Container Code Object Tracing for Cybersecurity Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for detecting cybersecurity threats in containerized environments are inefficient, as they often miss threats in layers other than the live container's mount point and require extensive processing and storage to scan each layer individually.

Innovation Solution

A system and method that detect an identifier of a code object in a software artifact representing a software container, determine its location, inspect it for cybersecurity objects, and initiate remediation actions when threats are detected, thereby reducing redundant inspections and resource usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each layer of a container image is scanned to detect cybersecurity threats, then detection completeness is improved, but processing time and storage resources are excessively consumed

Engineering Contradiction:

Improvedetection completenessVSAvoidprocessing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the container image into multiple layers and identifies only the specific layer containing the code object of interest for inspection. Instead of scanning all layers, the system locates the mount point layer where the code object resides and performs inspection only on that segment, thereby reducing processing time while maintaining detection completeness for the relevant code object.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent extracts and isolates the specific code object from the container image by identifying its mount point location. The inspection process then focuses exclusively on extracting and analyzing the code object at its specific location rather than processing the entire container image or all its layers, significantly reducing the inspection scope and resource consumption.

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If each layer of a container image is scanned to detect cybersecurity threats, then detection completeness is improved, but storage resources are excessively consumed

Engineering Contradiction:

Improvedetection completenessVSAvoidstorage resources

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent segments the container image inspection process to focus only on the specific layer containing the code object. By dividing the inspection task and assigning it only to the relevant layer segment rather than the entire image, the system reduces the amount of data that needs to be stored and processed during inspection.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent extracts only the necessary code object from the container image for inspection purposes. By taking out and isolating the specific code object at its mount point location, the system avoids storing and processing redundant data from other layers, thereby reducing storage resource consumption while maintaining complete detection capability for the target code object.

Inventive Principle:

Principle #2Taking out (Extraction)

3Measurement precision

If the entire container image is inspected for cybersecurity threats, then detection accuracy is improved, but inspection efficiency deteriorates

Engineering Contradiction:

Improvedetection accuracyVSAvoidinspection efficiency

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The patent extracts the specific code object from the container image by identifying its mount point location. The inspection process then focuses exclusively on the extracted code object rather than the entire container image, maintaining detection accuracy for the relevant code while significantly improving inspection efficiency by reducing the inspection scope to only the necessary portion.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

Instead of the conventional approach of scanning the entire container image from top to bottom, the patent inverts the approach by first identifying the mount point location of the code object and then inspecting only that specific location. This reverse approach maintains detection accuracy for the target code object while dramatically improving inspection efficiency.

Inventive Principle:

Principle #13The other way round (Inversion)

Data Source

PatentUS12278835B1System and method for tracing cloud computing environment deployments to code objects

Publication Date: 2025.04.15 WIZ INC

AI summary

A system and method for detecting a cybersecurity object in an operating system-level virtualization is presented. The method includes detecting an identifier of a code object in a software artifact, wherein the software artifact represents a software container deployed in a cloud computing environment; determining a location of the code object based on the software artifact; inspecting the code object for a cybersecurity object, wherein the cybersecurity object indicates a cybersecurity threat; detecting a cybersecurity object in the code object; and initiating a remediation action based on the cybersecurity object in response to detecting the cybersecurity object in the code object.