Granted Patent B1

US 12,536,276 · App. 19/233,602 · Granted Jan 27, 2026

Inventors: John Morello (Baton Rouge, LA); Ben Bernstein (New York, NY); Dima Stopel (Herzliya, IL)

Assignee: MINIMUS LTD

G06F21/54G06F21/62G06F2221/033

Abstract

Claims (46)

1 . A method for software image management, comprising:

generating a plurality of software packages including a plurality of units of code, wherein each software package of the plurality of software packages is generated using a respective unit of code of the plurality of units of code, wherein the plurality of software packages includes a first security package, wherein the respective unit of code for the security package configures a processing circuitry to perform at least one cybersecurity function when executed by the processing circuitry; and

building a software image based on the plurality of software packages by executing a set of instructions of a file, wherein the set of instructions causes the plurality of software packages to be combined in order to build the software image when executed, wherein the software image is executed to deploy a software component in a computing environment;

ingesting cybersecurity data from the computing environment in which the software component is deployed;

identifying a cybersecurity threat based on the ingested cybersecurity data, wherein the cybersecurity threat is identified with respect to at least one threat vector; and

rebuilding the software image, wherein rebuilding the software image includes adding a second security package, wherein the second security package is designed to secure the software image against the cybersecurity threat, wherein the second security package is further designed to secure the software image against the at least one threat vector.

2 . The method of claim 1 , further comprising:

rebuilding the software image using an updated version of at least one unit of code of the plurality of units of code.

3 . The method of claim 2 , further comprising:

monitoring for changes to the plurality of units of code; and

identifying an update based on the monitoring, wherein the update includes a change in the at least one unit of code, wherein the updated version of the at least one unit of code is based on the update.

4 . The method of claim 2 , further comprising:

identifying a type of cybersecurity threat with respect to the software image, wherein the updated version of the at least one unit of code used to rebuild the software image is secured against the type of cybersecurity threat.

5 . The method of claim 1 , further comprising:

generating the file using a generative artificial intelligence (genAI) model by prompting the genAI model using a prompt including text identifying the plurality of packages.

6 . The method of claim 5 , further comprising:

providing the genAI model access to at least one tool by prompting the genAI model using a prompt including text describing how to use the at least one tool, wherein the genAI model access the at least one tool in order to obtain the plurality of units of code.

7 . The method of claim 1 , further comprising:

executing the software image in order to cause deployment of a software component in a computing environment.

8 . A non-transitory computer-readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

generating a plurality of software packages including a plurality of units of code, wherein each software package of the plurality of software packages is generated using a respective unit of code of the plurality of units of code, wherein the plurality of software packages includes a first security package, wherein the respective unit of code for the security package configures a processing circuitry to perform at least one cybersecurity function when executed by the processing circuitry; and

building a software image based on the plurality of software packages by executing a set of instructions of a file, wherein the set of instructions causes the plurality of software packages to be combined in order to build the software image when executed, wherein the software image is executed to deploy a software component in a computing environment;

ingesting cybersecurity data from the computing environment in which the software component is deployed;

identifying a cybersecurity threat based on the ingested cybersecurity data, wherein the cybersecurity threat is identified with respect to at least one threat vector; and

rebuilding the software image, wherein rebuilding the software image includes adding a second security package, wherein the second security package is designed to secure the software image against the cybersecurity threat, wherein the second security package is further designed to secure the software image against the at least one threat vector.

9 . A system for software image management, comprising:

a processing circuitry; and

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

generate a plurality of software packages including a plurality of units of code, wherein each software package of the plurality of software packages is generated using a respective unit of code of the plurality of units of code, wherein the plurality of software packages includes a first security package, wherein the respective unit of code for the security package configures a processing circuitry to perform at least one cybersecurity function when executed by the processing circuitry; and

build a software image based on the plurality of software packages by executing a set of instructions of a file, wherein the set of instructions causes the plurality of software packages to be combined in order to build the software image when executed, wherein the software image is executed to deploy a software component in a computing environment;

ingest cybersecurity data from the computing environment in which the software component is deployed;

identify a cybersecurity threat based on the ingested cybersecurity data, wherein the cybersecurity threat is identified with respect to at least one threat vector; and

rebuild the software image, wherein rebuilding the software image includes adding a second security package, wherein the second security package is designed to secure the software image against the cybersecurity threat, wherein the second security package is further designed to secure the software image against the at least one threat vector.

10 . The system of claim 9 , wherein the system is further configured to:

rebuild the software image using an updated version of at least one unit of code of the plurality of units of code.

11 . The system of claim 10 , wherein the system is further configured to:

monitor for changes to the plurality of units of code; and

identify an update based on the monitoring, wherein the update includes a change in the at least one unit of code, wherein the updated version of the at least one unit of code is based on the update.

12 . The system of claim 10 , wherein the system is further configured to:

identify a type of cybersecurity threat with respect to the software image, wherein the updated version of the at least one unit of code used to rebuild the software image is secured against the type of cybersecurity threat.

13 . The system of claim 9 , wherein the system is further configured to:

generate the file using a generative artificial intelligence (genAI) model by prompting the genAI model using a prompt including text identifying the plurality of packages.

14 . The system of claim 13 , wherein the system is further configured to:

provide the genAI model access to at least one tool by prompting the genAI model using a prompt including text describing how to use the at least one tool, wherein the genAI model access the at least one tool in order to obtain the plurality of units of code.

15 . The system of claim 9 , wherein the system is further configured to:

execute the software image in order to cause deployment of a software component in a computing environment.

Assignments (2)

References Cited (40)