System, method, and computer program product for scanning data utilizing one of a plurality of virtual machines of a device
View Patent ↗A system, method, and computer program product are provided for scanning data utilizing one of a plurality of virtual machines of a device. In use, data to be scanned is identified utilizing a first virtual machine of a device, where the device further includes at least one second virtual machine and a cache shared by the first virtual machine and the second virtual machine. Additionally, it is determined whether the data was previously scanned by the at least one second virtual machine, utilizing the cache. Furthermore, the data is conditionally scanned utilizing the first virtual machine based on the determination.
1. A computer program product embodied on a non-transitory computer readable medium, comprising instructions stored thereon to cause a processor to:
identify data to be scanned with a type of scan at a local scanner of a first virtual machine of a device, wherein the device comprises a plurality of virtual machines, each virtual machine comprising a local scanner, the local scanner having access to a cache shared by the plurality of virtual machines;
determine, at the first virtual machine, an identifier of the data;
determine, at the first virtual machine, whether the identifier is stored in the cache, wherein presence of the identifier in the cache indicates that the data has been previously scanned by a local scanner of one of the plurality of virtual machines;
receive a security status at the first virtual machine after it is determined that the identifier is stored in the cache, the security status associated with the identifier of the data, wherein the security status comprises a result of a previous scan of the data and the security status comprises information about the type of scan that was performed;
forgo scanning of the data at the local scanner of the first virtual machine when the security status is determined to comprise a result not indicating unwanted data; and
scan the data and store the identifier and the security status in the cache utilizing the local scanner of the first virtual machine when it is determined that the identifier is not stored in the cache or when the result indicates unwanted data.
2. The computer program product of claim 1 , wherein the instructions to cause the processor to identify the data to be scanned comprise instructions to cause the processor to identify the data based on a request to access the data.
3. The computer program product of claim 1 , wherein the cache is located in a security virtual machine of the plurality of virtual machines.
4. The computer program product of claim 3 , wherein the security virtual machine is utilized for at least one of monitoring security and monitoring parameters of other virtual machines.
5. The computer program product of claim 1 , wherein the cache is located on one of the plurality of virtual machines.
6. The computer program product of claim 5 , wherein the cache may be moved to another of the plurality of virtual machines in response to a determination that any of the plurality of virtual machines do not have access to the cache.
7. The computer program product of claim 1 , wherein the identifier includes a file name of the data.
8. The computer program product of claim 1 , wherein the identifier includes a hash of the data.
9. The computer program product of claim 1 , wherein two or more replicated copies of the data are located on two different virtual machines of the plurality of virtual machines.
10. The computer program product of claim 1 , wherein the security status further comprises information about the virtual machine that performed the previous scan.
11. A method, comprising:
identifying data to be scanned with a type of scan at a local scanner of a first virtual machine of a device, wherein the device comprises a plurality of virtual machines, each virtual machine comprising a local scanner, the local scanner having access to a cache shared by the plurality of virtual machines;
determining, at the first virtual machine, an identifier of the data;
determining, at the first virtual machine, whether the identifier is stored in the cache, wherein presence of the identifier in the cache indicates that the data has been previously scanned by a local scanner of one of the plurality of virtual machines;
receiving a security status at the first virtual machine after it is determined that the identifier is stored in the cache, the security status associated with the identifier of the data, wherein the security status comprises a result of a previous scan of the data and the security status comprises information about the type of scan that was performed;
preventing the data from being scanned at the local scanner of the first virtual machine the security status is determined to comprise a result not indicating unwanted data; and
scanning the data and storing the identifier and the security status in the cache utilizing the local scanner of the first virtual machine when it is determined that the identifier is not stored in the cache or when the result indicates unwanted data.
12. The method of claim 11 , wherein the act of identifying the data to be scanned comprises identifying a request to access the data.
13. The method of claim 11 , wherein the identifier includes a file name of the data.
14. The method of claim 11 , wherein the identifier includes a hash of the data.
15. The method of claim 11 , wherein the cache stores a result of a previous scan of the data in association with the identifier of the data.
16. The method of claim 11 , wherein the acts of scanning the data and storing the identifier in the cache further comprises storing a result of the scan of the data by the local scanner of the first virtual machine in association with the identifier in the cache.
17. The method of claim 11 , wherein the data is stored in memory shared by the first virtual machine and at least one other virtual machine of the plurality of virtual machines.
18. The method of claim 11 , wherein the cache is located on one of the plurality of virtual machines, and wherein the cache may be moved to another of the plurality of virtual machines in response to a determination that any of the plurality of virtual machines do not have access to the cache.
19. A system, comprising:
a memory; and
a processor operatively coupled to the memory, the processor adapted to:
identify data to be scanned with a type of scan at a local scanner of a first virtual machine of the system, wherein the system comprises a plurality of virtual machines, each virtual machine comprising a local scanner, the local scanner having access to a cache shared by the plurality of virtual machines;
determine, at the first virtual machine, an identifier of the data;
determine, at the first virtual machine, whether the identifier is stored in the cache, wherein presence of the identifier in the cache indicates that the data has been previously scanned by a local scanner of one of the plurality of virtual machines;
receive a security status at the first virtual machine after it is determined that the identifier is stored in the cache, the security status associated with the identifier of the data, wherein the security status comprises a result of a previous scan of the data and the security status comprises information about the type of scan that was performed;
forgo scanning of the data at the local scanner of the first virtual machine when the security status is determined to comprise a result not indicating unwanted data; and
scan the data and store the identifier and the security status in the cache utilizing the first scanner of the first virtual machine when it is determined that the identifier is not stored in the cache or when the result indicates unwanted data.
20. The system of claim 19 , wherein the cache is located on one of the plurality of virtual machines, and wherein the cache may be moved to another of the plurality of virtual machines in response to a determination that any of the plurality of virtual machines do not have access to the cache.