Office Action 1: Notice of Allowance (2024-09-12)

CLAIMS:
CLAIMS

What is claimed is:

1\. A method for providing third party compliance to computing environments without providing access thereto, comprising:generating a representation of the computing environment, the computing environment including a plurality of identities;
generating a software inventory of the computing environment utilizing a cybersecurity inspection technique;
determining compliance of the computing environment based on the representation and the software inventory; and
providing the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.

2\. The method of claim 1, further comprising:determining compliance continuously.

3\. The method of claim 1, further comprising:executing a database query on any one of: the representation of the computing environment, the software inventory, and a combination thereof;

4\. The method of claim 3, further comprising:receiving the query from the third party.

5\. The method of claim 3, further comprising:receiving a natural language query; and
generating the database query based on the natural language query.

6\. The method of claim 5, further comprising:

generating the database query further based on a large language model (LLM), the LLM trained on any one of: the security database, the software inventory, and a combination thereof.

7\. The method of claim 3, further comprising:generating an alert in response to determining that the executed query returns a predetermined result.

8\. The method of claim 7, further comprising:generating a notification of compliance in response to determining that the executed query returns a second predetermined result.

9\. The method of claim 1, further comprising:initiating inspection for each of a plurality of workloads in the computing environment.

10\. The method of claim 9, further comprising:inspecting a first workload of the plurality of workloads for any one of: a cybersecurity object, a cybersecurity threat, a software component, a software application, a software metadata, and a combination thereof.

11\. The method of claim 10, further comprising:generating a software bill of materials based on inspecting the first workload.

12\. The method of claim 1, further comprising:further determining compliance based on a predefined service level agreement (SLA).

13\. The method of claim 12, wherein the SLA includes a metric value.

14\. The method of claim 13, further comprising:

generating a cloud metric value based on the representation and the inventory;
and further determining compliance by comparing the generated cloud metric value to the SLA metric value.

15\. A non-transitory computer-readable medium storing a set of instructions for providing third party compliance to computing environments without providing access thereto, the set of instructions comprising:one or more instructions that, when executed by one or more processors of a device, cause the device to:
generate a representation of the computing environment, the computing environment including a plurality of identities;
generate a software inventory of the computing environment utilizing a cybersecurity inspection technique;
determine compliance of the computing environment based on the representation and the software inventory; and
provide the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.

16\. A system for providing third party compliance to computing environments without providing access thereto comprising:a processing circuitry;
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
generate a representation of the computing environment, the computing environment including a plurality of identities;
generate a software inventory of the computing environment utilizing a cybersecurity inspection technique;
determine compliance of the computing environment based on the representation and the software inventory; and

provide the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.

17\. The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:determine compliance continuously.

18\. The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:execute a database query on any one of:
the representation of the computing environment, the software inventory, and a combination thereof.

19\. The system of claim 18, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:receive the query from the third party.

20\. The system of claim 18, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:receive a natural language query; and
generate the database query based on the natural language query.

21\. The system of claim 20, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:generate the database query further based on a large language model (LLM), the LLM trained on any one of:
the security database, the software inventory, and a combination thereof.

22\. The system of claim 18, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

generate an alert in response to determining that the executed query returns a predetermined result.

23\. The system of claim 22, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:generate a notification of compliance in response to determining that the executed query returns a second predetermined result.

24\. The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:initiate inspection for each of a plurality of workloads in the computing environment.

25\. The system of claim 24, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:inspect a first workload of the plurality of workloads for any one of:
a cybersecurity object, a cybersecurity threat, a software component, a software application, a software metadata, and a combination thereof.

26\. The system of claim 25, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:generate a software bill of materials based on inspecting the first workload.

27\. The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:further determine compliance based on a predefined service level agreement (SLA).

28\. The system of claim 27, wherein the SLA includes a metric value.

29\. The system of claim 28, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:generate a cloud metric value based on the representation and the inventory; and further determine compliance by comparing the generated cloud metric value to the SLA metric value.

OFFICE ACTION:
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
DETAILED ACTION
This is in response to original filing of 12/27/2023.  Claims 1-29 are pending and have been considered below.
Priority
18397544 filed 12/27/2023 claims priority from provisional application 63592752, filed 10/24/2023.
Drawings
The drawings filed on 12/27/2023 are accepted.
Specification
The specification filed  on 12/27/2023 is accepted.
Information Disclosure Statement
The information disclosure statement (IDS) submitted 12/27/2023 is in compliance with the provisions of 37 CFR 1.97.  Accordingly, the information disclosure statement is being considered by the examiner.
Status of Claims
Claims 1, 4-6, 8, 15-16, 19-21 and 23 have been amended.  Claims 3, 7, 18 and 22 have been cancelled.  Claims 1-2, 4-6, 8-17, 19-21 and 23-29 are pending and have been considered below.
Allowable Subject Matter
Claims 1-2, 4-6, 8-17, 19-21 and 23-29 are allowed.
EXAMINER’S AMENDMENT
An examiner’s amendment to the record appears below. Should the changes and/or additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee.
Authorization for this examiner’s amendment was given in a telephone interview with Mr. Michael Ben-Shimon, Reg. No. 69610 on 09/03/2024.
PLEASE AMEND THE CLAIMS AS FOLLOWS:
1.	(Currently Amended)	A method for providing third party compliance to computing environments without providing access thereto, comprising:
generating a representation of the computing environment, the computing environment including a plurality of identities;
generating a software inventory of the computing environment utilizing a cybersecurity inspection technique;
executing a database query on any one of: the representation of the computing environment, the software inventory, and a combination thereof;
generating an alert in response to determining that the executed query returns a predetermined result;
determining compliance of the computing environment based on the representation, [[and]] the software inventory, and the predetermined result; and
providing the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.
2.	(Original)	The method of claim 1, further comprising:
determining compliance continuously.
3.	(Canceled)
4.	(Currently Amended)	The method of claim [[3]]1, further comprising:
receiving the query from the third party.
5.	(Currently Amended)	The method of claim [[3]]1, further comprising:
receiving a natural language query; and
generating the database query based on the natural language query.
6.	(Currently Amended)	The method of claim 5, further comprising:
generating the database query further based on a large language model (LLM), the LLM trained on any one of: [[the]] a security database in which the representation is stored, the software inventory, and a combination thereof.
7.	(Canceled)
8.	(Currently Amended)	The method of claim [[7]]1, further comprising:
generating a notification of compliance in response to determining that the executed query returns a second predetermined result.
9.	(Original)	The method of claim 1, further comprising:
initiating inspection for each of a plurality of workloads in the computing environment.
10.	(Original)	The method of claim 9, further comprising:
inspecting a first workload of the plurality of workloads for any one of: a cybersecurity object, a cybersecurity threat, a software component, a software application, a software metadata, and a combination thereof.
11.	(Original)	The method of claim 10, further comprising:
generating a software bill of materials based on inspecting the first workload.
12.	(Original)	The method of claim 1, further comprising:
further determining compliance based on a predefined service level agreement (SLA).
13.	(Original)	The method of claim 12, wherein the SLA includes a metric value.
14.	(Original)	The method of claim 13, further comprising:
generating a cloud metric value based on the representation and the inventory; and
further determining compliance by comparing the generated cloud metric value to the SLA metric value.
15.	(Currently Amended)	A non-transitory computer-readable medium storing a set of instructions for providing third party compliance to computing environments without providing access thereto, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
generate a representation of the computing environment, the computing environment including a plurality of identities;
generate a software inventory of the computing environment utilizing a cybersecurity inspection technique;
execute a database query on any one of: the representation of the computing environment, the software inventory, and a combination thereof;
generate an alert in response to determining that the executed query returns a predetermined result;
determine compliance of the computing environment based on the representation, [[and]] the software inventory, and the predetermined result; and
provide the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.
16.	(Currently Amended)	A system for providing third party compliance to computing environments without providing access thereto comprising:
a processing circuitry;
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
generate a representation of the computing environment, the computing environment including a plurality of identities;
generate a software inventory of the computing environment utilizing a cybersecurity inspection technique;
execute a database query on any one of: the representation of the computing environment, the software inventory, and a combination thereof;
generate an alert in response to determining that the executed query returns a predetermined result;
determine compliance of the computing environment based on the representation, [[and]] the software inventory, and the predetermined result; and
provide the determined compliance to a third party, wherein the third party is not associated with the plurality of identities.
17.	(Original)	The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine compliance continuously.
18.	(Canceled)
19.	(Currently Amended)	The system of claim [[18]]16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
receive the query from the third party.
20.	(Currently Amended)	The system of claim [[18]]16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
receive a natural language query; and
generate the database query based on the natural language query.
21.	(Currently Amended)	The system of claim 20, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate the database query further based on a large language model (LLM), the LLM trained on any one of:
[[the]] a security database in which the representation is stored, the software inventory, and a combination thereof.
22.	(Canceled)
23.	(Currently Amended)	The system of claim [[22]]16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a notification of compliance in response to determining that the executed query returns a second predetermined result.
24.	(Original)	The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
initiate inspection for each of a plurality of workloads in the computing environment.
25.	(Original)	The system of claim 24, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
inspect a first workload of the plurality of workloads for any one of:
a cybersecurity object, a cybersecurity threat, a software component, a software application, a software metadata, and a combination thereof.
26.	(Original)	The system of claim 25, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a software bill of materials based on inspecting the first workload.
27.	(Original)	The system of claim 16, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
further determine compliance based on a predefined service level agreement (SLA).
28.	(Original)	The system of claim 27, wherein the SLA includes a metric value.
29.	(Original)	The system of claim 28, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a cloud metric value based on the representation and the inventory; and
further determine compliance by comparing the generated cloud metric value to the SLA metric value.
Examiner's Statement of Reasons for Allowance
The following is a statement of reasons for the indication of allowable subject matter:
Regarding Claims 1, 15 and 16:
The Ferris et al. U.S. 9,971,880 B2 is directed toward a monitoring system can monitor computing processes in clouds. The monitoring system can verify software license compliance in the computing processes instantiated in the clouds. The monitoring system can generate and maintain a software license knowledge base. The software license knowledge base can include the software license requirements for various software programs. To verify software license compliance, the monitoring system can determine the software programs utilized by the computing processes instantiated in the clouds. The monitoring system can compare the software programs utilized by the computing processes to the software license knowledge base to determine the number of software licenses required by the computing processes. The monitoring system can compare the number of software licenses required to the number of software licenses currently held by the user to determine if the user is in compliance.
The Dimmier et al U.S. 2024/0195838 A1 teaches system has a processing resource operably intercoupled with a memory resource to instantiate an instance of software. The processing resource receives first information identifying an organization as input and second information identifying an information security standard as input, inquires a data store with the first information to retrieve a set of third-party software licensed and deployed by the organization and generates a set of structured data representations. The processing resource provides an output asserting the organization fully complying with the information security standard when each software configuration of each respective attribute of a data object is satisfied by the structured data representation...
The Rajagopalan et al US 20200228415 A1 is directed toward systems and methods are provided for multilayered compliance management for cloud environments. In some embodiments, the method includes providing, in a domain of a customer, an environment operations layer, the environment operations layer controlling a plurality of sensors and actuators within a cloud environment of the customer; providing a controls layer, the controls layer comprising a plurality of controls to control the sensors and actuators in accordance with one or more compliance rules; and providing a user interface in a domain outside the domain of the customer, the user interface comprising a plurality of management tools to manage the controls.
The Gorman et al US 2021/0141924 A1 is directed toward According to some embodiments, an enterprise proprietary data store contains a set of electronic data records, each electronic data record having with proprietary data and an associated governance structure. A compliance computer platform may receive the proprietary data and associated governance structure from the enterprise proprietary data store and define enterprise-wide decision accountabilities for the proprietary data based on the governance structure. The compliance computer platform may also define privacy objectives for the proprietary data based on the governance structure along with specific machine-level controls to test and confirm compliance with the governance structure.
The prior art of record either alone or in combination fails to teach the independent claims as amended such as wherein “generating a software inventory of the computing environment utilizing a cybersecurity inspection technique; executing a database query on any one of: the representation of the computing environment, the software inventory, and a combination thereof; generating an alert in response to determining that the executed query returns a predetermined result; determining compliance of the computing environment based on the representation, the software inventory, and the predetermined result; and providing the determined compliance to a third party, wherein the third party is not associated with the plurality of identities” in combination with the other limitations.
The above prior art references of record does not teach or render obvious the limitations as recited in amended independent claims 1, 15 and 16 as presented.
Regarding claims 2, 4-6, 8-14, 17, 19-21 and 23-29, the claims are allowable based at least on their depending from an allowable claim.
Conclusion



CITED REFERENCE SUMMARIES: Ref US9971880B2: Claims:
A method comprising: identifying, by a processing device, a request to instantiate a plurality of virtual machines in a cloud computing environment; instantiating, by the processing device, the plurality of virtual machines in the cloud computing environment in view of the identified request; monitoring, by the processing device, an execution of the plurality of virtual machines for a determined time period in accordance with the identified request; aggregating, by the processing device, a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution; spawning, by the processing device, a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application; receiving, by the processing device, utilization data associated with the cloud computing environment; determining, by the processing device in view of the utilization data, that the number of instances of the software utilized in the cloud computing environment does not comply with a software license subscription associated with the virtual machine; determining, by the processing device, whether the spawned computing application is utilizing the software via the virtual machine in compliance with the software license subscription in view of the utilization data; determining, by the processing device, that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment; and terminating, by the processing device, the spawned computing application utilizing the newly created instance of the software in view of the determination that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment.
identifying, by a processing device, a request to instantiate a plurality of virtual machines in a cloud computing environment;
instantiating, by the processing device, the plurality of virtual machines in the cloud computing environment in view of the identified request;
monitoring, by the processing device, an execution of the plurality of virtual machines for a determined time period in accordance with the identified request;
aggregating, by the processing device, a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution;
spawning, by the processing device, a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application;
receiving, by the processing device, utilization data associated with the cloud computing environment;
determining, by the processing device in view of the utilization data, that the number of instances of the software utilized in the cloud computing environment does not comply with a software license subscription associated with the virtual machine;
determining, by the processing device, whether the spawned computing application is utilizing the software via the virtual machine in compliance with the software license subscription in view of the utilization data;
determining, by the processing device, that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment; and
terminating, by the processing device, the spawned computing application utilizing the newly created instance of the software in view of the determination that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment.
The method of claim 1 , further comprising: receiving access information for the cloud computing environment; and identifying, in view of the access information, the software utilized by at least one computing process supported by the cloud computing environment and associated with a user of the virtual machine.
receiving access information for the cloud computing environment; and
identifying, in view of the access information, the software utilized by at least one computing process supported by the cloud computing environment and associated with a user of the virtual machine.
The method of claim 1 , further comprising: maintaining a knowledge base of available software and license requirements of the available software; and searching the knowledge base to identify the first number of software licenses to be used.
maintaining a knowledge base of available software and license requirements of the available software; and
searching the knowledge base to identify the first number of software licenses to be used.
The method of claim 2 , the method further comprising purchasing additional software licenses for the software utilized by the at least one computing process in view of the determination that the number of instances of the software does not comply with the software license requirement.
The method of claim 2 , the method further comprising receiving an indication of a second number of software licenses held by the user.
The method of claim 1 , wherein the computing process comprises at least one of a virtual machine, a software appliance, or a software program.
A non-transitory computer readable storage medium having instructions that, when executed by a processing device, cause the processing device to perform operations, comprising: identifying a request to instantiate a plurality of virtual machines in a cloud computing environment; instantiating the plurality of virtual machines in the cloud computing environment in view of the identified request; monitoring an execution of the plurality of virtual machines for a determined time period in accordance with the identified request; aggregating a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution; spawning a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application; receiving utilization data associated with the cloud computing environment; determining, by the processing device in view of the utilization data, that the number of instances of the software utilized in the cloud computing environment does not comply with a software license subscription associated with the virtual machine; determining, by the processing device, whether the spawned computing application is utilizing the software via the virtual machine in compliance with the software license subscription in view of the utilization data; determining, by the processing device, that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment; and terminating, by the processing device, the spawned computing application utilizing the newly created instance of the software in view of the determination that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment.
identifying a request to instantiate a plurality of virtual machines in a cloud computing environment;
instantiating the plurality of virtual machines in the cloud computing environment in view of the identified request;
monitoring an execution of the plurality of virtual machines for a determined time period in accordance with the identified request;
aggregating a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution;
spawning a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application;
receiving utilization data associated with the cloud computing environment;
The non-transitory computer readable storage medium of claim 7 , wherein the processing device is further to: receive access information for the cloud computing environment; and identify, in view of the access information, the software utilized by at least one of the computing process supported by the cloud computing environment and associated with a user of the virtual machine.
receive access information for the cloud computing environment; and
identify, in view of the access information, the software utilized by at least one of the computing process supported by the cloud computing environment and associated with a user of the virtual machine.
The non-transitory computer readable storage medium of claim 7 , wherein the processing device is further to: maintain a knowledge base of available software and license requirements of the available software; and search the knowledge base to identify the first number of software licenses used.
maintain a knowledge base of available software and license requirements of the available software; and
search the knowledge base to identify the first number of software licenses used.
The non-transitory computer readable storage medium of claim 8 , wherein the processing device is further to purchase additional software licenses for the software utilized by the at least one computing process in view of the determination that the number of instances of the software does not comply with the software license requirement.
The non-transitory computer readable storage medium of claim 8 , wherein the processing device is further to receive an indication of a second number of software licenses held by the user.
The non-transitory computer readable storage medium of claim 7 , wherein the computing process comprises at least one of a virtual machine, a software appliance, or a software program.
A system comprising: a processing device; and a memory device coupled to the processing device, the memory device storing instructions that, when executed by the processing device, cause the processing device to perform operations, comprising: identifying a request to instantiate a plurality of virtual machines in a cloud computing environment; instantiating the plurality of virtual machines in the cloud computing environment in view of the identified request; monitoring an execution of the plurality of virtual machines for a determined time period in accordance with the identified request; aggregating a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution; spawning a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application; receiving utilization data associated with the cloud computing environment; determining, by the processing device in view of the utilization data, that the number of instances of the software utilized in the cloud computing environment does not comply with a software license subscription associated with the virtual machine; determining, by the processing device, whether the spawned computing application is utilizing the software via the virtual machine in compliance with the software license subscription in view of the utilization data; determining, by the processing device, that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment; and terminating, by the processing device, the spawned computing application utilizing the newly created instance of the software in view of the determination that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment.
a processing device; and
a memory device coupled to the processing device, the memory device storing instructions that, when executed by the processing device, cause the processing device to perform operations, comprising: identifying a request to instantiate a plurality of virtual machines in a cloud computing environment; instantiating the plurality of virtual machines in the cloud computing environment in view of the identified request; monitoring an execution of the plurality of virtual machines for a determined time period in accordance with the identified request; aggregating a number of instances of software utilized by a plurality of computing processes in the cloud computing environment in view of the monitored execution; spawning a computing application using a computing process of a virtual machine of the plurality of virtual machines, wherein the spawning comprises generating, by the processing device, a newly created instance of the software utilized by the spawned computing application; receiving utilization data associated with the cloud computing environment; determining, by the processing device in view of the utilization data, that the number of instances of the software utilized in the cloud computing environment does not comply with a software license subscription associated with the virtual machine; determining, by the processing device, whether the spawned computing application is utilizing the software via the virtual machine in compliance with the software license subscription in view of the utilization data; determining, by the processing device, that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment; and terminating, by the processing device, the spawned computing application utilizing the newly created instance of the software in view of the determination that the number of instances of the software utilized by the cloud computing environment does not comply with the software license subscription allocated to the cloud computing environment.
The system of claim 13 , wherein, to identify the software utilized by the computing process, the processing device is to: receive access information for the cloud computing environment; and identify, in view of the access information, the software utilized by at least one computing process supported by the cloud computing environment and associated with a user of the virtual machine.
identify, in view of the access information, the software utilized by at least one computing process supported by the cloud computing environment and associated with a user of the virtual machine.
The system of claim 13 , wherein the processing device is further to: maintain a knowledge base of available software and license requirements of the available software; and search the knowledge base to identify the first number of software licenses to be used.
search the knowledge base to identify the first number of software licenses to be used.
The system of claim 14 , wherein the processing device is further to purchase additional software licenses for the software utilized by the at least one computing process in view of the determination that the number of instances of the software does not comply with the software license requirement.
The system of claim 14 , wherein the processing device is further to receive an indication of the second number of software licenses held by the user.
The system of claim 13 , wherein the computing process comprises at least one of a virtual machine, a software appliance, or a software program.
The method of claim 2 , wherein the identifying comprises identifying a start time and duration of the newly created instance of the software in the cloud computing environment.
The method of claim 1 , further comprising terminating an instantiation of a machine in the cloud computing environment associated with termination of the spawned computing processes.
Ref US20240195838A1: Claims:
A server system comprising: a memory resource; and a processing resource operably intercoupled with the memory resource and configured to instantiate an instance of software configured to: receive, as input, first information identifying an organization; receive, as input, second information identifying an information security standard; query a first data store, with the first information, to retrieve a set of third-party software licensed by and deployed by the organization; generate a set of structured data representations by: for each third-party software of the set of third-party software, query a second data store to retrieve a respective structured data representation of a respective configuration of the respective third-party software as deployed by the organization as of receiving the first information; query a third data store, with the second information, to retrieve a data object comprising attributes corresponding to software configuration requirements imposed by the information security standard; for each respective attribute of the data object, determine whether the respective software configuration requirement imposed by the information security standard is satisfied by at least one structured data representation of the set of structured data representations and: in response to determining that the respective software configuration requirement is not satisfied by any structured data representation of the set of structured data representations, provide a first output asserting that the organization fails to comply with the information security standard; and in response to determining that the respective software configuration requirement is satisfied by at least one structured data representation of the set of structured data representations, provide a second output asserting that the organization at least partially complies with the information security standard; and in response to determining that each software configuration of each respective attribute of the data object is satisfied by at least one structured data representation of the set of structured data representations, provide a third output asserting that the organization fully complies with the information security standard.
a memory resource; and
a processing resource operably intercoupled with the memory resource and configured to instantiate an instance of software configured to: receive, as input, first information identifying an organization; receive, as input, second information identifying an information security standard; query a first data store, with the first information, to retrieve a set of third-party software licensed by and deployed by the organization; generate a set of structured data representations by: for each third-party software of the set of third-party software, query a second data store to retrieve a respective structured data representation of a respective configuration of the respective third-party software as deployed by the organization as of receiving the first information; query a third data store, with the second information, to retrieve a data object comprising attributes corresponding to software configuration requiremen
[Truncated to input limit]