Abstract: A processor receives a request to access secure data. The processor translates the request in order to locate the secure data in a secure data store. The processor retrieves the secure data from the secure data store. The processor encodes the secure data to generate protected secure data. The processor transmits the protected secure data from the secure data store to at least one instantiated virtual machine in a cloud-based network.

Abstract: A processor replicates a request for a computer resource to a plurality of clouds, and updates a repository in view of resource offerings received from the plurality of clouds. The repository stores resource and service data for each cloud. The processor identifies resource and service data in the repository that match information specified in the request in view of the updated repository, and provides information to a requesting entity indicating resource and service data in the repository satisfy the request.

Abstract: A system and method include determining, by a processing device, a first duration of usage of a hardware resource on which a virtual machine is instantiated in a cloud, determining, by the processing device from the virtual machine on the cloud, a second duration of usage of a software resource that is utilized by a user on the virtual machine, the software resource comprising at least part of an operating system, and calculating, by the processing device, a usage of the cloud by the user in view of the first duration and the second duration.

Abstract: Embodiments relate to systems and methods for de-populating a cloud data store. In one method, an identification of a set of cloud-populated data to be transported from a set of host storage clouds to at least one target data store is received. The method identifies a data transport pathway from the set of host storage clouds to the at least one target data store, the data transport pathway including a dedicated reverse staging connection between the set of host storage clouds and the at least one target data store. The method initiates the transport of the set of cloud-populated data to the at least one target data store in view of a set of de-population commands.

Abstract: A compliance tool can verify compliance with jurisdictional transfer and storage requirements for data migration into or within a cloud. The compliance tool can monitor and check data transfers and storage to determine if the data transfer and/or storage will cross jurisdictional boundaries. If the transfers or storage crosses jurisdictional boundaries, the compliance tool can identify the transfer and storage requirements of any jurisdictions involved with the transfer and/or storage. The compliance tool can verify that the data transfers complies with the identified transfer and storage requirements. If the data transfer and/or storage does not comply with the identified transfer and storage requirements, the compliance tool can terminate the data transfer and/or storage, modify the data transfer and/or storage, and/or modify the data, itself, to comply with the identified transfer and storage requirements.

Abstract: A “Bring Your Own License” (BYOL) service can convert users' “off-the-shelf” (OTS) software licenses for use in public clouds according to rules provided by independent software vendors (ISVs). The BYOL service can offer additional license terms to the users during conversion of the OTS software license on behalf of the ISVs. The additional license terms can be an expansion of the use of the software, an expansion of the technical support offer by the new cloud license, and expansion of the duration of use.

Abstract: Embodiments relate to systems and methods for multiple cloud marketplace aggregation. An aggregation engine communicates with a set of multiple cloud marketplaces, each of which communicates with an associated set of clouds. A requesting entity, such as a user requesting the instantiation of a set of virtual machines, can transmit a resource request to the aggregation engine. The aggregation engine can fan out or distribute a replicated request to the set of multiple cloud marketplaces. Each cloud marketplace can receive the request and respond to indicate available resources that can be produced from their respect set of clouds. The aggregation engine can collect the responses of the various marketplaces, and can generate one or more selections based on selection logic such as best match, cost factors, or other criteria. In embodiments, a user can manually select the desired marketplace(s) to instantiate or update their virtual machine or other target objects.

Abstract: An appliance support module can be configured to receive a request to build a demo software appliance from a user. The appliance support module can be configured to build the demo appliance and to include configuration data in demo software appliance. The appliance support module can be configured to receive a request to migrate the demo software appliance to a production software appliance. The appliance support module can be configured to migrate the demo software appliance by modifying the configuration data in order to provide full functionality to the demo software appliance that was previously limited. The appliance support module can also receive a request to scale the production software appliances. The appliance support module can scale the production software appliance by dividing the applications contained in the production software appliances into separate software appliance.

Abstract: Systems and methods for cross-cloud computing resource usage tracking. An example method comprises: receiving a request comprising an operational specification of a computing resource; selecting a first provisioning cloud in view of the operational specification; receiving an updated operational specification of the computing resource; receiving a first provisioning offer from the first provisioning cloud and a second provisioning offer from a second provisioning cloud responsive to the updated operational specification; selecting the second provisioning cloud in view of the first and second provisioning offers; providing an interface between the first computing resource and a second computing resource residing in a second provisioning cloud; and tracking resource usage data of the first computing resource across the provisioning clouds.

Abstract: Embodiments relate to managing multi-level service level agreements (SLAs) in cloud-based networks. A resource managing module can manage resources in the cloud-based networks in response to the detection of one or more triggering events. In embodiments, the triggering events can be changeovers in time periods, or meeting or exceeding thresholds associated with end user operation of the resources in the cloud-based networks. The multi-level SLAs can specify how to adjust the resources in the cloud-based networks in response to the detection of the triggering events. The resource managing module can adjust applicable resources in the cloud-based networks as specified by the multi-level SLAs.

Abstract: A cloud computing environment can be configured to allow third party, user-controlled resources to be included in the pool of resources available in the cloud. The user-controlled resources can include a cloud application to communicate with a cloud management system to coordinate access to the user-controlled resources. The cloud application allows the user to specify the specific set of resources that the cloud can access, such as specific hardware and software resources.

Abstract: Embodiments relate to systems and methods for migrating data between cloud networks via a data distribution service. In aspects, an administrator of a data payload may wish to migrate the data payload from a host cloud network to a target cloud provider to leverage cost, security, redundancy, consolidation, or other advantages. The data distribution service can identify target cloud providers with sets of resources that are capable of hosting the data payload. Further, the data distribution service can determine that the target cloud providers are connected to or capable of being connected to the data distribution service via a set of dedicated communication channels. According to aspects, the data distribution service can receive the data payload from the host cloud network, and transport the data payload to a selected target cloud provider via the set of dedicated communication channels.

Abstract: Embodiments relate to systems and methods for extending a network security platform to a cloud-based network. A set of managed machines, such as personal computers or servers, can be managed by a network security engine. The network security engine can govern access to and operation of the set of managed machines through a set of security policies. According to embodiments, the set of security policies can be sub-divided into a partitioned security class corresponding to a subset of the managed network which is intended to be deployed as a cloud-accessible subset of the overall managed network. The partitioned security class can specify access restrictions for the cloud-accessible subset to receive resources from or provide resources to the external cloud environment. A corporate campus network or other managed network can therefore permit access of the cloud to some or all of its machines, while still maintaining desired local security conditions.

Abstract: Embodiments relate to systems and methods for a cross-cloud vendor mapping service in a dynamic cloud marketplace. The cloud marketplace system receives bids from a user for the provisioning of applications or other software in the cloud, and registers selected provisioning clouds to deliver the requested software. The set of provisioning clouds can be re-selected on a scheduled and/or other ongoing basis, creating a sequence of provisioning clouds. A vendor mapping service can be abstracted and provided external to the cloud marketplace system, and track the user's software usage across the shifting sets of provisioning clouds. The vendor mapping service can aggregate the usage history over time, and generate billing and/or other subscription reports. The cloud marketplace system need only register the user ID, software applications, and/or other subscription data to the vendor mapping service one time, after which the service can track the user's software usage history automatically.

Abstract: An appliance support module can be configured to build software appliances for use in a hosted environment. The appliance support module can be configured to build the hosted appliances based on a request by a user for the hosted appliances. The appliance support module can be configured to receive a request to migrate the hosted appliances to an on-premise system. To migrate the hosted appliance, the appliance support module can be configured to convert the hosted appliances into a format capable of being supported by the on-premise systems.

Abstract: A cloud management system can track the usage of the virtual machines in order to determine the fees associated with the user's subscription to the cloud computing environment. The usage can include the resources consumed to support the virtual machines and can include the utilization of the virtual machines by the user or third parties. The cloud management system can determine the fees charged to the user for utilizing the cloud computing environment based on the tracked usage.

Abstract: A cloud management system can insert a self-management module in virtual machines. The self-management module can be configured to automatically perform management functions on the virtual machine in which it is inserted. The management functions can include activation, suspension, or termination of the virtual machine. The management functions can also include tracking and monitoring the virtual machine. The management functions can also include providing messages to the cloud management system regarding the status and usage of the virtual machine.

Abstract: Embodiments relate to combinatorial optimization of multiple resources across a set of cloud-based networks. In aspects, a set of usage histories can store patterns for users in a host cloud-based network recording the consumption of processor, memory, storage, operating system, application, or other resources subscribed to by the user. The user can be a corporation or other collective user. A deployment engine can identify similar target resources available in a set of target clouds. The engine can receive selection criteria for selecting target clouds for a migration of the user's deployment. In the combinatorial selection, each target cloud can independently supply one or more target resources. The engine can thus identify a series of combinations of target resources and target clouds supplying those resources to discover combinations of target clouds and target resources that can satisfy or optimize the selection criteria, such as cost or others.

Abstract: A record of computing resources for a cloud computing environment and an additional cloud computing environment may be maintained. Available computing resources in the cloud computing environment and the additional cloud computing environment may be determinable from the record of computing resources. A request to instantiate a virtual machine in the cloud computing environment may be received. The virtual machine may be instantiated in the additional cloud computing environment in response to determining that the cloud computing environment lacks the available computing resources and inactive reserve resources to support the virtual machine.

Abstract: A decision system for providing ranked candidate cloud computing environments to customers for migration of subscribed services. The decision system can receive user usage history data and compare parameters of subscribed services on a host cloud to candidate clouds. Based on the comparison, a rank of candidate clouds for migration of the subscribed services can be determined and supplied to the customer.