Encrypted log aggregation
AssigneeVMware, Inc.
InventorsIAN RAGSDALE, SAURABH AGRAWAL, KARTIK PATEL, SANTHOSH CHANDRASHEKARAPPA IRANI
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.
Claims20
A system, comprising:
- a client device;
- and
- a data store comprising instructions, wherein the instructions, when executed by a processor, cause the client device to at least:
- generate log access credentials and cryptographic data, the cryptographic data comprising:
- an initialization vector, and a salt;
- generate log data for an application executed by the client device, the log data comprising a parameter that is identified as a variable;
- encrypt, within the log data, the parameter as an encrypted string, wherein the parameter is encrypted based on the parameter being identified as a variable;
- and
- transmit, to a network service, a request to submit log data, the request comprising:
- the log data, the initialization vector, and the salt.
A method performed by a client device, the method comprising:
- generating log access credentials and cryptographic data, the cryptographic data comprising:
- an initialization vector, and a salt;
- generating log data for an application executed by the client device, the log data comprising a parameter that is identified as a variable;
- encrypting, within the log data, the parameter as an encrypted string, wherein the parameter is encrypted based on the parameter being identified as a variable;
- and
- transmitting, to a network service, a request to submit log data, the request comprising:
- the log data, the initialization vector, and the salt.
A non-transitory computer-readable medium embodying executable instructions, wherein the instructions, when executed by a processor, cause a client device to at least:
- generate log access credentials and cryptographic data, the cryptographic data comprising:
- an initialization vector, and a salt;
- generate log data for an application executed by the client device, the log data comprising a parameter that is identified as a variable;
- encrypt, within the log data, the parameter as an encrypted string, wherein the parameter is encrypted based on the parameter being identified as a variable;
- and
- transmit, to a network service, a request to submit log data, the request comprising:
- the log data, the initialization vector, and the salt.
Dependencies are inferred from the claim text.