Patent ID: 8667595
Filing Date: 2014-03-04
Classification: G06F,H04L

Abstract:
1. A method, comprising: detecting, by a virtual machine manager of a host computer, worm traffic originated from a first virtual machine of the host computer and directed to an address of a network; and rerouting, by the virtual machine manager, the detected worm traffic to a second virtual machine of the host computer to prevent the worm traffic from propagating to the designated address; and causing, by the virtual machine manager, the rerouted worm traffic to be contained within the second virtual machine, wherein the virtual machine manager is configured to manage the first and the second virtual machine of the host computer, wherein the first and second virtual machines reside on the host computer and wherein the second virtual machine is configured to contain the worm traffic within the second virtual machine by issuing a connection command setting a transport control protocol (TCP) window size to zero.