公开(公告)号：US09148428B1

公开(公告)日：2015-09-29

申请号：US13419345

申请日：2012-03-13

申请人： Gaurav Banga ,  Sergei Vorobiev ,  Deepak Khajura ,  Ian Pratt ,  Vikram Kapoor ,  Simon Crosby

发明人： Gaurav Banga ,  Sergei Vorobiev ,  Deepak Khajura ,  Ian Pratt ,  Vikram Kapoor ,  Simon Crosby

IPC分类号： H04L29/06 ,  G06F21/00 ,  G06F21/62

CPC分类号： G06F9/3891 ,  G06F9/455 ,  G06F9/45558 ,  G06F9/5027 ,  G06F9/5077 ,  G06F21/6218 ,  G06F2009/45587 ,  G06F2209/5018 ,  H04L63/10 ,  H04L63/105 ,  H04L63/1425 ,  H04L63/20 ,  H04L67/42

摘要： Approaches for managing potentially malicious files using one or more virtual machines. In response to receiving a request to perform an action on a file, a client applies a policy to determine whether the action is deemed trustworthy. The client identifies, without human intervention, a virtual machine, executing or to be executed on the client, in which the action is to be performed based on whether the action is deemed trustworthy. In this way, embodiments allow a user to make use of data deemed untrusted in certain cases without allowing the untrusted data from having unfettered access to the resources of the client. If the requested action is performed in a different virtual machine from which the action was requested, embodiments enable the performance of the action to be performed seamlessly to the user.

摘要翻译： 使用一个或多个虚拟机管理潜在恶意文件的方法。 响应于接收到对文件执行动作的请求，客户端应用策略来确定该动作是否被认为是可信赖的。 客户机在没有人为干预的情况下识别虚拟机，在客户机上执行或执行，根据该动作是否被认为可信赖地执行该动作。 以这种方式，实施例允许用户在某些情况下使用被认为不受信任的数据，而不允许不受信任的数据不受限制地访问客户端的资源。 如果在请求动作的不同的虚拟机中执行所请求的动作，则实施例使得能够对用户无缝地执行动作的执行。