Patent ID: 8347380

Claim:
A computer-implemented method comprising: monitoring, by a security agent of a privileged operating system (OS) running on a privileged virtual machine (VM) hosted by a computing device, data inputted by a user to a guest VM of a plurality of guest VMs having a plurality of guest OSes, the data inputted by the user with an I/O device that is associated with a guest OS of the plurality of guest OSes and that the privileged OS has control over, wherein the privileged OS executes at a privilege level higher than that of the plurality of guest OSes; determining, by the security agent of the privileged OS, whether the data inputted using the I/O device corresponds to at least one personal information item of the user stored with the privileged OS, the determining comprising comparing a sequence of elements of the data inputted against a subset of the personal information item; when the sequence of the elements of the data inputted matches the subset of the personal information item: sending, by the security agent of the privileged OS, an alert to inform the user of the guest VM of disclosure of the personal information item; and at least one of blocking or delaying, by the security agent of the privileged OS, a transfer of the data inputted to the guest OS if the data inputted corresponds to the personal information; and when the sequence of the elements of the data inputted does not match the subset of the personal information item, repeating the determining on a subsequent sequence of the elements of the data inputted.