external to an enterprise includes receiving information about a network-based communication by a resource of the enterprise directed to the network endpoint external to the enterprise, and calculating a plurality of individual scores related to a risk associated with the network-based communication, wherein each individual score corresponds to a different category of risk. The determination also includes receiving data specifying a policy related to rules defined by the enterprise regarding usage of cloud services; calculating a composite risk score related to the network-based communication, wherein the composite risk score is based on the individual scores and the policy; and notifying an entity of the enterprise about the composite risk score.

Abstract: A method includes performing operations as follows on a processor: receiving an architecture description for a software application that identifies a plurality of generic services, receiving a requirement description for the software application that comprises respective values for a plurality of priority parameters for the software application, and generating a proposal that, for each of the plurality of generic services, identifies a specific cloud service for the respective generic service based on the requirement description.

Abstract: Managing cloud service usage includes receiving an identity of a potential cloud service provider utilized by an entity of the enterprise, wherein the identity of the potential cloud service provider is based on network traffic information of the enterprise. Management also includes receiving additional information related to the potential cloud service provider, wherein the additional information is in addition to the network traffic information; and analyzing the identity of the potential cloud service provider and the additional information. Also, based on the analysis, a list of cloud service providers utilized by the enterprise is revised.

Abstract: A method includes performing operations as follows on a processor: receiving an architecture description for a software application that identifies a plurality of generic services, receiving a requirement description for the software application that comprises respective values for a plurality of priority parameters for the software application, and generating a proposal that, for each of the plurality of generic services, identifies a specific cloud service for the respective generic service based on the requirement description.