Container Storage Threat Detection from Anomalous Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage systems face inefficiencies in managing data storage and retrieval, particularly in flash-based systems, due to redundant processes performed by both higher and lower level controllers, leading to increased latency and reduced reliability.
Innovation Solution
Implementing a direct-mapped flash storage system where higher-level processes manage data operations directly on flash drives without address translation by lower-level controllers, utilizing zones and allocation units for efficient data management and reducing unnecessary write operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both higher-level and lower-level controllers perform redundant processes for data storage and retrieval, then data management reliability is improved, but system latency increases and productivity decreases
Solution Approach 1:
The patent extracts and eliminates the redundant lower-level controller processes that performed address translation and data management operations. By removing this intermediate layer of redundancy, the system achieves faster direct access to flash drives while higher-level controllers maintain overall data management reliability through their own process oversight.
2Reliability
If lower-level controllers perform address translation and data management processes, then data storage reliability is improved, but write operations become redundant and latency increases
Solution Approach 1:
The patent removes the redundant address translation and data management processes from lower-level controllers. Flash drives directly receive commands from higher-level controllers, eliminating the time-consuming intermediate translation steps while higher-level controllers ensure data integrity through their management processes.
Solution Approach 2:
The patent segments data management responsibilities by allowing higher-level controllers to manage data operations directly on flash drives without requiring lower-level controller intervention for address translation. This segmentation eliminates redundant processing layers and reduces operational latency.
3Reliability
If multiple controllers manage data operations with redundant processes, then data integrity is improved, but device complexity increases
Solution Approach 1:
The patent extracts and removes redundant lower-level controller processes that performed address translation and data management. This simplification reduces device complexity by eliminating unnecessary intermediate layers, while higher-level controllers maintain data integrity through their management oversight.
Data Source
AI summary
A storage management system that provides persistent storage to containerized applications running in a cluster of nodes may be configured to identify an anomalous pattern of storage operations associated with a container instance deployed in the cluster of nodes, determine, based on the anomalous pattern of storage operations, a potential security threat associated with the container instance, and perform a remedial action based on the potential security threat.