Gitlab Inc.

Royi Klein

Yuri Shafet

Shlomi Boutnaru

Yotam Perkal

Omri Lahav

Lior Zur-lotan

Artem Merkovich

Artum Zolotushko

Liran Tancman

Tal Kopeliovich

Embodiments described herein are directed to determining whether an application executing on a compute instance has been corrupted or compromised by malicious code. This may achieved by statically analyzing an image file from which the application is based to determine characteristics thereof. Such characteristics are representative of the behavior that is expected to be performed by the application during execution. During execution of the application, runtime characteristics of the application are determined, which are determined based on an analysis of the address space in memory allocated for a computing process of the application. The statically-determined characteristics are compared to the determined runtime characteristics to determine discrepancies therebetween. In the event that a discrepancy is found, a determination is made that the application has been compromised or corrupted and an appropriate remedial action is automatically performed.

Automatic mitigation of corrupted or compromised compute resources

Growing community of inventors

Beer Sheva, Israel

Royi Klein