Patent ID: 9098698
Filing Date: 2015-08-04
Classification: G06F,H04L

Abstract:
1. An apparatus, comprising: a memory including a shared persistent directory; and a hardware processor configured to execute a virtualization module at least partially stored in the memory, the hardware processor configured to execute the virtualization module under control of a host operating system, the virtualization module configured to provide a first layer of network application isolation, the hardware processor configured to execute one or more virtual environments, each virtual environment from the one or more virtual environments configured to operate in a protected memory space, the one or more virtual environments configured to operate under control of a guest operating system operating within the virtualization module, each virtual environment from the one or more virtual environments configured to provide a second layer of network application isolation operating within the first layer of network application isolation, each virtual environment from the one or more virtual environments is associated with at least one network application, the virtualization module configured to provide isolation between the host operating system and the second layer of network application isolation, the shared persistent directory configured to operate within the first layer of network application isolation, each virtual environment from the one or more virtual environments configured to store information associated with the at least one network application associated with that virtual environment from the one or more virtual environments in the shared persistent directory, access to data associated with the host operating system by each virtual environment from the one or more virtual environments is restricted to the shared persistent directory.