System and method for executing operating system level virtualization software objects

A method for executing one or more virtualization containers, comprising for each of the one or more virtualization containers:

• executing the virtualization container in at least one isolated process of an operating system executed by at least one hardware processor, wherein the virtualization container is created from one or more software image files comprising a plurality of data patterns, each data pattern comprising at least one output target and an access instruction;
• and
• while executing the virtualization container:
• identify at least one forbidden input-output (I/O) instruction of the virtualization container, wherein the I/O instruction is forbidden according to the plurality of data patterns;
• and
• decline execution of the forbidden at least one I/O instruction.

A computer implemented method for producing one or more software image files for creating a virtualization container, comprising:

• receiving one or more virtualization container definition files describing the virtualization container;
• receiving a plurality of access rules governing input to and output from the virtualization container, each comprising at least one first output target and a first access instruction;
• producing a plurality of access patterns equivalent to the plurality of access rules, each comprising at least one second output target and a second access instruction;
• and
• producing one or more software image files comprising the plurality of access patterns and digital information for creating the virtualization container.