Patent ID: 8336107
Filing Date: 2012-12-18
Classification: G06F

Abstract:
1. A method for securing sensitive material, comprising: operating, by a computer system, a modified kernel of an operating system for screening one or more modified primitive system functions of the modified kernel of the operating system, wherein the one or more modified primitive system functions include identification value (ID); intercepting, by the computer system, at the modified kernel of the operating system, the one or more modified primitive system functions, each called by a process having an associated process identification value (ID); determining by the one or more modified primitive system functions, executed by the computer system, whether the one or more intercepted primitive system functions are directed to sensitive material residing on the computer system; in response to a determination that the intercepted primitive system functions are directed to said sensitive material, comparing the intercepted primitive system functions IDs with a list of allowed process IDs; allowing or denying, by the one or more modified primitive system functions, executed by the computer system, operation of the intercepted one or more modified primitive system functions during runtime to prevent unauthorized access by a root-level user of the computer system to said sensitive material residing on the computer system based on a list of allowed process IDs, and responsive to a determination that the intercepted primitive system function is directed to said sensitive material; and monitoring, by a remote monitoring unit, operation of said sensitive materials residing on the computer system, wherein root level access to said computer system does not provide root level access to said remote monitoring unit.