Distributed digital security system
摘要
說明書
As another example, when a new ontological definition 134 for a new context collection interface 138 is defined at the ontology service 110, the compiler 114 can automatically generate configurations 132 for local and cloud instances of the compute engine 102. The configurations 132 can indicate expected data elements according to the new context collection interface 138, such that the compute engine 102 can process any type of event data 122 that is based on any context collection format 136 that includes at least those expected data elements when a corresponding interface fulfillment map 140 exists, even though no new source code has been written for the compute engine 102 that directly indicates how to process each possible type or format of event data 122 that may include those expected data types. Similarly, the bounding service 118 can generate configurations 132 for bounding managers 128 based at least in part on the ontological definition 134 of a new context collection interface 138, such that the bounding manager 128 can also process event data 122 that matches the new context collection interface 138 when a corresponding interface fulfillment map 140 exists. In other examples, when a new ontological definition 134 for a new context collection format 136 is defined at the ontology service 110, new interface fulfillment maps 140 that correspond to the new context collection format 136 and one or more context collection interfaces 138 can be generated and provided to elements of the distributed security system 100. Accordingly, a new context collection interface 138 can be used by both the compute engine 102 and the bounding manager 128 based on a corresponding interface fulfillment map 140, without directly recoding either of the compute engine 102 or the bounding manager 128 or regardless of whether instances of the compute engine 102 and/or the bounding manager 128 execute using different runtimes.
