Techniques for seamlessly launching applications in appropriate virtual machines
AssigneeHysolate Ltd.
InventorsTomer Trabelsi, Oleg Zlotnik, Nir Adler, Tal Zamir
Life of this patent
Estimating the term…
Abstract
A method for performing user experience (UX) functions on an air-gapped endpoint is provided. The method includes monitoring a plurality of virtual machines to detect at least one user request to be executed within a security zone; intercepting the user request and analyzing a level of permission required to complete the user request; determining an appropriate security zone in which to execute the user request, wherein the appropriate security zone has the required level of permission; and executing the user request in the appropriate security zone.
Claims19
A method for seamlessly launching an application in an appropriate already executing virtual machine, comprising:
- monitoring a plurality of already executing virtual machines to detect at least one user request to be executed within a security zone, wherein each security zone is realized as and corresponds to one of the already executing virtual machines;
- intercepting the user request and analyzing a level of permission required to complete the user request;
- determining an appropriate security zone in which to execute the user request, wherein the appropriate security zone has the required level of permission;
- and
- executing the user request in the appropriate security zone, wherein the application is run in the appropriate security zone and if an action initiated in an non-appropriate zone, the action is terminated in the non-appropriate security zone,
- wherein the non-appropriate security zone is where the user request is blocked or terminated.
A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to:
- monitoring a plurality of already executing virtual machines to detect at least one user request to launch an application that is to be executed within a security zone, wherein each security zone is realized as and corresponds to one of the already executing virtual machines;
- intercepting the user request and analyzing a level of permission required to complete the user request;
- determining an appropriate security zone in which to execute the user request, wherein the appropriate security zone has the required level of permission;
- and
- executing the user request in the appropriate security zone, wherein the application is run in the appropriate security zone and if an action initiated in an non-appropriate zone, the action is terminated in the non-appropriate security zone,
- wherein the non-appropriate security zone is where the user request is blocked or terminated.
An air-gapped endpoint, comprising:
- a network card interface;
- a processing circuitry;
- and a memory, the memory containing instructions that, when executed by the processing circuitry, configure the air-gapped endpoint to:
- monitor a plurality of already executing virtual machines to detect at least one user request to launch an application that is to be executed within a security zone, wherein each security zone is realized as and corresponds to one of the already executing virtual machines;
- intercept the user request and analyzing a level of permission required to complete the user request;
- determine an appropriate security zone in which to execute the user request, wherein the appropriate security zone has the required level of permission;
- and
- execute the user request in the appropriate security zone, wherein the application run in the appropriate security zone and if an action initiated in an non-appropriate zone, the action is terminated in the non-appropriate security zone,
- wherein the non-appropriate security zone is where the user request is blocked or terminated.
Dependencies are inferred from the claim text.