Protecting A Virtualization System Against Computer Attacks
AssigneeRaytheon Company
InventorsAlen Cruz, Paul F. Beraud, III
Life of this patent
Estimating the term…
Abstract
In certain embodiments, protecting a virtualization system against computer attacks comprises facilitating operation of hypervisors comprising operation zone hypervisors and one or more forensic hypervisors. Each hypervisor operates on a corresponding physical machine, and each operation zone hypervisor manages one or more virtual machines. An assurance procedure is initiated for the hypervisors. At least one virtual machine of a first operation zone hypervisor is moved to a forensic hypervisor to analyze the potential attack. The first operation zone hypervisor is cleaned.
Claims20
A method comprising:
- facilitating, by a platform manager, operation of a plurality of hypervisors comprising a plurality of operation zone hypervisors and one or more forensic hypervisors, each hypervisor operating on a corresponding physical machine, each operation zone hypervisor managing one or more virtual machines;
- initiating an assurance procedure for the hypervisors;
- moving at least one virtual machine of a first operation zone hypervisor to a forensic hypervisor to analyze the potential attack;
- and
- cleaning the first operation zone hypervisor.
One or more non-transitory computer readable media, when executed by one or more processors, configured to:
- facilitate, using a platform manager, operation of a plurality of hypervisors comprising a plurality of operation zone hypervisors and one or more forensic hypervisors, each hypervisor operating on a corresponding physical machine, each operation zone hypervisor managing one or more virtual machines;
- initiate an assurance procedure for the hypervisors;
- move at least one virtual machine of a first operation zone hypervisor to a forensic hypervisor to analyze the potential attack;
- and
- clean the first operation zone hypervisor.
An apparatus comprising:
- one or more non-transitory computer readable media storing one or more instructions;
- and
- one or more processors configured execute the instructions to:
- facilitate, using a platform manager, operation of a plurality of hypervisors comprising a plurality of operation zone hypervisors and one or more forensic hypervisors, each hypervisor operating on a corresponding physical machine, each operation zone hypervisor managing one or more virtual machines;
- initiate an assurance procedure for the hypervisors;
- move at least one virtual machine of a first operation zone hypervisor to a forensic hypervisor to analyze the potential attack;
- and
- clean the first operation zone hypervisor.
Dependencies are inferred from the claim text.