Patent ID: 8869144

Claim:
A method for managing forwarding of input events in a virtualization environment to prevent keylogging attacks, comprising: receiving, by an input manager executed by a processor of a computing device, a first item of input data from an input device communicating with the computing device; and identifying, by the input manager, whether the first item of input data includes a predetermined string; forwarding, by the input manager, the first item of input data to: (i) a trusted guest virtual machine executing in the virtualization environment responsive to identifying that the first item of input data includes the predetermined string and the predetermined string does not comprise a predefined control string, and a window generated by the trusted guest virtual machine does not have focus; (ii) a non-trusted guest virtual machine executing in the virtualization environment responsive to identifying that the first item of input data includes the predetermined string and the predetermined string does not comprise the predefined control string, and the window generated by the trusted guest virtual machine has focus; (iii) the trusted guest virtual machine responsive to identifying that the first item of input data does not include the predetermined string, and the window generated by the trusted guest virtual machine has focus; (iv) the non-trusted guest virtual machine responsive to identifying that the first item of input data does not include the predetermined string, and the window generated by the trusted guest virtual machine does not have focus; and (v) a control virtual machine executing in the virtualization environment responsive to identifying that the first item of input data includes the predetermined string and the predetermined string comprises the predefined control string.