Patent ID: 8949825
Filing Date: 2015-02-03
Classification: G06F

Abstract:
1. An apparatus for enforcing a policy associated with a virtual machine, the apparatus comprising: a memory device storing instructions; and a computing device communicatively coupled to a newly created virtual machine, the computing device including a processor operably coupled to the memory device, the processor executing the instructions to: receive a virtual machine event request, wherein the virtual machine event request includes a start virtual machine request for the virtual machine, which is prevented from being started from when the virtual machine is newly created until the virtual machine is determined to be compliant with a plurality of compliance based schemes; receive first data from within the virtual machine in response to receiving the virtual machine event request; receive second different data from an environment outside the virtual machine in response to receiving the virtual machine event request; determine whether an internal non-compliance by the virtual machine of a first policy-based compliance scheme exists based on the first data; determine whether an external non-compliance by the virtual machine as provided in the environment of a second different policy-based compliance scheme exists based on the second different data; and in response to determining that at least one of an internal non-compliance and an external non-compliance exists, deny the virtual machine event request.