Patent ID: 7836494
Filing Date: 2010-11-16
Classification: G06F,H04L

Abstract:
1. A method for regulating communications to or from a first application executing on a host machine, including: executing a trusted agent on the same host as the first application, wherein the trusted agent is trusted to enforce a security policy, and wherein the first application is not trusted to enforce the security policy; monitoring by the trusted agent of attempted communications to or from the first application; determining by the trusted agent the identity of a second application to or from which the first application is attempting to communicate; determining by the trusted agent if the second application is listed on a permitted or forbidden list of applications; sending from the trusted agent to a firewall the results of the determination as to whether the second application is on a permitted or forbidden list of applications; and determining at the firewall whether the attempted communication should be passed or blocked based upon the information received from the trusted agent.