Layered virtual machine integrity monitoring

An apparatus, comprising:

• a memory;
• and
• logic for monitoring of virtual machines, at least a portion of the logic implemented in circuitry coupled to the memory, the logic to:
• identify a first indication from a first health detector, the first indication associated with a first operating condition of a server monitored by the first health detector;
• identify a second indication from a second health detector, the second indication associated with a second operating condition of the server monitored by the second health detector;
• and
• distinguish between malfunction, security breach, and normal operation in the server based on the first indication and the second indication.

At least one non-transitory computer-readable medium comprising a set of instructions that, in response to being executed by a processor circuit, cause the processor circuit to:

• identify a first indication from a first health detector, the first indication associated with a first operating condition of a server monitored by the first health detector;
• identify a second indication from a second health detector, the second indication associated with a second operating condition of the server monitored by the second health detector;
• and
• distinguish between malfunction, security breach, and normal operation in the server based on the first indication and the second indication.

A computer-implemented method, comprising:

• identifying a first indication from a first health detector, the first indication associated with a first operating condition of a server monitored by the first health detector;
• identifying a second indication from a second health detector, the second indication associated with a second operating condition of the server monitored by the second health detector;
• and
• distinguishing between malfunction, security breach, and normal operation in the server based on the first indication and the second indication.