IP Library › Granted Patent US 12,386,972
Granted Patent B2
US 12,386,972 · App. 17/840,848 · Granted Aug 12, 2025

Cluster security based on virtual machine content

Inventor: Shailaja Mallya (Bangalore, IN)
Assignee: International Business Machines Corporation
G06F21/577G06F21/6218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,386,972
App. No.
17/840,848
Granted
Aug 12, 2025
Kind
B2
Abstract

A cluster is scanned. The cluster includes one or more virtual machines. A first content file change is detected based on the scan of the cluster. The first content file change is to a first content file. The first content file is located on a first virtual machine related to the cluster. A content-based security level of the cluster is determined based on the detection of the first content file change. The determined content-based security level of the cluster is compared to a security level standard of the cluster. A security gap is identified based on the comparison of the determined content-based security level to the security level standard of the cluster. In response to the identification of the security gap, an update to the security settings of the cluster is performed.

Claims (44)

1. A method comprising:

scanning, by a first computer system, a cluster including a plurality of virtual machines;

detecting, based on the scanning the cluster of virtual machines, a first content change of the cluster that includes at least one of:

an update to data of at least one file on at least a first one of the virtual machines,

adding or removing at least one file from the first one of the virtual machines, and

an addition of at least one virtual machine to the cluster or a removal of at least one virtual machine from the cluster;

determining, in response to the detecting of the first content change, a content-based security level of the cluster;

comparing the determined content-based security level of the cluster to a security level standard of the cluster;

determining a difference between the determined content-based security level and the security level standard; and

performing, in response to determining the difference, an update to a security setting of the cluster.

2. The method of claim 1 , wherein the performing of the update to the security setting of the cluster includes updating a security setting to a same level for each of the virtual machines of the cluster.

3. The method of claim 1 , wherein the performing the update to the security setting of the cluster includes updating a security setting of a virtual machine of the cluster other than the first virtual machine.

4. The method of claim 1 , wherein the scanning of the cluster includes monitoring for a given virtual machine to be added to the cluster, and wherein the first virtual machine is added to the cluster.

5. The method of claim 1 , wherein the first content change is changing a sharing permission of the at least one file.

6. The method of claim 1 , wherein the scanning of the cluster includes monitoring for a given virtual machine to be removed from the cluster, and wherein the first virtual machine is removed from the cluster.

7. A system, the system comprising:

a memory, the memory containing one or more instructions; and

a processor, the processor communicatively coupled to the memory, the processor, in response to reading the one or more instructions, configured to:

scan a cluster including a plurality of virtual machines;

detect, based on the scanning the cluster of virtual machines, a first content change of the cluster that includes at least one of

an update to data of at least one file on at least a first one of the virtual machines,

adding or removing at least one file from the first one of the virtual machines, and

an addition of at least one virtual machine to the cluster or a removal of at least one virtual machine from the cluster;

determine, in response to the detecting of the first content change, a content-based security level of the cluster;

compare the determined content-based security level of the cluster to a security level standard of the cluster;

determining a difference between the determined content-based security level and the security level standard; and

perform, in response to determining the difference, an update to a security setting of the cluster.

8. The system of claim 7 , wherein performing the update to the security setting of the cluster includes updating a security setting to a same level for each of the virtual machines of the cluster.

9. The system of claim 7 , wherein the performing of the update to the security setting of the cluster includes updating a security setting of a virtual machine of the cluster other than the first virtual machine.

10. The system of claim 7 , wherein the scan of the cluster includes monitoring for a given virtual machine to be added to the cluster, and wherein the first virtual machine is added to the cluster.

11. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions configured to:

scan, by a first computer system, a cluster including a plurality of virtual machines;

detect, based on the scanning the cluster of virtual machines, a first content change of the cluster that includes at least one of:

an update to data of at least one file on at least a first one of the virtual machines,

adding or removing at least one file from the first one of the virtual machines, and

an addition of at least one virtual machine to the cluster or a removal of at least one virtual machine from the cluster;

determine, in response to the detecting the first content change, a content-based security level of the cluster;

compare the determined content-based security level of the cluster to a security level standard of the cluster;

determining a difference between the determined content-based security level and the security level standard; and

perform, in response to determining the difference, an update to a security setting of the cluster.

12. The computer program product of claim 11 , wherein performing the update to the security setting of the cluster includes updating a security setting to a same level for each of the virtual machines of the cluster.

13. The computer program product of claim 11 , wherein the performing the update to the security setting of the cluster includes updating a security setting of a virtual machine of the cluster other than the first virtual machine.

14. The computer program product of claim 11 , wherein the scanning of the cluster includes monitoring for a given virtual machine to be added to the cluster, and wherein the first virtual machine is added to the cluster.

15. The computer program product of claim 11 , wherein the first content change is changing a sharing permission of the at least one file.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 15, 2022
From: MALLYA, SHAILAJA
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 060208/0683 →
Continuity (2)
Continuation 16691804 · Nov 22, 2019
Related Publication 20220309167A1 · Sep 29, 2022
References Cited (49)
US 9021546B1 · Banerjee · 2015 [cited by applicant]
US 9223972B1 · Mncent et al. · 2015 [cited by applicant]
US 9800606B1 · Yumer · 2017 [cited by examiner]
US 10375115B2 · Mallya · 2019 [cited by applicant]
US 10484334B1 · Lee et al. · 2019 [cited by applicant]
US 20060021041A1 · Challener · 2006 [cited by examiner]
US 20100251363A1 · Todorovic · 2010 [cited by examiner]
US 20120030187A1 · Marano · 2012 [cited by examiner]
US 20120072968A1 · Wysopal et al. · 2012 [cited by applicant]
US 20120131676A1 · Iwata · 2012 [cited by applicant]
US 20120174095A1 · Natchadalingam et al. · 2012 [cited by applicant]
US 20120291133A1 · Nagpal · 2012 [cited by examiner]
US 20130055398A1 · Li · 2013 [cited by examiner]
US 20140026231A1 · Barak et al. · 2014 [cited by applicant]
US 20140033194A1 · Natchadalingam et al. · 2014 [cited by applicant]
US 20140053226A1 · Fadida et al. · 2014 [cited by applicant]
US 20140096134A1 · Barak et al. · 2014 [cited by applicant]
US 20140106787A1 · Hangai · 2014 [cited by examiner]
US 20140201732A1 · Haag et al. · 2014 [cited by applicant]
US 20160149769A1 · Joshi et al. · 2016 [cited by applicant]
US 20160232024A1 · Hamilton · 2016 [cited by examiner]
US 20170279826A1 · Mohanty · 2017 [cited by examiner]
US 20180034856A1 · Mallya · 2018 [cited by applicant]
US 20180115586A1 · Chou et al. · 2018 [cited by applicant]
US 20190014023A1 · Gupta · 2019 [cited by examiner]
US 20190171620A1 · McCollum et al. · 2019 [cited by applicant]
US 20190354675A1 · Gan et al. · 2019 [cited by applicant]
US 20200257811A1 · Tatarinov · 2020 [cited by examiner]
CN 103457933A · 2013 [cited by applicant]
CN 106383735A · 2017 [cited by applicant]
CN 109379347A · 2019 [cited by applicant]
CN 110474913A · 2019 [cited by applicant]
CN 114641771A · 2022 [cited by applicant]
DE 112020004806T5 · 2022 [cited by applicant]
GB 2604820A · 2022 [cited by applicant]
JP 2011123695A · 2011 [cited by applicant]
JP 2013003602A · 2013 [cited by applicant]
JP 2013511770A · 2013 [cited by applicant]
JP 2023502343A · 2023 [cited by applicant]
WO 2011062743A2 · 2011 [cited by applicant]
WO 2021099959A1 · 2021 [cited by applicant]
“Implementing Multi Level Security in cognitive computing (data mining),” IP.com Prior Art Database Technical Disclosure, IP.com No. IPCOM000257559D, Feb. 19, 2019, 6 pages, https://ip.com/IPCOM/000257559. [cited by applicant]
Mell et al., “The NIST Definition of Cloud Computing: Recommendations of the National Institute of Standards and Technology,” U.S. Department of Commerce, Special Publication 800-145, Sep. 2011, 7 pages. [cited by applicant]
Mallya, “Cluster Security Based On Virtual Machine Content,” U.S. Appl. No. 16/691,804, filed Nov. 22, 2019. [cited by applicant]
List of IBM Patents or Patent Applications Treated as Related, Dated Jun. 8, 2022, 2 pages. [cited by applicant]
International Searching Authority, “Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or Declaration,” Patent Cooperation Treaty, Feb. 25, 2… [cited by applicant]
Decision to Grant a Patent drafted Apr. 9, 2024 from Japanese Patent Application No. 2022-527046 filed May 10, 2022, 2 pps. [cited by applicant]
The State Intellectual Property Office of People's Republic of China, “The First Office Action”, Aug. 15, 2024, 13 Pages, CN Application No. 202080077408.2. [cited by applicant]
The State Intellectual Property Office of People's Republic of China, “Notification of Grant”, Jan. 7, 2025, 5 Pages, CN Application No. 202080077408.2. [cited by applicant]