Patent ID: 9749351
Date: 2017-08-29
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: monitoring a plurality of virtual machines in a virtualized infrastructure, wherein each virtual machine is associated with a respective plurality of attributes, and the plurality of virtual machines includes a first virtual machine; detecting, based on the monitoring, a modification associated with a first attribute of the first virtual machine, wherein the modification is an addition of the first attribute to the first virtual machine, wherein the addition corresponds to detection of a new vulnerability for the first virtual machine, and wherein detection of the vulnerability results from assessing a vulnerability state of the plurality of virtual machines in a network by connecting to each respective virtual machine over the network and assessing the respective virtual machine based on known vulnerability signatures or indicators; and in response to detecting the modification, changing a second attribute of the first virtual machine, wherein the second attribute identifies membership of the first virtual machine in at least one of a plurality of logical zones, and changing the second attribute changes membership of the first virtual machine from a first logical zone to a second logical zone.