System and method for an application container evaluation based on container events

Patent metadata

Field	Value
Publication number	US-11422899-B2
Application number	US-202016925598-A
Country	US
Kind code	B2
Filing date	Jul 10, 2020
Priority date	May 27, 2020
Publication date	Aug 23, 2022
Grant date	Aug 23, 2022

Abstract

A method for a backup operation in accordance with one or more embodiments of the invention includes obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies a an application container identifier, a container event identifier, an event severity, and an event type, selecting the container event identifier, identifying a portion of the plurality of container event entries that specify the container event identifier, generating a mean event severity based on the portion of the plurality of container event entries, generating a first vulnerability value associated with the application container identifier, and initiating a backup policy update based on a vulnerability ranking, wherein the vulnerability ranking is based on the first vulnerability value.

First claim

What is claimed is:

1. A method for managing application containers, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.

2. The method of claim 1 , further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.

3. The method of claim 1 , wherein the container event identifier is based on both the event type and the application container identifier.

4. The method of claim 1 , wherein the plurality of container event entries are obtained from an occurrence database.

5. The method of claim 4 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.

6. The method of claim 1 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.

7. The method of claim 1 , wherein the first vulnerability value is a numerical value.

8. A system, comprising:
a processor; and
memory comprising instructions which, when executed by the processor, perform a method, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.

9. The system of claim 8 , the method further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.

10. The system of claim 8 , wherein the container event identifier is based on both the event type and the application container identifier.

11. The system of claim 8 , wherein the plurality of container event entries are obtained from an occurrence database.

12. The system of claim 11 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.

13. The system of claim 8 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.

14. The system of claim 13 , wherein the first vulnerability value is a numerical value.

15. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.

16. The non-transitory computer readable medium of claim 15 , the method further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.

17. The non-transitory computer readable medium of claim 15 , wherein the container event identifier is based on both the event type and the application container identifier.

18. The non-transitory computer readable medium of claim 15 , wherein the plurality of container event entries are obtained from an occurrence database.

19. The non-transitory computer readable medium of claim 18 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.

20. The non-transitory computer readable medium of claim 15 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.

Assignees

• Emc Ip Holding Co Llc

Inventors

• Appireddygari Venkataramana Mahesh Reddy
• Chopra Shelesh
• Battal Chetan
• Shankar D H Swaroop

Classifications

• G06F2201/81

  Threshold · CPC title

• G06F11/1451

  by selection of backup contents · CPC title

• G06F11/1464

  for networked environments · CPC title

• G06F11/1461 Primary

  Backup scheduling policy · CPC title

• G06F11/1469

  Backup restoration techniques · CPC title