Patent ID: 9729579
Date: 2017-08-08
CPC Classifications: H04L

Claim:
1. A computer-implemented method for increasing security on computing systems that launch application containers, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: authenticating, via a policy-enforcement proxy computing system, an application container programmed to facilitate launching at least one application on a host computing system by verifying that the application container meets a certain trustworthiness threshold; intercepting, via the policy-enforcement proxy computing system, a command to perform a deployment action on the host computing system in connection with the authenticated application container; determining, via the policy-enforcement proxy computing system, that the deployment action in connection with the authenticated application container potentially violates a security policy for the host computing system that defines a whitelist of application containers allowed to deploy on the host computing system; and in response to determining that the deployment action potentially violates the security policy, preventing the potential violation of the security policy by modifying, via the policy-enforcement proxy computing system, the command to perform the deployment action.