公开(公告)号：US11316879B2

公开(公告)日：2022-04-26

申请号：US16255551

申请日：2019-01-23

Applicant: VMware, Inc.

Inventor： David Ott ,  Lei Xu ,  Ruimin Sun ,  Vijay Ganti ,  Dennis R. Moreau

IPC: G06F9/455 ,  H04L29/06

Abstract: A computer-implemented method and system for protecting a host computer in a computer network from security threats uses local security-relevant data for the host computer, as well as global security-relevant data for other components in the computer network downloaded from a security information plane system to the host computer, to determine a security threat to the host computer. When a security threat is determined to be a legitimate threat, a security alert is issued, and then an action is initiated in response to the security alert.

公开(公告)号：US11178181B2

公开(公告)日：2021-11-16

申请号：US16228681

申请日：2018-12-20

Applicant: VMware, Inc.

Inventor： David Ott ,  Lei Xu ,  Dennis R. Moreau

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/26 ,  G06N20/00 ,  G06F9/455

Abstract: System and method for managing security-relevant information in a computer network uses a security information plane (SIP) manager to which different types of security-relevant data are uploaded from components in the computer network and from which networkwide aggregated security information produced from the security-relevant data is download to a global security controller. The downloaded networkwide aggregated security information is used by the global security controller to control security applications running in the computer network.