Patent ID: 8001086

Claim:
An information processing system comprising: a processor; a memory; and an input/output subsystem, wherein the processor is configured for: a) creating a first virtual image comprising one or more operating system files; b) determining whether there exists a second virtual image that is similar to the first virtual image, wherein the second image comprises one or more operating system files; c) comparing the one or more operating system files of the first virtual image with the one or more operating system files of the second virtual image to determine a set of common files; d) creating a common file collection comprising the set of common operating system files; e) creating a second version of the first virtual image comprising only files in the first virtual image that are not in the common file collection; f) creating a second version of the second virtual image comprising only operating system files in the second virtual image that are not in the common operating system file collection; g) receiving, during runtime, a request for modification of the operating system file within one or both of the first virtual image and the second virtual image, wherein the request comprises said modification and said modification comprises a security patch; wherein receiving said request for modification of the file calls for the modification to be applied to all images and the method further comprises suspending the first and second virtual images, and applying the security patch to the first and second virtual images while the first and second virtual images are suspended, and wherein the patch is directly applied to the common operating system file collection without migrating the operating system files into private collections; h) determining whether the operating system file is in the common operating system file collection; i) removing the operating system file from the common operating system file collection if the operating system file is in the common operating system file collection; j) copying the operating system file into both the first and second virtual images; and k) applying the modification to the operating system file in the requested one or both of the first and second virtual images.