公开(公告)号：US20200236119A1

公开(公告)日：2020-07-23

申请号：US16250354

申请日：2019-01-17

Applicant: VMware, Inc.

Inventor： Ravishankar Chamarajnager ,  Amit Vasant Patil ,  Amol Khare ,  Mandar Nadgouda ,  Mahesh Kumar ,  Gavin Lu ,  Tiejun Chen ,  Vasudev Yendapally

IPC: H04L29/06 ,  G06F9/455

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.

公开(公告)号：US11706237B2

公开(公告)日：2023-07-18

申请号：US17509289

申请日：2021-10-25

Applicant: VMware, Inc.

Inventor： Ravishankar Chamarajnager ,  Amit Vasant Patil ,  Amol Khare ,  Mandar Nadgouda ,  Mahesh Kumar ,  Gavin Lu ,  Tiejun Chen ,  Vasudev Yendapally

IPC: G06F9/455 ,  H04L9/40

CPC classification number: H04L63/1425 ,  G06F9/45558 ,  G06F2009/45575 ,  G06F2009/45595

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a baseline behavior profile for a gateway virtual machine is transmitted from a management service to a gateway security process executed in a gateway device. The management service receives an anomaly notification including an indication of an anomaly from the baseline behavior profile. The managements service generates a user interface that shows a description of the anomaly.

公开(公告)号：US11184375B2

公开(公告)日：2021-11-23

申请号：US16250354

申请日：2019-01-17

Applicant: VMware, Inc.

Inventor： Ravishankar Chamarajnager ,  Amit Vasant Patil ,  Amol Khare ,  Mandar Nadgouda ,  Mahesh Kumar ,  Gavin Lu ,  Tiejun Chen ,  Vasudev Yendapally

IPC: G06F9/455 ,  H04L29/06

Abstract: Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.