Back to results
US 10,873,592 B1Granted
Kubernetes launch graph
AssigneeLacework Inc.
InventorsHarish Kumar Bharat Singh, Vikram Kapoor
Life of this patent
Estimating the term…
Abstract
Log data associated with an environment that includes containers is received. An example of such an environment is one managed by Kubernetes. A logical graph is generated using at least a portion of the received log data. The logical graph is used to detect an anomaly. In response to the anomaly being detected, the anomaly is recorded.
Claims35
A system, comprising:
- a processor configured to:
- receive log data associated with a containerized environment;
- generate a logical graph using at least a portion of the received log data, wherein the generated logical graph comprises a Kubernetes launch graph that models launching behaviors of components in a containerized network environment and wherein the generated logical graph comprises a set of edges including at least one edge that connects a first node to a second node;
- use the logical graph to detect an anomaly, at least in part by determining that a change has been made to the set of edges, and wherein the change made to the set of edges is at least one of:
- (1) an addition of an edge to the set, and (2) a modification to an edge that is already present in the set, and in response to detecting the anomaly, generate an alert;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
4 more elements
A method, comprising:
- receiving log data associated with a containerized environment;
- generating a logical graph using at least a portion of the received log data, wherein the generated logical graph comprises a Kubernetes launch graph that models launching behaviors of components in a containerized environment and wherein the generated logical graph comprises a set of edges including at least one edge that connects a first node to a second node;
- using the logical graph to detect an anomaly, at least in part by determining that a change has been made to the set of edges, and wherein the change made to the set of edges is at least one of:
- (1) an addition of an edge to the set, and (2) a modification to an edge that is already present in the set, and in response to detecting the anomaly, generating an alert.
1 more element
A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
- receiving log data associated with a containerized environment;
- generating a logical graph using at least a portion of the received log data, wherein the generated logical graph comprises a Kubernetes launch graph that models launching behaviors of components in a containerized environment and wherein the generated logical graph comprises a set of edges including at least one edge that connects a first node to a second node;
- using the logical graph to detect an anomaly, at least in part by determining that a change has been made to the set of edges, and wherein the change made to the set of edges is at least one of:
- (1) an addition of an edge to the set, and (2) a modification to an edge that is already present in the set, and in response to detecting the anomaly, generating an alert.
1 more element
Dependencies are inferred from the claim text.