Container Vulnerability Analyzer for Dynamic Backup Policy Adjustment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing backup systems inefficiently utilize computing resources as they lack a method to dynamically assess and adjust backup policies based on the vulnerability of application containers, leading to suboptimal resource allocation and protection.

Innovation Solution

A system that utilizes a vulnerability analyzer to collect and analyze container event entries, generating a mean event severity and vulnerability value for each application container, which informs the update of backup policies to prioritize more vulnerable containers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If backup policies are updated dynamically based on container vulnerability assessment, then data protection effectiveness is improved, but system complexity increases

Engineering Contradiction:
Improvedata protection effectivenessVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements a feedback mechanism where container events are continuously monitored, vulnerability assessments are performed based on event severity, and backup policies are dynamically updated according to the assessed vulnerability levels. This closed-loop feedback system enables adaptive data protection without requiring manual intervention.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The vulnerability analyzer automatically performs container event collection, severity assessment, and backup policy updates without external intervention. The system serves itself by autonomously evaluating container vulnerability and adjusting backup strategies based on the computed vulnerability values.

Inventive Principle:
Principle #25Self-service

2Productivity

If computing resources are allocated based on container vulnerability, then resource utilization efficiency is improved, but measurement precision requirements increase

Engineering Contradiction:
Improveresource utilization efficiencyVSAvoidvulnerability assessment precision
Core Design Contradiction:
ProductivityVSMeasurement precision

Solution Approach 1:

The system changes the parameter of backup policy allocation from static to dynamic by introducing vulnerability assessment metrics. Container events are evaluated with severity levels, and backup resources are allocated based on computed vulnerability values, allowing flexible resource adjustment without requiring extremely precise measurements.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

Different backup policies are applied to different containers based on their individual vulnerability assessments. Each container receives customized protection levels according to its specific event history and severity, rather than applying a uniform backup strategy across all containers.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11422899B2System and method for an application container evaluation based on container events
Publication Date: 2022.08.23 EMC IP HLDG CO LLC
  • US11422899B2 patent drawing
  • US11422899B2 patent drawing
  • US11422899B2 patent drawing

AI summary

A method for a backup operation in accordance with one or more embodiments of the invention includes obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies a an application container identifier, a container event identifier, an event severity, and an event type, selecting the container event identifier, identifying a portion of the plurality of container event entries that specify the container event identifier, generating a mean event severity based on the portion of the plurality of container event entries, generating a first vulnerability value associated with the application container identifier, and initiating a backup policy update based on a vulnerability ranking, wherein the vulnerability ranking is based on the first vulnerability value.