Red Hat, Inc.

Cisco Technology, Inc.

3e Technologies International, Inc.

Daniel Lee Becker

John Michael Suit

Vipul Sharma

Mark James Yourcheck

Andrew W Brandt

Choon B Shim

Todd Lizambri

Stephen C Carr

Mark I Yourcheck

Tim Campbell

Nathaniel R Tabernero

Adam J Keeton

Patrick J Foy

Joshua Suereth

Vip Sharma

Xiang Yu

Dave Sheets

Christopher M Schmidt

A method and system provide information by which a host machine on which a virtual machine is running can be determined via a messaging channel between the virtual machines running on the host machine and the host machine. The virtual machine can then determine whether or not it should be executing. In order for the virtual machine to determine whether it can execute, it will need to know information about the host machine on which it will be running. Similarly, a virtual machine can determine whether it has been exposed to any viruses or whether a particular update has been run by knowing the host machines on which it has been run.

Method and system for determining a host machine by a virtual machine

A method and system provide tracking of a virtual machine by compiling information on the virtual machines in a network and sending the information to an administrative console. The administrative console can then determine the status of the virtual machines in the network. The administrative console can also establish a lineage of a virtual machine and the migration of a virtual machine from one host machine to another host machine. A virtual machine unique identifier assigned to each virtual machine by the system can be modified and used to track each virtual machine and associated host machine. A status can then be determined of the virtual machines, where the status can be a new virtual machine, a previously discovered virtual machine, a duplicated virtual machine, or a cloned virtual machine.

Tracking a virtual machine

A method and system provide security for a communication network and for one or more nodes within the network. Software can be distributed throughout the network from a centralized location or administrative console. The software can be made resident in the kernel of the operating system of a receiving node. The software can provide an observation functionality, an analysis functionality, a reporting functionality and a remediation functionality or some subset of those functionalities.

Method and system for cloaked observation and remediation of software attacks

Network traffic analysis is performed by deploying, across a network having a plurality of network nodes, at least one data collection agent, on at least two of the plurality of network nodes. Each data collection agent may monitor at each network node, a plurality of network connections instantiated during a monitoring time period. Data resulting from the monitoring is acquired from the data collection agents and an ontological description of the network is automatically created from the acquired data. The ontological description is dynamically updated and network traffic analysis is performed using the dynamically updating ontological description.

Network traffic analysis using a dynamically updating ontological network description

A method and system for a communication network containing both trusted peers and untrusted hosts within the network. Trusted peers can collaborate with each other to observe and monitor the activity of the untrusted hosts. In addition, a trusted peer instantiated with a virtual machine can have an operating system kernel collaborate with a hypervisor to determine whether threats are present. A trusted peer that needs particular functionality installed can collaborate with other trusted peers and with an administrative console to have that functionality installed. An untrusted host can have a driver directly inserted into it by an administration console, which will facilitate in the collaboration process.

Method and system for collaboration involving enterprise nodes

A method includes receiving a first capture time corresponding to a first time that a data packet is received at a first probe and a second capture time corresponding to a second time that the data packet is received at a second probe. The data packet is from existing network traffic transmitted over a data network. The first and second probes can be configured to capture the data packet in response to a capture instruction. The first capture time and second capture time are different and are used to calculate the latency of at least a portion of a data network.

Method and apparatus for high resolution passive network latency measurement

A method and system for fast setup of group Voice over Internet Protocol (VoIP) communications. The method and system provide a lower VoIP signaling overhead and a faster setup-time of group calls such as N-way audio and/or audio-video conference calls. Multi-party VoIP connections are quickly set-up over one or more virtual communications channels established between plural network devices using a session layer application, one or more group transport layer ports and a broadcast destination network address.

Method and system for fast setup of group voice over IP communications

Growing community of inventors

Frederick, MD, United States of America

Daniel Lee Becker