Abstract: A cloud resource audit system includes a plurality of datacenter hardware resources and a cloud resource management controller that is coupled to the plurality of datacenter hardware resources and that allocates a first portion of the plurality of datacenter hardware resources to run one or more workloads for a first end user on the first portion of the plurality of datacenter hardware resources. The cloud resource management controller then executes a first set of audit instructions to performs a first audit action on one or more datacenter hardware resources included in the first portion of the plurality of datacenter hardware resources, and provides, in response to the first set of audit instructions being executed and the first audit action being performed, a first set of audit results to an audit terminal device.

Abstract: Described herein are systems and methods to provide lawful interception (LI) of infrastructure state in a manner known only to law enforcement. A bare-metal cloud (BMC) control module is provided to an end user to allow user configuration and management for a set of one or more physical resources that form a BMC instantiation for the end user. An LI policy and control module may be used for data traffic tracking or hardware monitoring inside the BMC instantiation upon one or more conditions are met. Upon activation, customizable hardware monitoring may be implemented unbeknownst to the end-user. Such a technique of offering customizable bare-metal level LI service unbeknownst to end-users may enable new kinds of infrastructure interception methods.

Abstract: Described herein are systems and methods to provide lawful interception (LI) of infrastructure state in a manner known only to law enforcement. A bare-metal cloud (BMC) control module is provided to an end user to allow user configuration and management for a set of one or more physical resources that form a BMC instantiation for the end user. An LI policy and control module may be used for data traffic tracking or hardware monitoring inside the BMC instantiation upon one or more conditions are met. Upon activation, customizable hardware monitoring may be implemented unbeknownst to the end-user. Such a technique of offering customizable bare-metal level LI service unbeknownst to end-users may enable new kinds of infrastructure interception methods.

Abstract: A cloud resource audit system includes a plurality of datacenter hardware resources and a cloud resource management controller that is coupled to the plurality of datacenter hardware resources and that allocates a first portion of the plurality of datacenter hardware resources to run one or more workloads for a first end user on the first portion of the plurality of datacenter hardware resources. The cloud resource management controller then executes a first set of audit instructions to performs a first audit action on one or more datacenter hardware resources included in the first portion of the plurality of datacenter hardware resources, and provides, in response to the first set of audit instructions being executed and the first audit action being performed, a first set of audit results to an audit terminal device.