Back to results
US 9,794,287 B1Granted
Implementing cloud based malware container protection
AssigneeInternational Business Machines Corporation
InventorsDavid M. Koster, Jason A. Nikolai, Adam D. Reznechek, Andrew T. Thorstensen
Life of this patent
Estimating the term…
Abstract
A method, and a system are provided for implementing cloud based malware container protection. A container is provisioned for a user. The container is monitored, and when an abnormal activity is detected based upon historical metric data, a unikernel is provisioned and a user application is migrated to the unikernel while inspection occurs.
Claims18
A method for implementing cloud based malware container protection in a computer system comprising:
- provisioning a container for a user and sharing a kernel for the provisioned user container with other provisioned user containers;
- monitoring of container metrics for the container to detect an abnormal activity by the user;
- and
- responsive to detecting abnormal activity, provisioning a unikernel and migrating a user application by the user to the provisioned unikernel providing an isolated zone while inspection occurs;
- said provisioned unikernel comprising a container environment running the migrated user application with the user using the provisioned unikernel seeing at most a migrated user application outage that does not affect the user using the migrated user application, while the other provisioned user containers remain secure;
- and
- responsive to identifying a false positive for the detected abnormal activity, provisioning a different user container for the user of the migrated user application and sharing the kernel for the different provisioned user container with other provisioned user containers.
4 more elements
A computer system for implementing cloud based malware container protection comprising:
- a processor;
- a container monitor and unikernel provisioning control;
- said processor using said container monitor and unikernel provisioning control performs:
- provisioning a container for a user and sharing a kernel for the provisioned user container with other provisioned user containers;
- monitoring of container metrics for the container to detect an abnormal activity by the user;
- and
- responsive to detecting abnormal activity, provisioning a unikernel and migrating an application by the user to the provisioned unikernel providing an isolated zone while inspection occurs;
- and said provisioned unikernel comprising a container environment running the migrated user application with the user of the provisioned unikernel seeing at most a migrated user application outage that does not affect the user using the migrated user application, while the other provisioned user containers remain secure;
- and
- responsive to identifying a false positive for the detected abnormal activity, provisioning a different user container for the user of the migrated user application and sharing the kernel for the different provisioned user container with other provisioned user containers.
7 more elements
Dependencies are inferred from the claim text.