Automatic deployment of application security policy using application manifest and dynamic process analysis in a containerization environment

A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors, configure the one or more processors to perform:

• automatically determining a security policy to be created for a virtual instance added to the virtualized system, wherein the security policy is based on a specific text pattern;
• generating the security policy based on information regarding the virtual instance and running service information associated with the virtual instance, wherein the security policy defines a set of actions that the virtual instance can perform regarding the information labeled with the specific text pattern;
• blocking an action from being performed or already being performed by the virtual instance in response to it being determined that the action is not identified in the set of actions;
• and
• transmitting the security policy to a graphical user interface container for presentation to a user via a display device,
• wherein the information is included in a manifest of the virtual instance, and the specific text pattern identifies a type and a purpose of a portion of the information.

A system comprising:

• a processor that, when executing instructions stored in a memory, is configured to:
• automatically determine a security policy to be created for a virtual instance added to the virtualized system, wherein the security policy is based on a specific text pattern;
• generate the security policy based on information regarding the virtual instance and running service information associated with the virtual instance, wherein the security policy defines a set of actions that the virtual instance can perform regarding the information labeled with the specific text pattern;
• block an action from being performed or already being performed by the virtual instance in response to it being determined that the action is not identified in the set of actions;
• and
• transmit the security policy to a graphical user interface container for presentation to a user via a display device,
• wherein the information is included in a manifest of the virtual instance, and the specific text pattern identifies a type and a purpose of a portion of the information.