IP Library Granted Patent US 12,563,065
Granted Patent B2
US 12,563,065 · App. 18/230,839 · Granted Feb 24, 2026

Monitoring and preventing spoofing, tampering, and denial of service attacks on cloud containers

Inventors: Manimaran Sundaravel (Chennai, IN); Maneesh Sethia (Telangana, IN)
Assignee: Bank of America Corporation
H04L63/1425H04L63/1458H04L63/1483H04L2463/142
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,563,065
App. No.
18/230,839
Granted
Feb 24, 2026
Kind
B2
Abstract

A computing platform may train, using historical node performance information and historical application parameter information, a node selection model, which may configure the model to select nodes for application cloud deployment. The computing platform may receive a request to deploy an application to a cloud network. The computing platform may select a node, of the plurality of nodes of the cloud network, to which the application should be deployed. The computing platform may queue, along with other applications scheduled for deployment to the plurality of nodes, the application for deployment to the node. After identifying that the application is first in the queue, the computing platform may deploy the application to the node of the cloud network, which may create, at the node, a container corresponding to the application.

Claims (55)

1 . A computing platform comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

train, using historical node performance information and historical application parameter information, a node selection model, wherein training the node selection model configures the node selection model to select nodes for application cloud deployment;

receive a request to deploy an application to a cloud network;

input, into the node selection model, parameters of the application and operating conditions of a plurality of nodes of the cloud network, wherein inputting the parameters and the operating conditions into the node selection model causes the node selection model to output a node, of the plurality of nodes of the cloud network, wherein the application is deployed to the node;

queue, along with other applications scheduled for deployment to the plurality of nodes, the application for deployment to the node;

after identifying that the application is first in the queue, deploy the application to the node of the cloud network, wherein deploying the application to the node of the cloud network causes creation, at the node, of a container corresponding to the application;

update, based on the parameters of the application, the operating conditions of the plurality of nodes of the cloud network, and the node, the node selection model; and

generate, based on the operating conditions, a graphical representation of the operating conditions and the plurality of nodes, wherein each operating condition for each node is represented by an intersection of a node row and an operating condition column.

2 . The computing platform of claim 1 , wherein the historical node performance information includes one or more of: computer processing unit (CPU) usage, memory usage, available network bandwidth, or available disk capacity.

3 . The computing platform of claim 1 , wherein the parameters of the application include one or more of: computer processing unit (CPU) availability requirements, memory requirements, network bandwidth availability requirements, or available disk capacity requirements.

4 . The computing platform of claim 1 , wherein the request to deploy the application to the cloud network comprises a request to containerize the application.

5 . The computing platform of claim 1 , wherein outputting, by the node selection model, the node, comprises:

identifying, based on the parameters of the application and the operating conditions of the plurality of nodes, a subset of the plurality of nodes that fails to satisfy processing requirements for the application; and

filtering, from the plurality of nodes, the subset of the plurality of nodes, to produce a filtered plurality of nodes, wherein selection of the node comprises selecting one of the filtered plurality of nodes.

6 . The computing platform of claim 5 , wherein selecting the node comprises:

scoring, using the node selection model, each of the filtered plurality of nodes;

ranking, based on the scores, the filtered plurality of nodes; and

selecting a highest ranked node of the ranked filtered plurality of nodes.

7 . The computing platform of claim 1 , wherein the node selection model comprises a deep reinforcement learning model.

8 . The computing platform of claim 1 , wherein darker shading of the intersection indicates less availability for the corresponding operating condition for the corresponding node and lighter shading of the intersection indicates greater availability for the corresponding operating condition for the corresponding node.

9 . The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

train, using historical threat detection information, a threat detection model, wherein training the threat detection model configures the threat detection model to detect container threats;

input, into the threat detection model, the operating conditions of the plurality of nodes, wherein inputting the operating conditions of the plurality of nodes causes the threat detection model to identify a threat to at least one container deployed at the plurality of nodes;

execute, based on identification of the threat, a security action to protect the at least one container; and

update, based on the operating conditions of the plurality of nodes and the threat, the threat detection model.

10 . The computing platform of claim 9 , wherein the threat detection model comprises a deep reinforcement learning model.

11 . The computing platform of claim 9 , wherein executing the security action comprises:

identifying, using the node selection model, an alternative node, wherein the at least one container is deployed to the alternative node; and

modifying deployment of the at least one container to shift the at least one container from a first node, corresponding to the threat, to a second node.

12 . The computing platform of claim 9 , wherein the threat comprises one or more of: a spoofing attack, a tampering attack, or a denial of service attack.

13 . The computing platform of claim 9 , wherein training the threat detection model comprises setting, for each of the operating conditions, a threat threshold, wherein identifying the threat comprises identifying that at least one of the operating conditions exceeds a corresponding threat threshold.

14 . The computing platform of claim 9 , wherein training the threat detection model comprises generating correlations between historical operating condition patterns and known threats, wherein identifying the threat comprises identifying that a current pattern of the operating conditions matches one of the historical operating condition patterns.

15 . A method comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

training, using historical node performance information and historical application parameter information, a node selection model, wherein training the node selection model configures the node selection model to select nodes for application cloud deployment;

receiving a request to deploy an application to a cloud network;

inputting, into the node selection model, parameters of the application and operating conditions of a plurality of nodes of the cloud network, wherein inputting the parameters and the operating conditions into the node selection model causes the node selection model to output a node, of the plurality of nodes of the cloud network, wherein the application is deployed to the node;

queueing, along with other applications scheduled for deployment to the plurality of nodes, the application for deployment to the node;

after identifying that the application is first in the queue, deploying the application to the node of the cloud network, wherein deploying the application to the node of the cloud network causes creation, at the node, of a container corresponding to the application;

updating, based on the parameters of the application, the operating conditions of the plurality of nodes of the cloud network, and the node, the node selection model; and

generating, based on the operating conditions, a graphical representation of the operating conditions and the plurality of nodes, wherein each operating condition for each node is represented by an intersection of a node row and an operating condition column.

16 . The method of claim 15 , wherein the historical node performance information includes one or more of: computer processing unit (CPU) usage, memory usage, available network bandwidth, or available disk capacity.

17 . The method of claim 15 , wherein the parameters of the application include one or more of: computer processing unit (CPU) availability requirements, memory requirements, network bandwidth availability requirements, or available disk capacity requirements.

18 . The method of claim 15 , wherein the request to deploy the application to the cloud network comprises a request to containerize the application.

19 . One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

train, using historical node performance information and historical application parameter information, a node selection model, wherein training the node selection model configures the node selection model to select nodes for application cloud deployment;

receive a request to deploy an application to a cloud network;

input, into the node selection model, parameters of the application and operating conditions of a plurality of nodes of the cloud network, wherein inputting the parameters and the operating conditions into the node selection model causes the node selection model to output a node, of the plurality of nodes of the cloud network, wherein the application is deployed to the node;

queue, along with other applications scheduled for deployment to the plurality of nodes, the application for deployment to the node;

after identifying that the application is first in the queue, deploy the application to the node of the cloud network, wherein deploying the application to the node of the cloud network causes creation, at the node, of a container corresponding to the application;

update, based on the parameters of the application, the operating conditions of the plurality of nodes of the cloud network, and the node, the node selection model; and

generate, based on the operating conditions, a graphical representation of the operating conditions and the plurality of nodes, wherein each operating condition for each node is represented by an intersection of a node row and an operating condition column.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 7, 2023
From: SUNDARAVEL, MANIMARAN; SETHIA, MANEESH
To: BANK OF AMERICA CORPORATION
Reel/Frame 064510/0840 →
Continuity (1)
Related Publication 20250055862A1 · Feb 13, 2025
References Cited (34)
US 7346057B2 · Foschiano et al. · 2008 [cited by applicant]
US 20090322586A1 · Lanzkron · 2009 [cited by applicant]
US 20170063909A1 · Muddu et al. · 2017 [cited by applicant]
US 20180089001A1 · Smith et al. · 2018 [cited by applicant]
US 20180329757A1 · Patgar et al. · 2018 [cited by applicant]
US 20200057663A1 · Abbott et al. · 2020 [cited by applicant]
US 20200314013A1 · Yin et al. · 2020 [cited by applicant]
US 20210357238A1 · Kirmse et al. · 2021 [cited by applicant]
US 20210390448A1 · Krishnamoorthy · 2021 [cited by examiner]
US 20220004645A1 · Agarwwal · 2022 [cited by applicant]
US 20220014963A1 · Yeh · 2022 [cited by examiner]
US 20220021523A1 · Klein et al. · 2022 [cited by applicant]
US 20220121470A1 · Saxena et al. · 2022 [cited by applicant]
US 20220188700A1 · Khavronin et al. · 2022 [cited by applicant]
US 20220365820A1 · Jiang et al. · 2022 [cited by applicant]
US 20230007038A1 · Grounds et al. · 2023 [cited by applicant]
US 20230142516A1 · Broumandan et al. · 2023 [cited by applicant]
US 20230146079A1 · Jeng et al. · 2023 [cited by applicant]
US 20230164158A1 · Fellows et al. · 2023 [cited by applicant]
US 20230184926A1 · Owechko et al. · 2023 [cited by applicant]
US 20230184928A1 · Owechko et al. · 2023 [cited by applicant]
US 20230188565A1 · Lin et al. · 2023 [cited by applicant]
US 20230202522A1 · Cui et al. · 2023 [cited by applicant]
US 20230206698A1 · Huang et al. · 2023 [cited by applicant]
US 20230206925A1 · Havdan et al. · 2023 [cited by applicant]
US 20230247430A1 · Mohan Raj et al. · 2023 [cited by applicant]
US 20230328075A1 · Almasan et al. · 2023 [cited by applicant]
US 20230370491A1 · Crabtree · 2023 [cited by examiner]
US 20240031380A1 · Lal et al. · 2024 [cited by applicant]
CN 110601913A · 2019 [cited by examiner]
Apr. 22, 2025—U.S. Office Action—U.S. Appl. No. 18/230,897. [cited by applicant]
“Red Hat Bugzilla” https://bugzilla.redhat.com/show_bug.cgi?id=1844447, website visited Aug. 7, 2023, pp. 1-11. [cited by applicant]
“Red Hat Customer Portal” https://access.redhat.com/discussions/4713291, website visited Aug. 7, 2023, pp. 1-12. [cited by applicant]
Aug. 20, 2025—U.S. Notice of Allowance—U.S. Appl. No. 18/230,897. [cited by applicant]