Abstract: According to one embodiment, an electronic device comprises a memory to store information and a processor. The processor is adapted to receive information associated with content such as network traffic, to process the stored information and to conduct operations on the content. These operations may comprise determining, by a virtual machine processed by the processor, an occurrence of an event during malware analysis of an object associated with the content, and dynamically altering a virtual machine instrumentation of the virtual machine based on information associated with the event.

Abstract: According to one embodiment, a computerized method comprises operations of instantiating a first virtual machine instance and a second virtual machine instance to run concurrently with the first virtual machine instance. The first virtual machine instance provides a first virtual operating environment while the second virtual machine instance is adapted to share the resources allocated to the first virtual machine instance. The second virtual machine instance is further adapted to allocate additional resources upon conducting a Copy-On Write operation.

Abstract: Malicious network content is identified based on the behavior of one or more virtual environment components which process network content in a virtual environment. Network content can be monitored and analyzed using a set of heuristics. The heuristics identify suspicious network content communicated over a network. The suspicious network content can further be analyzed in a virtual environment that includes one or more virtual environment components. Each virtual environment component is configured to mimic live environment components, for example a browser application component or an operating system component. The suspicious network content is replayed in the virtual environment using one or more of the virtual environment components. The virtual environment component behavior is analyzed in view of an expected behavior to identify malicious network content. The malicious network content is then identified and processed.

Abstract: Malicious network content is identified based on the behavior of one or more virtual environment components which process network content in a virtual environment. Network content can be monitored and analyzed using a set of heuristics. The heuristics identify suspicious network content communicated over a network. The suspicious network content can further be analyzed in a virtual environment that includes one or more virtual environment components. Each virtual environment component is configured to mimic live environment components, for example a browser application component or an operating system component. The suspicious network content is replayed in the virtual environment using one or more of the virtual environment components. The virtual environment component behavior is analyzed in view of an expected behavior to identify malicious network content. The malicious network content is then identified and processed.

Abstract: Remote access to a target object, in particular a target bean object, is provided by generating a client object or objects forming a representation of a target object. The client object(s) identify(ies) methods of the target object which are accessible remotely and implements the remotely accessible methods. The target object is associated with a network adaptor for a network protocol at the remote station. The client object is associated with a network adaptor for the network protocol at the client machine. A client application can then access the target object by instantiating the client object. The target object does not need to be modified or to include specific communications code to be manipulated by a remote object.

Abstract: Remote access to objects such as beans is provided by mapping objects onto an HTML page at the network station at which the objects are located. An HTML generator running on the same virtual machine is used dynamically to map the beans onto the HTML page. Remote access for browsing the modifying the object is then possible using a web browser supporting HTTP or HTML protocols without having to specially modify an object to permit access, for example by the provision of remote access code in the object. An application for remote bean access is in the context of a network agent for a network management system.

Abstract: Remote access to objects such as beans is provided by mapping objects onto an HTML page at the network station at which the objects are located. An HTML generator running on the same virtual machine is used dynamically to map the beans onto the HTML page. Remote access for browsing and modifying the object is then possible using a web browser supporting HTTP or HTML protocols without having to specially modify an object to permit access, for example by the provision of remote access code in the object. An application for remote bean access is in the context of a network agent for a network management system.

Abstract: A generic management framework for a network management system enables management services and management agents to be added in use as required. Management services can be loaded or plugged into the framework dynamically. As a result a management structure can be provided which is scalable and dynamic and can evolve as requirements change. Management information is modelled as management beans. Network management adaptors can also be added as required to the framework to support protocols such as HTTP, SSL, RMI, SNMP. Remote applications can thereby control the management beans remotely through different protocols.

Abstract: A network management system is generated by composing a network management model using a bean-based environment and then compiling the model to implement the computer network management system in the bean-based environment. Beans provide a set of properties, a set of methods for performing actions, and support for events and for introspection. The beans are directly able to model the characteristics of components of a system to be modelled. The beans can also be compiled directly to provide the implementation of the model. As a result, the need for a separate environment for modelling a management system from that used to implement that management system can be avoided.