Sanitization of virtual machine images
AssigneeInternational Business Machines Corporation
InventorsSuresh N. Chari, Ashish Kundu
Life of this patent
Estimating the term…
Abstract
Sanitizing a virtual machine image of sensitive data is provided. A label for a sensitivity level is attached to identified sensitive data contained within each software component in a plurality of software components of a software stack in a virtual machine image based on labeling policies. In response to receiving an input to perform a sanitization of the identified sensitive data having attached sensitivity level labels contained within software components of the software stack in the virtual machine image, the sanitization of the identified sensitive data having the attached sensitivity level labels contained within the software components of the software stack in the virtual machine image is performed based on sanitization policies.
Claims20
A computer system for sanitizing a virtual machine image of sensitive data, the computer system comprising:
- a bus system;
- a storage device connected to the bus system, wherein the storage device stores computer readable program code;
- and
- a processor unit connected to the bus system, wherein the processor unit executes the computer readable program code to attach a sensitivity level label to identified sensitive data contained within each software component in a plurality of software components of a software stack in a virtual machine image based on labeling policies;
- and perform a sanitization of identified sensitive data having attached sensitivity level labels contained within software components of the software stack in the virtual machine image based on sanitization policies in response to receiving an input to perform the sanitization of the identified sensitive data having the attached sensitivity level labels contained within the software components of the software stack in the virtual machine image.
A computer program product stored on a computer readable storage medium having computer readable program code encoded thereon that is executable by a computer for sanitizing a virtual machine image of sensitive data, the computer program product comprising:
- computer readable program code for attaching a sensitivity level label to identified sensitive data contained within each software component in a plurality of software components of a software stack in a virtual machine image based on labeling policies;
- and
- computer readable program code for performing a sanitization of identified sensitive data having attached sensitivity level labels contained within software components of the software stack in the virtual machine image based on sanitization policies in response to receiving an input to perform the sanitization of the identified sensitive data having the attached sensitivity level labels contained within the software components of the software stack in the virtual machine image.
Dependencies are inferred from the claim text.