Protecting and monitoring internal bus transactions

An apparatus comprising:

• a first component;
• a second component;
• and
• a monitoring component coupled to the first component and the second component, and configured to:
• receive from the first component a command to issue one or more transactions or data to the second component;
• determine whether the one or more transactions or data are authorized according to one or more policies or rules, wherein the one or more policies or rules are received using an out-of-band mechanism to which the first component does not have access;
• and
• if it is determined that the one or more transactions or data are authorized, forward the one or more transactions or data to the second component, and otherwise, block the one or more transactions or data.

A non-transitory computer readable storage media storing executable instructions that are operable in a computing device, to perform operations to:

• receive from a first component a command to issue one or more transactions or data to a second component;
• determine whether the one or more transactions or data is authorized according to one or more policies or rules, wherein the one or more policies or rules are received using an out-of-band mechanism to which the first component does not have access;
• and
• if it is determined that the one or more transactions or data are authorized, forward the one or more transactions or data to the second component, and otherwise, block the one or more transactions.