Virtual Container Deployment via API Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely deploying and managing software applications on managed endpoints in an enterprise environment, requiring secure, controlled, and portable installation and maintenance.
Innovation Solution
The implementation of virtualizing applications using containers, where a managed endpoint receives a virtualized container from an IT automation appliance, including an application and a virtualization module that intercepts operating system API calls to modify behavior and provide file and data virtualization, allowing for secure, portable, and controlled deployment and updating of applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If applications are deployed directly on managed endpoints without virtualization, then installation and execution are simpler, but security control and isolation are compromised
Solution Approach 1:
The system segments the application environment by creating virtualized containers that isolate applications from the host operating system. Each container encapsulates the application and its dependencies, providing security isolation while maintaining manageable system structure through modular design.
Solution Approach 2:
A virtualization layer acts as an intermediary between the application and the managed endpoint's operating system. This intermediary provides security control and isolation mechanisms without requiring direct modification of the application or the host system, resolving the contradiction between security enhancement and system complexity.
2Adaptability or versatility
If applications are customized for specific endpoint configurations, then optimal performance is achieved, but portability across different endpoints is reduced
Solution Approach 1:
The virtualized container provides a universal execution environment that can run applications across different endpoint configurations without customization. The container encapsulates all necessary dependencies and configuration, making the application portable while maintaining consistent behavior across diverse hardware and software environments.
Solution Approach 2:
The system changes the execution parameters by introducing a virtualization layer that abstracts away hardware and operating system specificities. This allows applications to maintain their configuration accuracy while achieving portability, as the virtualized environment standardizes the execution parameters across different endpoints.
3Reliability
If traditional deployment methods are used, then deployment speed is faster, but security isolation and control are insufficient
Solution Approach 1:
The system performs preliminary action by pre-configuring and packaging applications into virtualized containers with all necessary security controls and dependencies included. This preparation work enables rapid deployment of secure, isolated applications without compromising deployment speed, as the containers are self-contained and require minimal installation steps.
Data Source
AI summary
A system virtualizes applications on a managed endpoint using containers. A managed endpoint receives a virtualized container from an IT automation appliance. The virtualized container includes an application and a virtualization module. The virtualization module includes computer program instructions for virtualizing the application. An operating system API call made by the application during execution is intercepted, and a portion of the computer program instructions are executed based on the operating system API call. The computer program instructions modify the behavior of the application to effect the file and data virtualization of the application. A virtualized container can be deployed and updated from an IT automation appliance along with an agent to support the deployment and updating of the virtualized container.