Peer-aware self-regulation for virtualized environments
AssigneeMcAfee, Inc.
InventorsRon Gallella, Virginia Robbins, Ben Sherwood, Joseph Dodge, Paul R. Spear
Life of this patent
Estimating the term…
Abstract
Technologies for self-regulation for virtualized environments may include, by a virtual machine on an electronic device, detecting an attempted anti-malware operation by a monitored module, determining anti-malware operation levels of one or more other virtual machines on the electronic device, and, based on the attempted anti-malware operation and upon the anti-malware operation levels, determining whether to allow the attempted operation.
Claims24
A method for self-regulation of a virtualized environment, comprising:
- by a first virtual machine on an electronic device:
- detecting a first attempted anti-malware operation by a first monitored module;
- and
- first anti-malware operation levels of one or more other virtual machines on the electronic device;
- by a second virtual machine on the electronic device:
- detecting a second attempted anti-malware operation by a second monitored module;
- determining second anti-malware operation levels of one or more other virtual machines on the electronic device;
- based on the second attempted anti-malware operation and upon the second anti-malware operation levels, determining whether to allow the second attempted anti-malware operation;
- and
- broadcasting a second indication of whether the second attempted anti-malware operation was performed to the other virtual machines on the electronic device;
- and
- by the first virtual machine on the electronic device:
- based on the first attempted anti-malware operation, the first anti-malware operation levels, and whether the second indication was received, determining whether to allow the first attempted anti-malware operation;
- and
- broadcasting a first indication to the other virtual machines, the first indication to indicate whether the first attempted anti-malware operation was performed.
A system for self-regulation of virtualized environments, comprising:
- a virtualization module configured to virtualize access to one or more resources of an electronic device for one or more virtual machines;
- a processor coupled to a computer readable medium;
- a first monitor module comprising computer-executable instructions carried on the computer readable medium, the instructions readable by the processor, the instructions, when read and executed, for configuring the first monitor module to:
- by a first virtual machine on the electronic device, detect a first attempted anti-malware operation by a first monitored module, the first virtual machine configured to access one or more virtualized resources provided by the virtualization module;
- by the first virtual machine on the electronic device, determine first anti-malware operation levels of one or more other virtual machines on the electronic device;
- and
- based on the first attempted anti-malware operation and upon the first anti-malware operation levels, determine whether to allow the first attempted anti-malware operation;
- and
- a second monitor module comprising computer-executable instructions carried on the computer readable medium, the instructions readable by the processor, the instructions, when read and executed, for configuring the second monitor module to:
- by a second virtual machine on the electronic device, detect a second attempted anti-malware operation by a second monitored module, the second virtual machine configured to access one or more virtualized resources provided by the virtualization module;
- by the second virtual machine on the electronic device, determine second anti-malware operation levels of one or more other virtual machines on the electronic device;
- and
- based on the second attempted anti-malware operation and upon the second anti-malware operation levels, determine whether to allow the second attempted anti-malware operation;
- wherein:
- the second monitor module is further configured to broadcast a second indication of whether the second attempted anti-malware operation was performed to the other virtual machines on the electronic device;
- and
- the first monitor module is further configured to:
- broadcast a first indication to the other virtual machines, the first indication to indicate whether the first attempted anti-malware operation was performed;
- and
- determine whether to allow the first attempted anti-malware operation further based upon whether the second indication was received.
At least one machine readable non-transitory storage medium, comprising computer-executable instructions carried on the machine readable non-transitory storage medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
- by a first virtual machine on an electronic device:
- detect a first attempted anti-malware operation by a first monitored module;
- and
- determine first anti-malware operation levels of one or more other virtual machines on the electronic device;
- by a second virtual machine on the electronic device:
- detect a second attempted anti-malware operation by a second monitored module;
- determine second anti-malware operation levels of one or more other virtual machines on the electronic device;
- based on the second attempted anti-malware operation and upon the second anti-malware operation levels, determine whether to allow the second attempted anti-malware operation;
- and
- broadcast a second indication of whether the second attempted anti-malware operation was performed to the other virtual machines on the electronic device;
- and
- by the first virtual machine:
- based on the first attempted anti-malware operation, the first anti-malware operation levels, and whether the second indication was received, determine whether to allow the first attempted anti-malware operation;
- and
- broadcast a first indication to the other virtual machines, the first indication to indicate whether the first attempted anti-malware operation was performed.
Dependencies are inferred from the claim text.