System and method for an application container evaluation based on container events
A method for a backup operation in accordance with one or more embodiments of the invention includes obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies a an application container identifier, a container event identifier, an event severity, and an event type, selecting the container event identifier, identifying a portion of the plurality of container event entries that specify the container event identifier, generating a mean event severity based on the portion of the plurality of container event entries, generating a first vulnerability value associated with the application container identifier, and initiating a backup policy update based on a vulnerability ranking, wherein the vulnerability ranking is based on the first vulnerability value.
1. A method for managing application containers, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.
2. The method of claim 1 , further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.
3. The method of claim 1 , wherein the container event identifier is based on both the event type and the application container identifier.
4. The method of claim 1 , wherein the plurality of container event entries are obtained from an occurrence database.
5. The method of claim 4 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.
6. The method of claim 1 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.
7. The method of claim 1 , wherein the first vulnerability value is a numerical value.
8. A system, comprising:
a processor; and
memory comprising instructions which, when executed by the processor, perform a method, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.
9. The system of claim 8 , the method further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.
10. The system of claim 8 , wherein the container event identifier is based on both the event type and the application container identifier.
11. The system of claim 8 , wherein the plurality of container event entries are obtained from an occurrence database.
12. The system of claim 11 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.
13. The system of claim 8 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.
14. The system of claim 13 , wherein the first vulnerability value is a numerical value.
15. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method, the method comprising:
obtaining, by a vulnerability analyzer executing on a backup server, a plurality of container event entries, wherein a container event entry of the plurality of container event entries specifies an application container identifier, a container event identifier, an event severity, and an event type;
selecting the container event identifier;
identifying a portion of the plurality of container event entries that specify the container event identifier;
generating a mean event severity based on the portion of the plurality of container event entries;
generating a first vulnerability value associated with the application container identifier; and
initiating a backup policy update based on a vulnerability ranking,
wherein the vulnerability ranking is based on the first vulnerability value.
16. The non-transitory computer readable medium of claim 15 , the method further comprising:
selecting a second container event identifier;
identifying a second portion of the plurality of container event entries that specify the second container event identifier;
generating a second mean event severity based on the second portion of the plurality of container event entries;
generating a second vulnerability value associated with a second application container identifier;
generating a second vulnerability ranking based on the first vulnerability value and the second vulnerability value; and
initiating a second backup policy update based on the second vulnerability ranking.
17. The non-transitory computer readable medium of claim 15 , wherein the container event identifier is based on both the event type and the application container identifier.
18. The non-transitory computer readable medium of claim 15 , wherein the plurality of container event entries are obtained from an occurrence database.
19. The non-transitory computer readable medium of claim 18 , wherein the occurrence database is stored in a production host executing an application container associated with the application container identifier.
20. The non-transitory computer readable medium of claim 15 , wherein initiating the backup policy update comprises updating a backup schedule of an application container associated with the application container identifier.