APPLICATION-AWARE SIGNATURE-BASED INTRUSION DETECTION FOR VIRTUALIZED DATA CENTERS

摘要

A method includes discovering identities of one or more applications that run on one or more Virtual Machines (VMs) at a given time. A set of signatures, which characterize hostile traffic that is expected to threaten the discovered applications, is selected. Network traffic exchanged with the one or more VMs for is searched for the hostile traffic using the selected set of signatures.