Patent ID: 7996721
Filing Date: 2011-08-09
Classification: G06F

Abstract:
1. A method comprising: monitoring, with a process monitor, one or more processes on an operating system, wherein monitoring one or more processes comprises maintaining an expected processes list and an unexpected processes list; sending, with the process monitor, a first message to a management server in a hardware communication format when a process from the expected process list is not running on the operating system, wherein the message is authenticated by a Trusted Platform Module (TPM); launching the process from the expected process list in response to detection that the process from the expected process list is not running on the operating system; sending, with the process monitor, a second message to the management server in the hardware communication format when a process from the unexpected process list is running on the operating system, wherein the message is authenticated by the TPM; terminating the process from the unexpected process list in response to detection that the process from the unexpected process list is running on the operating system; and receiving a response in the hardware communication format from the management server to indicating an action to be taken with respect to the unexpected event.