Abstract: The current document is directed to automated methods and systems that monitor system-call execution by operating systems in order to detect operating-system corruption. A disclosed implementation of the currently disclosed automated system-call-integrity monitor generate operational system-call fingerprints for randomly selected system calls executed by guest operating systems of randomly selected virtual machines and compares the operational system-call fingerprints to reference system-call fingerprints in order to detect operational anomalies of guest operating systems that are likely to represent guest-operating-system corruption. In disclosed implementations, a system-call fingerprint includes a system-call execution time, the number of instructions executed during execution of the system call, and a snapshot of the call stack taken during execution of the system call.

Abstract: The current document is directed to automated methods and systems that monitor system-call execution by operating systems in order to detect operating-system corruption. A disclosed implementation of the currently disclosed automated system-call-integrity monitor generate operational system-call fingerprints for randomly selected system calls executed by guest operating systems of randomly selected virtual machines and compares the operational system-call fingerprints to reference system-call fingerprints in order to detect operational anomalies of guest operating systems that are likely to represent guest-operating-system corruption. In disclosed implementations, a system-call fingerprint includes a system-call execution time, the number of instructions executed during execution of the system call, and a snapshot of the call stack taken during execution of the system call.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Example methods are provided for a computer system to validate routing information in a software-defined networking (SDN) environment. The method may comprise obtaining routing information associated with a logical router in a first autonomous system and network topology information associated with the first autonomous system. The routing information may specify multiple first routes to respective multiple first networks, and the network topology information may specify multiple second routes that connect the logical router to respective multiple second networks. The method may also comprise validating the routing information based on the network topology information to determine whether the multiple first routes are valid based on the multiple second routes; and in response to determination that a particular first route from the multiple first routes is invalid, configuring the logical router to exclude the particular first route from route advertisement information destined for a second autonomous system.

Abstract: Some embodiments provide a method for displaying a multi-layer network map for a network configured in at least one datacenter. The method displays a visualization of a first layer of the multi-layer network map. The visualization includes a first set of selectable items corresponding to components of the network and connections between the components. At least a subset of the first set of selectable items link to other layers of the network map. The method receives input selecting one of the selectable items. In response to the input, the method displays a visualization of a second layer of the network map. The second layer provides information about the network configuration at a different level of detail than the first layer. The visualization of the second layer includes a second set of selectable items corresponding to components of the network and connections between the components.

Abstract: Some embodiments provide a method for displaying a multi-layer network map for a network configured in at least one datacenter. The method displays a visualization of a first layer of the multi-layer network map. The visualization includes a first set of selectable items corresponding to components of the network and connections between the components. At least a subset of the first set of selectable items link to other layers of the network map. The method receives input selecting one of the selectable items. In response to the input, the method displays a visualization of a second layer of the network map. The second layer provides information about the network configuration at a different level of detail than the first layer. The visualization of the second layer includes a second set of selectable items corresponding to components of the network and connections between the components.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Example methods are provided for a computer system to validate routing information in a software-defined networking (SDN) environment. The method may comprise obtaining routing information associated with a logical router in a first autonomous system and network topology information associated with the first autonomous system. The routing information may specify multiple first routes to respective multiple first networks, and the network topology information may specify multiple second routes that connect the logical router to respective multiple second networks. The method may also comprise validating the routing information based on the network topology information to determine whether the multiple first routes are valid based on the multiple second routes; and in response to determination that a particular first route from the multiple first routes is invalid, configuring the logical router to exclude the particular first route from route advertisement information destined for a second autonomous system.