Patent ID: 11874929
Assignee: ACCENTURE GLOBAL SOLUTIONS LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 5:
6. A method for identifying security vulnerabilities related to containerization platforms by a processor, comprising the steps of:
accessing a repository, the repository including a plurality of container images;
searching the repository for a first image among the plurality of container images;
extracting the first image from the repository, the image comprising layered code files, the processor adapted to execute, for purpose of a vulnerability rectification of the first image, the layered code files to instantiate an interactive image container configured to deploy an executable application adapted to run on an operating system;
automatically scanning the first image for identifiable security vulnerabilities based on a set of security rules and Common Vulnerabilities and Exposures (CVE), the identifiable security vulnerabilities having CVE identification numbers stored in a security vulnerability database, the processor adapted to access the security vulnerability database;
automatically updating the interactive image container to generate an updated interactive image container by executing a set of security patches in the interactive image container, the set of security patches configured to remedy the identified security vulnerabilities via the interactive image container rather than the first image, the updated interactive image container stored in a memory;
automatically generating a first scan result listing the identified security vulnerabilities for the first image;
automatically generating an updated version of the first image based on the updated interactive image container;
storing the first scan result in a scan results database, the processor adapted to access the scan results database;
automatically updating the set of security rules and CVE;
scanning the updated version of the first image for identifiable security vulnerabilities using the updated set of security rules and the updated CVE to generate a second scan result listing security vulnerabilities of the updated version of the first image under the updated set of security rules and CVE; and
providing a user interface to depict a comparison between the first scan result and the second scan result as a graphical representation of numbers of security vulnerabilities based on security ratings via a pie chart, a bar graph, and a gauge chart.