Traffic enforcement in containerized environments
AssigneeTwistlock, Ltd.
InventorsLiron LEVIN, Dima STOPEL, John MORELLO, Eran YANAY
Life of this patent
Estimating the term…
Abstract
A system and method for traffic enforcement in containerized environments. The method includes analyzing contents of a container image to determine a type of application to be executed by a first container, wherein the first container is a runtime instance of the container image; determining, based on the type of application to be executed by the first container, a filtering profile for the first container, wherein the filtering profile defines a configuration for inspecting and filtering traffic directed to the first container; and filtering, based on the filtering profile, malicious traffic directed to the first container.
Claims17
A method for traffic enforcement in containerized environments, comprising:
- analyzing contents of a container image to determine a type of application to be executed by a first container, wherein the first container is a runtime instance of the container image;
- determining, based on the type of application to be executed by the first container, a filtering profile for the first container, wherein the filtering profile defines at least one configuration for inspecting and filtering traffic directed to the first container;
- and
- filtering, based on the filtering profile, malicious traffic directed to the first container.
A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:
- analyzing contents of a container image to determine a type of application to be executed by a first container, wherein the first container is a runtime instance of the container image;
- determining, based on the type of application to be executed by the first container, a filtering profile for the first container, wherein the filtering profile defines at least one configuration for inspecting and filtering traffic directed to the first container;
- and
- filtering, based on the filtering profile, malicious traffic directed to the first container.
A system for traffic enforcement in containerized environments, comprising:
- a processing circuitry;
- and
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- analyze contents of a container image to determine a type of application to be executed by a first container, wherein the first container is a runtime instance of the container image;
- determine, based on the type of application to be executed by the first container, a filtering profile for the first container, wherein the filtering profile defines at least one configuration for inspecting and filtering traffic directed to the first container;
- and
- filter, based on the filtering profile, malicious traffic directed to the first container.
Dependencies are inferred from the claim text.