Technologies for privacy-preserving security policy evaluation

At least one machine readable storage medium comprising instructions that, when executed, cause at least one processor to at least:

• curry a security policy function to generate a privacy-safe curried function set, the security policy function generates a security policy as a function of a plurality of policy parameters, the privacy-safe curried function set includes a non-sensitive function that receives a non-sensitive parameter of the plurality of policy parameters as an argument, and the privacy-safe curried function set further includes a sensitive function that receives a sensitive parameter of the plurality of policy parameters as an argument;
• access unencrypted parameter data corresponding to the non-sensitive parameter of the plurality of policy parameters;
• evaluate the non-sensitive function of the privacy-safe curried function set with the unencrypted parameter data to generate the sensitive functions;
• and
• provide the sensitive function of the privacy-safe curried function set to a client computing device.

A method for privacy-safe cloud threat analysis, the method comprising:

• currying, by executing an instruction with at least one processor, a security policy function to generate a privacy-safe curried function set, wherein the security policy function is to generate a security policy as a function of a plurality of policy parameters, wherein the privacy-safe curried function set includes a non-sensitive function that receives a non-sensitive parameter of the plurality of policy parameters as an argument, and wherein the privacy-safe curried function set further includes a sensitive function that receives a sensitive parameter of the plurality of policy parameters as an argument;
• accessing, by executing an instruction with the at least one processor, parameter data corresponding to non-sensitive parameter of the plurality of policy parameters, wherein the parameter data is unencrypted;
• evaluating, by executing an instruction with the at least one processor, the non-sensitive function of the privacy-safe curried function set with the parameter data to generate the sensitive function;
• and
• transmitting, by executing an instruction with the at least one processor, the sensitive function of the privacy-safe curried function set to a client computing device.