Patent ID: 8490086
Filing Date: 2013-07-16
Classification: G06F

Abstract:
1. A computer-implemented method for filtering input/output communications of guest operating systems, the computer-implemented method comprising: identifying a guest operating system running in a virtual machine that is monitored by a hypervisor; creating an input/output filtering layer for filtering communications involving the guest operating system, wherein: inserting at least a first portion of the input/output filtering layer between the virtual machine and the hypervisor; inserting at least a second portion of the input/output filtering layer between the hypervisor and a set of hardware devices; intercepting, at at least one of the first portion and the second portion of the input/output filtering layer, an input/output communication involving the guest operating system; and performing a filtering operation on the input/output communication; wherein the computer-implemented method is performed by a computing device that comprises at least one processor.