Patent ID: 7844744

Claim:
In a computer server, a method comprising: in response to a hypervisor receiving input/output (I/O) data traffic: sending said I/O data traffic to a security sensor application shared by a plurality of operating system (OS) partitions within said computer server, wherein said security sensor application is not included within the plurality of OS partitions, wherein the I/O data traffic is addressed to one of: an external destination via routing by said computer server and one of said plurality of OS partitions within said computer server; determining if said computer server is configured as a router; in response to a determination that said I/O data traffic meets pre-defined security standards and said I/O data traffic is addressed to one of said plurality of OS partitions, sending said I/O data traffic to said one of said plurality of OS partitions; in response to a determination that said I/O data traffic meets said pre-defined security standards and said computer server is configured as a router and said I/O data traffic is not addressed to one of said plurality of OS partitions, dynamically routing said I/O data traffic to the external destination in a network coupled to said computer server; and in response to a determination that said computer server is not configured as a router and said I/O data traffic is not addressed to one of said plurality of OS partitions: identifying the I/O data traffic as malicious, logging a routing error on the I/O data traffic, and purging the I/O data traffic.