Security Scanning of Image for Virtual Machine Creation
AssigneeSap SE
InventorsAndreas Meier, Thomas Grimmeisen
Life of this patent
Estimating the term…
Loading patent…
AssigneeSap SE
InventorsAndreas Meier, Thomas Grimmeisen
Estimating the term…
Embodiments provide automated security scanning of incoming images for use in creating containers such as a Virtual Machines. Based upon attribute(s) of metadata of the incoming image, a security engine chooses from amongst stored scripts for mounting and execution by installation logic. Such scripts can relate to the scanning itself, and/or pre-scanning considerations (such as scan frequency). In one example, the meta data attribute identifies a relevant Operating System (OS) of the incoming image. Other meta data attributes such •as scan frequency, •most recent passed scan, •log information, and •contact information (for issuance of a possible alert), may also be considered as part of the processing of an incoming image. Embodiments may enhance security by avoiding introduction of vulnerabilities through image instantiation. Embodiments may also impart flexibility to conserve resources by selectively scanning according to a frequency and/or date of last successful passage of the image.
A method comprising:
A non-transitory computer readable storage medium embodying a computer program for performing a method, said method comprising:
A computer system comprising:
Dependencies are inferred from the claim text.