Abstract: A method and system for generating and managing snapshots of Virtual Machine (i.e., virtual snapshots) and creating a centralized integrated backup for the Virtual Machine (VM). Proposed method and system allow users to roll back to any previous version of the VM and instantiate this version using the logic encapsulated in a virtual snapshot of the VM. The virtual snapshots taken at various times can be combined into a chronological tree viewable via a virtual snapshot image viewer. The snapshot trees for different VMs are combined into centralized integrated system backup (CIB) that can be managed by a central console including a GUI of the virtual snapshot image viewer.

Abstract: A system, method and computer program product for a system, method and computer program product for using a GPU of a host computer system for supporting functionality of a number of VMs implemented on the host computer system. The GPU usage by a VM includes e.g., sharing a video card with a VM hypervisor; executing applications controlled by the hypervisor; optimization of a snapshot memory consumption; CRC calculations for memory ballooning; on-the-fly disk data encryption; indexing disk data; efficient data compression for HDD; compression of the VM execution trace data and video traffic; computations for backup storage; AV scanning; firewall-related services; traffic encryption (IPSec); processing and restoration of disk transactions; optimization of incremental backups (creation and comparison of snapshots); traffic indexing and replay; isolating some applications on the GPU for virus protection; optimization of runtime compilers.

Abstract: A method for protection of cloud computing includes homomorphic encryption of data. Partially or fully homomorphic encryption allows for data within the cloud to be processed without decryption. A partially or fully homomorphic encryption is provided. The proposed scheme can be used with both an algebraic and analytical approaches. A cloud service is implemented on a server. A client encrypts data using fully homomorphic encryption and sends it to the server. The cloud server performs computations without decryption of the data and returns the encrypted calculation result to the client. The client decrypts the result, and the result coincides with the result of the same calculation performed on the initial plaintext data.

Abstract: A system, method and computer program product for controlling virtual servers includes a plurality of virtual servers running on a host computer. An access identifier and a unique identifier can be associated with each virtual server. A control procedure(s) is within each corresponding virtual server, and can be used to control that virtual server in response to control commands. A control interface is outside the virtual servers and can be used for control of the virtual servers in response to control commands. The control command can be executable by both the control procedure(s) and the control interface, or can be executable by the control interface if the control procedure(s) is unreachable, or can be executable by the control interface if the virtual server has failed, or can be executable even if the virtual server is inaccessible. The control interface can be accessible by using multiple addresses and identifiers.

Abstract: A method, system and computer program product for implementing a first Virtual Machine (VM) and a first guest OS in the VM, on a computing system that has a host OS and a host desktop. The first VM has a non-native application associated with the first VM and the first guest OS; means for replacing the first guest OS in the first VM with a different guest OS; a second VM and a second guest OS in the second VM running on the processor; upon a user attempting to launch the non-native application, means for associating the non-native application with the second VM; and means for determining compatibility of the non-native application with the second guest OS; The non-native application is launched inside the second VM.

Abstract: A method and system for an unattended installation of any type of a guest operating system (GOS) on a Virtual Machine (VM), or a nested VM. Proposed method and system allow users to create an executable script, which provides automation of any GOS or application installation on the VM. User actions, such as mouse clicks, gestures, touch commands and keyboard strokes, performed during GOS/application installation are recorded. The delays, time periods between clicks and strokes are recorded as well. All of this information is incorporated into an executable script. The script, when executed, simulates/reproduces GOS/application action sequence. This sequence reflects the behavior of GOS/application itself executed on a VM.

Abstract: A method of controlling operation of an installed component includes generating auxiliary information relating to the installed component in user space; launching a control program in operating system space for controlling operation of the installed component; and controlling, from the operating system space, the operation of the installed component using the auxiliary information. The installed component can be an operating system component running in a Virtual Private Server, or a component of third party software. The auxiliary information can be, e.g., time stamps, CRC, access control information, function names, function address offsets and function parameter passing information derived from the debug file. The controlling step can patch the installed component. The patch can be version-specific to the installed component. The controlling step can monitor behavior of the installed component. The auxiliary information can be generated based on a debug file/pdb file.

Abstract: A system, method and computer program product for an isolated security domain which is a bounded area of the VM for protected objects. The objects include executable code and/or data, hardware units (e.g., ports) or a combination thereof. The secure units in this area are accessible using secure rules used to ensure that objects are not malware. Authentication for connections to security domain is required and certain areas of the domain are made to be read only.

Abstract: A method, system and computer program product for accessing remote devices is provided. The proposed method allows users to remotely access devices or tools controlled by a Virtual Environment (VE) implemented on a remote server. A user of a client machine or a mobile communications device can access a remote device controlled by a server or by local client of the server. The server can have a number of VEs implemented on it. Each of the VE can run a Guest OS that has guest device drivers installed on it. The VE receives the user request and passes on user commands to a device controlled by the guest device driver installed on the Guest OS of the VE.

Abstract: A system, method and computer program product for implementing a video camera that is accessible by different Virtual Machine GOSs and the Host system. A standard USB video camera is build into a Host system. A VM running a Guest OS is launched on the Host system. The Guest OS has virtual driver for the Host video camera. The virtual driver is connected to a virtual USB bus, which communicates with a special Host library over a Virtual Machine Monitor (VMM). A special Host side VM application acquires and processes video data from a standard Host system video processing API that communicates directly with a Host-side virtual camera driver. Video frames are provided via the Host-side VM application to the virtual USB bus and to the virtual driver. Host applications or other VMs can acquire video streams from the Host USB camera simultaneously.

Abstract: A computer system has an OS running on it. The computer system has Virtual Execution Environments (VEEs—containers or Virtual Machines), an old OS (to be replaced), a memory area which has data needed for system restart and restore from the VEE. The VEEs are moved into snapshot and a new OS is loaded into the memory. The new OS launches and receives data needed for restore of the system from the snapshot. Then, the new OS activates the VEEs. Thus, the new OS is reloaded onto the computer system without a physical memory reset.

Abstract: A method and system for testing and logging execution events of software delivered to a user. The user can launch and run the software product while having the support and a necessary input from the product developer. A software product is provided from a first remote server and executed on a user computer, while execution statistics are collected and analyzed by a second remote server. The software product is used in a virtual execution environment. The software product is executed on a Guest Operating System (GOS) also installed on the user computer. A hypervisor-level monitoring of tested software products and GOSs is implemented.

Abstract: A system and method for managing licensing of virtual environment applications. A licensing module of a first installed virtual environment application detects installation of affiliated applications and gives them a group licensing key for passing it to the licensing server. The licensing server derives licensing parameters of the affiliated applications from the group key and gives the licenses to the affiliated applications, in case of successful validation. The licensing system provides protection from un-authorized copying of the applications. If an affiliated virtual environment application is copied (or moved) to another hardware node without its virtual environment, the licensing server will not give the license activation key to this virtual environment application.

Abstract: System for safe execution of guest code in virtual machine context includes (a) a virtual machine monitor (VMM) that handles potentially unsafe instructions; (b) a virtual machine (VM) running guest code; (c) wherein the hardware virtualization means handles interrupts when encountering at least some privileged instructions in the guest code, (d) wherein the hardware virtualization means continuously determines, at runtime, if the instruction in the guest code is safe or potentially unsafe, wherein the potentially unsafe instructions are non-privileged instructions that can execute incorrectly in a context of the VM; (e) wherein the VM executes the safe instructions in a native mode; (f) wherein the hardware virtualization means bypasses potentially unsafe instructions.

Abstract: A method for integration of dynamically scalable non-native windows into a host operating system (OS), including launching a Virtual Machine (VM) running a guest OS on a computer system with the host OS and a host desktop being displayed to a user; displaying a window of a non-native desktop on the host desktop; and scaling the window in response to user action, so that items displayed in the window are scaled with the same ratio, wherein the VM interfaces to a virtual adapter for its maintenance of the window, and wherein a resolution of the displayed window changes dynamically in response to the user action.

Abstract: A method and system for generating and managing snapshots of Virtual Machine (i.e., virtual snapshots) and creating a centralized integrated backup for the Virtual Machine (VM). Proposed method and system allow users to roll back to any previous version of the VM and instantiate this version using the logic encapsulated in a virtual snapshot of the VM. The virtual snapshots taken at various times can be combined into a chronological tree viewable via a virtual snapshot image viewer. The snapshot trees for different VMs are combined into centralized integrated system backup (CIB) that can be managed by a central console including a GUI of the virtual snapshot image viewer.

Abstract: A computer system has a random access memory (RAM) that stores currently used memory pages and SWAP storage for storing memory page that is not in use. If the process requires memory page stored on the SWAP storage, a corresponding page is loaded to RAM. If the page in RAM is not currently in use, it is moved to the SWAP storage. The computer system has a number of Virtual Environments (i.e., Containers) that run their own processes, a VE/Container RAM and a virtual SWAP storage. The Container processes have access to a VE/Container RAM. When the Container process request OS for memory, the memory manager allocates memory pages in the RAM and also allocates memory pages for the Container process in the VE/Container RAM. If no free virtual RAM is available, the process data is moved to the virtual SWAP storage.

Abstract: A server includes a host running an operating system kernel. Isolated virtual private servers (VPSs) are supported within the kernel. At least one application is available to users of the VPS. A plurality of interfaces give the users access to the application. Each VPS has its own set of addresses. Each object of each VPS has a unique identifier in a context of the operating system kernel. Each VPS is isolated from objects and processes of another VPS. Each VPS includes isolation of address space of each user from address space of a user on any other VPS, isolation of server resources for each VPS, and failure isolation.

Abstract: A system, method and computer program product for managing files of Virtual Machines, including launching a plurality of Virtual Machines in a computing system having a host OS; using a content of at least one file of the host OS as a shared file; using a re-direct, providing access to the shared file when any Virtual Machine attempts to access its private file; using copy-on-write, making a copy of the shared file if the Virtual Machine attempts to modify the shared file, and placing a copy of the shared file in a private area of the corresponding Virtual Machine.

Abstract: A method for protection of cloud computing includes homomorphic encryption of data. Partially or fully homomorphic encryption allows for data within the cloud to be processed without decryption. A partially or fully homomorphic encryption is provided. The proposed scheme can be used with both an algebraic and analytical approaches. A cloud service is implemented on a server. A client encrypts data using fully homomorphic encryption and sends it to the server. The cloud server performs computations without decryption of the data and returns the encrypted calculation result to the client. The client decrypts the result, and the result coincides with the result of the same calculation performed on the initial plaintext data.