Patent · US Active

Runtime container protection

US12277446B2 · kind B2 · utility

0Cited by
10References
16Claims
0Family size

Assignee

Inventors

Key dates

Filing dateMar 16, 2021
Grant dateApr 15, 2025
Priority date
Expiry dateNov 9, 2043

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F21/78
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

According to certain embodiments, a method comprises monitoring a request for use of memory requested by a container manager application on behalf of a given one of a plurality of containers during runtime of the given container. The method further comprises determining that the request for use of memory has caused an exception. The exception indicates that the request has requested an invalid operation on a memory table or that the request has requested a previously not seen memory table. In response, the method further comprises determining an action to perform. The action depends on both first trustworthiness information associated with the given container and second trustworthiness information associated with the given container. The first trustworthiness information is obtained from a Third Party Reputation Service (TPRS). The second trustworthiness information is obtained based on monitoring the runtime behavior of the given container.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.