ANOMALOUS ACTIVITY DETECTION IN CONTAINER IMAGES: abstract simplified (17716741)

• This abstract for appeared for patent application number 17716741 Titled 'ANOMALOUS ACTIVITY DETECTION IN CONTAINER IMAGES'

Simplified Explanation

The abstract describes an apparatus that uses a processor and memory to identify and analyze container images. Each container image is assigned a behavioral profile, and the processor checks if the activities in a specific container image comply with the corresponding activities in its assigned profile. If any activity in the container image deviates from the profile, the processor determines it as an anomalous activity and generates an alert.

Original Abstract Submitted

According to examples, an apparatus may include a processor and a memory on which is stored machine-readable instructions that may cause the processor to identify a container image group of a plurality of container image groups to which a subject container image corresponds, in which each of the plurality of container image groups is assigned a respective behavioral profile. The processor may also determine whether activities in the subject container image comply with corresponding activities identified in the behavioral profile of the identified container image group. Based on a determination that at least one activity in the subject container image fails to comply with a corresponding at least one activity identified in the behavioral profile of the identified container image group, the processor may determine that the subject container image includes an anomalous activity and output an alert indicating that the subject container image includes an anomalous activity.