Systems and methods for securing virtual machine computing environments

摘要

Systems and methods are provided for securing data in virtual machine computing environments. A request is received for a security operation from a first virtual machine operating in a host operating system of a first device. In response to receiving the request, a first security module executes the security operation, the first security module implemented in a kernel of the host operating system. The result of the security operation is provided to the first virtual machine.

主权项

1. A method for securing data, the method comprising:
receiving, by a hardware processor, a request for a security operation, to be performed by one of a plurality of security modules including a first security module and a second security module, from a first virtual machine operating in a host operating system of a first device; in response to receiving the request:
determining whether the second security module implemented in a kernel of an operating system of the first virtual machine is available to execute the request;selecting the first security module, implemented in a kernel of the host operating system, from the plurality of security modules in response to determining that the second security module is not available to execute the request; andexecuting the security operation at the first security module; and providing a result of the security operation to the first virtual machine.