Method and system for identifying virtualized operating system threats in a cloud computing environment

摘要

Systems for monitoring a virtual machine in a cloud computing environment are disclosed. The systems include a baseline module residing on the virtual machine configured to retrieve baseline information from the virtual machine and create a plurality of baseline files and a trends module configured to retrieve a number of baseline files, comparatively analyze the number of baseline files and generate at least one trends report based on the comparative analysis of baseline files.

主权项

1. A system for monitoring one or more virtual machines in a cloud computing environment, the system comprising:
a baseline module of a virtual machine executing on a host computer, the baseline module configured to:
1) monitor performance of software of the virtual machine executing on the host computer to collect software information,2) monitor performance of a plurality of different hardware components of the host computer to collect a plurality of different types of hardware information including at least central processing unit (CPU) temperature and serial number of the host computer, and3) create a plurality of machine readable baseline files based on the collected software information and the plurality of different types of hardware information; and a trends module executing on a storage and processing computer separate from the host computer, the trends module configured to:
1) retrieve a number of the machine readable baseline files of the virtual machine,2) comparatively analyze the number of machine readable baseline files by performing a statistical analysis of the software information and the plurality of different types of hardware information over a period of time, wherein the statistical analysis includes analysis of differences of the central processing unit (CPU) temperature and serial number of the host computer performed over a first time period and a second time period that is longer than the first time period, and3) generate at least one user readable trends report based on the comparative analysis of the machine readable baseline files.