Monitoring for security threats in a container system
AssigneePure Storage, Inc.
InventorsLuis Pablo Pabón, Kshithij Iyer, Chun-Yi Su, Vijayan Satyamoorthy Srinivasa
Life of this patent
Estimating the term…
Abstract
An example method for monitoring for security threats in a container system comprises: monitoring, by a container storage management system configured to manage storage resources for containerized applications deployed on one or more nodes within a container system, activity within the container system; detecting, by the container storage management system based on the monitoring, an anomaly associated with the activity; and determining, by the container storage management system based on the detecting the anomaly, that data stored by the one or more storage resources is possibly being targeted by a security threat.
Claims18
A method comprising:
- providing, by a container storage management system, storage resources for containerized applications deployed on one or more nodes within a container system;
- monitoring, by the container storage management system, activity on the one or more nodes of the container system and on a control node of the container system at least one component deployed on the one or more nodes and the control node;
- developing, based on the monitoring activity on the control node, a baseline of control activity associated with the control node;
- detecting, by the container storage management system based on the monitoring and the baseline of control activity, an anomaly associated with the activity;
- and
- determining, by the container storage management system based on the detecting the anomaly, that data stored by the one or more storage resources is possibly being targeted by a security threat.
A container storage management system that manages storage resources for containerized applications deployed on one or more nodes with a container system, the container storage management system comprising:
- one or more memories storing computer-executable instructions;
- and
- one or more processors to execute the computer-executable instructions to:
- provide storage resources for containerized applications deployed on one or more nodes within a container system;
- monitor activity on the one or more nodes of the container system and on a control node of the container system, the container storage management system including at least one component deployed on the one or more nodes and the control node;
- develop, based on the monitoring activity on the control node, a baseline of control activity associated with the control node;
- detect, based on the monitoring and the baseline of control activity, an anomaly associated with the activity;
- and
- determine, based on the detecting the anomaly, that data stored by the one or more storage resources is possibly being targeted by a security threat.
A non-transitory, computer-readable medium storing computer instructions that, when executed, direct one or more processors of one or more computing devices of a storage system that provides a volume as persistent storage for a container storage management system that manages storage resources for containerized applications deployed on one or more nodes with a container system to:
- provide storage resources for containerized applications deployed on one or more nodes within a container system;
- monitor activity on the one or more nodes of the container system and on a control node of the container system, the container storage management system including at least one component deployed on the one or more nodes and the control node;
- develop, based on the monitoring activity on the control node, a baseline of control activity associated with the control node;
- detect, based on the monitoring and the baseline of control activity, an anomaly associated with the activity;
- and
- determine, based on the detecting the anomaly, that data stored by the one or more storage resources is possibly being targeted by a security threat.
Dependencies are inferred from the claim text.