System and method for data loss prevention in a virtualized environment
AssigneeSymantec Corporation
InventorsSumit Sarin, Sumesh Jaiswal
Life of this patent
Estimating the term…
Abstract
A data loss prevention (DLP) manager running on a security virtual machine manages DLP policies for a plurality of guest virtual machines. The DLP manager identifies a startup event of a guest virtual machine, and installs a DLP component in the guest virtual machine. The DLP component communicates with the DLP manager operating within the security virtual machine. The DLP manager also receives file system events from the DLP component, and enforces a response rule associated with the guest virtual machine if the file system event violates a DLP policy.
Claims20
A method comprising:
- identifying, by a dedicated security virtual machine, a startup event of a guest virtual machine;
- installing a data loss prevention (DLP) component in the guest virtual machine, the DLP component configured to communicate with the security virtual machine;
- receiving file system events from the DLP component;
- and
- enforcing a response rule associated with the guest virtual machine if the file system event violates a DLP policy.
A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a method comprising:
- identifying, by a dedicated security virtual machine, a startup event of a guest virtual machine;
- installing a data loss prevention (DLP) component in the guest virtual machine, the DLP component configured to communicate with the security virtual machine;
- receiving file system events from the DLP component;
- and
- enforcing a response rule associated with the guest virtual machine if the file system event violates a DLP policy.
A computing apparatus comprising:
- a memory to store instructions for providing a data loss prevention (DLP) manager;
- and
- a computing device, coupled to the memory, wherein the computing device is configured to execute the DLP manager:
- identify a startup event of a guest virtual machine;
- install a data loss prevention (DLP) component in the guest virtual machine,
- the DLP component configured to communicate with a security virtual machine;
- receive file system events from the DLP component;
- and
- enforce a response rule associated with the guest virtual machine if the file system event violates a DLP policy.
Dependencies are inferred from the claim text.