Patent ID: 8910238
Filing Date: 2014-12-09
Classification: G06F

Abstract:
1. A client system comprising at least one processor configured to operate a hypervisor, the hypervisor configured to execute: a client virtual machine (VM); and a security VM distinct from the client VM, the security VM configurable by a centralized security manager executing on a remote server connected to the client system by a network, wherein the remote server is programmed to configure a plurality of client systems including the client system, wherein the security VM is configured to control a network adapter of the client system according to a security policy received from the remote server, and wherein the security VM is further configured to: wherein the hypervisor is further configured, in response to receiving the data unit from the security VM, to transmit the data unit to the client VM, wherein the hypervisor comprises a memory introspection engine configured to: wherein the hypervisor is configured to prevent the client VM from using the network adapter when the security VM is not in operation.