Patent ID: 11966463
Assignee: SUSE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 13:
14. A system comprising:
a processor that, when executing instructions stored in a memory, is configured to:
detect that a virtual instance has been added to the virtualized system, the virtual instance having computer-readable instructions;
in response to the detection, open a manifest for the virtual instance, the stored manifest comprising information regarding the virtual instance, wherein a portion of the information is labeled using a specific text pattern indicative of a type and purpose of the information;
retrieve running services information about the virtual instance running on the virtualized system;
automatically determining a security policy to be created for the virtual instance based on the specific text pattern;
generate the security policy for the virtual instance based on the information regarding the virtual instance, and the running service information associated with the virtual instance, wherein the security policy defines a set of actions that the virtual instance can perform regarding the information labeled with the specific text pattern;
block an action performed by the virtual instance in response to determining that the action performed by the virtual instance does not match any action in the set of actions defined in the security policy for the virtual instance; and
transmit the security policy to a graphical user interface container for presentation to a user via a display device.