Patent ID: 8938782
Filing Date: 2015-01-20
Classification: G06F

Abstract:
1. A computer-implemented method for providing network access control in virtual environments, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: transferring control of a virtual machine that is running on a host machine to an agent-insertion module; using the agent-insertion module to allocate a memory region of the virtual machine to a transient security agent; injecting the transient security agent into the allocated memory region of the virtual machine; receiving, from the transient security agent, an indication of whether the virtual machine complies with one or more network access control policies; controlling network access of the virtual machine based on the indication of whether the virtual machine complies with the one or more network access control policies; remediating the virtual machine by allowing the virtual machine access to one or more network resources used to remediate the virtual machine and blocking access to one or more other network resources.