US 2022/0188444 A1 · SYSTEMS AND METHODS FOR SECURING VIRTUALIZED EXECUTION INSTANCES

Abstract

Systems, methods, and non-transitory computer-readable media for container management are disclosed. A system consistent with disclosed embodiments can include a processor and a computer-readable medium containing instructions. When executed by the processor, the instructions can cause the system to perform operations. The operations can include obtaining a request by a first process running in a container for access to a protected resource. The operations can further include determining that a set of registered processes does not include the first process, the set of registered processes being processes running in the container at a time point or in a time interval following creation of the container. The operations can further include determining that an exception applies to the first process and, in response to the determination that the exception applies to the first process, providing the first process access to the protected resource.

Claims21

Dependent claims

A system for container management, comprising:

at least one processor;
and
at least one computer-readable medium containing instructions that, when executed by the at least one processor, cause the system to perform operations comprising:
obtaining a request by a first process running in a container for access to a protected resource;
determining that a set of registered processes does not include the first process, the set of registered processes being processes running in the container at a time point or in a time interval following creation of the container;
determining that an exception applies to the first process;
and
in response to the determination that the exception applies to the first process, providing the first process access to the protected resource.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

17/645,300Filed 20 Dec 2021

Priority

22 Apr 2019

Published

16 Jun 2022

Term ends

Not estimatedThe source records don’t support an estimate.

Classification21 codes

G06F 8/60
Arrangements for software engineering: software deployment
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 9/468
Multiprogramming arrangements: specific access rights for resources, e.g. using capability register

Family

Application16/390,542Continuation in part · filed 22 Apr 2019

Application16/451,680Continuation in part · filed 25 Jun 2019

Application16/837,625Continuation · filed 1 Apr 2020

Application16/950,006Continuation in part · filed 17 Nov 2020

Application16/950,003Continuation in part · filed 17 Nov 2020

Application17/645,300Continuation in part

Application16/950,006Continuation

Application16/837,625Continuation in part

Application16/950,003Continuation

US 10,735,430 B1Related patent

US 10,878,119 B2Related patent