Abstract

Conventional software validation methods can be static and periodic, which may present challenges for continuously updated platforms (e.g., cloud platforms) in regulated industries and can impede the validation of non-deterministic systems like artificial intelligence models. A system for continuous validation may use a dual-pathway architecture guided by a machine-readable compliance model. One pathway can perform adversarial testing within an isolated digital twin of a production application to discover potential compliance weaknesses. Concurrently, a second pathway can provide real-time observational monitoring of the live production system for policy deviations and anomalies. Findings from both pathways may be consolidated into a persistent, verifiable evidence record, which can provide an ongoing assurance function to help maintain a system's validated state and mitigate compliance risks in dynamic environments.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS