Network context triggers for activating virtualized computer applications

A computer-implemented method, comprising:

• establishing a plurality of controlled execution spaces, each controlled execution space configured to host an operating system and an application program of an application-operating system pair;
• creating and storing one or more vulnerability profiles, wherein each of the vulnerability profiles comprises an application program identifier, an operating system identifier, a vulnerability specification describing a vulnerability of the application program that the application program identifier indicates when executed with the operating system that the operating system identifier indicates, and a remedial action which when executed will remediate the vulnerability;
• monitoring, by a vulnerability monitoring agent, execution of the application program and monitoring execution of the operating system as the application-operating system pair, comprising the operating system and the application program, is executing in a controlled execution space;
• detecting an anomaly of corruption of the executions of the application program and the operating system;
• determining an appropriate action for the operating system and the application program based on one of the vulnerability profiles and the detected anomaly of corruption;
• in response to detecting that the application program executed under the operating system is corrupted, removing the application program and the operating system from the controlled execution space;
• requesting re-imaging the controlled execution space with new copies of the application program and the operating system from a repository storing copies of applications and operating systems;
• wherein the method is performed by one or more processors.

A non-transitory computer-readable storage medium, comprising computer-executable instructions which, when executed by one or more processors, cause the one or more processors to perform:

• establishing a plurality of controlled execution spaces, each controlled execution space configured to host an operating system and an application program of an application-operating system pair;
• creating and storing one or more vulnerability profiles, wherein each of the vulnerability profiles comprises an application program identifier, an operating system identifier, a vulnerability specification describing a vulnerability of the application program that the application program identifier indicates when executed with the operating system that the operating system identifier indicates, and a remedial action which when executed will remediate the vulnerability;
• monitoring, by a vulnerability monitoring agent, execution of the application program and monitoring execution of the operating system as the application-operating system pair, comprising the operating system and the application program, is executing in a controlled execution space;
• detecting an anomaly of corruption of the executions of the application program and the operating system;
• determining an appropriate action for the operating system and the application program based on one of the vulnerability profiles and the detected anomaly of corruption;
• in response to detecting that the application program executed under the operating system is corrupted, removing the application program and the operating system from the controlled execution space;
• requesting re-imaging the controlled execution space with new copies of the application program and the operating system from a repository storing copies of applications and operating systems.