Changed Block Tracking Driver for Agentless Security Scans of Virtual Disks

摘要

An agentless system and method of efficiently scanning a computer memory for compromised security in a virtualized computing environment is disclosed. By monitoring the access from virtual processing machines to a physical memory device, a list of the data blocks that have been altered since a last security scan is compiled. The system then uses that list to only scan altered data block in a subsequent security scan.

主权项

1. An agentless method of scanning a digital memory for compromised security, comprising:
providing a digital memory storage device comprising one or more digital data blocks, each of said digital data blocks comprising a block address; monitoring access to said digital memory storage device to compile a changed block list, said changed block list comprising one of more of said block addresses of said digital data blocks accessed since a last security scan; and monitoring access to said digital memory storage device to compile a changed block list, said changed block list comprising one of more of said block addresses of said digital data blocks accessed since a last security scan; and performing a next security scan of only said digital data blocks on said changed block list.