Patent ID: 11874929
Assignee: ACCENTURE GLOBAL SOLUTIONS LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A system for identifying security vulnerabilities related to containerization platforms, comprising:
a memory to store executable instructions; and
a processor adapted to access the memory, the processor further adapted to execute the executable instructions stored in the memory to:
access a repository, the repository including a plurality of container images;
search the repository for a first image among the plurality of container images;
extract the first image from the repository, the first image comprising layered code files;
automatically execute, for purpose of a vulnerability rectification of the first image, the layered code files to instantiate an interactive image container configured to deploy an executable application adapted to run on an operating system;
automatically scan the first image for identifiable security vulnerabilities based on a set of security rules and Common Vulnerabilities and Exposures (CVE), the identifiable security vulnerabilities having CVE identification numbers stored in a security vulnerability database, the processor adapted to access the security vulnerability database;
automatically update the interactive image container to generate an updated interactive image container by executing a set of security patches in the interactive image container, the set of security patches configured to remedy the identified security vulnerabilities via the interactive image container rather than the first image, the updated interactive image container stored in the memory;
automatically generate a first scan result listing the identified security vulnerabilities for the first image;
automatically generate an updated version of the first image based on the updated interactive image container;
store the first scan result in a scan results database, the processor adapted to access the scan results database;
automatically update the set of security rules and CVE;
scan the updated version of the first image for identifiable security vulnerabilities using the updated set of security rules and the updated CVE to generate a second scan result listing security vulnerabilities of the updated version of the first image under the updated set of security rules and CVE; and
provide a user interface to depict a comparison between the first scan result and the second scan result as a graphical representation of numbers of security vulnerabilities based on security ratings via a pie chart, a bar graph, and a gauge chart.