System and method for implementing network security using a sequestered partition

A system comprising:

• a sequestered partition on a computing system, the sequestered partition including a region of memory and a logical or physical processing element;
• a driver to forward incoming and/or outgoing data traffic through the sequestered portion, the incoming data traffic being received by the driver from a network and the outgoing data traffic being transmitted from the driver over the network;
• security processing logic within the sequestered partition to perform one or more security operations on the data traffic.

A machine-readable medium having program code stored thereon which, when executed by a machine, causes the machine to perform the operations of:

• sequestering a partition on the computing system, the partition including a region of memory and a logical or physical processing element;
• forwarding incoming and/or outgoing data traffic through the sequestered portion, the incoming data traffic being received by the computing system from a network and the outgoing data traffic being transmitted from the computing system over the network;
• performing one or more security operations on the data traffic within the sequestered partition.