Separated application security management
OwnerSven Schrecker, Aric Shipley +1inventors
InventorsSven Schrecker, Aric Shipley, Arlen Baker
Life of this patent
Estimating the term…
Abstract
A virtualization environment is provided to include a security management instance and an application instance. The application instance is separated from the security management instance and includes a first operating system and a particular software application. The security management instance includes a second operating system and one or more security tools to provide security for the particular application. Data for the application instance is received at the security management instance, the data is processed using at least one of the security tools, and the processed data is securely passed from the security management instance to the application instance.
Claims20
At least one machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:
- provide a virtualization environment to comprise a security management instance and an application instance, wherein the application instance is separated from the security management instance, the application instance is to comprise a first operating system and a particular software application, and the security management instance is to comprise a second operating system and one or more security tools to provide security for the particular application;
- receive data for the application instance at the security management instance;
- process the data using at least one of the security tools;
- and
- securely pass the processed data from the security management instance to the application instance.
A method comprising:
- loading a virtualization environment comprising a security management instance and an application instance, wherein the application instance is separated from the security management instance, the application instance is to comprise a first operating system and a particular software application, and the security management instance is to comprise a second operating system and one or more security tools to provide security for the particular application;
- receiving data for the application instance at the security management instance;
- processing the data using at least one of the security tools;
- and
- securely passing the processed data from the security management instance to the application instance.
A system comprising:
- a processor comprising one or more hardware security functions;
- a hypervisor to provide a virtualization environment comprising:
- an application instance comprising:
- a first operating system;
- a particular application;
- a security management instance comprising:
- one or more security tools to provide security for the particular application, wherein the security is invisible to the application instance;
- and
- a communication manager to provide a secure communication channel between the application instance and the security management instance.
Dependencies are inferred from the claim text.