Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Software architecture is a complex process. It involves talking to stakeholders to determine what's needed; talking to developer teams to determine their capabilities; and much more. Finances come into play: what will it cost to build and operate the software product? What kind of return on investment is expected; and is the product likely to achieve that?
Politics comes into play: who at the company is really calling the shots, who is really making the technical decisions?
Users come into play: what do they really need and what problems are they really facing?
What a company wants might not be what it needs, and it usually falls to the architect to uncover these hidden needs and get them into the project plans. Much of this happens before writing a single line of code or architectural diagram, and it continues throughout the project's lifecycle.
So to discuss the role of AI in software architecture, we have to think about the whole process, not just code generation or creating documentation like architectural diagrams. We all know that AI has gotten quite good at generating code. There are people experimenting with using AI to UML and C4 diagrams. AI will definitely play a role here. But I don't expect AI to have much of an impact on the rest of the process, which involves understanding and negotiating all of those human issues.
Why? Think about what these tasks really require. A human can walk into a meeting and size up the politics fairly quickly. Who is running things, who is getting their ego stroked while the people who really control the agenda head in a different direction, whose opinions count, whose opinions don't. AI has yet to prove itself good at extracting nuance from a conversation. AI can make a meeting transcript, but it can't understand priorities and determine which is really important, particularly when the real priorities may involve agendas that nobody mentions explicitly. It can help to craft an application given a statement of design goals, but it can't infer those goals, particularly when some of the requirements are unstated (or even unknown).
Once you've got a start on the information gathering, you have to start designing — and that isn't just UML and C4. Designing is all about tradeoffs. We like to think it's about coming up with the best solution, but I've become fond of quoting Neal Ford: it's all about the least worst solution. That's reality.
What can we afford to build?
How much will it cost to run this in the cloud versus on premises?
Can we deliver good performance for the loads we expect with a budget we can afford?
How do we deal with the political struggle between cloud and on-premises advocates?
These questions don't have unambiguous answers; they all involve tradeoffs, and I've yet to see evidence that AIs are good at making tradeoffs.
I'll take that a step further. I don't know how you would acquire the data needed to train an AI to make those tradeoffs. Every project is different, and understanding the differences between projects is all about context. Do we have documentation of thousands of corporate IT projects that we would need to train an AI to understand context? Some of that documentation probably exists, but it's almost all proprietary. Even that's optimistic; a lot of the documentation we would need was never captured and may never have been expressed.
Another issue in software design is breaking larger tasks up into smaller components. That may be the biggest theme of the history of software design. AI is already useful for refactoring source code. But the issues change when we consider AI as a component of a software system. The code used to implement AI is usually surprisingly small — that's not an issue. However, take a step back and ask why we want software to be composed of small, modular components. Small isn't "good" in and of itself. Small components are desirable because they're easier to understand and debug. Small components reduce risk: it's easier to understand an individual class or microservice than a multi-million line monolith.
There's a well-known paper that shows a small box, representing a model. The box is surrounded by many other boxes that represent other software components: data pipelines, storage, user interfaces, you name it. If you just count lines of code, the model will be one of the smallest components. But let's change the perspective by stepping back: what if the box size represented risk? Now that tiny box representing the model suddenly grows much larger. AI models are black boxes, and always unpredictable. If we really want to minimize risk rather than just lines of code, AI is problematic. That risk doesn't mean AI should be avoided, but it does add complications: applications need to incorporate guardrails to prevent the AI from behaving inappropriately, developers need to run evaluations that test whether the system as a whole is achieving its aims — and software architects will play a big role to design these additional components. They will have a crucial role in determining what the risks are and how to address them.
We're already seeing tools for generating transcripts and summaries of meetings, and those are undoubtedly useful. But it will be a while before we have tools that can understand the context for a software project, process all the issues that are raised by a software project, and make the tradeoffs that are at the heart of engineering. Software development isn't just about grinding out code. It's about understanding context and solving problems that make sense within that context.
Industry News
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.
Amazon Web Services (AWS) announced the launch and general availability of Amazon Q Developer plugins for Datadog and Wiz in the AWS Management Console.
vFunction released new capabilities that solve a major microservices headache for development teams – keeping documentation current as systems evolve – and make it simpler to manage and remediate tech debt.
Check Point® Software Technologies Ltd. announced that Infinity XDR/XPR achieved a 100% detection rate in the rigorous 2024 MITRE ATT&CK® Evaluations.
CyberArk announced the launch of FuzzyAI, an open-source framework that helps organizations identify and address AI model vulnerabilities, like guardrail bypassing and harmful output generation, in cloud-hosted and in-house AI models.
Grid Dynamics announced the launch of its developer portal.
LTIMindtree announced a strategic partnership with GitHub.