Abstract: In some examples, policy-based application architecture generation may include generating, based on a knowledge model schema, data residency policies, and a data classification ontology, a knowledge model, and determining, based on the knowledge model, whether an application includes regulated data. Based on an analysis of application data and user data, user location and regulated data insights may be generated to determine location specific data residency policies. Location specific regulated data in-flow and data source hosted location insights may be analyzed to determine a location compliance assessment that includes an indication of whether a location associated with the application is compliant or not compliant with the location specific data residency policies.

Abstract: In some examples, data classification and modelling based application compliance analysis may include generating, for application data for an application, and based on data laws, a knowledge graph schema that is used to generate an instantiated knowledge graph. Based on a plurality of data sources, domain knowledge and patterns, and the instantiated knowledge graph, classified data may be generated to generate an annotated knowledge graph. Based on the annotated knowledge graph, an indication of applicable sovereign laws and compliance related to the application data for the application may be generated. Based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, a sovereign cloud strategy related to the application data for the application may be generated. Further, the sovereign cloud strategy may be applied to the application data for the application.

Abstract: System and methods for cryptologic digital twin segregation with blockchain for development operations are provided. By way of introductory example, a system may receive a first development object from a first devops tool and a second development object from a second devops tool. The system may identify, in a segregation model graph, a first node and a second node, the first node corresponding to the first development object and the second node corresponding to the second development object. The system may determine the first node is mapped to an off-chain storage classification and the second node is mapped to an on-chain storage classification. The system may store the first development object in an off-chain storage, generate a hash value of the first development object, and store the hash value of the first development object on a blockchain. The system may store the second development object on the blockchain.

Abstract: In some examples, data classification and modelling based application compliance analysis may include generating, for application data for an application, and based on data laws, a knowledge graph schema that is used to generate an instantiated knowledge graph. Based on a plurality of data sources, domain knowledge and patterns, and the instantiated knowledge graph, classified data may be generated to generate an annotated knowledge graph. Based on the annotated knowledge graph, an indication of applicable sovereign laws and compliance related to the application data for the application may be generated. Based on the annotated knowledge graph and the applicable sovereign laws and compliance related to the application data for the application, a sovereign cloud strategy related to the application data for the application may be generated. Further, the sovereign cloud strategy may be applied to the application data for the application.

Abstract: A device may obtain information identifying a base application. The device may extract a set of sub-application artifacts associated with the base application based on structural information associated with the base application. The device may define a set of metadata attributes associated with the set of sub-application artifacts associated with the base application. The device may generate a set of hash tuples for the set of metadata attributes associated with the set of sub-application artifacts associated with the base application. The device may generate a base composite identity of the base application based on the set of hash tuples. The device may store the base composite identity in a blockchain and in connection with storage of the base application in the blockchain to enable subsequent identification and verification of the base application.

Abstract: System and methods for cryptologic digital twin segregation with blockchain for development operations are provided. By way of introductory example, a system may receive a first development object from a first devops tool and a second development object from a second devops tool. The system may identify, in a segregation model graph, a first node and a second node, the first node corresponding to the first development object and the second node corresponding to the second development object. The system may determine the first node is mapped to an off-chain storage classification and the second node is mapped to an on-chain storage classification. The system may store the first development object in an off-chain storage, generate a hash value of the first development object, and store the hash value of the first development object on a blockchain. The system may store the second development object on the blockchain.

Abstract: A device may obtain information identifying a base application. The device may extract a set of sub-application artifacts associated with the base application based on structural information associated with the base application. The device may define a set of metadata attributes associated with the set of sub-application artifacts associated with the base application. The device may generate a set of hash tuples for the set of metadata attributes associated with the set of sub-application artifacts associated with the base application. The device may generate a base composite identity of the base application based on the set of hash tuples. The device may store the base composite identity in a blockchain and in connection with storage of the base application in the blockchain to enable subsequent identification and verification of the base application.