Security of VDI Clones
AssigneeMcAfee, Inc.
InventorSriranga Seetharamaiah
Life of this patent
Estimating the term…
Abstract
Utilizing a virtual desktop interface, including receiving, from a server, a clone image comprising an instance of an operating system and an application executing on the server, and a copy of scan results, identify initiation of the application using the clone image, in response to identifying initiation of the application, determine that the copy of scan results includes scan results of the application, and in response to determining the copy of scan results includes scan results of the application, executing the application without any further scan of the application.
Claims25
A machine readable medium on which instructions are stored, comprising instructions that when executed cause a machine to:
- receive, from a server, a clone image comprising an instance of an operating system and an application hosted by the server, and a copy of scan results;
- identify initiation of the application using the clone image;
- in response to identifying initiation of the application, determine that the copy of scan results includes scan results of the application;
- and
- in response to determining the copy of scan results includes scan results of the application, execute the application without any further scan of the application.
The machine readable medium of claim 5, wherein the clone image further comprises a copy-on-write layer configured to store modifications to the clone image by a local client device.
A system for utilizing a virtual desktop interface, comprising:
- one or more processors;
- and
- a memory, coupled to the one or more processors, on which instructions are stored comprising instructions which, when executed by the one or more processors cause the one or more processors to:
- receive, from a server, a clone image comprising an instance of an operating system and an application hosted by the server, and a copy of scan results;
- identify initiation of the application using the clone image;
- in response to identifying initiation of the application, determine that the copy of scan results includes scan results of the application;
- and
- in response to determining the copy of scan results includes scan results of the application, execute the application without any further scan of the application.
A method for utilizing a virtual desktop infrastructure, comprising:
- receiving, from a server, a clone image comprising an instance of an operating system and an application hosted by the server, and a copy of scan results;
- identifying initiation of the application using the clone image;
- in response to identifying initiation of the application, determining that the copy of scan results includes scan results of the application;
- and
- in response to determining the copy of scan results includes scan results of the application, executing the application without any further scan of the application.
A machine readable medium on which instructions are stored, comprising instructions that when executed cause a machine to:
- generate a base image comprising a first instance of an operating system and a first instance of an application hosted by a server;
- perform a scan on the base image to obtain scan results;
- generate the clone image to include a second instance of the operating system, a second instance of the application, and a copy of the scan results;
- and
- deploy the clone image to the client,
- wherein the clone image is configured to allow the client to execute the clone image without scanning the clone image.
A method for providing a virtual desktop infrastructure, the method comprising:
- generating a base image comprising a first instance of an operating system and a first instance of an application hosted by a server;
- performing a scan on the base image to obtain scan results;
- generating the clone image to include a second instance of the operating system, a second instance of the application, and a copy of the scan results;
- and
- deploying the clone image to the client,
- wherein the clone image is configured to allow the client to execute the clone image without scanning the clone image.
Dependencies are inferred from the claim text.