US 2025/0097095 A1 · ON-DEMAND UNIKERNEL FOR APPLICATION PROTECTION

Abstract

Embodiments of the present disclosure relate to systems and methods for using unikernels to protect critical safety applications from interference events. For each of a set of applications identified as critical to the functioning of a computing environment, a corresponding unikernel may be generated, the unikernel including code of the application and kernel functionality. In response to determining that an interference event is affecting a first application of the set of applications, it is determined whether the interference event is unsustainable. In response to determining that the interference event is unsustainable, the unikernel corresponding to the first application is initiated and a failover from the first application to the unikernel corresponding to the first application is performed.

Claims20

Dependent claims

A method comprising:

for each of a set of applications identified as critical to a functioning of a computing environment, generating a corresponding unikernel, wherein the unikernel includes code of the application and kernel functionality;
in response to determining that an interference event is affecting a first application of the set of applications, determining whether the interference event is unsustainable, wherein the interference event includes interference with the first application utilizing system resources by a second application, wherein the first application is a safety application of a control system associated with the computing environment;
in response to determining that the interference event is unsustainable, initiating, by a processing device, the unikernel corresponding to the first application;
and
performing a failover from the first application to the unikernel corresponding to the first application.

2 more elements

A non-transitory computer-readable medium having instructions stored thereon which, when executed by a processing device, cause the processing device to:

for each of a set of applications identified as critical to a functioning of a computing environment, generate a corresponding unikernel, wherein the unikernel includes code of the application and kernel functionality;
in response to determining that an interference event is affecting a first application of the set of applications, determine whether the interference event is unsustainable, wherein the interference event includes interference with the first application utilizing system resources by a second application, wherein the first application is a safety application of a control system associated with the computing environment;
in response to determining that the interference event is unsustainable, initiate, by the processing device, the unikernel corresponding to the first application;
and
perform a failover from the first application to the unikernel corresponding to the first application.

2 more elements

Dependencies are inferred from the claim text.

On-demand unikernel for application protection

Life of this patent

On-demand unikernel for application protection

Life of this patent

Abstract

Claims20