Patent ID: 7661123
Filing Date: 2010-02-09
Classification: G06F

Abstract:
1. A method, implemented in a computing device, the method comprising: accessing a new security policy to be implemented by a plurality of security engines of the computing device and to be implemented by the plurality of security engines in place of a current security policy, the plurality of security engines including security engines of at least a first type of security engine and a second type of security engine, the new security policy including a first set of rules specific to the first type of security engine and a second set of rules specific to the second type of security engine; identifying, by a rule set generator of the computing device, which set of rules is used by which type of security engine; processing, via each of the plurality of security engines, the identified set of rules specific to its type to establish new rules for operation of the security engine while the security engine continues to operate according to previous rules; returning, via each of the plurality of security engines, a fail value when it determines that it has not successfully processed the identified set of rules; returning, via each of the plurality of security engines, a pass value when it determines that it has successfully processed the identified set of rules; receiving an indication to ignore the new set of rules and continue operating each of the plurality of security engines according to the previous rules when at least one of the plurality of security engines has returned a fail value; and switching, after receiving a pass value from each of the plurality of security engines, each of the plurality of security engines to the new rules substantially concurrently.