Systems and methods for securing virtual machine computing environments
AssigneeSecurity First Corp.
InventorsMark S. O'Hare, Matthew Staker, John Robert Mumaugh, Rick L. Orsini
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for securing data in virtual machine computing environments. A request is received for a security operation from a first virtual machine operating in a host operating system of a first device. In response to receiving the request, a first security module executes the security operation, the first security module implemented in a kernel of the host operating system. The result of the security operation is provided to the first virtual machine.
Claims21
(canceled)
A method for securing data, the method comprising:
- generating, using a virtual machine operating in a host operating system of a computer device, a request for security operation, wherein the security operation may be performed by at least one of a plurality of security modules;
- making a determination, using a hardware processor of the computer device, whether security modules of the plurality of security modules are able to execute the security operation;
- selecting, using a hardware processor of the computer device, a security module from the plurality of security module based on the determination;
- executing, using the selected security module, the security operation, wherein the selected security module is implemented in a kernel of the host operating system of the computer device;
- and
- providing, using the hardware processor, a result of the security operation to the virtual machine.
A system for securing virtual machines, the system comprising:
- a processor including processor circuitry, the processor being configured to:
- execute a host operating system having a kernel;
- receive a request for security operation from a virtual machine, wherein the security operation may be performed by at least one of a plurality of security modules;
- in response to receiving the request:
- make a determination whether security modules of the plurality of security modules are able to execute the security operation;
- select a security module from the plurality of security module based on the determination;
- execute, using the selected security module, the security operation, wherein the selected security module is implemented in the kernel of the host operating system;
- and
- provide a result of the security operation to the virtual machine.
Dependencies are inferred from the claim text.