Build AI you can trust with responsible ML

As AI reaches critical momentum across industries and applications, it becomes essential to ensure the safe and responsible use of AI. AI deployments are increasingly impacted by the lack of customer trust in the transparency, accountability, and fairness of these solutions. Microsoft is committed to the advancement of AI and machine learning (ML), driven by principles that put people first, and tools to enable this in practice.

In collaboration with the Aether Committee and its working groups, we are bringing the latest research in responsible AI to Azure. Let’s look at how the new responsible ML capabilities in Azure Machine Learning and our open-source toolkits empower data scientists and developers to understand ML models, protect people and their data, and control the end-to-end ML process.

Understand

As ML becomes deeply integrated into our daily business processes, transparency is critical. Azure Machine Learning helps you to not only understand model behavior but also assess and mitigate unfairness.

Interpret and explain model behavior

Model interpretability capabilities in Azure Machine Learning, powered by the InterpretML toolkit, enable developers and data scientists to understand model behavior and provide model explanations to business stakeholders and customers.

Use model interpretability to:

Build accurate ML models.
Understand the behavior of a wide variety of models, including deep neural networks, during both training and inferencing phases.
Perform what-if analysis to determine the impact on model predictions when feature values are changed.

"Azure Machine Learning helps us build AI responsibly and build trust with our customers. Using the interpretability capabilities in the fraud detection efforts for our loyalty program, we are able to understand models better, identify genuine cases of fraud, and reduce the possibility of erroneous results." 
—Daniel Engberg, Head of Data Analytics and Artificial Intelligence, Scandinavian Airlines

Assess and mitigate model unfairness

A challenge with building AI systems today is the inability to prioritize fairness. Using Fairlearn with Azure Machine Learning, developers and data scientists can leverage specialized algorithms to ensure fairer outcomes for everyone.

Use fairness capabilities to:

Assess model fairness during both model training and deployment.
Mitigate unfairness while optimizing model performance.
Use interactive visualizations to compare a set of recommended models that mitigate unfairness.

“Azure Machine Learning and its Fairlearn capabilities offer advanced fairness and explainability that have helped us deploy trustworthy AI solutions for our customers, while enabling stakeholder confidence and regulatory compliance.”  —Alex Mohelsky, EY Canada Partner and Advisory Data, Analytic and AI Leader

Protect

ML is increasingly used in scenarios that involve sensitive information like medical patient or census data. Current practices, such as redacting or masking data, can be limiting for ML. To address this issue, differential privacy and confidential machine learning techniques can be used to help organizations build solutions while maintaining data privacy and confidentiality.

Prevent data exposure with differential privacy

Using the new WhiteNoise differential privacy toolkit with Azure Machine Learning, data science teams can build ML solutions that preserve privacy and help prevent reidentification of an individual’s data. These differential privacy techniques have been developed in collaboration with researchers at Harvard’s Institute for Quantitative Social Science (IQSS) and School of Engineering.

Differential privacy protects sensitive data by:

Injecting statistical noise in data, to help prevent disclosure of private information, without significant accuracy loss.
Managing exposure risk by tracking the information budget used by individual queries and limiting further queries as appropriate.

Safeguard data with confidential machine learning

In addition to data privacy, organizations are looking to ensure security and confidentiality of all ML assets.

To enable secure model training and deployment, Azure Machine Learning provides a strong set of data and networking protection capabilities. These include support for Azure Virtual Networks, private links to connect to ML workspaces, dedicated compute hosts, and customer managed keys for encryption in transit and at rest.

Building on this secure foundation, Azure Machine Learning also enables data science teams at Microsoft to build models over confidential data in a secure environment, without being able to see the data. All ML assets are kept confidential during this process. This approach is fully compatible with open source ML frameworks and a wide range of hardware options. We are excited to bring these confidential machine learning capabilities to all developers and data scientists later this year.

Control

To build responsibly, the ML development process should be repeatable, reliable, and hold stakeholders accountable. Azure Machine Learning enables decision makers, auditors, and everyone in the ML lifecycle to support a responsible process.

Track ML assets using audit trail

Azure Machine Learning provides capabilities to automatically track lineage and maintain an audit trail of ML assets. Details—such as run history, training environment, and data and model explanations—are all captured in a central registry, allowing organizations to meet various audit requirements.

Increase accountability with model datasheets

Datasheets provide a standardized way to document ML information such as motivations, intended uses, and more. At Microsoft, we led research on datasheets, to provide transparency to data scientists, auditors and decision makers. We are also working with the Partnership on AI and leaders across industry, academia, and government to develop recommended practices and a process called ABOUT ML. The custom tags capability in Azure Machine Learning can be used to implement datasheets today and over time we will release additional features.

Start innovating responsibly

In addition to the new capabilities in Azure Machine Learning and our open-source tools, we have also developed principles for the responsible use of AI. The new responsible ML innovations and resources are designed to help developers and data scientists build more reliable, fairer, and trustworthy ML. Join us today and begin your journey with responsible ML!

Additional resources

Learn more about responsible ML.
Get started with a free trial of Azure Machine Learning.
Learn more about Azure Machine Learning and follow the quick start guides and tutorials.

Quelle: Azure

Developer Velocity: Empowering developers to fuel business performance

Developers have been drivers of innovation and transformation for decades. They have pioneered innovation across countless industries and helped businesses weather tough conditions. Now, we are living in unprecedented times where organizations in every industry and sector are working to adjust to a new normal, rethinking how business is done and meeting new, changing customer demands.

Because technology underpins everything from how businesses run to the products and services you sell, organizations must learn to excel at developing software. Business leaders need to empower developers to unlock productivity and innovation, in what the industry has started referring to as Developer Velocity.

Developer Velocity isn’t just about increasing the speed of delivery, but about unleashing developer ingenuity—turning developers’ ideas into software that supports the needs of your customers, and the goals of your business.

McKinsey & Company recently conducted a comprehensive review of what it takes for a company to become a technology company (have tech intensity) and converged on a single holistic metric—Developer Velocity Index (DVI). They shared their findings and key insights in their recent Developer Velocity: How software excellence fuels business performance report.

The report concluded that driving business performance from software development comes down to creating the right environment and removing points of friction for developers to innovate. Organizations that recognize this outpace revenue growth up to five times that of their competitors. They also have 60 percent higher total shareholder returns and 20 percent higher operating margins and perform better on customer satisfaction and brand perception.  

Helping every organization increase Developer Velocity

How do you increase Developer Velocity for your organization? Developer Velocity involves focusing on critical enablers and minimizing barriers to developer productivity. Microsoft understands the core enablers as we’ve been building software and tools to support the unique needs of developers for decades. Microsoft’s comprehensive developer toolchain and platforms are designed to help modern developers and development teams. The more you enable developers to build productively, collaborate globally and securely, and scale what they invent, the better business outcomes you’ll see in areas including financial performance, innovation, and customer satisfaction.

Build productively with best-in-class tools

In my journey as an engineering and business leader, I’ve learned that a key driver in digital transformation for every company is hiring top talent. Attracting and retaining top engineering talent comes down to providing developers with opportunities to work on interesting projects and enabling them with the best engineering systems and tools to do their job.

According to McKinsey, the leading driver of business performance is best-in-class tools. Organizations with strong tools are 65 percent more innovative, and their developer satisfaction and retention rates are 47 percent higher.

Software development is a constantly evolving craft and developer tools need to reflect the changes in development workflows. As developers’ responsibilities continue to expand to embrace new technologies, it’s important to automate core development processes like testing and CI/CD so that developers can focus on what matters. In addition, empowering developers to use their favorite languages, open source frameworks, and tools helps them be more productive and feel at home.

At Microsoft, we infuse modern development practices and emerging technologies into our tools. Our mission with the Visual Studio product family is to provide best-in-class tools for every developer. I am humbled by the millions of developers around the world who use Visual Studio Code and Visual Studio as their preferred tools every day.

Many development teams have long been distributed and geographically dispersed, but now everyone is making this transition, in addition to new challenges like developers being disconnected from their dedicated dev boxes. To address one of the biggest pain points for developers—setting up a new dev box, a common scenario when engaging on a new project, or moving to remote work, we recently announced Visual Studio Codespaces. Developers can experience Codespaces with Visual Studio and Visual Studio Code, or directly within GitHub. Codespaces uses the power of the cloud to enable developers to create fully configured development environments in minutes. Today at Build, we're announcing even more innovation to help developers code, collaborate, and ship from anywhere.

Collaborate globally and securely

The top-performing organizations as measured by McKinsey showed that open-source adoption is the biggest differentiator. These organizations are seeing three times more impact from the adoption of open source than the rest of the industry. Organizations that are best-in-class on open source capabilities score 30 percent higher on innovation and 20 percent higher on developer satisfaction.

Open source adoption is not just about the use of open source code or technologies. It’s about embracing an open source mindset—creating a culture of knowledge sharing and contributing to software development to realize the collective power of a broader development team or community. Effective collaboration is the biggest accelerator in helping making teams be more productive and satisfied. 

With GitHub, you can bring the collaboration best practices used by over 50 million developers into your organization. Through empowering collaboration internally, you can both attract and retain the best talent and increase the impact of your software development investments. To ensure GitHub is accessible for all developers, we recently announced that GitHub is free for teams. And to provide a seamless code-to-cloud experience, today we are announcing new integrations for GitHub Actions for Azure. More than 30 GitHub Actions for Azure help your development teams easily create and automate workflows to build, test, package, release, and deploy to Azure. You can learn more about GitHub’s latest announcements here.

Scale your innovation with Azure 

McKinsey identified public-cloud adoption as a catalyst of Developer Velocity is especially strong for non-software companies—public-cloud adoption has four times the impact on their business performance than it does for software companies.

With Azure, we’ve built an end-to-end cloud that enables developers to focus on building apps and not have to worry about the underlying infrastructure the apps run on. Azure supports developers’ favorite languages, open source frameworks, and tools while also creating easy pathways to learn new skills.

Our latest Azure innovations enable developers to build cloud-native applications as well as modernize existing applications. To ensure developers in your organizations can modernize Windows applications, we recently announced the general availability of Windows Server containers for Azure Kubernetes Service. To make it incredibly easy for developers to instantly scale applications on demand with limitless, guaranteed speed and performance, today we announced new innovations to Azure Cosmos DB and considerable cost savings gained by pairing autoscale with the Azure Cosmos DB free tier. Azure also makes it easy for developers to add AI to applications with Azure Cognitive Services. Today, we announced several new capabilities including enhanced voice styles and container support for Azure Cognitive Services.

The McKinsey research also reported that leading companies use low-code and no-code platforms. Companies that utilize this technology score 33 percent higher on innovation compared with bottom-quartile companies. Power Apps offers a low code application development platform designed to rapidly build web and mobile experiences. Today, we’re seeing many of our customers turning to a combination of Power Apps and Azure to quickly deliver solutions that respond to changing business needs. You can learn more about Power Apps and Azure here.

Developing with Azure puts the latest cloud technology and best-in-class tools at the fingertips of developers with a breadth of skills. Today at Build, we're announcing even more innovation in Azure here.

Next steps with Developer Velocity

In times like this, every organization in every industry is evolving to address the current realities. At Microsoft, we're working closely with organizations around the world to build and accelerate the delivery of secure, cost-effective, cloud-based solutions. Companies like Carhartt, Optio3, and Swedish Health Services are examples of organizations increasing Developer Velocity with the support of Microsoft developer tools and cloud platform.

You can learn more about Developer Velocity and how Microsoft can help here. Today, we are also releasing the new Developer Velocity Assessment tool to help you measure your organization’s Developer Velocity Index (DVI) score, get a benchmark relative to peers in your industry, and actionable recommendations and guidance to drive better business outcomes for your organization.

I’d like to welcome every developer around the world to Build 2020. Today’s announcements give developers cutting-edge tools to create the next generation of applications. Please join us at the Microsoft Build 2020 digital event including my Azure: Invent with Purpose keynote. I look forward to seeing what you build!
Quelle: Azure

Code, collaborate, and ship your apps from anywhere

Welcome to Microsoft Build 2020! This all-new 48-hour digital experience is designed to help you and other developers around the world come together to solve challenges, share knowledge, and stay connected. Here we’ll cover some of our latest innovations in developer tools and cloud platform technologies—to help you code, collaborate, and ship your apps from anywhere, so you can support the changing needs of your business and continue to deliver the quality experiences that your customers expect.

So how do you overcome the challenges of today and remain productive as developers? Thankfully, in today’s digital world there are tools to help you work remotely and be as productive as ever: with Azure as your trusted cloud platform and cloud-powered developer tools with Visual Studio and GitHub.

Code

Developers often spend endless hours configuring dev machines for new projects: cloning source code, installing runtimes, setting up linters and debuggers, configuring extensions—just to do it all again for the next project, the next bug, or the next code review. The challenge is even more prevalent in times of remote work, where you might not have access to your preferred development machine. Visual Studio Codespaces, available in preview, enables you to create a cloud-hosted development environment that’s ready to code, in seconds. You can access it from Visual Studio Code or Visual Studio and it also includes a full web-based editor you can use to edit, run, and debug your applications from any device. We recently announced that Codespaces is coming to GitHub in preview, so you can also easily code from any repo.

To help .NET developers share code across platforms, today we released .NET 5 Preview 4. With .NET 5, we continue the journey to unify the .NET platform across all workloads like mobile, desktop, and web. .NET 5 Preview 4 also has many improvements for working with containers and reducing the size of images particularly for multi-stage build scenarios.

For developers with C# and HTML skillsets looking to create web apps, Blazor is a free and open-source web framework that allows you to do that—without writing JavaScript. Today, we announced ASP.NET Blazor WebAssembly that lets you build web apps that run completely in the browser with C#, which can perform better, take up less memory than JavaScript, and can run completely offline.

If you are building a modern single page application with JavaScript and looking for minimal configuration and deployment globally in minutes, then check out a new hosting option in Azure App Service, Static Web Apps, now available in preview. Static Web Apps supports frameworks like Angular, React, and Vue or Static Site Generators such as Gatsby and Hugo. Initializing a Static Web App with a Git repo hooks up GitHub Actions that then connects smart defaults to your CI/CD pipeline. This means that any time a developer makes a change, it will go through the quality and security checks.

For applications optimized for cloud scale and performance, we recently announced the general availability of Azure Kubernetes Service (AKS) support for Windows Server containers. If you’re looking to lift and shift your Windows applications in containers, you can now run them on a managed Kubernetes service in Azure and get the full benefits of portability, scalability, and self-healing for your production workloads. To help you instantly scale your apps on demand with limitless, guaranteed speed and performance, today we announced new innovations to Azure Cosmos DB and considerable costs savings gained by pairing autoscale with the Azure Cosmos DB free tier.

Azure also makes it easy for developers to add AI into applications with Azure Cognitive Services. Today, we announced new capabilities, such as enhanced voice styles, enabling you to tailor the voice of your app to fit your brand or unique scenario. If you’re looking to run AI anywhere, we also announced general availability of container support for Language Understanding and Text Analysis.

And, if you need deliver apps quickly, take advantage of the combination of Microsoft Power Apps, a low code platform, and Azure to analyze data, automate processes and create virtual agents. Learn how to extend Power Apps with Azure services such as Bot Services, Logic Apps, and Functions. 

Collaborate

To effectively collaborate as a local or distributed development team, you need the ability to accommodate flexible work schedules, collaborate both asynchronously and in real-time when needed, and track and prioritize work. With Visual Studio Live Share, you can create shared coding sessions and co-edit, co-debug applications with your peers securely—no matter where you are. Today, we announced expanded capabilities for Visual Studio Live Share, which include text and voice chat support. With these additions, your team can collaborate more effectively from the comfort of your own dev tools, without the need for additional apps.

With over 50 million developers, GitHub is the place where developers code together. We continue to innovate to ensure collaboration is seamless at every stage of the software development lifecycle. For example, you may find yourself needing to brainstorm feature ideas, help new users get their bearings, and collaborate on best ways to use the software.  GitHub Discussions recently announced at GitHub Satellite helps you do just that and is in public beta. Learn more about the latest GitHub innovations to help you collaborate with your team members.

Ship

Over the past six months, we’ve published more than 30 GitHub Actions for Azure to help you create workflows to build, test, package, release and deploy to multiple Azure services, from web applications to serverless functions to Kubernetes. We heard from you that it can be difficult to craft CI/CD pipelines by editing a bunch of YAMLs and you spend a considerable time setting up and switching between different discrete tools. We are pleased to announce that GitHub Actions for Azure are now integrated into Visual Studio Code, Azure CLI and the Azure Portal simplifying the experience of deploying to Azure from your preferred entry points. Download the new Visual Studio Code extension or install the Azure Command-Line Interface (CLI) extension for GitHub Actions for Azure.

Security is also top of mind when releasing code into production. At GitHub Satellite, we announced cloud betas of code scanning and secret scanning to help developers consume and ship code safely. With code scanning enabled in GitHub, every “Git push” is scanned for new security concerns using the world’s most advanced semantic analysis engine, CodeQL. Secrets scanning is now available for private repositories. This feature watches private repositories for known secret formats and immediately notifies developers when they are found. Developers can now identify, remediate, and prevent vulnerabilities in source code before they are deployed into production.

More exciting news for every developer

With all the new coding improvements and advancements combined with Windows 10—it truly is a great time to be a developer. Today, we announced the general availability of Windows Terminal 1.0, which provides a modern, fast terminal application for users of command-line tools and shells like Command Prompt, PowerShell, WSL, and Azure Cloud Shell. We also announced upcoming support for GPU compute in the Windows Subsystem for Linux (WSL) for faster computations. And coming soon is GUI app support which means you can open a WSL instance and run a Linux GUI app directly (without the need of a third-party X Server). You can use this feature to run your favorite IDE in a Linux environment, or some applications that you could only find on Linux.​ 

Join us

Regardless if your team is onsite or remote, we want to help developers spend less time setting up environments, configuring systems and dealing with underlying infrastructure so you can spend more time coding and building solutions. We want to ensure development teams can easily collaborate on projects regardless of where you sit. We want to help you deliver and maintain code with automated workflows that are free from security vulnerabilities. Microsoft offers an end-to-end cloud platform and developer tools designed to meet your engineering needs and keep you and your team as productive as possible wherever you work.

Please join me in Scott Guthrie’s, Azure: Invent with purpose session, and make sure to watch Scott Hanselman’s session, Every Developer is Welcome, to see many of these new innovations designed for every developer. I can’t wait to see what you build!
Quelle: Azure

Helping You Better Identify Vulnerabilities in Partnership with Snyk

We are really excited that Docker and Snyk are now partnering together to engineer container security scanning deeply into Docker Desktop and Docker Hub. Image vulnerability scanning has been one of your most requested items on our public roadmap.

Modern software uses a lot of third party open source libraries, indeed this is one of the things that has really raised productivity in coding, as we can reuse work to support new features in our products and to save time in writing implementations of APIs, protocols and algorithms. But this comes with the downside of working out whether there are security vulnerabilities in the code that you are using. You have all told us that scanning is one of the most important roadmap issues for you.

Recall a famously huge data breach from the use of an unpatched version of the Apache Struts library, due to CVE 2017-5638. The CVE was issued in March 2017, and according to the official statement, while the patch should have been applied within 48 hours, it was not, and during May 2017 the websites were hacked, with the attackers having access until late July. This is everyone’s nightmare now. How can we help with this?

Do you know if there are security issues? The joint solution with Snyk and Docker will integrate scanning both on Docker Desktop and in Docker Hub so that developers can quickly check for security issues while they are developing code, in the inner loop, and adding new dependencies, and also the whole team can see vulnerabilities once images are pushed to Docker Hub, the outer loop.

The Snyk scanning will generally provide remediation information for updates that will fix vulnerabilities that are found. You do not have to try to fix all the vulnerabilities all the time, as that is a losing game. There is an ongoing flow of vulnerabilities, and you are always likely to see new ones being added.

The target for your team should be to triage the highest risk issues to see if they apply to you and fix issues with high priority. The Apache Struts vulnerability is an example here, as it provided remote code execution from any server using this framework. These types of vulnerabilities tend to have exploits written quite soon and scripts become available to try to attack them. Other vulnerabilities might not be so critical, as your code may not be configured in a way that makes it vulnerable. If you are unsure better to update sooner though.

For less-critical vulnerabilities, the aim is to make sure that you get fixes updated in your build pipeline and vulnerabilities don’t hang around forever in dependencies that do not get updated. They may not be directly exploitable, but as they accumulate they may allow escalation from another vulnerability or combinations of vulnerable components that may create a larger vulnerability.

As we launch the joint Docker and Snyk scanning features we look forward to helping your team to ship software better, faster and more securely. For more information, check out this blog post by Snyk or read today’s press release. 
The post Helping You Better Identify Vulnerabilities in Partnership with Snyk appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/