Security enforcement in virtualized systems

Patent metadata

Field	Value
Publication number	US-8959569-B2
Application number	US-201113051471-A
Country	US
Kind code	B2
Filing date	Mar 18, 2011
Priority date	Mar 18, 2011
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

A system includes a virtual machine (VM) server and a policy engine server. The VM server includes two or more guest operating systems and an agent. The agent is configured to collect information from the two or more guest operating systems. The policy engine server is configured to: receive the information from the agent; generate access control information for a first guest OS, of the two or more guest operating systems, based on the information; and configure an enforcer based on the access control information.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer device, an instance request from a client device;
executing, by the computer device and based on the instance request, a first guest operating system (OS) of a virtual machine (VM);
probing, by an agent of the computer device, the first guest OS for first information and one or more other guest operating systems of the VM for other information,
the first information comprising information identifying a user…

Assignees

• Narayanaswamy Krishna
• Chickering Roger A
• Malmskog Steve
• Juniper Networks Inc

Inventors

• Narayanaswamy Krishna
• Chickering Roger A
• Malmskog Steve

Classifications

• H04L63/20 Primary

  Electricity · mapped topic

• H04L63/1416

  Electricity · mapped topic

• G06F9/5077 Primary

  Physics · mapped topic

• G06F9/45558

  Physics · mapped topic

• G06F21/53

  Physics · mapped topic