Managing network data transfers in a virtual computer system
AssigneeVMware, Inc.
InventorsHao Xu, Daniel J. Scales
Life of this patent
Estimating the term…
Abstract
A method for protecting a virtual computer system which may be susceptible to adverse effects from a Denial of Service attack is described. The virtual computer system includes a plurality of VMs. In the method, data that is transferred between the virtual computer system and the computer network is monitored for an indication of a possible Denial of Service attack. If an indication of a possible Denial of Service attack is detected, one or more of the VMs is suspended, to reduce the risk of adverse effects on one or more other VMs.
Claims12
A method for managing network access between a virtual computer system and a computer network, the virtual computer system comprising a plurality of VMs, the virtual computer system being susceptible to possible adverse effects from a Denial of Service attack, the method comprising:
- monitoring data that is transferred between the virtual computer system and the computer network for an indication of a possible Denial of Service attack;
- and
- responsive to a detection of an indication of a possible Denial of Service attack, suspending one or more of the VMs, to reduce the risk of the adverse effects from the Denial of Service attack on one or more other VMs.
A method for managing network access between a VM and a computer network, the VM executing in a first physical computer system having access to a first connection to the computer network, the first connection being susceptible to possible adverse effects from a Denial of Service attack, the method comprising:
- monitoring data that is transferred between the VM and the computer network for an indication of a possible Denial of Service attack;
- and
- responsive to a detection of an indication of a possible Denial of Service attack, migrating the VM to a second physical computer system having access to a second connection to the computer network.
A non-transitory computer-readable storage medium containing instructions for managing network access between a virtual computer system and a computer network, the virtual computer system comprising a plurality of VMs, the virtual computer system being susceptible to possible adverse effects from a Denial of Service attack, the instructions for controlling a computer system to be configured for:
- monitoring data that is transferred between the virtual computer system and the computer network for an indication of a possible Denial of Service attack;
- and
- responsive to a detection of an indication of a possible Denial of Service attack, suspending one or more of the VMs, to reduce the risk of the adverse effects from the Denial of Service attack on one or more other VMs.
A non-transitory computer-readable storage medium containing instructions for managing network access between a VM and a computer network, the VM executing in a first physical computer system having access to a first connection to the computer network, the first connection being susceptible to possible adverse effects from a Denial of Service attack, the instructions for controlling a computer system to be configured for:
- monitoring data that is transferred between the VM and the computer network for an indication of a possible Denial of Service attack;
- and
- responsive to a detection of an indication of a possible Denial of Service attack, migrating the VM to a second physical computer system having access to a second connection to the computer network.
Dependencies are inferred from the claim text.