Patent ID: 7707619
Filing Date: 2010-04-27
Classification: G06F,H04L

Abstract:
1. A method in a computer system for troubleshooting a security policy by selectively excluding a program from the security policy, the method comprising: providing a security policy that includes rules indicating that when security events occur for programs whether to block or allow the security events; providing a relaxed security policy that includes rules indicating that when security events occur for programs whether to block or allow the security events, the relaxed security policy allowing at least one security event that would be blocked by the security policy; providing a problem list of programs to be excluded from the security policy by when a security event for a program occurs, receiving from a user an indication that the troubleshooting indicates that a program in the problem list of programs has a conflict with the security policy; and switching the indicated program from being in the problem list of programs on a temporary basis to a non-temporary basis; and automatically removing the added programs from the problem list of programs when a certain criterion occurs except for any program that has been switched to being in the problem list of programs on a non-temporary basis.