Patent ID: 9189640
Filing Date: 2015-11-17
Classification: G06F

Abstract:
1. A computer-implemented method for re-provisioning a server of a data center, comprising: while the server is provisioned to a first virtual network of the data center, providing the server i) a pseudo-random data stream, and ii) instructions on how to overwrite substantially all of its data storage volumes using the pseudo-random data stream, wherein the pseudo-random data stream appears random to the server and is cryptographically-seeded using a seed that is not known by the server; upon completion of the overwrite, powering down the server, then moving the server to a second virtual network of the data center, and then causing the server to initiate a network boot from within the second virtual network; and after the network boot of the server, requesting from the server, via the second virtual network, one or more indications of the data stored at a number of addresses of its data storage volumes; and determining whether the server is in a compromised state by, remotely from the server, comparing the provided indication(s) to one or more expected indications.