Vmware, Inc.

Mandar Barve

Vasantha Kumar

Rayanagouda Bheemanagouda Patil

Sriram Gopalakrishnan

Kedar Bhalchandra Chaudhari

Manisha Sameer Gambhir Parekh

Pranav Gokhale

Niranjan Phadnaviss

In an example, a method may include maintaining a virtual machine (VM) object storing a security policy of a VM running on a first host computing system. Further, the method may include attaching the VM object to the VM. In response to detecting a trigger event, the method may include identifying a second host computing system that is in compliance with the security policy in the VM object. Furthermore, the method may include executing a management operation to migrate or clone the VM along with the attached VM object from the first host computing system to the second host computing system.

Security-policy based virtual machine migration or cloning

The disclosure herein describes the processing of malware scan requests from VCIs by an anti-malware scanner (AMS) on a host device. A malware scan request is received by the AMS from a VCI, the malware scan request including script data of a script from a memory buffer of the VCI. The AMS scans the script data of the malware scan request, outside of the VCI, and determines that the script includes malware. The AMS notifies the VCI that the script includes malware, whereby the VCI is configured to prevent execution of the script or take other mitigating action. The AMS provides scanning for fileless malware to VCIs on a host device without consuming or otherwise affecting resources of the VCIs.

In-memory scanning for fileless malware on a host device

Example methods and systems for score-based dynamic firewall rule enforcement in a software-defined networking (SDN) environment. One example method may comprise in response to detecting a first request to access a first resource, identifying a first score associated with the user, and a firewall rule that is applicable to the user based on information associated with the user. The firewall rule may be applied to allow access to the first resource. The method may further comprise adjusting the first score to a second score that represents a more restrictive access level compared to the first score. In response to detecting a second request to access the first resource, applying the firewall rule to block the second request based on the second score.

Score-based dynamic firewall rule enforcement

Growing community of inventors

Pune, India

Mandar Barve