US Patent:
20160132351, May 12, 2016
Inventors:
- Cupertino CA, US
J. McEnroe Samuel Navaraj - Santa Clara CA, US
Baibhav Singh - San Jose CA, US
Arun Passi - Sunnyvale CA, US
Rafal Wojtczuk - Warszawa, PL
International Classification:
G06F 9/455
G06F 21/55
Abstract:
The execution of a process within a VM may be monitored, and when a trigger event occurs, additional monitoring is initiated, including storing behavior data describing the real-time events taking place inside the VM. This behavior data may then be compared to information about the expected behavior of that type of process in order to determine whether malware has compromised the VM.