Bank of America Corporation

Manimaran Sundaravel

Maneesh Kumar Sethia

Shailendra Singh

Ngoc Anh Tran

Systems and processes are disclosed to monitor and control toxic configuration in software container deployment. AI-based monitor in each node provides end-to-end fault management system that can detect, diagnose, classify, and suggest remediation actions for non-virtualized cloud-based misconfiguration vulnerabilities. Anomalies are diagnosed using pre-computed fault signatures and automated remediation is integrated with a cloud management stack. Multiple monitoring layers within nodes secure the container-based virtualization environment. Container-based 'CSTC security framework' virtualization technology provides security and identifies potential toxic configuration threats. CSTC security locates container-based systems at severe risk for DDOS attacks to kernel vulnerability/container breakout and ensures appropriate privilege configuration for user processes. Resource access limited based on policies and CSTC security profiles as well as provide AI-based monitoring of container runtime behavior to provide additional security layer that ensures safety and protection in container-based virtualization.

Monitor and control toxic configuration in container deployment

A method includes intercepting requests, which are analyzed to identify authenticated and suspicious requests. The suspicious requests are grouped into request groups based on respective geolocation information. A rate of requests is determined for a request group. In response to determining that the rate of requests is less than or equal to a request rate threshold, parameters of a suspicious request of the request group are analyzed to determining values of the parameters. In response to determining that the value of the parameters do not match with respective malicious parameter values stored in a block list, the suspicious request is analyzed using a neural network to identify if the suspicious request is legitimate or malicious. In response to identifying that the suspicious request is malicious, a notification indicating that the suspicious request is identified as malicious is sent, and the values of the parameters are added to the block list.

Growing community of inventors

Chennai, India

Manimaran Sundaravel