Microsoft Technology Licensing, LLC

Computer Associates Think, Inc.

Computer Associates International, Inc.

Ca, Inc.

Other

Anders Bertil Vinberg

Galen Clyde Hunt

Robert Victor Welland

Bassam Tabbara

Aamer Hydrie

Geoffrey Hugh Outhred

Rob M Mensching

Kevin Grealish

Reuven Battat

Michael Her

Sidney Wang

Robert M Fries

Rene Antonio Vega

John M Parchem

Eric Joseph Winner

Jeffrey A Woolsey

Ashvinkumar J Sanghvi

Vij Rajarajan

Edwin R Lassettre

Chandrasekha Sundaresh

Vitaly Voloshin

Anand Lakshminarayanan

David Matthew Kruse

Mark Fishel Novak

Niels Thomas Ferguson

Nir Ben-Zvi

Christopher Warner McCarron

Samartha Chandrashekar

Qiang Wang

Yevgeniy Anatolievich Samsonov

Amitabh Prakash Tamhane

John Anthony Messec

John Eugene Neystadt

Mazhar Naveed Mohammed

Steven Patterson Burns

Kinshumann

Chandrasekhar Sundaresh

Andrew Timothy Hopper

James Robert Hamilton

Raymond W McCollum

Giedrius Zizys

Emre Mehmet Kiciman

Efstathios Papaefstathiou

David C James

Benjamin Salim Srour

Michael Joseph Healy

Bruce Wayne Copeland

Yigal Mordechai Edery

David G Campbell

John H Wilson

Dustin Michael Ingalls

Ronald J Cass

Jonathan C Hardwick

Yair Tor

Steven Abrahams

Kinshuman Kinshumann

Oleg Ananiev

Marisol Ontaneda

Derek Menzies

Rajagopalan Badri Narayanan

David Eugene Huddleston

Kenneth W Colby

Nigel Graham Cain

Andrea Westerinen

Anthony Baron

Zhengkai Kenneth Pan

Kevin D J Grealish

Dennis Scott Batchelder

Christopher W Bayer

John D Pao

Phil K Barthram

Kenneth A Lehman

Yan Belinky

Thomas J Wright

Shimon Yannay

Donald F Ferguson

Przemek Pardyak

Dileep R P Kumar

Travis Dustin Sweat

Christopher Mccarron

A virtual secure mode is enabled for a virtual machine operating in a computing environment that is associated with a plurality of different trust levels. First, a virtual secure mode image is loaded into one or more memory pages of a virtual memory space of the virtual machine. Then, the one or more memory pages of the virtual memory space are made inaccessible to one or more trust levels having a relatively lower trust level than a launching trust level that is used by a virtual secure mode loader to load the virtual secure mode image. A target virtual trust level is also enabled on a launching virtual processor for the virtual machine that is higher than the launching trust level.

Secure management of operations on protected virtual machines

Model-based virtual system provisioning includes accessing a model of a workload to be installed on a virtual machine of a system as well as a model of the system. A workload refers to some computing that is to be performed, and includes an application to be executed to perform the computing, and optionally includes the operating system on which the application is to be installed. The workload model identifies a source of the application and operating system of the workload, as well as constraints of the workload, such as resources and/or other capabilities that the virtual machine(s) on which the workload is to be installed must have. An installation specification for the application is also generated, the installation specification being derived at least in part from the model of the workload and the model of the virtual system.

Model-based virtual system provisioning

Deploying an encrypted entity on a trusted entity is illustrated herein. A method includes, at a trusted entity, wherein the trusted entity is trusted by an authority as a result of providing a verifiable indication of certain characteristics of the trusted entity meeting certain requirements, receiving an encrypted entity from an untrusted entity. The untrusted entity is not trusted by the authority. At the trusted entity, a trust credential from the authority is used to obtain a key from a key distribution service. The key distribution service is trusted by the authority. The key is used to decrypt the encrypted entity to allow the encrypted entity to be deployed at the trusted entity.

Actions performed when one or more virtual-machine-deployment instructions are executed are exposed. The actions can subsequently be analyzed to identify potential inefficiencies or other issues in the process of deploying one or more virtual machines. In furtherance thereof, metadata associated with the actions, such as performance information, can also be attached to relevant actions.

Virtual-machine-deployment-action analysis

Architecture that provides additional data that can be obtained and employed in security models in order to provide security to services over the service lifecycle. The architecture automatically propagates security classifications throughout the lifecycle of the service, which can include initial deployment, expansion, moving servers, monitoring, and reporting, for example, and further include classification propagation from the workload (computer), classification propagation in the model, classification propagation according to the lineage of the storage location (e.g., virtual hard drive), status propagation in the model and classification based on data stored in the machine.

Automated security classification and propagation of virtualized and physical virtual machines

Architecture that provides model-based systems management in virtualized and non-virtualized environments. A security component provides security models which define security requirements for services. A management component applies one or more of the security models during the lifecycle of virtual machines and services. The lifecycle can include initial deployment, expansion, moving servers, monitoring, and reporting. The architecture creates a formal description model of how a virtual machine or a service (composition of multiple virtual machines) is secured. The security requirements information can also be fed back to the general management system which uses this information in its own activities such as to guide the placement of workloads on servers can be security related.

Model based systems management in virtualized and non-virtualized environments

A method and apparatus intuitively to administer all components of a networked computer system by use of real multi-dimensional views of any component or any set of components, including components related to a specific business interest, and with customizable and fully extensible functionality, across heterogenous platforms and applications. Navigation and configuration tools are provided, with an intelligent cursor, to travel to and address any component part thereof, or subset of components, with status and abnormalities identified, monitored and controlled, and by hierarchical filtration, and aggregation correlation with asynchronous notification. Graphical presentation tools are also provided employing an enhanced zooming graphical display.

Method and apparatus for intuitively administering networked computer systems

Described is a technology by which a system corresponding to a large scale application is built from subsystems that are differentiated from one another based on characteristics of each subsystem. Example characteristics include availability, reliability, redundancy, statefulness and/or performance. Subsystems are matched to known design patterns, based on each subsystem's individual characteristics. Each subsystem's characteristics are associated with that subsystem for subsequent use in operation of the system, e.g., for managing/servicing the subsystem. The known design patterns may be provided in a library, in a programming framework, in conjunction with a development tool, and/or as data associated with one or more operating system services, server systems and/or hosted services that include at least one configuration, policy and or schema. Certain design patterns and/or characteristics patterns may be blocked to prevent their usage.

Highly available large scale network and internet systems

Model-based system monitoring includes accessing a model of a system that includes multiple components and executing a monitoring policy to monitor performance of the system. A notification of a problem is received from a first component. A determination is made regarding the cause of the problem. The determination is made, at least in part, based on the model of the system. At least one component associated with the cause of the problem is then identified.

Model-based system monitoring

Described herein are one or more implementations of a policy-management infrastructure that provides a universal policy-based solution across a spectrum of scenarios in a computing environment. At least one implementation of the policy-management infrastructure defines how policy-based data is structured or layered relative towards the data in other layers. Furthermore, a described implementation provides a mechanism for determining 'overlap' and 'conflicts' in policies.

Policy-management infrastructure

A network management system allows a network administrator to intuitively manage all components of a heterogeneous networked computer system using views of any component or any set of components. These views are generated in a multi-dimensional, virtual reality environment. Navigation tools are provided that allow an operator to travel through the network hierarchy's representation in the virtual environment using an automatic flight mode. Automatic flight mode determines a reasonable trajectory to a network component that avoids collisions with intervening objects in the virtual environment. Since the system is capable of managing a world-wide network, city, building, subnet, segment, and computer, a view may also display internal hardware, firmware, and software of any network component. Views of network components may be filtered so only components pertaining to a specific business or other interest are displayed.

Network management system using virtual reality techniques to display and simulate navigation to network components

Growing community of inventors

Kirkland, WA, United States of America

Anders Bertil Vinberg