Kernel-based protection of computer processes
AssigneeIsland Technology Inc.
InventorsYoav OROT, Gal KAPLAN, Roi LEIBOVICH, Dan AMIGA
Life of this patent
Estimating the term…
Abstract
Computer security apparatus including a kernel driver configured to be executed by a computer in a kernel mode and to thereupon perform protecting a process of a first computer software application executed by the computer, where the protecting is performed in accordance with a protection policy, receiving an instruction from the process to modify the protection policy, modifying the protection policy in accordance with the instruction, and protecting the process in accordance with the protection policy after it has been modified in accordance with the instruction.
Claims16
A computer security method comprising:
- protecting a process of a first computer software application executed by a computer, where the protecting is performed in accordance with a protection policy;
- receiving an instruction from the process to modify the protection policy;
- modifying the protection policy in accordance with the instruction;
- and
- protecting the process in accordance with the protection policy after it has been modified in accordance with the instruction,
- wherein the protecting, receiving, and modifying are performed by a kernel driver executed by the computer.
Computer security apparatus comprising:
- a kernel driver configured to be executed by a computer in a kernel mode and thereupon to perform
- protecting a process of a first computer software application executed by the computer, where the protecting is performed in accordance with a protection policy,
- receiving an instruction from the process to modify the protection policy,
- modifying the protection policy in accordance with the instruction, and
- protecting the process in accordance with the protection policy after it has been modified in accordance with the instruction.
Dependencies are inferred from the claim text.