Patents
US 12743523 B2: Enhancing container security by performing container vulnerability reduction based on static and dynamic analysis of dynamically loaded symbols and system call blocking
- Granted
- 2026-09-22
- Filed
- 2023-12-14 application 18540178
- Type
- Utility · 21 claims
- Elsewhere
- Google Patents ↗ · USPTO patent document ↗ · USPTO Patent Center record ↗
Abstract
Systems and methods for enhancing container security are provided by reducing the attack surface. In one example, the exposure of containers to potential security vulnerabilities is reduced by identifying dynamically loaded symbols by an application via performance of static symbol analysis by examining a section of an executable to identify dynamically loaded symbols corresponding to functions contained within shared libraries. Based on a given shared library's usage of functions within standard libraries and a known mapping between functions of standard libraries and system calls, those system calls potentially accessed by the application may be identified and a security policy may be generated and configured for enforcement by a kernel security module to limit system call usage accordingly. Thereafter, the security policy enforced by the kernel security module may be refined based on performance of dynamic symbol analysis to identify system calls that are actually called by the application during runtime.
Source: PTBLXML, file of 2026-09-22 (ipgb20260922.xml).
Assignees
| Assignee | Type | Place | Also on furp.org | Source |
|---|---|---|---|---|
| NetApp, Inc. 2,616 patents | US company or organization | San Jose, CA | NETAPP, INC. Federal lobbying client EXACT high confidence: identical full name and state NETAPP, INC. SEC filer EXACT medium confidence: identical full name, one of each nationally | PTBLXML, file of 2026-09-22 |
Inventors
| Inventor | Place | Patents | Person page | Source |
|---|---|---|---|---|
| Azzedine Benameur | Fairfax, VA | PTBLXML, file of 2026-09-22 |
CPC categories
| Subclass | Category | First group | Source |
|---|---|---|---|
| G06F | Electric digital data processing | G06F21/577 | PTBLXML, file of 2026-09-22 |
Cooperative Patent Classification, as currently assigned (one row per subclass).
Assignments and security interests
No recorded assignments or security interests on file for this patent.
USPTO bulk data: PatentsView granted patents, disambiguated (PVGPATDIS) for patents, assignees, inventors, places and CPC categories; the USPTO Patent Assignment Dataset (ECORSEXC) for assignments and security interests. Patents filed in the last 20 years. No claims or full text. Links to other records are by name (and state): EXACT means the identical full name and state; FUZZY means a looser name match, with the confidence shown.