Verification of desired end-state using a virtual machine environment

• US 7,370,233 B1
• Filed: 05/21/2004
• Issued: 05/06/2008
• Est. Priority Date: 05/21/2004
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Sobel, William E., McCorkendale, Bruce
• Primary Examiner(s): PUENTE, EMERSON C
• Application Number:
  US10/852,773
• Time in Patent Office: 1,446 Days
• Field of Search: 714/15, 714/38, 714/41, 726/22, 717/128
• US Class Current: 714/15
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: G06F 2201/815 Virtual

Abstract

An integrity verification manager (101) verifies the integrity of a backup (102) of a computer (103). The integrity verification manager (101) audits the computer (103), and stores information (107) concerning items of interest such as executing processes (109, 111) and open listening ports (113). The integrity verification manager (101) restores a backup (102) of the computer (103) to a virtual machine environment. The integrity verification manager (101) audits the restoration of the backup (102) in the virtual machine environment, and compares audit information (107) concerning the restoration to the stored audit information (107). Responsive to the results of the comparison, the integrity verification manager (101) determines whether the restoration succeeded or failed.

Claims

1. A computer implemented method for verifying the integrity of a backup of a computer, the method comprising the steps of:

an integrity verification manager auditing the computer and storing computer audit information identifying at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

the integrity verification manager restoring the backup of the computer to a virtual machine environment;

the integrity verification manager auditing the restoration of the backup in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the restoration;

the integrity verification manager performing a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the restoration, the integrity verification manager determining that the restoration failed; and

responsive to determining that all items from the stored computer audit information are present in the restoration, the integrity verification manager determining that the restoration succeeded.

2. The method of claim 1 further comprising:

the integrity verification manager waiting for a specified period of time before auditing the restoration of the backup in the virtual machine environment, and determining if the at least one identified item from the stored computer audit information is present in the restoration, wherein the specified period of time is based on an expected time period for the at least one identified item to become active after restoring the backup.

3. The method of claim 1 further comprising:

the integrity verification manager repeating the following steps a specified number of times at specified intervals;

auditing the restoration in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the restoration.

4. A computer implemented method for verifying the integrity of a software modification to a computer, the method comprising the steps of:

an integrity verification manager auditing the computer and storing computer audit information identifying at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

the integrity verification manager applying the software modification to an image concerning the computer in a virtual machine environment;

the integrity verification manager auditing the image concerning the computer in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment;

and the integrity verification manager performing a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the image, the integrity verification manager determining that the software modification failed; and

responsive to determining that all items from the stored computer audit information are present in the image, the integrity verification manager determining that the software modification succeeded.

5. The method of claim 4 wherein:

applying the software modification comprises installing a software package from a group of software packages consisting of;

a patch;

a new software package; and

an updated version of an existing software package.

6. The method of claim 4 further comprising the steps of:

the integrity verification manager creating the image concerning the computer in the virtual machine environment, based on the computer itself.

7. The method of claim 4 further comprising the step of:

the integrity verification manager using an existing virtual machine image as the image concerning the computer.

8. The method of claim 7 wherein:

the existing image is one from a group of images consisting of;

an image concerning computers running a specific operating system;

an image concerning computers running a specific version of a specific operating system;

an image concerning computers with a specific configuration; and

an image concerning a latest backup of the computer.

9. The method of claim 4 further comprising:

the integrity verification manager waiting for a specified period of time before auditing the image concerning the computer in the virtual machine environment, and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment, wherein the specified period of time is based on an expected time period for the at least one identified item to become active after applying the software modification.

10. The method of claim 4 further comprising:

the integrity verification manager repeating the following steps a specified number of times at specified intervals;

auditing the image concerning the computer in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment.

11. A computer readable storage medium containing a computer program product for verifying the integrity of a backup of a computer, the computer program product comprising:

program code for auditing the computer and storing computer audit information identifying at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

program code for restoring the backup of the computer to a virtual machine environment;

program code for auditing the restoration of the backup in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the restoration;

and program code for performing a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the restoration, determining that the restoration failed; and

responsive to determining that all items from the stored computer audit information are present in the restoration, determining that the restoration succeeded.

12. A computer readable storage medium containing a computer program product for verifying the integrity of a software modification to a computer, the computer program product comprising:

program code for auditing the computer and storing computer audit information identifying at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

program code for applying the software modification to an image concerning the computer in a virtual machine environment;

program code for auditing the image concerning the computer in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment;

and program code for performing a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the image, determining that the software modification failed; and

responsive to determining that all items from the stored computer audit information are present in the image, determining that the software modification succeeded.

13. The computer program product of claim 12 further comprising:

program code for creating the image concerning the computer in the virtual machine environment, based on the computer itself.

14. The computer program product of claim 12 further comprising:

program code for using an existing virtual machine image as the image concerning the computer.

15. The computer program product of claim 14 wherein:

the existing image is one from a group of images consisting of;

an image concerning computers running a specific operating system;

an image concerning computers running a specific version of a specific operating system;

an image concerning computers with a specific configuration; and

an image concerning a latest backup of the computer.

16. The computer program product of claim 12, wherein:

program code for applying the software modification comprises program code for installing a software package from a group of software packages consisting of;

a patch;

a new software package; and

an updated version of an existing software package.

17. The computer program product of claim 12, further comprising:

program code for waiting for a specified period of time before auditing the image concerning the computer in the virtual machine environment, and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment, wherein the specified period of time is based on an expected time period for the at least one identified item to become active after applying the software modification.

18. The computer program product of claim 12, further comprising:

program code for repeating the following steps a specified number of times at specified intervals;

auditing the image concerning the computer in the virtual machine environment and determining if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment.

19. A computer system for verifying the integrity of a backup of a computer, the computer system comprising:

a processor; and

a computer readable storage medium for storing instructions executable by the processor, the instructions when executed cause the processor to;

audit the computer and store computer audit information identifying at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

restore the backup of the computer to a virtual machine environment;

audit the restoration of the backup in the virtual machine environment and determine if the at least one identified item from the stored computer audit information is present in the restoration;

and perform a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the restoration, determining that the restoration failed; and

responsive to determining that all items from the stored computer audit information are present in the restoration, determining that the restoration succeeded.

20. A computer system for verifying the integrity of a software modification to a computer, the computer system comprising:

a processor; and

a computer readable storage medium for storing instructions executable by the processor, the instructions when executed cause the processor to;

audit the computer and store computer audit information concerning at least one item from a group of items consisting of;

at least one currently executing system process;

at least one currently executing user process; and

at least one currently open listening port;

apply the software modification to an image concerning the computer in a virtual machine environment;

audit the image concerning the computer in the virtual machine environment and determine if the at least one identified item from the stored computer audit information is present in the image concerning the computer in the virtual machine environment; and

perform a step from a group of steps consisting of;

responsive to determining that at least one item from the stored computer audit information is not present in the image, determining that the software modification failed; and

responsive to determining that all items from the stored computer audit information are present in the image, determining that the software modification succeeded.