公开(公告)号：IL295497B2

公开(公告)日：2025-03-01

申请号：IL29549722

申请日：2022-08-09

Applicant: IBM ,  MICHAEL VU LE ,  HANI JAMJOOM ,  IAN MICHAEL MOLLOY

Inventor： MICHAEL VU LE ,  HANI JAMJOOM ,  IAN MICHAEL MOLLOY

IPC: G06F21/57 ,  H04L41/046 ,  H04L41/0894 ,  H04L41/0895 ,  H04L41/40 ,  H04L43/0876

Abstract: Reducing attack surface by selectively collocating applications on host computers is provided. System resources utilized by each application running in a plurality of host computers of a data processing environment are measured. Which applications running in the plurality of host computers that utilize similar system resources are determined. Those applications utilizing similar system resources are collocated on respective host computers.

公开(公告)号：GB2608033A

公开(公告)日：2022-12-21

申请号：GB202212229

申请日：2021-01-18

Applicant: IBM

Inventor： ZHONGSHU GU ,  XIAOKUI SHU ,  HANI JAMJOOM ,  TENGFEI MA

IPC: G06F11/36 ,  G06F9/00 ,  G06N3/10

Abstract: Mechanisms are provided to implement a neural flow attestation engine and perform computer model execution integrity verification based on neural flows. Input data is input to a trained computer model that includes a plurality of layers of neurons. The neural flow attestation engine records, for a set of input data instances in the input data, an output class generated by the trained computer model and a neural flow through the plurality of layers of neurons to thereby generate recorded neural flows. The trained computer model is deployed to a computing platform, and the neural flow attestation engine verifies the execution integrity of the deployed trained computer model based on a runtime neural flow of the deployed trained computer model and the recorded neural flows.

公开(公告)号：IL295497A

公开(公告)日：2022-10-01

申请号：IL29549722

申请日：2022-08-09

Applicant: IBM ,  MICHAEL VU LE ,  HANI JAMJOOM ,  IAN MICHAEL MOLLOY

Inventor： MICHAEL VU LE ,  HANI JAMJOOM ,  IAN MICHAEL MOLLOY

IPC: G06F21/57 ,  H04L41/046 ,  H04L41/0894 ,  H04L41/0895 ,  H04L41/40 ,  H04L43/0876

Abstract: Reducing attack surface by selectively collocating applications on host computers is provided. System resources utilized by each application running in a plurality of host computers of a data processing environment are measured. Which applications running in the plurality of host computers that utilize similar system resources are determined. Those applications utilizing similar system resources are collocated on respective host computers.