Patent ID: 11922199
Assignee: VMWARE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. A host in a virtualized computing environment, the host comprising:
a processor; and
a non-transitory computer-readable medium coupled to the processor and having instructions stored thereon, which in response to execution by the processor, cause the processor to perform or control performance of operations for the host to restore a virtual machine supported by the host, wherein the operations include:
perform, by a replication module resident in the virtual machine which runs on the host, a replication process during continuous data protection (CDP) to store point-in-time images of the virtual machine at a storage location over time while the virtual machine is running on the host, wherein the storage location is at a remote data recovery (DR) site that is external to the virtualized computing environment that includes the host;
perform, by an agent resident in the virtual machine which runs on the host, a monitoring process concurrently and in synchronization with the replication process to monitor operational behavior of the virtual machine running on the host;
in response to the monitored operational behavior at a particular time being determined by the agent as being in violation of expected operational behavior of the virtual machine, identify, by the replication module resident in the virtual machine which runs on the host, a point-in-time image of the virtual machine that corresponds to the particular time as an unsecure image with a security risk;
perform an action on the unsecure image to restrict use of the unsecure image for restoration of the virtual machine; and
recover, from the storage location at the DR site, a point-in-time image of the virtual machine that was generated prior to the particular time and generated while the virtual machine was running on the host, that was stored at the storage location at the DR site by the replication process during CDP, and that was determined as being secure at the point-in-time of the generation of the image, to use for the restoration of the virtual machine.