China Science Patent & Trademark US LLC
System and method for monitoring file integrity of multiple containers using one agent
A system for monitoring file integrity in a host computing device having a process and a storage device storing computer executable code. The computer executable code is configured to: provide containers, an agent external to the containers, and a policy file configuring policy for the containers; intercept a system call indicating mounting, and construct a first correspondence between a container file path and a host file path having mounting correspondence; intercept a system call of the container indicating opening of the policy file, and construct a second correspondence between the container file path and the violation of the container file path; aggregate the first and second correspondences to obtain a correspondence between the host file path and the violation; and monitor file integrity of the container by detecting violation of the host file path.
Beijing Jingdong Shangke Information Technology Co., Ltd. JD.com American Technologies Corporation
G G G G G H G G G G G G G G G G G G G
G06F G06F G06F G06F G06F H04L G06F G06F G06F G06F G06F G06F G06F G06F G06F G06F G06F G06F G06F
inventional inventional additional inventional inventional inventional additional additional inventional inventional additional additional inventional inventional additional inventional inventional inventional inventional
Jimmy Zhenxin Junyuan Yuan
Su Zhan Zeng Chen