Abstract: In some embodiments, a hybrid approach is provided for discovering devices on a network, assessing if the devices are vulnerable to security threats and malicious attacks, remediating the devices that are vulnerable, detecting security threats and malicious attacks on the network, and responding to such threats and attacks. In some implementations, a hybrid site manager for the network passively scans the network, obtains information about a network device, and actively transmits a probe to the network device based on the obtained information. In some embodiments, the hybrid site manager actively sends a probe over the network to a network device, receives a response to the probe, and modifies how it passively scans the network based on the response to the probe.

Abstract: A virtual machine monitor can be enhanced to provide entropy resource management in a virtualized environment. The VM monitor can obtain entropy from an entropy source to fill an entropy bank. The VM monitor can also distribute entropy symbols from the entropy bank to VM guests in a manner that ensures VM isolation. That is, when a first VM guest requests one or more entropy symbols, the VM monitor reads the requested number of entropy symbols from the entropy bank and deletes the read entropy symbols from the entropy bank so that upon a subsequent request by the first VM guest or a request from a second VM guest fresh entropy symbols will be read from entropy bank.