Abstract: A method and system provide tracking of a virtual machine by compiling information on the virtual machines in a network and sending the information to an administrative console. The administrative console can then determine the status of the virtual machines in the network. The administrative console can also establish a lineage of a virtual machine and the migration of a virtual machine from one host machine to another host machine. A virtual machine unique identifier assigned to each virtual machine by the system can be modified and used to track each virtual machine and associated host machine. A status can then be determined of the virtual machines, where the status can be a new virtual machine, a previously discovered virtual machine, a duplicated virtual machine, or a cloned virtual machine.

Abstract: A method and system for a communication network containing both trusted peers and untrusted hosts within the network. Trusted peers can collaborate with each other to observe and monitor the activity of the untrusted hosts. In addition, a trusted peer instantiated with a virtual machine can have an operating system kernel collaborate with a hypervisor to determine whether threats are present. A trusted peer that needs particular functionality installed can collaborate with other trusted peers and with an administrative console to have that functionality installed. An untrusted host can have a driver directly inserted into it by an administration console, which will facilitate in the collaboration process.

Abstract: A method and system provide tracking of a virtual machine by compiling information on the virtual machines in a network and sending the information to an administrative console. The administrative console can then determine the status of the virtual machines in the network. The administrative console can also establish a lineage of a virtual machine and the migration of a virtual machine from one host machine to another host machine. A virtual machine unique identifier assigned to each virtual machine by the system can be modified and used to track each virtual machine and associated host machine. A status can then be determined of the virtual machines, where the status can be a new virtual machine, a previously discovered virtual machine, a duplicated virtual machine, or a cloned virtual machine.

Abstract: A method and system for a communication network containing both trusted peers and untrusted hosts within the network. Trusted peers can collaborate with each other to observe and monitor the activity of the untrusted hosts. In addition, a trusted peer instantiated with a virtual machine can have an operating system kernel collaborate with a hypervisor to determine whether threats are present. A trusted peer that needs particular functionality installed can collaborate with other trusted peers and with an administrative console to have that functionality installed. An untrusted host can have a driver directly inserted into it by an administration console, which will facilitate in the collaboration process.