Security policy generation based on snapshots of similar virtual machines

US9563777B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Yu Deng · Hangzhou City, CN
• Ruchi Mahindru · Elmsford, US
• HariGovind V. Ramasamy · Ossining, US
• Lakshminarayanan Renganarayana · San Jose, US
• Soumitra Sarkar · Cary, US
• Long Wang · White Plains, US

Key dates

• Filing date: Apr 29, 2015
• Grant date: Feb 7, 2017
• Expiry date: Jul 24, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/034
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Determining which snapshot deltas tend to occur in: (i) healthy virtual machines (VMs) that have been subject to an attack yet remained healthy, and/or (ii) unhealthy VMs that have apparently been adversely affected by an attack. Snapshot deltas that occur in at least some (or more preferably all) of the healthy VM subset provide information about software changes (for example, updates, configuration changes) that may be helpful. Snapshot deltas that occur in at least some (or more preferably all) of the unhealthy VM subsets provide information about software changes (for example, updates, configuration changes) that may be unhelpful.