International Business Machines Corporation

Stanley Bryan Hardter

Seng Chai Gan

Adam Lee Griffin

HuyAnh Dinh Ngo

A method, system, and computer program product for malicious virtual machine detection is provided. The method passes network traffic from a set of virtual machines to a set of network resources. The network traffic passes through a network monitor. The network monitor monitors a set of traffic characteristics for the network traffic. A change in a network traffic characteristic is identified. The change results in a modified traffic characteristic. The method identifies a first virtual machine of the set of virtual machines. The first virtual machine is associated with the modified traffic characteristics. An alert is then generated which identifies the first virtual machine and the modified traffic characteristic.

Growing community of inventors

Baldwinsville, NY, United States of America

Stanley Bryan Hardter