Method and system for secure network access using a virtual machine

1. A method comprising:

provisioning, using one or more hardware processors of a virtual machine server, a virtual machine, wherein said virtual machine is provisioned on said virtual machine server:

said virtual machine server is communicatively coupled to a client computer system, and

said virtual machine server and said client computer system are distinct from one another;

downloading content to said virtual machine, wherein said downloading is performed prior to downloading said content to said client computer system;

determining, by said virtual machine, whether said content is safe; and

in response to determining, by said virtual machine, that said content is safe, sending information from said virtual machine to said client computer system from, wherein said information from said virtual machine is configured to allow display of output from said virtual machine,

said output is based on said content, and

said content is not sent to said client computer system.

2. The method of claim 1 , wherein said provisioning comprises:

loading an image of said virtual machine on said virtual machine server.

3. The method of claim 1 , further comprising:

in response to determining that the content is not safe,

if said content comprises a virus, deprovisioning said virtual machine.

4. The method of claim 1 , wherein the determining comprises:

analyzing said content, wherein

said analyzing is configured to detect a virus.

5. The method of claim 4 , further comprising:

if said analyzing detects the virus, performing one or more of

deprovisioning said virtual machine, or

adding an identifier to a blacklist, wherein

said identifier is configured to identify said content.

6. The method of claim 1 , further comprising:

prior to sending said information to said client computer system,

in response to determining that said content is safe,

determining whether said content is to be downloaded to said client computer system, and

in response to determining that said content is not to be downloaded to said client computer system, not including said content with said information.

7. The method of claim 4 , wherein the determining further comprises:

accessing said content, wherein

said accessing comprises

if said content is a web site, opening said web site,

if said content is a script, processing said script, and

if said content is an executable file, executing said executable file.

8. The method of claim 1 , wherein

said virtual machine is a first virtual machine, and

said determining comprises

determining whether to use a second virtual machine to access said content,

in response to a determination that said second virtual machine is to be used,

provisioning said second virtual machine,

downloading said content from said first virtual machine to said second virtual machine, and

causing said second virtual machine to access said content, and

in response to a determination that said second virtual machine is not to be used,

causing said first virtual machine to access said content.

9. The method of claim 8 , wherein said determining further comprises:

causing said second virtual machine to analyze said content, wherein

said analyzing is configured to detect a virus.

10. The method of claim 9 , further comprising:

if said analyzing detects said virus, performing at least one of

deprovisioning said virtual machine, and

sending an indication.

11. The method of claim 1 , further comprising:

comparing information regarding said content to a whitelist; and

if said content is represented in said whitelist, permitting said virtual machine to access said content.

12. The method of claim 1 , further comprising:

comparing information regarding said content to a blacklist; and

if said content is represented in said blacklist, deprovisioning said virtual machine.

13. The method of claim 1 , wherein the determining comprises:

accessing said content, wherein

said accessing comprises

if said content is a web site, opening said web site,

if said content is a script, processing said script, and

if said content is an executable file, executing said executable file.

14. The method of claim 13 , further comprising:

receiving control information from said client computer system;

using said control information by the virtual machine, wherein

said information is based on the control information.

15. An apparatus comprising:

a plurality of virtual machine servers, wherein each of said plurality of virtual machine servers comprises one or more hardware processors, wherein

each of said virtual machine servers is configured to support at least one of a plurality of virtual machines, wherein

each of said virtual machine servers is configured to provision said at least one of said virtual machines,

a first virtual machine of said virtual machines comprises an antivirus module,

said first virtual machine is configured to download content prior to said content being downloaded to a client computer system, wherein

said client computer system is distinct from said first virtual machine server,

said antivirus module is configured to detect a virus by virtue of being configured to analyze said content,

said first virtual machine is further configured to, in response to said antivirus module detecting said virus, send information to said client computer system,

said information is configured to allow display of output from said first virtual machine,

said output is based on said content, and

said content is not sent to said client computer system.

16. The apparatus of claim 15 , wherein said each of said virtual machine servers are configured to support said at least one of said virtual machines by virtue of being configured to:

deprovision said at least one of said virtual machines.

17. The apparatus of claim 15 , further comprising:

a first virtual machine server, wherein

said first virtual machine server is configured to support said first virtual machine,

said first virtual machine server is configured to deprovision said first virtual machine, in response to said antivirus module detecting said virus, and

said plurality of virtual machine servers comprise said first virtual machine server.

18. The apparatus of claim 15 , wherein

said first virtual machine is further configured to

determine whether to use a second virtual machine to access said content,

in response to a determination that said second virtual machine is to be used,

cause said second virtual machine of said virtual machines to

download said content, and

access said content, and

in response to a determination that said second virtual machine is not to be used,

access said content.

19. The apparatus of claim 18 , further comprising:

a first virtual machine server, wherein

said first virtual machine server is configured to support said second virtual machine,

said first virtual machine server is configured to deprovision said second virtual machine, in response to said content comprising said virus, and

said plurality of virtual machine servers comprise said first virtual machine server.

20. The apparatus of claim 15 , further comprising:

an administrative client, wherein

said administrative client is configured to configure said plurality of virtual machine servers by virtue of being configured to provide system preferences and system environmental parameters to said each of said virtual machine servers.

21. An apparatus comprising: one or more hardware processors comprising:

a plurality of virtual machine servers;

means for provisioning a virtual machine on a first virtual machine server of said plurality of virtual machine servers, wherein

said virtual machine comprises an antivirus module,

said first virtual machine is configured to download content, wherein

said first virtual machine is configured download said content prior to said content being downloaded to a client computer system, wherein

said client computer system is communicatively coupled to said first virtual machine server, and

said client computer system is distinct from said first virtual machine server, and

said antivirus module is configured to detect a virus by virtue of being configured to analyze said content;

means for downloading said content to said virtual machine;

means for determining whether said content is safe; and

means for sending, in response to determining that said content is safe, information from said virtual machine, wherein

said information from said virtual machine is configured to allow display of output from said virtual machine,

said output is based on said content, and

said content is not sent to said client computer system.

22. The apparatus of claim 21 , further comprising:

said client computer system, wherein

said client computer system is configured to display said information.

23. The apparatus of claim 22 , wherein said client computer system is configured to display said information by virtue of being configured to

remotely render said content,

said virtual machine server is communicatively coupled to a network, and

said virtual machine is configured to provide said client computer system with anonymous access to said network.

24. The apparatus of claim 23 , wherein

said access by said client computer system to said network consists only of access to said network via said virtual machine.

25. The apparatus of claim 24 , wherein

said access by said client computer system to said network is restricted by said virtual machine.

26. The apparatus of claim 23 , wherein

said access by said client computer system to said network consists only of access to said network via said virtual machine.

27. The method of claim 1 , further comprising:

the determining comprises analyzing, at least by said virtual machine, the content, wherein

the determining determines that the content is safe based on the analyzing.

28. The method of claim 1 , wherein

the determining is performed automatically by said virtual machine.

29. The method of claim 1 , wherein

said provisioning of said virtual machine comprises

receiving login credentials of a user,

determining user preferences associated with said login credentials, and

uploading said user preferences to said virtual machine.

30. The apparatus of claim 21 , wherein

said means for determining whether said content is safe comprises

means for accessing one or more whitelists, and

means for accessing one or more blacklists.