US 12,380,207 B2
Virtual machine image management system
Brian Jacobson, Los Angeles, CA (US); Boris Gitlin, East Bruswick, NJ (US); Donna Phillips, Elkton, MD (US); Elvis Nyamwange, Little Elm, TX (US); Madhukiran Bangalore Ramachandra, San Ramon, CA (US); and Vismay Mandloi, Kendal Park, NJ (US)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Nov. 1, 2022, as Appl. No. 17/978,637.
Prior Publication US 2024/0143748 A1, May 2, 2024
Int. Cl. G06F 21/55 (2013.01); G06F 21/56 (2013.01)
CPC G06F 21/554 (2013.01) [G06F 21/568 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A system comprising:
a virtual computing environment platform comprising at least one first processor configured to operate a virtual machine corresponding to an activated virtual machine (VM) image;
a VM image management platform, comprising:
at least one second processor; and
memory storing computer-readable instructions that, when executed by the at least one second processor, cause the VM image management platform to:
receive, continuously at a scanning stack, a plurality of virtual machine images, wherein the scanning stack comprises a last in first out (LIFO) stack;
add, continuously, virtual images to the scanning stack;
pull, by a scanning engine, a first VM image from the scanning stack;
scan, by the scanning engine, the first VM image, wherein the first VM image is stored in an approved image data store based on an indication that the scanning engine failed to identify a threat indicator;
provision, by a provisioning engine and based on indication that no security threat was identified, the first VM image on the virtual computing environment platform;
remove, from the scanning stack and from the approved image data store, a second VM image after expiration of a scan wait time duration; and
remove, by a VM image management service based on an identified threat associated with the first VM image and when the first VM image comprises a saved VM image retrieved from the approved image data store, the first VM image from the approved image data store.