Abstract: A system, method and computer program product, including a primary operating system (OS) having access to at least some hardware resources of the computer system. A Hypervisor controls a plurality of virtualization spaces and at least some of the remaining hardware resources. Each virtualization space maintains data of a corresponding instance of a Virtual Machine with a guest operating system running inside the Virtual Machine. Each Virtual Machine is associated with at least one virtual processor. A hyperswitch controlled by the Hypervisor starts and stops execution of the Virtual Machines. A scheduler dedicates a quantum of running time to each virtual processor. When the quantum is given to the Virtual Machine, the Hypervisor forces the hyperswitch to activate the Virtual Machine on its virtual processor.

Abstract: A method, system and computer program product for storing data of a Virtual Execution Environment (VEE), such as a Virtual Private Server (VPS) or a Virtual Machine, including starting an operating system running a computing system; starting a Virtual Machine Monitor under control of the operating system, wherein the VMM virtualizes the computing system and has privileges as high as the operating system; creating isolated Virtual Machines (VMs), running on the computing system simultaneously, wherein each VM executes its own OS kernel and each VM runs under the control of the VMM; starting a storage device driver and a file system driver in the operating system; mounting a virtual disk drive; starting VM-specific file system drivers in the VM, the VM specific file system driver together with the common storage device drivers support virtual disk drives, the virtual disk drive is represented on the storage device as a disk image, the disk image data are stored on the storage device as at least one file that in

Abstract: A system, method and computer program for launching an application into a host OS, include storing a snapshot/image of a Virtual Execution Environment (VEE) on a portable device, wherein the VEE snapshot is packed into a self-extracting file; launching the VEE from the portable device on a computer; and starting a user application within the VEE. The VEE snapshot can be restricted in its use. The VEE can be a Virtual Private Server or a Virtual Machine. The user application is a non-native application for a host OS of the computer. The VEE is launched from an icon on the portable device. The portable device can be, e.g., an iPod, a flash memory card, a digital player, a mobile phone device, a portable gaming device, rewritable CD/DVD/HD DVD/Blu Ray disk, etc. Alternatively, some data can be stored on the portable device, while other data can be downloaded from a network.

Abstract: System for safe execution of guest code in virtual machine context includes (a) a virtual machine monitor (VMM) that uses hardware virtualization means for handling potentially unsafe instructions; (b) a virtual machine (VM) running guest code; (c) wherein the hardware virtualization means handles interrupts when encountering at least some privileged instructions in the guest code, (d) wherein the hardware virtualization means continuously determines, at runtime, if the instruction in the guest code is safe or potentially unsafe, wherein the potentially unsafe instructions are non-privileged instructions that can execute incorrectly in a context of the VM; (e) wherein the VM executes the safe instructions in a native mode; (f) wherein the hardware virtualization means bypasses potentially unsafe instructions; and (g) wherein offset addresses in the guest code are the same as offset addresses in source code from which the guest code was generated.

Abstract: A system, method and computer program product for increasing efficiency of Guest OS code in a Virtual Machine, including installing a driver (Guest Tool) in the Virtual Machine; upon detection of an event in the Virtual Machine that could require a context switch to a Virtual Machine Monitor (VMM), intercepting the event; analyzing the event for whether the event can be handled in the VM and without a context switch; for those events that can be handled natively in the VM, replacing selected instructions with other instructions that accomplish the same task but do not require a context switch; for those events that cannot be handled natively in the VM, transferring control to the VMM; handling the event in the VMM; and returning control to the VM.

Abstract: A first portion of a Hypervisor is loaded into the memory as a part of an Extensible Firmware Interface upon start up. The first portion is responsible for context switching and some interrupt handling. The first portion of the Hypervisor runs on a root level. An OS is loaded into a highest non-root privilege level. A second portion of the Hypervisor is loaded into OS space together with the operating system, and running on the highest non-root privilege level. A Virtual Machine Monitor is running on the root level. The second portion of the Hypervisor is responsible for (a) servicing the VMM, and (b) enabling communication between VMM code launched on non-root level with the first portion of the Hypervisor to verify the VMM and to enable root mode for the VMM. A Virtual Machine is running on a user level under control of the VMM.

Abstract: A method for data backup including (a) forming an image of the storage device; (b) for each block to be backed up to the image, generating a hash; (c) for each block stored in the image, storing a hash in a hash table; (c) for each additional block of the storage device to be backed up, generating a hash; (d) sorting all the generated hashes and deleting duplicate hashes; (e) comparing the hashes to identify candidate blocks that might have identical contents with contents of blocks stored in the image; (f) if the hashes are not coincident, then backing up, to the image, contents of unidentified blocks and blocks that do not have identical hashes, and (g) otherwise, storing links in the image instead of the contents of the blocks, (h) after checking all the hashes for those blocks that need to be backed up, writing only unique hashes to the hash table; (h) links for multiple blocks with identical contents point to a single block in the image, (i) the image contains a bitmap of the backup; (j) the bitmap conta

Abstract: A method, system and computer program product for backing up client's data on remote data storage. A client-server infrastructure having multiple clients connected to the backup server is provided. There are two data storages devices connected to the server: data files repository and user data configurations repository. The data files repository contains copies of all data items (i.e., files) that had been stored by each client. The data files repository also contains a hash table with hash values corresponding to data items stored in the data repository. The file attributes corresponding to the data item are stored in the user data configurations repository. Further validation of files having identical hashes is performed on the client using file attributes. Backup of duplicate files is avoided.

Abstract: A system, method and computer program product for virtualizing a processor include a virtualization system running on a computer system and controlling memory paging through hardware support for maintaining real paging structures. A Virtual Machine (VM) is running guest code and has at least one set of guest paging structures that correspond to guest physical pages in guest virtualized linear address space. At least some of the guest paging structures are mapped to the real paging structures. A cache of connection structures represents cached paths to the real paging structures. The mapped paging tables are protected using RW-bit. A paging cache is validated according to TLB resets. Non-active paging tree tables can be also protected at the time when they are activated. Tracking of access (A) bits and of dirty (D) bits is implemented along with synchronization of A and D bits in guest physical pages.

Abstract: A system, method and computer program product for an isolated security domain which is a bounded area of the VM for protected objects. The objects are software units (including executable code data), hardware units (e.g., ports) or a combination thereof. The secure units in this area are accessible using secure rules used to ensure that objects are not malware. Authentication for connections to security domain is required and certain areas of the domain are made to be read only.

Abstract: A method, system and computer program product migrating non-native applications include launching a first Virtual Machine (VM) and a first original guest OS in the VM, on a computing system that has the host OS and a host desktop, wherein the first VM has a non-native application associated with the first VM and the first original guest OS; replacing the first original guest operating system (OS) system in the first VM with a different version of the guest OS; upon a user attempting to launch the non-native application, migrating the non-native application in the first VM to the second VM; launching a second Virtual Machine (VM) and a second original guest OS in the VM, on the computing system; associating the non-native application with the second VM; launching the non-native application inside the second VM; and displaying a non-native application window to the user.

Abstract: A method, system and computer program product for generation and management of incremental backups of VEE file system using bitmaps. The proposed method allows users to roll back to any previous version or state of the VEE file system and to instantiate this version using the data encapsulated in virtual disk storage (i.e. file system) of the VEE. A number of VEEs run on a Host Operating System of the computer system. One of the VEEs implemented on the computer system is designated to generation and management of backups of the virtual disk data of the other VEEs without freezing the file system during the entire backup process. A special tracing application runs on the designated VEE for generating the bitmap of a file system snapshot. The user can also set up a time for generating a backup or create a schedule for automatically generating the backups at critical points.

Abstract: This invention relates to a method, system and computer program product for performing on-the-fly migration of a virtual server from one network node to another node on the network. All active processes executing on a virtual server are frozen and the state of these processes, including virtual server network connectivity information, are saved into a dump file. The dump file is transferred to the destination network node. Using the information stored in the dump file, the execution state of all active processes and the state of network connections of the virtual server are restored at the destination node to the state existing immediately prior to on-the-fly migration.

Abstract: A computing cloud comprising at least one computing node having a Virtual Machine (VM) running on a user level. A plurality of additional computing nodes, each node having a Hypervisor with the highest privilege level, a Virtual Machine Monitor (VMM) running with no higher privileges than the Hypervisor, and a plurality of Virtual Machines (VMs) running on a user level. Each node has a Primary operating system (POS) running within the one of its VMs. The POS has direct access to hardware devices of the corresponding computing node. The other VMs use the corresponding POS of its node to access the hardware devices.

Abstract: A method, system and a computer program product for processing isochronous data packets in a guest memory of a Virtual Machine (VM) using a virtual USB controller. The virtual USB controller is implemented as a software application running on computer system where the VM is implemented. The virtual USB controller is a software component emulating a physical USB controller. The virtual controller uses chains of isochronous packets processed and stored in the guest memory of the VM. Processing of the isochronous data packets includes allocating a buffer in the guest memory for each isochronous data packet and writing the isochronous data packet to the buffer. According to the proposed method, each VM has its own virtual USB controller. The method allows a number of the VMs implemented on a host operating system of a physical machine to concurrently receive data from various USB end-points by employing the virtual USB controllers.

Abstract: A method of controlling operation of an installed component includes generating auxiliary information relating to the installed component in user space; launching a control program in operating system space for controlling operation of the installed component; and controlling, from the operating system space, the operation of the installed component using the auxiliary information. The installed component can be an operating system component running in a Virtual Private Server, or a component of third party software. The auxiliary information can be, e.g., time stamps, CRC, access control information, function names, function address offsets and function parameter passing information derived from the debug file. The controlling step can patch the installed component. The patch can be version-specific to the installed component. The controlling step can monitor behavior of the installed component. The auxiliary information can be generated based on a debug file/pdb file.

Abstract: A method, system and computer program product for generation and management of incremental backups of VEE file system using bitmaps. The proposed method allows users to roll back to any previous version or state of the VEE file system and to instantiate this version using the data encapsulated in virtual disk storage (i.e. file system) of the VEE. A number of VEEs run on a Host Operating System of the computer system. One of the VEEs implemented on the computer system is designated to generation and management of backups of the virtual disk data of the other VEEs without freezing the file system during the entire backup process. A special tracing application runs on the designated VEE for generating the bitmap of a file system snapshot. The user can also set up a time for generating a backup or create a schedule for automatically generating the backups at critical points.

Abstract: This invention relates to a method, system and computer program product for performing on-the-fly migration of a virtual server from one network node to another node on the network. All active processes executing on a virtual server are frozen and the state of these processes, including virtual server network connectivity information, are saved into a dump file. The dump file is transferred to the destination network node. Using the information stored in the dump file, the execution state of all active processes and the state of network connections of the virtual server are restored at the destination node to the state existing immediately prior to on-the-fly migration.

Abstract: Managing dynamic content of a website, including creating static content assigned to dynamic content of the website, with unmodifiable scripts; creating an active content for processing dynamic content, with hidden elements and elements with only visual marks representation; transmitting the static content to a user; selecting references to the active content within the static content; requesting description of the active content from a server; transmitting the active content to the user; displaying the active content; editing dynamic content and visual representations of data requested by user; representing a first document form generated from an HTML representation of server data and unmodifiable scripts, and which includes the elements; generating a request for data needed for a current visualization of the form; generating a second related data representation of another form; delivering second related data representation for display in browser; storing content of the website on server and making it public

Abstract: A system, method and computer program for launching an application into a host OS, include storing a snapshot/image of a Virtual Execution Environment (VEE) on a portable device, wherein the VEE snapshot is packed into a self-extracting file; launching the VEE from the portable device on a computer; and starting a user application within the VEE. The VEE snapshot can be restricted in its use. The VEE can be a Virtual Private Server or a Virtual Machine. The user application is a non-native application for a host OS of the computer. The VEE is launched from an icon on the portable device. The portable device can be, e.g., an iPod, a flash memory card, a digital player, a mobile phone device, a portable gaming device, rewritable CD/DVD/HD DVD/Blu Ray disk, etc. Alternatively, some data can be stored on the portable device, while other data can be downloaded from a network.