Patent ID: 9602524
Date: 2017-03-21
CPC Classifications: G06F,H04L

Claim:
1. An apparatus, comprising: a memory including a shared persistent directory; and a hardware processor communicatively coupled to the memory, the hardware processor configured to execute a virtual machine monitor at least partially stored in the memory, the virtual machine monitor configured to provide hardware level virtualization as a first layer of isolation for an application, the hardware processor configured to execute a virtual environment using the virtual machine monitor, the virtual environment configured to operate under control of an operating system operating within a virtual machine defined by the virtual machine monitor, the virtual environment configured to provide operating system level virtualization as a second layer of isolation for the application, the second layer of isolation operating within the first layer of isolation, the hardware processor configured to execute the application within the virtual environment, the shared persistent directory configured to operate within the first layer of isolation, access to data associated with a host operating system by the virtual environment being restricted to the shared persistent directory, the hardware processor configured to monitor behavior of the application within the virtual environment, the hardware processor configured to discard the virtual environment in response to detecting unauthorized activity of the application.