公开(公告)号：US20240354411A1

公开(公告)日：2024-10-24

申请号：US18335130

申请日：2023-06-15

Applicant: VMware, Inc.

Inventor： Zhe WANG ,  Wenguang WANG ,  Enning XIANG ,  Jianhan ZHAN ,  Rajesh JOSEPH ,  Bing JIAO

IPC: G06F21/56 ,  G06F9/455 ,  G06F21/55

CPC classification number: G06F21/566 ,  G06F9/45558 ,  G06F21/554 ,  G06F2009/45587 ,  G06F2221/034

Abstract: Solutions for rapid ransomware detection and recovery include: receiving a first set of in-memory changed data blocks; identifying, within the first set of in-memory changed data blocks, a second set of in-memory changed data blocks addressed for storage within a file index for a virtual machine (VM) disk; determining, relative to a change history of the file index, an anomalous condition; based on at least determining the anomalous condition, identifying a third set of blocks within the file index that are changed between two versions of the VM disk; determining that changes in the third set of blocks indicate ransomware; and based on at least determining that changes in the third set of blocks indicate ransomware, generating an alert. Machine learning (ML) models may perform anomaly/ransomware detection. Remediation activities may include disk restoration storing the VM memory.

公开(公告)号：US20190311508A1

公开(公告)日：2019-10-10

申请号：US15949085

申请日：2018-04-10

Applicant: VMware, Inc.

Inventor： Zhe WANG ,  Xiangjun SONG

IPC: G06T11/20 ,  H04L12/24

Abstract: A method for interactively visualizing a graph includes maintaining objects, operations, reactions, and interactions in volatile memory, receiving user input of interactions each specifying one or more reactions to visually transform one object when selected by one or more operations, and writing the objects, the operations, the reactions, and the interactions in a computer-readable file. The method further includes exporting a number of the objects to a render function in an application framework to render them, receiving an event from an event listener in the application framework, determining an operation selecting an object based on the event, determining an interaction corresponding to the object and the operation, determining at least one reaction corresponding to the interaction, and instructing the render function to visually transform the object with the at least one reaction.