Patent ID: 8341404

Claim:
A method for securing data, implemented in a computer system, the computer system including a tangible, non-transitory storage section, a user input device, an output device, and a processor, the method comprising: receiving, at the computer system, one or more parameters defining a security policy; dynamically generating, by executing with the processor of the computer system instructions stored in the storage section, one or more intelligent security rules based on the security policy, each rule including at least one qualifier and at least one attribute; maintaining the one or more intelligent security rules, by executing with the processor of the computer system instructions stored in the storage section, for use by an intelligent security filter operable to leverage the one or more intelligent security rules; determining whether applying the one or more intelligent security rules would cause a system misconfiguration; and responsive to the determining step, altering the one or more intelligent security rules to avoid the system misconfiguration.