On-access anti-virus mechanism for virtual machine architecture
AssigneeVMware, Inc.
InventorsYufeng ZHENG, Xiaoxin CHEN, Bich Cau LE, Jagannath Gopal KRISHNAN, Derek ULUSKI
Life of this patent
Estimating the term…
Loading patent…
AssigneeVMware, Inc.
InventorsYufeng ZHENG, Xiaoxin CHEN, Bich Cau LE, Jagannath Gopal KRISHNAN, Derek ULUSKI
Estimating the term…
A tangible medium embodying instructions usable by a computer system to protect a plurality of guest virtual machines (VMs), which execute via virtualization software on a common host platform, from malicious code is described. A scan engine is configured to scan data for malicious code and determine a result of the scanning, wherein the result indicates whether malicious code is present in the data. A driver portion is configured for installation in an operating system of a target VM, which is one of the guest VMs. The driver portion intercepts an access request to a file, that originates within the target VM. The driver portion communicates information identifying a location of the data to be scanned by the scan engine without sending a copy of the data to the scan engine. The scan engine executes within the virtualization layer outside a context of the target VM.
A method for protecting a plurality of guest virtual machines (VMs) from malicious code using an anti-virus system comprising a scan engine and a driver portion, the plurality of guest VMs executing via virtualization layer on a common host platform, method comprising:
A machine readable storage medium non-transiently storing instructions usable by a computer system to protect a plurality of guest virtual machines (VMs) from malicious code using an anti-virus system, the plurality of guest VMs executing via a virtualization layer on a common host platform, the instructions causing the computer system to implement:
A system for protecting a plurality of guest virtual machines (VMs) from malicious code, the plurality of guest VMs executing via a virtualization layer on a common host platform, the system implemented by a computer, the system comprising:
Dependencies are inferred from the claim text.