Abstract: A method includes receiving, by a processing device, a first packet addressed to a first virtualized execution environment, determining, by the processing device, whether the first packet has similar characteristics with a second packet by applying a first filtering rule to the first packet, wherein the first filtering rule is generated in view of characteristics of the second packet, and wherein the second packet is stored in a first filtering queue of a second virtualized execution environment, and responsive to determining that the first packet is similar to the second packet, discarding, by the processing device, the first packet.

Abstract: A method includes accessing, by a hypervisor executing by a processing device, a filtering queue that stores at least one packet determined to be malicious by a virtual machine, generating, by the hypervisor, a filtering rule in view of characteristics of the at least one packet determined to be malicious, and storing the filtering rule in a data store to apply to subsequent packets addressed to the virtual machine to determine whether any of the subsequent packets have similar characteristics with the at least one packet determined to be malicious.

Abstract: A computer system identifies a pattern of log messages in view of an alarm rule. The computer system generates one or more log messages in view of the identified pattern of messages. The log messages comprise a commercial advertisement. The computer system transmits the one or more log messages to a log server.

Abstract: A host computer system is queried for network configuration data associated with network components within the host computer system. Querying the host computer system includes querying an application container instantiated at the host computer system for the network configuration data of one or more of the network components within the application container. In response to the querying, the network configuration data is received and includes first configuration data of the network components within the host computer system and second configuration data of connectivity between the network components within the host computer system. A network configuration model of the network components within the host computer system is generating in view of the network configuration data. The network configuration model logically groups the one or more of the network components that are within the application container.

Abstract: Systems and method for generating a network configuration model for a host computer system are disclosed. An example method may include querying a host computer system for network configuration data. The method further includes receiving, in response to the querying, the network configuration data including configuration data of network components included by the host computer system and configuration data of connectivity between the network components. At least one of the network components may be represented by a virtual network component. The method also, generates, in view of the network configuration data, a network configuration model.

Abstract: A method includes accessing, by a hypervisor executing by a processing device, a filtering queue that stores at least one packet determined to be malicious by a virtual machine, generating, by the hypervisor, a filtering rule in view of characteristics of the at least one packet determined to be malicious, and storing the filtering rule in a data store to apply to subsequent packets addressed to the virtual machine to determine whether any of the subsequent packets have similar characteristics with the at least one packet determined to be malicious.

Abstract: A computer system identifies a pattern of log messages in view of an alarm rule. The computer system generates one or more log messages in view of the identified pattern of messages. The log messages comprise a commercial advertisement. The computer system transmits the one or more log messages to a log server.

Abstract: Systems and method for generating a network configuration model for a host computer system are disclosed. An example method may include querying a host computer system for network configuration data. The method further includes receiving, in response to the querying, the network configuration data including configuration data of network components included by the host computer system and configuration data of connectivity between the network components. At least one of the network components may be represented by a virtual network component. The method also, generates, in view of the network configuration data, a network configuration model.