Container intrusion detection and prevention system
AssigneeRed Hat, Inc.
InventorsHuamin Chen, Jay Vyas
Life of this patent
Estimating the term…
Abstract
A container intrusion detection and prevention system includes a memory, a physical processor in communication with the memory, and an image scanner executing on the physical processor. The image scanner scans an image of a container in a container image registry. The container includes an application. The image scanner creates an image tag of the container and a set of generic rules for the container. The image scanner packages the image tag of the container with the set of generic rules to form a tuple and stores the tuple in an application rule registry.
Claims20
A method comprising:
- scanning, by a scanner, a first container, wherein the first container includes a first application;
- creating, by the scanner, a first tag of the first container;
- creating, by the scanner, a first set of generic rules for the first container;
- packaging, by the scanner, the first tag of the first container with the first set of generic rules to form a first tuple;
- and
- storing, by the scanner, the first tuple in an application rule registry.
A system comprising:
- a memory;
- a physical processor in communication with the memory;
- and
- a scanner executing on the physical processor to:
- scan a first container, wherein the first container includes a first application;
- create a first tag of the first container;
- create a first set of generic rules for the first container;
- package the first tag of the first container with the first set of generic rules to form a first tuple;
- and
- store the first tuple in an application rule registry.
A non-transitory machine readable medium storing instructions, which when executed by one or more processors in a computer system, cause the computer system to perform a method comprising:
- scanning, by a scanner, a first container, wherein the first container includes a first application;
- creating, by the scanner, a first tag of the first container;
- creating, by the scanner, a first set of generic rules for the first container;
- packaging, by the scanner, the first tag of the first container with the first set of generic rules to form a first tuple;
- and
- storing, by the scanner, the first tuple in an application rule registry.
Dependencies are inferred from the claim text.