公开(公告)号：US10089474B2

公开(公告)日：2018-10-02

申请号：US15021032

申请日：2013-10-29

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tony Roberts ,  Mike Wray ,  Nigel Edwards

IPC: G06F21/57 ,  G06F21/56 ,  G06F21/62 ,  G06F9/455

Abstract: Virtual machine introspection can include performing an offline analysis of a virtual machine hard disk image. Core operating system files associated with the operating system can be located during the offline analysis. Operating system structure symbols can be accessed from a symbol server based on the core operating system files. Introspection of the virtual machine can be performed using the accessed operating system structure symbols.

公开(公告)号：US20160224794A1

公开(公告)日：2016-08-04

申请号：US15021032

申请日：2013-10-29

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tony Roberts ,  Mike Wray ,  Nigel Edwards

IPC: G06F21/57 ,  G06F21/56 ,  G06F21/62

CPC classification number: G06F21/577 ,  G06F9/45558 ,  G06F21/562 ,  G06F21/566 ,  G06F21/6218 ,  G06F2009/45587

Abstract: Virtual machine introspection can include performing an offline analysis of a virtual machine hard disk image. Core operating system files associated with the operating system can be located during the offline analysis. Operating system structure symbols can be accessed from a symbol server based on the core operating system files. Introspection of the virtual machine can be performed using the accessed operating system structure symbols.

Abstract translation: 虚拟机内省可以包括执行虚拟机硬盘映像的脱机分析。 可以在离线分析期间找到与操作系统相关联的核心操作系统文件。 可以从基于核心操作系统文件的符号服务器访问操作系统结构符号。 可以使用所访问的操作系统结构符号来执行虚拟机的内省。