公开(公告)号：US11507653B2

公开(公告)日：2022-11-22

申请号：US16233143

申请日：2018-12-27

Applicant: VMWARE, INC.

Inventor： Vaibhav Rekhate ,  Nilesh Awate ,  Amit Vasant Patil ,  Vijay Ganti

IPC: G06F21/53 ,  G06F21/51 ,  G06F21/55 ,  G06F21/56 ,  G06F9/455

Abstract: A management service can be used to manage enterprise applications. Management agents can be installed in each enterprise application, e.g., in each virtual machine of each enterprise application. The management agent can check each process created by its host virtual machine against a local whitelist. If the local whitelist indicates the process is safe, the process can be executed. Otherwise, an alert including a process description is sent to the management service. An alert analyzer of t he management service can check information of the management service itself as well as third-party information to determine whether or not the process is safe. In the event the alert analyzer determines a process that was the subject of an alert is, in fact, safe, an indication that the process is safe is added to the local whitelist.

公开(公告)号：US20200065478A1

公开(公告)日：2020-02-27

申请号：US16233143

申请日：2018-12-27

Applicant: VMWARE, INC.

Inventor： Vaibhav Rekhate ,  Nilesh Awate ,  Amit Vasant Patil ,  Vijay Ganti

IPC: G06F21/53 ,  G06F21/51 ,  G06F21/55 ,  G06F21/56 ,  G06F9/455

Abstract: A management service can be used to manage enterprise applications. Management agents can be installed in each enterprise application, e.g., in each virtual machine of each enterprise application. The management agent can check each process created by its host virtual machine against a local whitelist. If the local whitelist indicates the process is safe, the process can be executed. Otherwise, an alert including a process description is sent to the management service. An alert analyzer of t he management service can check information of the management service itself as well as third-party information to determine whether or not the process is safe. In the event the alert analyzer determines a process that was the subject of an alert is, in fact, safe, an indication that the process is safe is added to the local whitelist.