Patent ID: 7904956

Claim:
A computer-readable storage medium whose contents cause a computer to: activate a first policy applicable to a process executing within a computer, wherein the process is an instance of an application program executing on the computer; monitor the computer to detect an anomalous state in the computer by analyzing network traffic flowing into the computer to detect abnormal packet patterns; responsive to detecting the anomalous state in the computer, activate a second policy applicable to the process executing within the computer, wherein the second policy is more restrictive than the first policy; receive a request to access a resource of the computer from the process executing within the computer; and responsive to receiving the request, determine whether to grant access to the resource based on whether the first policy or the second policy is activated, wherein the process executing within the computer is granted access to the resource when the first policy is activated; and the process executing within the computer is denied access to the resource when the second policy is activated, wherein the computer readable storage medium is not a signal.