US Patent 11256817 Tool for generating security policies for containers

Disclosed are systems and methods for generating security policies for containers. An example method comprises identifying a virtualized execution environment running on a computer system, parsing metadata associated with the virtualized execution environment to identify resources of the computer system to be used by the virtualized execution environment, generating a set of access rules determining access to the resources, creating a security policy in view of the set of access rules, and applying the security policy to the virtualized execution environment.