Patent ID: 8973136
Filing Date: 2015-03-03
Classification: G06F

Abstract:
1. A segregation method for a computer operating system installed on a computer comprising the steps of: providing a virtual and protected environment partitioned from the computer operating system; running user-selected applications within the virtual and protected environment; intercepting kernel resources related to the user-selected applications running within the virtual and protected environment; permitting certain kernel resources based on user credentials and malware attack prevention; blocking other kernel resources based on user credentials and malware attack prevention; applying file system rules to deny, allow, read-only, read-write access to file system kernel resources in a context of the user-selected applications; applying registry rules to deny, allow, read-only, read-write access to registry kernel resources in a context of the user-selected applications; and applying process rules to deny, allow or notify for process kernel resource in a context of the user-selected applications.