Abstract: In a computer system in which multiple programs are executed concurrently in respective isolated execution environments, the corresponding resources of the computer system consumed by each of the isolated execution environments is monitored, and any of the isolated execution environments for which the consumed corresponding resources meet an excessive use criterion is identified. If any such isolated execution environment is identified, a corrective action is performed. This may be to issue an alert to an administrator of the system, who may in response modify (e.g. suspend or terminate) the operation of the identified isolated execution environment(s). Alternatively or additionally, the operation of the identified isolated execution environment(s) may be automatically modified (i.e. without the intervention of the administrator), e.g. leaving other of the isolated execution environments still operating.

Abstract: In a computer system in which multiple programs are executed concurrently in respective isolated execution environments, the temperature or power usage of one or more portions of the computer system are monitored. Upon it being determined that there is excessive heat generation or power usage according to an excessive use criterion (e.g. the sensed heat and/or power containers have exceeded a threshold energy), the operation of one or more of the isolated execution environments is modified (e.g. suspended or terminated) leaving other of the isolated execution environments still operating.

Abstract: A computer system has access to multiple differing certificates in a certificate database. Each certificate is configuration information for an isolated execution environment, and different ones of the certificates specify different configuration information. The computer system is configured, upon receiving a request to execute a program, to initialize an isolated execution environment based on the configuration information of a selected certificate, and to execute the program in the isolated execution environment.

Abstract: In one embodiment, a crypto cloudlet is provided that includes a security wrapper to a virtual machine to guarantee secure Input/Output exchange between a client and one or more cryptographic adaptive services powered by a set of virtual CPUs through a single well defined channel, an adaptive service running in the virtual machine that identifies hardware resources necessary to satisfy a cryptographic demand or request, and an Ethernet interface communicatively coupled to the security wrapper providing network channel services for exchange of cryptographic data and commands. The security wrapper presents to the adaptive services the hardware accelerators exposed by the virtual machine. Other embodiments are disclosed.

Abstract: In one embodiment, a crypto cloudlet is provided that includes a security wrapper to a virtual machine to guarantee secure Input/Output exchange between a client and one or more cryptographic adaptive services powered by a set of virtual CPUs through a single well defined channel, an adaptive service running in the virtual machine that identifies hardware resources necessary to satisfy a cryptographic demand or request, and an Ethernet interface communicatively coupled to the security wrapper providing network channel services for exchange of cryptographic data and commands. The security wrapper presents to the adaptive services the hardware accelerators exposed by the virtual machine. Other embodiments are disclosed.