Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for inventory monitoring in a multi-cloud network environment. A method includes receiving user input via a controller's interface, wherein the input includes first account information granting access to a first virtual private cloud and a second virtual private cloud, both hosted by a cloud service provider (CSP). The controller queries the first and second virtual private clouds using the respective account information and the CSP's APIs to identify resources, gathering them into an inventory, and maintains a mapping of tags to the resources, associating each tag with a specific security policy. The controller forwards a first subset of tag-resource mappings to a first security gateway in the first virtual private cloud, enabling automatic application of corresponding security policies upon instantiation of tagged resources.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for high-fidelity event data for multi-cloud services. A method includes: storing first event information of a multi-cloud service in a cache, wherein the first event information is received from a first gateway controlled by the controller; storing second event information of the multi-cloud service in the cache, wherein the second event information is received from a first external service; mapping the second event information to the first event information to at least one identifier associated with the controller; and generating a first synthesized event information based on mapping the second event information to the first event information, the first synthesized event information including the at least one identifier, at least one event from the first event information, and at least one event from the second event information.

Abstract: A method is described for inspecting data flows within a cloud-based gateway. The method involves receiving a data flow containing data packets at the gateway and subjecting the data packets to analysis using one or more inspection services to identify a threat signature. Upon detection of the threat signature, the method includes capturing the data packets marked with the threat signature in a temporary storage, specifically, a packet capture file within the gateway. Subsequently, the data packets bearing the detected threat signature in the temporary storage are transmitted to a persistent cloud storage. The temporary storage is purged of any remaining data packets unrelated to the threat signature, ensuring that data packets associated with the identified threat signature are preserved in the persistent cloud storage. The stored data packets are formatted in any format, including a HAR or PCAP format within the persistent cloud storage.

Abstract: Methods, systems, and devices for data management are described. A custodial token platform may (e.g., via a data synchronizer or a server) route requests received from one or more client applications to one or more compute clusters that execute a set of blockchain nodes for supporting the blockchain network. The platform may assign cookies to the client applications such that subsequent requests from a same client application are routed to the correct compute cluster such as to avoid or limit data synchronization errors. The initial routing may be based on one or more routing factors. The custodial token platform may additionally support an external node validator which validates and caches data from multiple external blockchain data service providers, and the cached data may be used to service blockchain data requests. An inline data validation procedure may be performed if a request results in a cache miss.

Abstract: Methods, systems, and devices for data management are described. A custodial token platform may (e.g., via a data synchronizer or a server) route requests received from one or more client applications to one or more compute clusters that execute a set of blockchain nodes for supporting the blockchain network. The platform may assign cookies to the client applications such that subsequent requests from a same client application are routed to the correct compute cluster such as to avoid or limit data synchronization errors. The initial routing may be based on one or more routing factors. The custodial token platform may additionally support an external node validator which validates and caches data from multiple external blockchain data service providers, and the cached data may be used to service blockchain data requests. An inline data validation procedure may be performed if a request results in a cache miss.

Abstract: A method is described for inspecting data flows within a cloud-based gateway. The method involves receiving a data flow containing data packets at the gateway and subjecting the data packets to analysis using one or more inspection services to identify a threat signature. Upon detection of the threat signature, the method includes capturing the data packets marked with the threat signature in a temporary storage, specifically, a packet capture file within the gateway. Subsequently, the data packets bearing the detected threat signature in the temporary storage are transmitted to a persistent cloud storage. The temporary storage is purged of any remaining data packets unrelated to the threat signature, ensuring that data packets associated with the identified threat signature are preserved in the persistent cloud storage. The stored data packets are formatted in any format, including a HAR or PCAP format within the persistent cloud storage.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for high-fidelity event data for multi-cloud services. A method includes: storing first event information of a multi-cloud service in a cache, wherein the first event information is received from a first gateway controlled by the controller; storing second event information of the multi-cloud service in the cache, wherein the second event information is received from a first external service; mapping the second event information to the first event information to at least one identifier associated with the controller; and generating a first synthesized event information based on mapping the second event information to the first event information, the first synthesized event information including the at least one identifier, at least one event from the first event information, and at least one event from the second event information.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for inventory monitoring in a multi-cloud network environment. A method includes receiving user input via a controller's interface, wherein the input includes first account information granting access to a first virtual private cloud and a second virtual private cloud, both hosted by a cloud service provider (CSP). The controller queries the first and second virtual private clouds using the respective account information and the CSP's APIs to identify resources, gathering them into an inventory, and maintains a mapping of tags to the resources, associating each tag with a specific security policy. The controller forwards a first subset of tag-resource mappings to a first security gateway in the first virtual private cloud, enabling automatic application of corresponding security policies upon instantiation of tagged resources.