Abstract: Embodiments for protecting data stored and transmitted in a computer network, by receiving confidential data from a client, the data organized into labeled fields and corresponding data elements; filtering the received data to identify fields that require data masking; generating a security prediction on the corresponding data elements using a machine learning process; separating the masked data into tokenized data having a respective token associated with each corresponding data element; and storing the tokenized data on a blockchain secure ledger to ensure integrity of the received data and prevent an ability to tamper with the received data.

Abstract: An apparatus in one embodiment comprises at least one processing device having a processor coupled to a memory configured to implement a plurality of virtual computing resources including a first subset providing a management network, a second subset providing partner zones, and a third subset providing customer service enclaves. The management network is configured to provision and control communication between partner zones and customer service enclaves. A given partner zone associated with a given partner is configured to provision partner-controlled services of the given partner to customer environments via the customer service enclaves. A given customer service enclave associated with a given customer is configured to activate the given partner for a given customer environment associated with the given customer to enable provisioning of the partner-controlled services of the given partner from the given partner zone to the given customer environment.

Abstract: Embodiments for protecting data stored and transmitted in a computer network, by receiving confidential data from a client, the data organized into labeled fields and corresponding data elements; filtering the received data to identify fields that require data masking; generating a security prediction on the corresponding data elements using a machine learning process; separating the masked data into tokenized data having a respective token associated with each corresponding data element; and storing the tokenized data on a blockchain secure ledger to ensure integrity of the received data and prevent an ability to tamper with the received data.

Abstract: An apparatus in one embodiment comprises at least one processing device having a processor coupled to a memory configured to implement a plurality of virtual computing resources including a first subset providing a management network, a second subset providing partner zones, and a third subset providing customer service enclaves. The management network is configured to provision and control communication between partner zones and customer service enclaves. A given partner zone associated with a given partner is configured to provision partner-controlled services of the given partner to customer environments via the customer service enclaves. A given customer service enclave associated with a given customer is configured to activate the given partner for a given customer environment associated with the given customer to enable provisioning of the partner-controlled services of the given partner from the given partner zone to the given customer environment.

Abstract: Systems and methods relating to improved security in cloud computing environments are disclosed. According to one illustrative implementation, a method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host is provided. Further, the method may include performing processing to obtain initial geo location data of the device, determining verified geo location data of the device by performing validation, via an attestation service component, of the initial geo location data to provide verified geo location data, and writing the verified geo location data into HSM or TPM space of the hypervisor host.

Abstract: Systems and methods relating to improved security in cloud computing environments are disclosed. According to one illustrative implementation, a method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host is provided. Further, the method may include performing processing to obtain initial geo location data of the device, determining verified geo location data of the device by performing validation, via an attestation service component, of the initial geo location data to provide verified geo location data, and writing the verified geo location data into HSM or TPM space of the hypervisor host.

Abstract: Systems and methods relating to improved security in cloud computing environments are disclosed. According to one illustrative implementation, a method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host is provided. Further, the method may include performing processing to obtain initial geo location data of the device, determining verified geo location data of the device by performing validation, via an attestation service component, of the initial geo location data to provide verified geo location data, and writing the verified geo location data into HSM or TPM space of the hypervisor host.

Abstract: Systems and methods relating to improved security in cloud computing environments are disclosed. According to one illustrative implementation, a method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host is provided. Further, the method may include performing processing to obtain initial geo location data of the device, determining verified geo location data of the device by performing validation, via an attestation service component, of the initial geo location data to provide verified geo location data, and writing the verified geo location data into HSM or TPM space of the hypervisor host.