Techniques for signatureless virtual instance image verification in cloud computing environments
A system and method for signatureless validation of objects in a computing environment, including artifacts, objects, files, virtual images, and the like. The method includes: detecting a request to deploy an instance based on a software artifact in the computing environment; generating a first fingerprint based on the software artifact in response to detecting the request to deploy the instance; querying a fingerprint database, including a plurality of validated fingerprints, to determine if the first fingerprint is stored therein; deploying the instance in response to validating the first fingerprint; and blocking deployment of the instance in response to determining the first fingerprint is not of the plurality of validated fingerprints.
1. A method for signatureless validation of virtual images in a computing environment, comprising:
detecting a request to deploy an instance based on a software artifact in the computing environment;
generating a first fingerprint based on the software artifact in response to detecting the request to deploy the instance;
querying a fingerprint database, including a plurality of validated fingerprints, to determine if the first fingerprint is stored therein;
deploying the instance in response to a signatureless validation of the first fingerprint; and
blocking deployment of the instance in response to determining the first fingerprint is not of the plurality of validated fingerprints.
2. The method of claim 1 , further comprising:
inspecting the software artifact for a cybersecurity issue; and
generating a validated fingerprint based on the software artifact in response to determining that the software artifact does not include a cybersecurity issue.
3. The method of claim 2 , wherein generating the validated fingerprint is initiated by a preauthorized principal of the computing environment.
4. The method of claim 1 , further comprising:
accessing an artifact file in the computing environment;
generating a second fingerprint based on the artifact file; and
storing the second fingerprint as a validated fingerprint in the fingerprint database.
5. The method of claim 1 , further comprising:
detecting a virtual instance deployed in the computing environment;
generating a fingerprint based on the deployed virtual instance; and
terminating the virtual instance in response to determining that the fingerprint of the deployed virtual instance is invalid.
6. The method of claim 1 , further comprising:
generating a fingerprint for each object of a plurality of objects detected in the computing environment at a first time; and
storing the generated fingerprints as valid fingerprints.
7. The method of claim 6 , further comprising:
generating a fingerprint for an object detected in the computing environment at a second time; and
querying the fingerprint database with a fingerprint generated at the second time to determine if the fingerprint is a valid fingerprint.
8. The method of claim 7 , further comprising:
determining that the object detected at the second time is an unauthorized object in response to detecting that the generated fingerprint does not match the valid fingerprints.
9. The method of claim 8 , further comprising:
terminating the object detected at the second time.
10. The method of claim 8 , further comprising:
initiating a remediation action.
11. The method of claim 1 , wherein the request is detected by any one of: an admission controller, a hypervisor, a sensor, and a combination thereof.
12. A non-transitory computer-readable medium storing a set of instructions for signatureless validation of virtual images in a computing environment, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
detect a request to deploy an instance based on a software artifact in the computing environment;
generate a first fingerprint based on the software artifact in response to detecting the request to deploy the instance;
query a fingerprint database, including a plurality of validated fingerprints, to determine if the first fingerprint is stored therein;
deploy the instance in response to signatureless validation of the first fingerprint; and
block deployment of the instance in response to determining the first fingerprint is not of the plurality of validated fingerprints.
13. A system for signatureless validation of virtual images in a computing environment comprising:
a processing circuitry;
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
detect a request to deploy an instance based on a software artifact in the computing environment;
generate a first fingerprint based on the software artifact in response to detecting the request to deploy the instance;
query a fingerprint database, including a plurality of validated fingerprints, to determine if the first fingerprint is stored therein;
deploy the instance in response to signatureless validation of the first fingerprint; and
block deployment of the instance in response to determining the first fingerprint is not of the plurality of validated fingerprints.
14. The system of claim 13 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
inspect the software artifact for a cybersecurity issue; and
generate a validated fingerprint based on the software artifact in response to determining that the software artifact does not include a cybersecurity issue.
15. The system of claim 14 , wherein generating the validated fingerprint is initiated by a preauthorized principal of the computing environment.
16. The system of claim 13 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
access an artifact file in the computing environment;
generate a second fingerprint based on the artifact file; and
store the second fingerprint as a validated fingerprint in the fingerprint database.
17. The system of claim 13 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
detect a virtual instance deployed in the computing environment;
generate a fingerprint based on the deployed virtual instance; and
terminate the virtual instance in response to determining that the fingerprint of the deployed virtual instance is invalid.
18. The system of claim 13 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a fingerprint for each object of a plurality of objects detected in the computing environment at a first time; and
store the generated fingerprints as valid fingerprints.
19. The system of claim 18 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a fingerprint for an object detected in the computing environment at a second time; and
query the fingerprint database with a fingerprint generated at the second time to determine if the fingerprint is a valid fingerprint.
20. The system of claim 19 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine that the object detected at the second time is an unauthorized object in response to detecting that the generated fingerprint does not match the valid fingerprints.
21. The system of claim 20 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
terminate the object detected at the second time.
22. The system of claim 20 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
initiate a remediation action.
23. The system of claim 13 , wherein the request is detected by any one of:
an admission controller, a hypervisor, a sensor, and a combination thereof.