Red Hat, Inc.

Mark James Yourcheck

John Michael Suit

Daniel Lee Becker

Vipul Sharma

Stephen C Carr

Andrew W Brandt

Tim Campbell

Vip Sharma

A method and system provide tracking of a virtual machine by compiling information on the virtual machines in a network and sending the information to an administrative console. The administrative console can then determine the status of the virtual machines in the network. The administrative console can also establish a lineage of a virtual machine and the migration of a virtual machine from one host machine to another host machine. A virtual machine unique identifier assigned to each virtual machine by the system can be modified and used to track each virtual machine and associated host machine. A status can then be determined of the virtual machines, where the status can be a new virtual machine, a previously discovered virtual machine, a duplicated virtual machine, or a cloned virtual machine.

Tracking a virtual machine

At least one agent is deployed to one or more nodes of a network. At least one message is received from the agent, and at least one configuration change is determined from the message. Next, a record comprising one or more parameters of the configuration change is generated and stored in a database.

Monitoring system performance changes based on configuration modification

A method and system provide security for a communication network and for one or more nodes within the network. Software can be distributed throughout the network from a centralized location or administrative console. The software can be made resident in the kernel of the operating system of a receiving node. The software can provide an observation functionality, an analysis functionality, a reporting functionality and a remediation functionality or some subset of those functionalities.

Method and system for cloaked observation and remediation of software attacks

A method and system for a communication network containing both trusted peers and untrusted hosts within the network. Trusted peers can collaborate with each other to observe and monitor the activity of the untrusted hosts. In addition, a trusted peer instantiated with a virtual machine can have an operating system kernel collaborate with a hypervisor to determine whether threats are present. A trusted peer that needs particular functionality installed can collaborate with other trusted peers and with an administrative console to have that functionality installed. An untrusted host can have a driver directly inserted into it by an administration console, which will facilitate in the collaboration process.

Growing community of inventors

Hanover, MD, United States of America

Mark James Yourcheck