Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of two or more cloud service providers, a specification of security and compliance policies of a given entity. The processing device is also configured to generate, based at least in part on the specified security and compliance policies of the given entity, security and compliance controls to be implemented for workloads of the given entity running on a subset of the cloud assets operating in the clouds of the two or more cloud service providers. The processing device is further configured to deploy, utilizing application programming interfaces of the trust platform, the generated security and compliance controls on first and second pluralities of monitoring tools operating in tenant and management environments of the clouds of the two or more cloud service providers.

Abstract: An apparatus comprises at least one processing device coupled to memory. The at least one processing device is configured to obtain an operating system image from a production server or other computing device and to implement a first operating system configuration on a non-production server, a test server or other type of server based at least in part on the operating system image. The at least one processing device is further configured to modify the first operating system configuration to generate a second operating system configuration on the server and to generate a modified operating system image-based at least in part on the second operating system configuration. The at least one processing device is further configured to provide the modified operating system image to the computing device.

Abstract: An apparatus comprises a processing device configured to receive a request to execute an action on cloud assets of a cloud platform utilizing an application programming interface (API) exposed by the cloud platform, the request comprising a set of keyword arguments, and to generate a code class instance for the API. The processing device is also configured to instantiate, via the generated code class instance, a client for the cloud platform utilizing a first subset of arguments in the set of keyword arguments, to determine from the set of keyword arguments an identifier of the action to be executed, and to execute the action by running a function of the generated code class instance, the function dynamically generating an API call utilizing the instantiated client for the cloud platform, the determined identifier, and a second subset of arguments in the set of keyword arguments.

Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of cloud service providers, a request to view security and compliance risk for a given entity running workloads utilizing the cloud assets. The processing device is also configured to obtain, utilizing application programming interfaces of the trust platform, first and second sets of security and compliance telemetry data generated by first and second pluralities of monitoring tools operating in tenant and management environments of the clouds. The processing device is further configured to generate a unified view of security and compliance for the workloads of the given entity utilizing the first and second sets of security telemetry data, and to provide the unified view of security and compliance for the workloads of the given entity at the user interface of the trust platform.

Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of two or more cloud service providers, a request to view multi-cloud relative risk information for at least a subset of the cloud assets on which workloads of a given entity run. The processing device is also configured to obtain, utilizing application programming interfaces of the trust platform, first and second sets of cloud asset risk data generated by first and second pluralities of monitoring tools operating in tenant and management environments of the clouds of the two or more cloud service providers. The processing device is further configured to generate and provide, at the user interface of the trust platform, a unified view of the multi-cloud relative risk information utilizing the first and second sets of cloud asset risk data.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement virtual resources of at least a first cloud-based system. The processing platform further comprises a user-specific cloud infrastructure identification module configured to determine user-specific cloud infrastructure within the first cloud-based system, a virtual representation generator module configured to generate an interactive three-dimensional visualization of the first cloud-based system based on the user-specific cloud infrastructure, and a virtual representation display module configured to output the interactive three-dimensional visualization of the first cloud-based system via at least one type of interface.

Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of two or more cloud service providers, a specification of security and compliance controls to be implemented for workloads of a given entity running on a subset of the cloud assets. The processing device is also configured to obtain, utilizing application programming interfaces of the trust platform, information characterizing deployed security and compliance controls for the subset of the plurality of cloud assets from first and second pluralities of monitoring tools operating in tenant and management environments of the clouds.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement at least a portion of at least a first cloud-based system. The processing platform comprises a modelling language extension module configured to implement artificial intelligence-based decision points into a process flow and compile context attributes associated with the artificial intelligence-based decision points based on data from artificial intelligence systems.

Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of multiple cloud service providers, a request by a user to access a given cloud asset on which one or more workloads of a given entity run. The processing device is also configured to generate, on the given cloud asset utilizing application programming interfaces of the trust platform, a temporary user account responsive to determining that the requesting user is registered with the trust platform as an authorized user for the given entity and the given asset. The processing device is further configured to provide access credentials for the temporary user account to the requesting user, to monitor use of the temporary user account, and to remove the temporary user account from the given cloud asset based at least in part on the monitored use.

Abstract: Embodiments for protecting data stored and transmitted in a computer network, by receiving confidential data from a client, the data organized into labeled fields and corresponding data elements; filtering the received data to identify fields that require data masking; generating a security prediction on the corresponding data elements using a machine learning process; separating the masked data into tokenized data having a respective token associated with each corresponding data element; and storing the tokenized data on a blockchain secure ledger to ensure integrity of the received data and prevent an ability to tamper with the received data.

Abstract: Systems and methods are disclosed for managing resources associated with cluster-based resource pool(s). According to illustrative implementations, innovations herein may include or involve one or more of best fit algorithms, infrastructure based service provision, tolerance and/or ghost processing features, dynamic management service having monitoring and/or decision process features, as well as virtual machine and resource distribution features.

Abstract: Methods, apparatus, and processor-readable storage media for management of unit-based virtual accelerator resources are provided herein. An example computer-implemented method includes obtaining multiple accelerator device resource consumption measurements, wherein the measurements represent multiple accelerator device resource types consumed by one or more accelerator devices over a defined temporal interval; computing a composite unit of measurement of accelerator device resource consumption, attributable to the one or more accelerator devices over the defined temporal interval, by normalizing the multiple accelerator device resource consumption measurements using a scaling factor that is based at least in part on one or more static aspects of the one or more accelerator devices; and outputting the composite unit of measurement to at least one user.

Abstract: An apparatus in one embodiment comprises at least one processing device having a processor coupled to a memory configured to implement a plurality of virtual computing resources including a first subset providing a management network, a second subset providing partner zones, and a third subset providing customer service enclaves. The management network is configured to provision and control communication between partner zones and customer service enclaves. A given partner zone associated with a given partner is configured to provision partner-controlled services of the given partner to customer environments via the customer service enclaves. A given customer service enclave associated with a given customer is configured to activate the given partner for a given customer environment associated with the given customer to enable provisioning of the partner-controlled services of the given partner from the given partner zone to the given customer environment.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices. The processing platform is configured to implement a master control plane and a plurality of messaging interfaces. Each messaging interface corresponds to one of a plurality of infrastructure controllers residing on an infrastructure under management by the processing platform. The master control plane is configured to communicate with each of the plurality of infrastructure controllers via the corresponding messaging interface. The plurality of infrastructure controllers are each configured to manage a corresponding one of a plurality of infrastructure components of the infrastructure under management.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement at least a portion of at least a first cloud-based system. The processing platform further comprises one or more integration adapters configured to implement multiple cloud resources onto the processing platform, a cloud services module configured to deploy one or more identified cloud services onto the processing platform, a processes module configured to deploy one or more identified business processes and one or more identified technical processes onto the processing platform, and an integration middleware configured to automate ad hoc execution of at least one of the one or more cloud services, the one or more business processes, and the one or more technical processes, in conjunction with at least one of the implemented cloud resources.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement at least a portion of at least one of multiple cloud-based systems. The platform further comprises a ledger analysis module configured to identify common operation parameters associated with multiple ledger software offerings and infrastructure components required by the ledger software offerings. The platform also comprises a ledger adapter module configured to map the common operation parameters to multiple offering-specific ledger adapters, and a ledger infrastructure creation module configured to create infrastructure for implementing the ledger software offerings based on the identified infrastructure components.

Abstract: An information handling system such as a server, network switch, or virtual host collects electronic network topology data to identify topological redundancies between networked devices. Each topological redundancy indicates that a particular networked device has at least two physical cable connections to at least two other, separate devices. A topological redundancy to two network switches, for example, ensures that a networked device remains communicatively available should one of the network switches fail.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The platform is configured to implement at least a portion of at least a first cloud-based system. The platform comprises interfaces configured to enable interaction between actors and the platform, wherein the actors comprise cloud-based vendors and customers of resource offerings. The platform additionally comprises a repository configured to maintain individual resource offerings and data pertaining thereto, and a matchmaking module configured to match individual resource offerings based on associated customer attributes.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement at least a component control layer of a multi-layer application management architecture for a plurality of applications comprising controlled components. The applications are managed at least in part utilizing interactions between the component control layer and an overlying orchestration layer of the multi-layer application management architecture. The component control layer comprises at least one component controller configured to interface with one or more of the controlled components. The component controller is implemented as an application management microservice presenting a standardized application programming interface to the orchestration layer.

Abstract: An apparatus in one embodiment comprises a processing platform that includes a plurality of processing devices each comprising a processor coupled to a memory. The processing platform is configured to implement at least a portion of at least a first cloud-based system. The processing platform further comprises a smart agent engine configured to ingest datasets and related workflows in connection with service delivery operations and normalize the ingested datasets and workflows. The processing platform further comprises an analytics engine configured to generate metrics by applying machine learning algorithms to the normalized datasets and workflows, and generate an enhanced version of the normalized datasets and/or workflows by encompassing at least one inset and/or outflow based on the metrics and one or more algorithms. Also, the processing platform further comprises a decision support module configured to output the ingested datasets, the ingested workflows, and the enhanced dataset and/or workflow.