The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 22, 2022

Filed:

Mar. 23, 2018
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Sahil Suneja, Yorktown Heights, NY (US);

Shripad Nadgowda, White Plains, NY (US);

Canturk Isci, Ridgewood, NJ (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/455 (2018.01);
U.S. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/45545 (2013.01); G06F 9/45558 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01);
Abstract

A sandbox component, operatively coupled to a host and a guest container, the sandbox component securely extends systems data collection software with potentially untrusted third-party code. A secure environment is enabled where plugins will run inside a sidecar container that is separate from a guest container. A container consists of an entire runtime environment: an application, plus its dependencies, libraries and other binaries, and configuration files needed to run it, bundled into one package. A sidecar service is not necessarily part of the application but is connected to the guest container and follows the parent application. A sidecar is independent from its primary application in terms of runtime environment and programming language. The sidecar plugin will be given a sparse/limited set of privileges required to simply perform its intended function and the Linux kernel constructs will control data access and transfer. The Plugin is essentially considered sandboxed as it runs in a sidecar and is fenced in by a set of kernel constructs.


Find Patent Forward Citations

Loading…