Abstract: A method and system for a site builder. The site builder is an application designed to create and edit websites for hosting providers, resellers and end users. Built with hosting in mind, the proposed site builder allows providers to easily offer site building capabilities to their customers. The easy five-step wizard interface provides for an effortless way for customers to create, modify and update their own websites without any technical skills or HTML know-how. The site builder application for LINUX/Unix or WINDOWS also comes with a comprehensive administration panel that allows providers to quickly and easily tailor the application to their needs.

Abstract: A system, method and computer program product for implementing a thin hypervisor. The thin hypervisor does not have any association with a VM. The thin hypervisor serves as a wrapper over hardware capabilities of a processor. The processor has privileged low-level capabilities EPT VTX, AMD V and the ARM has virtualization technology. In order to use processor hardware capabilities and receiving root privileges, the system operates in a “super user” mode. The VM operates in a VM environment with kernel privileges in a user mode. A super user space is created in a safe mode. A user space application (or a process) is created. A user space virtualization framework library is used. These entities are separated by a user space and a kernel space. A thin hypervisor is implemented in the user space.

Abstract: A method and a system for cache management in system interfacing to a cloud storage. The cache has two layers: the filter layer for tracing read access to the data blocks and the cache layer for keeping the actual data blocks. The layer two consists of two modules—a main cache and a boot cache. The boot cache is filled during the short period of time after the first file open operation. The boot cache also has a limit on the amount of data that can be put into the cache for the particular file. The filter layer detects continuous read access pattern and avoids caching data, if the data is read continuously beyond some limit.

Abstract: A method for publishing the web sites on remote server using shared hosting in cases of unexpected server timeouts. A list of elements (work items) to be published is generated. The list is sorted out according to dependencies of elements from one another. Then, the work items are sorted out by the priority. The work item from the top of the list (with the highest priority) is processed first. After the work is performed with this work item, the work item is marked as closed if the process has executed successfully. Then, the process moves to the next work item and so on. The process has a library of the work items. Thus, in case of a server timeout, the process knows exactly which work items have been processed prior to the timeout and can start the processing from the next work item.

Abstract: System for working with shared memory includes a plurality of contexts, each having executable processes writing and reading data; a ring buffer in the shared memory for writing and reading data by the contexts; a software primitive manages access attempts by the contexts to the ring buffer. Each context, upon writing to the ring buffer, is allocated an amount of space up to a maximum available at that moment. The software primitive guarantees consistency of the data written to the ring buffer. The software primitive permits simultaneous writing into the buffer by multiple contexts. After finishing writing to the buffer, the context updates a state of the buffer by decrementing the count of the active writers and/or by shifting the permitting pointers for communicating with writers and readers. A context can read from the buffer only data is marked as valid for reading by the context that wrote that data.

Abstract: A system and method for managing licensing of virtual environment applications. A licensing module of a first installed virtual environment application detects installation of affiliated applications and gives them a group licensing key for passing it to the licensing server. The licensing server derives licensing parameters of the affiliated applications from the group key and gives the licenses to the affiliated applications, in case of successful validation. The licensing system provides protection from un-authorized copying of the applications. If an affiliated virtual environment application is copied (or moved) to another hardware node without its virtual environment, the licensing server will not give the license activation key to this virtual environment application.

Abstract: A system, method and computer program product for implementing a VM on a host computer and monitoring the VM processes from the Host computer. A host-based Task Manager monitors the VM process and obtains execution statistics using a proprietary dynamic link library that substitutes Guest statistic collection functions for standard host statistic collection functions. The Guest statistic collection functions acquire data related to the execution of the VM processes running on the Guest OS.

Abstract: A method and computer program product for intercepting and blocking the mouse move and resize events on mobile devices transmitting remote application. The remote access client installed on the mobile device send the coordinates of user's touches to remote computer. The remote access agent, running on a remote host, blocks the consequences of user finger (or stylus) actions performed on a captured window of the remote application. The method defines the areas and elements of a captured remote application window that are not affected by the move/resize commands emulated by a mobile device user. This functionality is implemented by a control-agent component running on a remote host for receiving and processing the commands from a mobile device and for transmitting video stream and some metadata about remote applications to the mobile device.

Abstract: A method for protection of cloud computing includes homomorphic encryption of data. Partially or fully homomorphic encryption allows for data within the cloud to be processed without decryption. A partially or fully homomorphic encryption is provided. The proposed scheme can be used with both an algebraic and analytical approaches. A cloud service is implemented on a server. A client encrypts data using fully homomorphic encryption and sends it to the server. The cloud server performs computations without decryption of the data and returns the encrypted calculation result to the client. The client decrypts the result, and the result coincides with the result of the same calculation performed on the initial plaintext data.

Abstract: A method for generation of virtual images on a computer system having a Virtual Machine (VM), including (a) generating a virtual image of the VM that includes a state of the VM's disk at a particular moment in time; wherein the virtual image is viewable via a host-side graphical representation component for viewing a history of virtual images representing states of the VM's disk at prior moments in time; (b) storing the virtual image as multiple chunks or partitions; (c) from the host side, acquiring a state of the VM's memory using a guest-side Application Process Interface (API) and adding the state of the VM's memory to the virtual image; (d) configuring the graphical representation component to display only selected virtual images based on user selection, and (e) in the graphical representation component, displaying a representation of differences between at least two of the virtual images.

Abstract: Method for avoiding Guest I/O timeout, including generating a request to an I/O device in a Guest Operating System (GOS) running inside a VM; setting a VM timeout deadline; in a hypervisor, setting a supervisory timeout deadline for the I/O device to respond that is shorter than the VM timeout deadline; if no response is received before expiration of the supervisory timeout deadline, pausing the GOS; freezing system time of the GOS; activating a handler for the I/O device response in the hypervisor; upon receipt of the response prior to the supervisory timeout deadline, forwarding the response to the GOS, unpausing the GOS, unfreezing the system time of the GOS; upon receipt of the response after the supervisory timeout deadline, and after the GOS is unpaused by the hypervisor, the Guest OS receives the response from the hardware device; and if no response is received, the GOS is kept paused.

Abstract: A method and computer program product for running a remote desktop application on a mobile device without audio interference from the other desktop applications, so the remote user applications runs as if it were a native mobile device application. A remote host desktop has a number of applications running simultaneously and producing sounds. A mobile device user selects one application and launches it on his mobile device. The selected application runs on a mobile device and the sounds produced by all other desktop applications are filtered out by special audio control driver implemented on the host system.

Abstract: A method and computer program product for providing High Availability (HA) of services in a cloud-based system. The services are the applications used by the end users of the cloud system. The system uses shared cloud distributed storage. The cloud data is distributed over several nodes and is duplicated in an on-line mode. Each user launches and runs his own Virtual Execution Environment VEE (VM or Container) used as a cloud service. If one of the hardware nodes becomes unavailable, the HA system restores all of the VEEs of the failed node on a functional hardware node. Each node has a daemon, which monitors the situation and, if one of the nodes crashes, a master daemon provides for the restoration of the services of this node on other available nodes of the cloud.

Abstract: A computing cloud comprising at least one computing node having a Virtual Machine (VM) running on a user level. A plurality of additional computing nodes, each node having a Hypervisor with the highest privilege level, a Virtual Machine Monitor (VMM) running with no higher privileges than the Hypervisor, and a plurality of Virtual Machines (VMs) running on a user level. Each node has a Primary operating system (POS) running within the one of its VMs. The POS has direct access to hardware devices of the corresponding computing node. The other VMs use the corresponding POS of its node to access the hardware devices.

Abstract: A system and method for implementing direct attachment of VMs, implemented on a computer system, to hardware devices attached to the computer system. Direct attachment architecture is implemented. The direct attachment is an exclusive dedication of a hardware device to a VM, where a particular hardware device is assigned to a particular VM. When the VM is not activated, the hardware device can be re-assigned to another VM. At system start up, hardware devices are masked from a host OS of a computer system and are automatically attached to the assigned VMs.

Abstract: A computer system has an OS running on it. The computer system has Virtual Execution Environments (VEEs—containers or Virtual Machines), an old OS (to be replaced), a memory area which has data needed for system restart and restore from the VEE. The VEEs are moved into snapshot and a new OS is loaded into the memory. The new OS launches and receives data needed for restore of the system from the snapshot. Then, the new OS activates the VEEs. Thus, the new OS is reloaded onto the computer system without a physical memory reset.

Abstract: Managing dynamic content of a website, including creating static content assigned to dynamic content of the website, with unmodifiable scripts; creating an active content for processing dynamic content, with hidden elements and elements with only visual marks representation; transmitting the static content to a user; selecting references to the active content within the static content; requesting description of the active content from a server; transmitting the active content to the user; displaying the active content; editing dynamic content and visual representations of data requested by user; representing a first document form generated from an HTML representation of server data and unmodifiable scripts, and which includes the elements; generating a request for data needed for a current visualization of the form; generating a second related data representation of another form; delivering second related data representation for display in browser; storing content of the website on server and making it public

Abstract: System for working with shared memory includes a plurality of contexts, each having executable processes writing and reading data; a ring buffer in the shared memory for writing and reading data by the contexts; a software primitive manages access attempts by the contexts to the ring buffer. Each context, upon writing to the ring buffer, is allocated an amount of space up to a maximum available at that moment. The software primitive guarantees consistency of the data written to the ring buffer. The software primitive permits simultaneous writing into the buffer by multiple contexts. After finishing writing to the buffer, the context updates a state of the buffer by decrementing the count of the active writers and/or by shifting the permitting pointers for communicating with writers and readers. A context can read from the buffer only data is marked as valid for reading by the context that wrote that data.

Abstract: This invention relates to a method, system and computer program product for performing migration of a virtual execution environment from one network node to another node on the network. All active processes executing on a virtual execution environment are frozen and the state of these processes, including virtual execution environment network connectivity information, are saved into a dump file. The dump file is transferred to the destination network node. Using the information stored in the dump file, the execution state of all active processes and the state of network connections of the virtual execution environment are restored at the destination node to the state existing immediately prior to the migration.

Abstract: A method and system for emulation of super speed external devices in a virtual machine (VM), including checking the ability of the VM Guest OS to support the super speed external device. If the super speed device is not supported by the Guest OS, device metadata is substituted by the metadata of the devices supported by the Guest OS. The method replaces the metadata of a new external device by the metadata of an older or different (supported) device. A VM acquires a descriptor of the external device configuration and “patches” the device by replacing device version data from a new device version to an older (or different) device.