公开(公告)号：US20240313977A1

公开(公告)日：2024-09-19

申请号：US18184239

申请日：2023-03-15

Applicant: NetApp, Inc.

Inventor： Nan Li ,  James Silva ,  Sangramsinh Pandurang Pawar ,  Jing Zhang

IPC: H04L9/32 ,  G06F8/61 ,  G06F8/71 ,  H04L9/30

CPC classification number: H04L9/3247 ,  G06F8/63 ,  G06F8/71 ,  H04L9/30

Abstract: Systems and methods for verifying an executable portion of a published cloud image represents an unaltered version of an executable portion of a corresponding original cloud image are provided. In one embodiment, modification of a predefined portion of a cloud image by a cloud provider prior to its publication via a marketplace of the cloud provider is proactively addressed as part of (i) an automated signing process performed by a software publisher on the original cloud image prior to delivery to the cloud provider and (ii) a corresponding background verification process performed on the published cloud image on behalf of users by a management platform. The signing and verification processes are operable to exclude the predefined portion when creating their respective digests, thereby allowing the signed digest created prior to the modification to remain useful as part of a subsequent digest comparison performed by the verification process.