On-demand unikernel for application protection

1 . A method comprising:

for each of a set of applications identified as critical to a functioning of a computing environment, generating a corresponding unikernel, wherein the unikernel includes code of the application and kernel functionality;

in response to determining that an interference event is affecting a first application of the set of applications, determining that the interference event is unsustainable based on memory allocation collision errors within a period of time exceeding a threshold, wherein the interference event includes interference with the first application utilizing system resources by a second application, wherein the first application is a safety application of a control system associated with the computing environment, wherein the computing environment is a vehicle control system of a vehicle;

adjusting one or more of a set of thresholds associated with a frequency of a type of interference event and a set of thresholds associated with a magnitude of the type of interference event based on historical driving patterns of the vehicle and current driving conditions of the vehicle;

in response to determining that the interference event is unsustainable, initiating, by a processing device, the unikernel corresponding to the first application; and

performing a failover from the first application to the unikernel corresponding to the first application.

2 . The method of claim 1 , further comprising:

tagging each of the set of applications as critical to generate the set of applications identified as critical.

3 . The method of claim 1 , further comprising:

monitoring each of the set of applications to determine that an interference event is affecting any of the tagged applications.

4 . The method of claim 1 , wherein determining that the interference event affecting the first application is unsustainable comprises:

comparing the interference event to a first rule of a set of rules to determine that the interference event affecting the first application is unsustainable, wherein each of the set of rules includes one or more of: the set of thresholds associated with the frequency of the type of interference event and the set of thresholds associated with the magnitude of the type of interference event.

5 . The method of claim 4 , wherein the first rule comprises:

a first threshold corresponding to a level of interference that will not affect the first application or a level of interference that the first application can recover from; and

a second threshold corresponding to a level of interference that will affect the first application and that the first application cannot recover from.

6 . The method of claim 1 , wherein performing the failover comprises:

routing traffic directed to the first application to the unikernel corresponding to the first application; and

shutting down the first application.

7 . A system comprising:

a memory; and

a processing device operatively coupled to the memory, the processing device to:

for each of a set of applications identified as critical to a functioning of a computing environment, generate a corresponding unikernel, wherein the unikernel includes code of the application and kernel functionality;

in response to determining that an interference event is affecting a first application of the set of applications, determine that the interference event is unsustainable based on memory allocation collision errors within a period of time exceeding a threshold, wherein the interference event includes interference with the first application utilizing system resources by a second application, wherein the first application is a safety application of a control system associated with the computing environment, wherein the computing environment is a vehicle control system of a vehicle;

adjust one or more of a set of thresholds associated with a frequency of a type of interference event and a set of thresholds associated with a magnitude of the type of interference event based on historical driving patterns of the vehicle and current driving conditions of the vehicle;

in response to determining that the interference event is unsustainable, initiate the unikernel corresponding to the first application; and

perform a failover from the first application to the unikernel corresponding to the first application.

8 . The system of claim 7 , wherein the processing device is further to:

tag each of the set of applications as critical to generate the set of applications identified as critical.

9 . The system of claim 7 , wherein the processing device is further to:

monitor each of the set of applications to determine that an interference event is affecting any of the tagged applications.

10 . The system of claim 7 , wherein to determine that the interference event affecting the first application is unsustainable, the processing device is to:

compare the interference event to a first rule of a set of rules to determine that the interference event affecting the first application is unsustainable, wherein each of the set of rules includes one or more of: the set of thresholds associated with the frequency of the type of interference event and the set of thresholds associated with the magnitude of the type of interference event.

11 . The system of claim 10 , wherein the first rule comprises:

a first threshold corresponding to a level of interference that will not affect the first application or a level of interference that the first application can recover from; and

a second threshold corresponding to a level of interference that will affect the first application and that the first application cannot recover from.

12 . The system of claim 7 , wherein to perform the failover, the processing device is to:

route traffic directed to the first application to the unikernel corresponding to the first application; and

shut down the first application.

13 . A non-transitory computer-readable medium having instructions stored thereon which, when executed by a processing device, cause the processing device to:

for each of a set of applications identified as critical to a functioning of a computing environment, generate a corresponding unikernel, wherein the unikernel includes code of the application and kernel functionality;

in response to determining that an interference event is affecting a first application of the set of applications, determine that the interference event is unsustainable based on memory allocation collision errors within a period of time exceeding a threshold, wherein the interference event includes interference with the first application utilizing system resources by a second application, wherein the first application is a safety application of a control system associated with the computing environment, wherein the computing environment is a vehicle control system of a vehicle;

adjust one or more of a set of thresholds associated with a frequency of a type of interference event and a set of thresholds associated with a magnitude of the type of interference event based on historical driving patterns of the vehicle and current driving conditions of the vehicle;

in response to determining that the interference event is unsustainable, initiate, by the processing device, the unikernel corresponding to the first application; and

perform a failover from the first application to the unikernel corresponding to the first application.

14 . The non-transitory computer-readable medium of claim 13 , wherein the processing device is further to:

tag each of the set of applications as critical to generate the set of applications identified as critical.

15 . The non-transitory computer-readable medium of claim 13 , wherein the processing device is further to:

monitor each of the set of applications to determine that an interference event is affecting any of the tagged applications.

16 . The non-transitory computer-readable medium of claim 13 , wherein to determine that the interference event affecting the first application is unsustainable, the processing device is to:

compare the interference event to a first rule of a set of rules to determine that the interference event affecting the first application is unsustainable, wherein each of the set of rules includes one or more of: the set of thresholds associated with the frequency of the type of interference event and the set of thresholds associated with the magnitude of the type of interference event.

17 . The non-transitory computer-readable medium of claim 16 , wherein the first rule comprises:

a first threshold corresponding to a level of interference that will not affect the first application or a level of interference that the first application can recover from; and

a second threshold corresponding to a level of interference that will affect the first application and that the first application cannot recover from.