Method and apparatus for protecting data using a virtual environment

A data protection apparatus comprising:

• a process monitoring unit configured to monitor a process which is generated by based on an application program in a computer;
• a virtualization driving unit configured to construct a virtual environment having therein resources that support execution of the application program, and, when the process corresponds with a preset condition, driving drive the process within the virtual environment;
• and
• a data processing unit configured to process data within the virtual environment in response to a data input request or an output request, which is generated by the process,
• wherein said driving the process includes:
• monitoring generation of the process;
• determining whether the process is allowed to access the virtual environment based on a result obtained by comparing the monitored process and the preset condition;
• and
• when the process is determined to be allowed to access the virtual environment, driving the process within the virtual environment, and when the process is determined not to be allowed to access the virtual environment, driving the process outside the virtual environment.