System and method for operating malicious marker detection software on management controller of protected system

摘要

An information handling system includes a processor and a management controller separate from the processor. The management controller is operable to store an anti-virus program and a malicious marker detection program in a memory of the management controller, and to execute the malicious marker detection program. The malicious marker detection program operates to detect a state of a device of the information handling system, determine that the information handling system is under attack from a malicious program in response to detecting the state of the device, and send an alert to a management system coupled to the information handling system, the alert indicating that the information handling system is under attack from the malicious program.

主权项

1. An information handling system, comprising:
a processor to provide a host processing environment; and a management controller separate from the processor and on a common board with the processor, the management controller operable to:
store an anti-virus program and a malicious marker detection program in a memory of the management controller; andexecute the malicious marker detection program to:
detect a state of a device of the information handling system;determine that the host processing environment is under attack from a malicious program in response to detecting the state of the device; andsend an alert to a management system coupled to the information handling system, the alert indicating that the host processing environment is under attack from the malicious program.