Vulnerability assessment of containerised installation
AssigneeBritish Telecommunications public limited company
InventorsClaudia CRISTINA, Simon BEDDUS, Fadi EL-MOUSSA
Life of this patent
Estimating the term…
Abstract
A containerisation orchestrator (26) is controlled by an analysis system (20, 21, 22) which assesses an application and a device for compatibility to have a candidate application installed on the device using the orchestrator. The analysis includes an assessment of the vulnerability of the installed application to failure or malicious attack, and a risk assessment of the consequences of such an event. The candidate containerised configuration (20) for the application is also assessed for compatibilities and vulnerabilities.
Claims19
1-18. (canceled)
A computer-implemented process for controlling a containerisation orchestrator, by assessing a candidate application for containerised deployment to a device by the steps of:
- a) retrieving application software for running the candidate application
- b) analysing the application software for vulnerabilities
- c) analysing a container deployment configuration for the selected application
- d) retrieving data relating to operational parameters of the device
- e) comparing the operational parameters of the device with the vulnerabilities identified in the candidate application software,
- f) comparing operational parameters of the container deployment configuration with the vulnerabilities identified in the candidate application software,
- g) generating a risk score value based on the comparisons in steps e and f
- h) comparing the risk score value with a predetermined threshold value
- i) if compatibility is not identified, modifying the candidate container deployment configuration by modifying parameters of the application to improve the risk score value and repeating steps f) to h);
- j) if compatibility is identified, controlling the orchestrator to containerise and deploy the candidate application software on the device.
Dependencies are inferred from the claim text.