Anti-malware service in multi-tenant cloud computing environments

摘要

A host machine hosts virtual machines on a first logical layer, and a multi-tenant cloud computing environment on a second logical layer running on top of the first logical layer. An anti-malware provides an anti-malware service to virtual machines on the first logical layer. A tenant of the multi-tenant cloud computing environment may lease a virtual machine, and select the virtual machine for subscription to the anti-malware service. A second identifier of the selected virtual machine on the second logical layer is used to determine a first identifier of the selected virtual machine on the first logical layer. The selected virtual machine is identified to the anti-malware using the first identifier. The anti-malware provides anti-malware service to the selected virtual machine. An anti-malware broker may be employed to facilitate selection of the selected virtual machine, and to allow the anti-malware to identify virtual machines subscribed to the anti-malware service.

主权项

1. A method of providing an anti-malware service to a multi-tenant cloud computing environment, the method comprising:
determining image names of virtual machines leased by a tenant in a cloud computing environment having a plurality of tenants, the cloud computing environment including a cloud layer running on top of a virtualization layer, the image names identifying the virtual machines on the cloud layer; receiving a selection of virtual machines to be subscribed to the anti-malware service, the selection identifying selected virtual machines leased by the tenant; using image names of the selected virtual machines, determining corresponding virtual machine names of the selected virtual machines, the virtual machine names identifying the selected virtual machines on the virtualization layer; informing an anti-malware of the selected virtual machines identified by their respective virtual machine names, the anti-malware running on the virtualization layer; and using the anti-malware, providing the anti-malware service to the selected virtual machines on the virtualization layer, the anti-malware service including scanning files of the selected virtual machines for malware.