Abstract: Provisioning infrastructure from visual diagrams can include selecting, with a first neural network, regions of interest within an infrastructure architecture diagram that corresponds to an infrastructure offered by an infrastructure provider for supporting a computer application. With a second neural network, infrastructure resources and interconnections among the infrastructure resources can be identified based on objects appearing within the regions of interest. Properties corresponding to the infrastructure resources identified can be determined with a third neural network. With a fourth neural network, an infrastructure architecture specification can be generated, the infrastructure architecture specification specifying the infrastructure resources, corresponding properties of the infrastructure resources, and interconnections among the infrastructure resources. The infrastructure architecture specification can be used to configure networked resources to support the computer application.

Abstract: Provisioning infrastructure from visual diagrams can include selecting, with a first neural network, regions of interest within an infrastructure architecture diagram that corresponds to an infrastructure offered by an infrastructure provider for supporting a computer application. With a second neural network, infrastructure resources and interconnections among the infrastructure resources can be identified based on objects appearing within the regions of interest. Properties corresponding to the infrastructure resources identified can be determined with a third neural network. With a fourth neural network, an infrastructure architecture specification can be generated, the infrastructure architecture specification specifying the infrastructure resources, corresponding properties of the infrastructure resources, and interconnections among the infrastructure resources. The infrastructure architecture specification can be used to configure networked resources to support the computer application.

Abstract: A computer-implemented agent process running on a first computer automatically intercepts a command issued from the first computer to execute on a target computer prior to invocation of the command on the target computer. A server profile built for an application running on the target computer that supports the command may be retrieved. At least based on the server profile a risk enforcement policy is dynamically constructed. Based on the risk enforcement policy, one or more computer-executable enforcement actions to perform prior to sending the command to the target computer for execution is determined. Based on executing of one or more of the computer-executable enforcement actions, the command may be transmitted to execute on the target computer or prevented from executing on the target computer.

Abstract: A computer-implemented agent process running on a first computer automatically intercepts a command issued from the first computer to execute on a target computer prior to invocation of the command on the target computer. A server profile built for an application running on the target computer that supports the command may be retrieved. At least based on the server profile a risk enforcement policy is dynamically constructed. Based on the risk enforcement policy, one or more computer-executable enforcement actions to perform prior to sending the command to the target computer for execution is determined. Based on executing of one or more of the computer-executable enforcement actions, the command may be transmitted to execute on the target computer or prevented from executing on the target computer.

Abstract: A computer-implemented agent process running on a first computer automatically intercepts a command issued from the first computer to execute on a target computer prior to invocation of the command on the target computer. A server profile built for an application running on the target computer that supports the command may be retrieved. At least based on the server profile a risk enforcement policy is dynamically constructed. Based on the risk enforcement policy, one or more computer-executable enforcement actions to perform prior to sending the command to the target computer for execution is determined. Based on executing of one or more of the computer-executable enforcement actions, the command may be transmitted to execute on the target computer or prevented from executing on the target computer.