Virtual environment type verification for policy enforcement

Abstract

The environment type verification may provide tamper-proof verification of the computing environment within which the environment type verification is being performed. Policy management may then be performed utilizing such information, which may include omitting verification in order to facilitate sharing of policies, such as application permissions, from the host computing environment to the container virtual computing environment. The environment type verification may perform a plurality of checks, included are verification of an encrypted infrastructure of a computing environment, verification of a code integrity mechanism of the computing environment, a check for the presence of functionality proving a hypervisor, a check for the presence or absence of predetermined system drivers or other similar operating system components or functionalities, and a method for verifying the presence or absence of functionality proving the presence or absence of functionality proving the presence or absence of functionality proving the presence or absence of functionality. Checking for activation or deactivation of the resource management stack, and checking for the presence or absence of a predetermined value in the firmware.

Description

Background technique [0001] Traditional virtual computing environments (often referred to as "virtual machines") virtualize most or all aspects of the computing environment, and thus can present a computing environment that is very different from the host computing device hardware and operating system. However, conventional virtual computing environments can consume large amounts of memory, require significant processing resources, and otherwise be inefficient due to the need to virtualize most or all aspects of the host computing environment. In some instances, lightweight virtual computing environments, often referred to as "containers," can provide many of the isolation benefits of traditional virtual computing environments in a more efficient manner, such as by leveraging aspects of the host computing device hardware and operating system, without These aspects of the computing environment are not virtualized. As such, containers can be used to provide isolated computing e...

AI Technical Summary

Problems solved by technology

[0003] Unfortunately, because a container is perceived by the computer-executable instructions executing within it as a computing environment distinct and distinct from the user's primary computing environment, executing an application within a container may require another permission, or may not take advantage of the Permissions or other policies established within the host computing environment

Such additional licensing requirements may unnecessarily increase user costs, or may otherwise prevent users from utilizing their applications within container environments

Images