Patent ID: 9104861
Filing Date: 2015-08-11
Classification: G06F,H04L

Abstract:
1. A computer implemented method for operating a computer system, the method comprising: generating a virtualization environment for the computer system; generating a user environment within the virtualization environment, the user environment comprising a user operating system that executes in a first virtual machine of the computer system, the user operating system executing a plurality of applications within the user environment; generating a security environment within the virtualization environment, the security environment segregated from the user environment to reduce an accessibility of the security environment to security threats targeting the user environment and security threats operating in the user environment; executing, by the computer system, a virtual security appliance within the security environment, the virtual security appliance executed in a second virtual machine of the computer system and performing security functions for the user environment; identifying, by the virtual security appliance, a security threat in network traffic directed to one of the plurality of user applications operating in the user environment; and preventing the security threat from being received by the one of the plurality of user applications.