Framework for coordination between endpoint security and network security services

Abstract

The invention relates to a framework for coordination between endpoint security and network security services. A technique includes operating one or more virtual machines each in accordance with a respective security container, wherein the respective security container is associated with a respective rule that specifies transfer of the virtual machine from the respective security container to a quarantine container based on one or more criteria. One or more security services are operated on the one or more virtual machines to identify one or more security threats associated with one or more ofthe virtual machines. One or more tags generated by the endpoint security services are obtained, where each tag is used for a virtual machine that is associated with one of the identified security threats. And one of the virtual machines is identified as requiring transfer to the quarantine container based on, at least, one or more of the obtained tags and the one or more criteria.

Description

[0001] This application is a divisional application of an invention patent application with the application number 201480034454.9, the application date is April 11, 2014, and the invention title is "Framework for Coordination Between Endpoint Security and Network Security Services". technical field [0002] This document deals with virtual machines and security services. Background technique [0003] A virtual machine is a software-based abstraction of a physical computer system. Generally, any computer program that can be executed on a physical computer system can be executed in a virtual machine using virtualization software. Virtualization software is software that logically intervenes between and interfaces with a virtual machine and a physical computer system. Each virtual machine is configured to execute an operating system, referred to herein as a guest OS, and application programs. A physical computer system, referred to herein as a host, can execute one or more vi...

AI Technical Summary

Problems solved by technology

[0005] In addition, applications and operating systems, whether executed on a virtual machine or directly on a host computer, remain vulnerable to programs or code such as viruses or worms that surreptitiously enter the computer environment

Viruses often replicate themselves, or cause them to be replicated, thereby consuming excessive computer resources and causing degradation or interruption of computer operations

Images