Software appliance management using broadcast technique

• US 9,398,082 B2
• Filed: 09/19/2014
• Issued: 07/19/2016
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Boggs, Joseph, Faus, Norman Lee, Huff, David P., Kearney, Bryan
• Primary Examiner(s): EDWARDS, LINGLAN E
• Application Number:
  US14/491,048
• Publication Number:
  US 20150006704A1
• Time in Patent Office: 669 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1433 during software upgrading
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

Broadcasts identifying executed execution states and configurations of a plurality of virtual machines may be received. Each of the broadcasts may be received from a client system of a plurality of client systems. At least two of the virtual machines may be installed on each of the plurality of client systems. A determination may be made as to whether a first virtual machine of the plurality of virtual machines that is installed on a first client system of the plurality of client systems is unauthorized in view of an execution state of the first virtual machine and a configuration of a second virtual machine of the plurality of virtual machine. A control action for the first client system may be generated when the first virtual machine is determined to be unauthorized.

Claims

1. A method comprising:

receiving a plurality of broadcasts comprising information identifying execution states and configurations associated with a plurality of virtual machines, each broadcast is from a client system of a plurality of client systems, wherein at least two of the plurality of virtual machines are installed on each of the plurality of client systems;

determining, by a processor, whether a first virtual machine of the plurality of virtual machines that is installed on a first client system of the plurality of client systems is associated with an unauthorized installation in view of an execution state associated with the first virtual machine and a configuration associated with a second virtual machine of the plurality of virtual machines; and

generating a control action for the first client system when the first virtual machine is determined to be associated with the unauthorized installation.

2. The method of claim 1, wherein the control action comprises an instruction to terminate execution of the first virtual machine.

3. The method of claim 1, wherein the control action comprises an instruction to uninstall the first virtual machine from the first client system.

4. The method of claim 1, wherein the control action comprises an instruction to install an updated copy of the first virtual machine on the first client system.

5. The method of claim 1, wherein the first virtual machine comprises a pre-configured application and a reduced operating system to support the pre-configured application.

6. The method of claim 1, wherein the determining whether the first virtual machine of the plurality of virtual machines that is installed on the first client system of the plurality of client systems is associated with the unauthorized installation is further in view of an input/output (I/O) state associated with the first virtual machine.

7. The method of claim 1, further comprising updating information associated with the execution state associated with the first virtual machine in view of the control action.

8. A method comprising:

receiving a plurality of broadcasts comprising information identifying execution states and configurations associated with a plurality of containers, each broadcast is from a client system of a plurality of client systems, wherein at least two of the plurality of containers are installed on each of the plurality of client systems;

determining, by a processor, whether a first container of the plurality of containers that is installed on a first client system of the plurality of client systems is associated with an unauthorized installation in view of an execution state associated with the first container and a configuration associated with a second container of the plurality of containers; and

generating a control action for the first client system when the first container is determined to be associated with the unauthorized installation.

9. The method of claim 8, wherein the control action comprises an instruction to terminate execution of the first container.

10. The method of claim 8, wherein the control action comprises an instruction to uninstall the first container from the first client system.

11. The method of claim 8, wherein the control action comprises an instruction to install an updated copy of the first container on the first client system.

12. The method of claim 8, wherein the first container comprises a pre-configured application and a reduced operating system to support the pre-configured application.

13. The method of claim 8, wherein the determining whether the first container of the plurality of containers that is installed on the first client system of the plurality of client systems is associated with the unauthorized installation is further in view of an input/output (I/O) state associated with the first container.

14. The method of claim 8, further comprising updating information associated with the execution state associated with the first container in view of the control action.

15. A method comprising:

receiving a plurality of broadcasts comprising information identifying execution states and configurations of a plurality of software instances, each broadcast is from a client system of a plurality of client systems, wherein at least two of the software instances are installed on each of the plurality of client systems;

determining, by a processor, whether a first software instance of the plurality of software instances that is installed on a first client system of the plurality of client systems is unauthorized in view of an execution state of the first software instance and a configuration of a second software instance of the plurality of software instances; and

generating a control action for the first client system when the first software instance is determined to be unauthorized.

16. The method of claim 15, wherein the control action comprises an instruction to terminate execution of the first software instance.

17. The method of claim 15, wherein the control action comprises an instruction to uninstall the first software instance from the first client system.

18. The method of claim 15, wherein the control action comprises an instruction to install an updated copy of the first software instance on the first client system.

19. The method of claim 15, wherein the first software instance comprises a pre-configured application and a reduced operating system to support the pre-configured application.

20. The method of claim 15, wherein the determining whether the first software instance of the plurality of software instances that is installed on the first client system of the plurality of client systems is unauthorized is further in view of an input/output (I/O) state of the first software instance.