Emc IP Holding Company LLC

Yaniv Harel

Philip Derbeko

Assaf Natanzon

Yossef Saad

Maya Bakshi

Uriya Stern

Shai Kappel

Harel Ram

A system, computer program product, and computer-executable method of detecting malware in a virtual machine (VM), the computer-executable method comprising periodically creating snapshots of the VM, analyzing each of the snapshots in comparison to one or more previous snapshots to determine whether anomalies exist, and based on a threshold amount of anomalies detected, scanning the VM to determine whether malware is detected.

Malware detection in virtual machines

Embodiments described herein perform cleanup of backup images of a storage system by applying a record of I/O operations recorded while performing anti-malware operations on the storage system. The recording of the I/O operations can be replayed to resolve malware infections in the backup images, snapshots, or replicas of the storage system without requiring a restore-cleanup cycle for each backup image.

Cleaning malware from backup data

Growing community of inventors

Neve-Monosson, Israel

Yaniv Harel