Abstract: In some examples, an indication that a virtual machine is to begin a boot process is received. In response to the received indication and prior to beginning the boot process, the virtual machine is migrated from a first host to a secured host, where the secured host includes a security mechanism to provide security that is unavailable at the first host. In response to the migrating, the boot process of the virtual machine is initiated at the secured host. The virtual machine is migrated from the secured host to a host other than the secured host in response to determining that the boot process of the virtual machine at the secured host is complete.

Abstract: In some examples, an indication that a virtual machine is to begin a boot process is received. In response to the received indication and prior to beginning the boot process, the virtual machine is migrated from a first host to a secured host, where the secured host includes a security mechanism to provide security that is unavailable at the first host. In response to the migrating, the boot process of the virtual machine is initiated at the secured host. The virtual machine is migrated from the secured host to a host other than the secured host in response to determining that the boot process of the virtual machine at the secured host is complete.

Abstract: In one implementation, a secure operation system initiates a secure operation associated with a virtual machine hosted at a secured host, and determines when the secure operation is complete. In response to determining that the secure operation is complete, the secure operation system migrates the virtual machine to a host other than the secured host.

Abstract: In one implementation, a security management system accesses a displacement signature defined in relation to physical contact with a surface and determines that the displacement signature is correlated with a known displacement signature. The security management system then performs an operation in response to determining that the displacement signature is correlated with the known displacement signature.

Abstract: Example embodiments disclosed herein relate to input/output (I/O) operations at a virtual block device of a storage server. Example embodiments include requesting an input/output (I/O) operation at an offset of a virtual block device of a storage server in response to a virtual machine request for an I/O operation at a virtual disk.

Abstract: Example embodiments disclosed herein relate to input/output (I/O) operations at a virtual block device of a storage server. Example embodiments include requesting an input/output (I/O) operation at an offset of a virtual block device of a storage server in response to a virtual machine request for an I/O operation at a virtual disk.

Abstract: Example embodiments disclosed herein relate to input/output (I/O) operations at a virtual block device of a storage server. Example embodiments include requesting an input/output (I/O) operation at an offset of a virtual block device of a storage server in response to a virtual machine request for an I/O operation at a virtual disk.

Abstract: Example embodiments disclosed herein relate to a persistent volume at an offset of a virtual block device of a storage server. Example embodiments include requesting that a persistent volume be dissociated from a virtual block device in response to the termination of a virtual machine.

Abstract: In one implementation, a host platform implemented on a computing device hosting one or more virtual machines determines that a communication generated by a virtual machine and intended for another virtual machine is to be transmitted to a network appliance. Consequently, the host platform modifies the communication generated by the virtual machine.

Abstract: In one implementation, a data block access system accesses access control information associated with a plurality of data blocks of a storage volume at a data store, and determines whether a user associated with a request for access to a data block from the plurality of data blocks is authorized for the requested access. The data block access system determines whether the user is authorized for the requested access based on the access control information associated with that data block.

Abstract: In one implementation, a secure operation system initiates a secure operation associated with a virtual machine hosted at a secured host, and determines when the secure operation is complete. In response to determining that the secure operation is complete, the secure operation system migrates the virtual machine to a host other than the secured host.

Abstract: A data center can share processing resources using virtual networks. A hosting program 9,10 hosts one or more virtual machines 11, 12. The program has a virtual interface VIF 1 14, to the virtual machines, a network interface 19 to enable communication between the virtual machines and other nodes of a network, and an infrastructure management interface 8, invisible to the virtual machines. The program has an intercept function 7 implemented as a comparator, switch or router, arranged to intercept a status message from one of the virtual machines, or applications run by that virtual machine. The status indication is sent to a status buffer 5 and is made available to the infrastructure management interface without providing a network path between the management interface and the virtual machine. This can discriminate between VM failure and communication failure, and the invisibility maintains isolation and helps avoid vulnerability to denial of service attack.

Abstract: Example embodiments disclosed herein relate to a persistent volume at an offset of a virtual block device of a storage server. Example embodiments include requesting that a persistent volume be dissociated from a virtual block device in response to the termination of a virtual machine.

Abstract: Example embodiments disclosed herein relate to input/output (I/O) operations at a virtual block device of a storage server. Example embodiments include requesting an input/output (I/O) operation at an offset of a virtual block device of a storage server in response to a virtual machine request for an I/O operation at a virtual disk.

Abstract: Disclosed herein is a technique that intercepts data transmitted from a first application executing in a first domain to a second application executing in a second domain.

Abstract: A data center can share processing resources using virtual networks. A virtual machine manager (10) hosts one or more virtual machines (11, 411), the virtual machines forming part of a segmented virtual network (34). Outgoing messages from the virtual machines have an intermediate destination address of an intermediate node in a local segment of the segmented virtual network, and the virtual machine manager has a router (18) for determining a new intermediate destination address outside the local segment, for routing the given outgoing message. By having the router as part of the virtual machine manager rather than having only a switch in the virtual machine manager, the need for virtual machines for implementing gateways is avoided. This can reduce the number of “hops” for the message between virtual entities hosted, and thus improve performance. This can help a service provider to share physical processing resources of a data center between different clients having their own virtual networks.

Abstract: A data center can share processing resources using virtual networks. A virtual machine manager (10) hosts one or more virtual machines (11, 411), the virtual machines forming part of a segmented virtual network (34). Outgoing messages from the virtual machines have an intermediate destination address of an intermediate node in a local segment of the segmented virtual network, and the virtual machine manager has a router (18) for determining a new intermediate destination address outside the local segment, for routing the given outgoing message. By having the router as part of the virtual machine manager rather than having only a switch in the virtual machine manager, the need for virtual machines for implementing gateways is avoided. This can reduce the number of “hops” for the message between virtual entities hosted, and thus improve performance. This can help a service provider to share physical processing resources of a data center between different clients having their own virtual networks.

Abstract: A data center can share processing resources using virtual networks. A hosting program 9,10 hosts one or more virtual machines 11, 12. The program has a virtual interface VIF 1 14, to the virtual machines, a network interface 19 to enable communication between the virtual machines and other nodes of a network, and an infrastructure management interface 8, invisible to the virtual machines. The program has an intercept function 7 implemented as a comparator, switch or router, arranged to intercept a status message from one of the virtual machines, or applications run by that virtual machine. The status indication is sent to a status buffer 5 and is made available to the infrastructure management interface without providing a network path between the management interface and the virtual machine. This can discriminate between VM failure and communication failure, and the invisibility maintains isolation and helps avoid vulnerability to denial of service attack.

Abstract: The present invention relates to polypeptide targets for pathogenic bacteria. The invention also provides biochemical and biophysical characteristics of those polypeptides.

Abstract: The present invention relates to novel drug targets for pathogenic bacteria. Accordingly, the invention provides purified protein comprising the amino acid sequence set forth in SEQ ID NO: 4. The invention also provides biochemical and biophysical characteristics of the polypeptides of the invention.