公开(公告)号：US20220210127A1

公开(公告)日：2022-06-30

申请号：US17177257

申请日：2021-02-17

Applicant: VMWARE, INC.

Inventor： VASANTHA KUMAR DHANASEKAR ,  Shirish VIJAYVARGIYA ,  Rayanagouda Bheemanagouda PATIL

IPC: H04L29/06 ,  H04L9/32

Abstract: Example methods and systems for attribute-based firewall rule enforcement are described. One example method may comprise a computer system obtaining, from a management entity, one or more first firewall rules configured based on first attribute information. The computer system may detect a login event associated with a user operating a user device to log onto a virtualized computing instance. In response to determination that the user is associated with the first attribute information, the one or more first firewall rules may be applied. Otherwise, in response to determination that the user is associated with second attribute information that is different from the first attribute information, the computer system may obtain and apply one or more second firewall rules configured based on the second attribute information.

公开(公告)号：US20240095351A1

公开(公告)日：2024-03-21

申请号：US17948104

申请日：2022-09-19

Applicant: VMware, Inc.

Inventor： Shirish VIJAYVARGIYA ,  Vasantha Kumar DHANASEKAR ,  Bidesh CHITNIS ,  Nakul Ranjan OGALE ,  Bharath Kumar CHANDRASEKHAR ,  Boris WEISSMAN ,  Robert James SPEAKER

IPC: G06F21/55 ,  G06F21/56

CPC classification number: G06F21/554 ,  G06F21/552 ,  G06F21/564

Abstract: In one set of embodiments, an enhanced next generation anti-virus (NGAV) system is provided. In certain embodiments, this system includes a hypervisor-level agent that backs up VM data only when an instance of a guest application running in the VM has been flagged by the NGAV system as being potentially malicious (rather than on a constant, proactive basis). Further, the hypervisor-level agent performs this backup only with respect to data modified by that specific guest application instance (rather than backing up all data modified by the VM) and writes the backed-up data to a secure storage location which is inaccessible to the guest. The combination of these features addresses many of the problems and inefficiencies of existing NGAV systems.

公开(公告)号：US20210097167A1

公开(公告)日：2021-04-01

申请号：US16588614

申请日：2019-09-30

Applicant: VMware, Inc.

Inventor： Nakul OGALE ,  Shirish VIJAYVARGIYA ,  Sachin SHINDE

IPC: G06F21/52

Abstract: A process monitoring methodology is disclosed. In a computer-implemented method, a selection of a process to be monitored is received. The process is to be at least partially performed using a component of a computing environment. An expected operating parameter of the process is determined. The process is also monitored to determine an actual operating parameter of the process. The actual operating parameter of the process is compared with the expected operating parameter of the process to generate a comparison result. An operation is then automatically performed based upon the comparison result.