478 results about "Cloud service provider" patented technology

The invention belongs to the technical field of cloud security services, and provides a trusted cloud security confidential privacy three-dimensional level product service method, which comprises the following steps that: a cloud service provider matches products and services with different security levels by separating differentiated demands of an application development service provider and a final user in confidential, privacy and security dimensions; configuring different security modules for the product, performing hardware and software type selection matching, and determining a product type in combination with an end-to-end scene; then deploying a dynamic strategy adjustment mechanism, monitoring abnormal access in real time and adaptively adjusting a protection strategy; and continuously optimizing the security configuration. The invention discloses a trusted cloud security confidential privacy three-dimensional grade product service system, which is used for realizing a trusted cloud security confidential privacy three-dimensional grade product service method. The method is beneficial for transparently solving the security demand and conflict problem of the cloud service provider, the application development service provider and the final user, and promoting the healthy development of the cloud computing market.

A threat management facility receives data from a variety of sources such as compute instances within an enterprise network, cloud service providers supporting the enterprise network, and third-party data providers such as geolocation services. In order to facilitate prompt notification of potential risks, the threat management facility may incrementally update data for use in threat assessments as the data becomes available from these different sources, and create suitable alerts or notifications whenever the currently accumulated data provides an indication of threat meeting a predetermined threshold.

A threat management facility for an enterprise network integrates native threat management capabilities with threat data from a cloud service provider used by the enterprise. By properly authenticating to the cloud service and mapping data feeds from the cloud service to a native threat management environment, the threat management facility can extend threat detection and management capabilities beyond endpoint-centric techniques.

Disclosed are systems, apparatuses, methods, and computer-readable media for inventory monitoring in a multi-cloud network environment. A method includes receiving user input via a controller's interface, wherein the input includes first account information granting access to a first virtual private cloud and a second virtual private cloud, both hosted by a cloud service provider (CSP). The controller queries the first and second virtual private clouds using the respective account information and the CSP's APIs to identify resources, gathering them into an inventory, and maintains a mapping of tags to the resources, associating each tag with a specific security policy. The controller forwards a first subset of tag-resource mappings to a first security gateway in the first virtual private cloud, enabling automatic application of corresponding security policies upon instantiation of tagged resources.

Techniques including receiving, by a cloud environment of a cloud service provider, a requested resource usage for a resource associated with a subscription of a user account with the cloud service provider. The techniques further include determining, as part of managing resources at a subscription level independent of managing resources at a user account level, a resource usage by the subscription. The techniques further include determining that a usage limit for the resource is greater than the resource usage. Based on the usage limit being greater than the resource usage, the techniques further include determining that a remaining resource allocation for the subscription is greater than or equal to the requested resource usage. Based on the remaining resource allocation being greater than or equal to the requested resource usage, the techniques further include providing the resource to the user account and updating the resource usage.

The invention discloses a network information security dynamic early warning method and system based on a knowledge graph, and relates to the technical field of network information security. According to the method, network equipment logs, threat intelligence texts and flow metadata are acquired in real time through a multi-source heterogeneous data acquisition module, and a dynamic knowledge graph is constructed by adopting a streaming knowledge extraction technology. And predicting a threat propagation path by using a graph attention network and gating loop unit hybrid model, and generating a hierarchical defense strategy in combination with a three-dimensional risk assessment value. The system comprises a multi-modal data acquisition module, a dynamic knowledge graph construction module, a threat propagation dynamics modeling module, a self-adaptive strategy generation module, a digital twinborn verification module and the like, and the effectiveness of a defense strategy is verified by simulating an attack path. According to the method, dynamic early warning and automatic response of network security are realized, the network protection capability is effectively improved, and the method is suitable for scenes such as enterprise network security protection and cloud service provider security protection.

The invention relates to the field of data encryption, in particular to a data encryption transmission method and device in a hybrid cloud environment, equipment and a storage medium. The method comprises the following steps: acquiring data to be transmitted; performing key field deep semantic analysis on the to-be-transmitted data, and performing dynamic layered encryption to obtain a plurality of layered encrypted transmission data packets; available transmission path detection is carried out on the hybrid cloud environment, dynamic end-to-end encryption is carried out, and a plurality of end-to-end encryption transmission links are constructed; performing distributed encryption transmission and dynamic transmission path decision on the plurality of layered encryption transmission data packets based on the plurality of end-to-end encryption transmission links, and constructing a dynamic transmission path adjustment strategy; detecting all user access behaviors in the hybrid cloud environment; and carrying out user cloud service provider classification on all the user access behaviors, carrying out personalized behavior modeling, and constructing a behavior portrait of each user. According to the invention, efficient and safe data encryption transmission for the hybrid cloud environment is realized.

A network device may receive one or more first user inputs in a security gateway creation user interface (UI) provided by a controller. A network device may query, by the controller, the CSP using Application Programming Interfaces (APIs) to retrieve information about applications within the at least one virtualized network environment including any services deployed within the at least one virtualized network environment. A network device may present a security status user interface that identifies the at least one virtualized network environment applications configured in the CSP account and a respective status indicating whether the at least one virtualized network environment is protected by the security gateway. A network device may receive a second user input within the security status user interface, the second user input is effective to enable protection of the at least one virtualized network environment by the security gateway.

The invention relates to a cloud data auditing method based on a block chain, and the method comprises the steps: S1, a key generation center generates system parameters and generates a user part private key based on a user identity, a user generates an authorization private key based on the part private key and sends an authorization request to a proxy server, and the proxy server generates an encryption key pair after verifying the request; s2, a user locally performs block blinding on original data blocks, a proxy server signs the data blocks and generates a Merkel Hash tree based on a bucket structure, and a cloud service provider performs integrity verification on received user files, stores data and uploads Merkel Hash tree root values to a block chain; s3, the third-party auditing mechanism generates a challenge request and sends the challenge request to the cloud service provider after receiving the auditing request of the user, the cloud service provider generates a challenge response according to parameters in a challenge set, and the third-party auditing mechanism judges whether data stored in the cloud are complete or not based on bilinear mapping; and returning the audit result to the user and generating a transaction record on the block chain.

Systems, methods, and apparatuses for isolating information from a cloud services provider hosting an enterprise application software, using a distributed ledger. For example, according to one embodiment there is a system having at least a processor and a memory therein executing within a host organization to host an enterprise application software for an enterprise, receive information input from a customer of the enterprise at a user interface for the enterprise application software, transfer the customer-provided information to a distributed ledger accessible to the system, receive information input from the enterprise at an enterprise interface for the enterprise application software, transfer the enterprise-provided information to the distributed ledger accessible to the system, but maintain no copy of the customer-provided information nor copy of the enterprise-provided information in a permanent store accessible to the system and the host organization.

A cloud misconfiguration remediation application (“remediation application”) has been created that generates a remediation action for a resource misconfiguration detected with a CSPM policy. The remediation application includes a conversation agent that interacts with the foundation model according to a chain of prompts / input sequences. The conversation agent constructs the chain of prompts based on a template, the CSPM policy, metadata about the CSPM policy and the misconfigured cloud resource, and responses from the foundation model. The foundation model is implemented with retrieval augmented generation (RAG) that uses an embedding database built with remediation documentation of the CSP. Prompts from the conversation agent are augmented based on the implemented RAG. The remediation application aggregates the responses into a remediation action that can either be automatically performed or presented for consideration by a user.

Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud service provider) that enables services and / or resources provided in the first cloud infrastructure to be utilized by a user of a second cloud environment, the second cloud environment being different from the first cloud environment. The multi-cloud infrastructure enables a user associated with an account at the second cloud service provider to use a first service from a set of one or more cloud services from the second cloud infrastructure. The multi-cloud infrastructure creates a link between the account at the second cloud service provider and a tenancy created in the first cloud infrastructure to enable use of the first service by the user.

Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and / or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

The invention discloses an on-cloud semi-homomorphic encryption method capable of resisting private key tracking, which comprises the following steps of: S1, generating a blind identity based on the real identity of a data user, and performing identity de-association processing; s2, the attribute authority generates a binding key pair based on the blind identity and returns the binding key pair; s3, the data user discloses a real identity and a public key to the data owner; s4, the data owner encrypts the plaintext after verifying the public key to form a ciphertext set; s5, uploading the ciphertext set to a cloud service provider, and performing classified storage; s6, the cloud service provider receives the analysis request and performs homomorphic addition aggregation on the ciphertext set to generate an aggregated ciphertext; and S7, the data user uses the private key to decrypt the aggregated ciphertext, and a plaintext analysis result is recovered. According to the method, the identity privacy of the user is protected while encrypted data analysis is realized, and the method has the characteristics of untraceability and lightweight deployment.

Techniques are disclosed herein for provisioning cross-cloud services. The techniques include receiving, by a service of a first cloud environment, a request to configure a virtual resource and causing, by the service, a control plane of the first cloud environment to configure the virtual resource on a physical resource of the first cloud service provider. The first cloud environment can be implemented on a first cloud infrastructure of a first cloud service provider and the request can be received from a second cloud environment upon input of a customer of a second cloud service provider at a portal of the second cloud environment. The input can indicate at least one parameter of the request and the second cloud environment can be implemented on a second cloud infrastructure of the second cloud service provider.

Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and / or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Techniques for generating a unified user experience (UX) score using sentiment analysis and theme classification, training multiple layers of a machine learning environment to perform sentiment analysis and theme classification, and arranging layers of a machine learning environment based on noise from training data are provided. A unified UX score is generated from categories that are indicative of a user's journey in association with the cloud service provider. Machine learning environments are trained and used to perform sentiment analysis and theme classification on user feedback data. The layers of a machine learning environment can also be arranged based on noise generated from training data used to train the models of the machine learning environments.

The system can receive data, including a specification for a cloud solution, indicating a type of cloud solution and at least one requirement. The system can determine a list of cloud service providers with cloud infrastructure capable of hosting the cloud solution and an ability to satisfy the at least one requirement. The system can rank the cloud service providers based on the capability to host the cloud solution and the ability to satisfy the at least one requirement. The system can select the cloud service provider based on the ranking. The system can generate an implementation procedure based on an Application Programming Interface (API) specification, where the API specification determines a requirement for the cloud solution to be deployed on the cloud infrastructure. The system can deploy, using a large language model (LLM), the cloud solution on the cloud infrastructure in accordance with the implementation procedure.

Techniques are disclosed for provisioning a cloud service of a first cloud service provider using a control plane of a second cloud service provider. The techniques include detecting that a request for a cloud service provided by the first cloud service provider has been received from the second cloud environment of a second cloud service provider different from the first cloud service provider. The techniques further include, after detecting that the request for the cloud service has been received, provisioning a first set of resources within the first cloud environment and linking the first set of resources to a second set of resources within the second cloud environment. Linking the first set of resources to the second set of resources enables data pertaining to the cloud service to be transferred from the second cloud environment to the first cloud environment.

Disclosed are systems, apparatuses, methods, and computer-readable media for secure cluster membership for a multi-cloud security platform. A method includes: in response to receiving a start message to start a first instance of a gateway service, transmitting a boot message to a cloud service provider to cause the cloud service provider to boot an image corresponding to the gateway service, the boot message including boot script information; receiving a join message from the first instance to join a gateway service cluster; and configuring the first instance with the gateway service cluster based on credentials included in the join message.

Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure, including in a first cloud environment provided by a first cloud service provider, that enable services and / or resources provided in the first cloud infrastructure to be used by users of a second cloud environment, where the second cloud environment is different from the first cloud environment. The multi-cloud infrastructure enables a user associated with an account of a second cloud service provider to use a first service of a set of one or more cloud services from the second cloud infrastructure. The multi-cloud infrastructure creates a link between the account of the second cloud service provider and the lease created in the first cloud infrastructure to enable the user to use the first service.

Techniques are disclosed for a method including providing, by a first computing resource of a first cloud service provider (CSP), a first service to a user having a first user account with a second CSP, the first service provided via a first private network of the user with the second CSP. The method further including transmitting data between a second private network communicatively coupled with the first private network, the second private network associated with a second user account of the user with the first CSP. The method further including associating, by a second computing resource of the first CSP, the first private network and the second private network with a subscription of the second user account with the first CSP, the subscription available via the second CSP.

Techniques are disclosed for provisioning and managing resources within a cloud infrastructure of a first cloud service provider for a cloud service offered by a second cloud service provider. Cross-cloud services can be provisioned and managed by and between private clouds of cloud service providers. The techniques include receiving a request for a cloud service by a component of a first private cloud within a first cloud environment and from a component of a second private cloud within a second cloud environment. The techniques further include the component of the first private cloud performing one or more operations to establish network connectivity prerequisites for network connectivity between the first private cloud and the second private cloud and causing one or more components of the first private cloud to provision the cloud service in the second private cloud.

A distributed cloud computing system is disclosed that includes a controller configured to deploy network constructs including any of transit gateways, spoke gateways, subnets, or private networks and logic that, upon execution by one or more processors, causes performance of operations including: causing rendering of a graphical user interface that includes a display panel configured to display progress of a build process for a network topology graph, receiving first user input through the graphical user interface indicating selection of a first cloud service provider, a first access account, and a first cloud region, receiving second user input through the graphical user interface indicating selection of one or more of the network constructs to be deployed in the first cloud region, instructing the controller to deploy the one or more of the network constructs in the first cloud region according to the first user input and the second user input.

Techniques are described for providing personalized content in applications without revealing personal details to content providers. A base machine learning model is loaded to a cloud environment that is private to a tenant organization. The base machine learning model is used to generate a custom machine learning model specific to the tenant organization based on user interactions within the tenant organization and content categories specific to the tenant organization. The custom machine learning model is used to select content categories for which to provide instances of content items to users based on user interactions with applications. Engagement with the instances of content items is tracked in a user-specific manner privately by the tenant organization, in a tenant-specific manner privately by a cloud services provider, and in a content-specific manner by the content provider. Feedback is provided to the custom machine learning model based on engagement with instances of content items.

Disclosed herein are methods, apparatuses, and systems for operating a tiered queuing system that includes: identifying a first segment to be evicted from a local storage in a first region based on an eviction policy; storing the first segment in a cold storage provided by a cloud service provider in the first region; deleting at least one instance of the first segment from the local storage in the first region; indicating in a segment index that the first segment is stored in the cold storage; responsive to receipt of a read request, reading an entry in the segment index for a second segment; and responsive to an indication that the second segment is stored by the cloud service provider, copying the second segment to the local storage and responding to the read request using the second segment stored in the local storage.

A method for facilitating management of budgets for cloud resources and / or accounts. The method comprises obtaining real-time and / or historical usage information of resources and / or account information associated with a cloud resources and / or account of a cloud platform, analyzing the real-time and / or historical usage information of resources and / or account information for determining a value of a parameter associated with the utilization of the cloud resource by the cloud account, determining an action required to be implemented for the cloud resource and / or account based on the determining of the value of the parameter, generating a cloud resource and / or account controlling command for implementing the action based on the determining of the action, transmitting the cloud resource and / or account controlling command to a cloud service provider device associated with a cloud service provider, and storing the real-time and / or historical account information.

The invention relates to the technical field of information security, in particular to a cloud security vulnerability early warning method based on machine learning. Comprising the following steps: collecting log data in a plurality of cloud service environments; the collected log data are preprocessed; multiple features are extracted from the preprocessed log data; a plurality of machine learning algorithms are used to train a plurality of security early warning models, wherein the models are used to predict potential vulnerabilities and security risks in the cloud environment; applying the trained security early warning model to newly generated log data, and triggering an early warning mechanism when the model outputs and displays that possible security threats exist; model parameters are automatically adjusted to optimize early warning accuracy and reduce false alarm and missing alarm phenomena; and according to a model prediction result, generating early warning information, and sending the information to a cloud service provider and a user. According to the cloud security vulnerability early warning method based on machine learning provided by the invention, the security and response speed of a cloud environment are improved through automatic and intelligent means.

Disclosed are systems, apparatuses, methods, and computer-readable media for configuring resources of a service distributed across multiple cloud service providers. A method includes: receiving a request to configure a firewall in a cloud service provider, the request including a tag including a name that identifies a single firewall configuration information; and providing derived firewall information from the single firewall configuration information based on an identity of the cloud service provider and the tag, wherein the single firewall configuration information includes network information for connecting the firewall to a private network in the cloud service provider.