Patent ID: 9405923
Filing Date: 2016-08-02
CPC Classification: G06F

Claim Text:
1. A method comprising: receiving a request to instantiate a first process of a first set of processes via a server virtualization platform hosting a plurality of virtual servers supported by a common support server, wherein each of the plurality of virtual servers executes a respective set of processes; generating a plurality of security categories; assigning the plurality of security categories to the first process; assigning the plurality of security categories to an object in a set of labeled objects stored on the common support server; and enforcing, by a hardware processor, a security policy to prevent access to data associated with the object stored on the common support server by a second process supported by the common support server, wherein enforcing the security policy comprises comparing the plurality of security categories assigned to the object to a security category assigned to the second process to exclude access when the security category assigned to the second process does not match at least one of the plurality of security categories assigned to the object.