Patent ID: 7490353

Claim:
Apparatus for protecting against computer malicious software (malware), comprising: a data inputter for intercepting all data that flows to at least one target, wherein said data comprises at least one data unit; a trust level assigner, associated with said data inputter, for assigning to each of said data units a respective trust level based on at least one from a set, the set comprising: the content of each data unit, metadata associated with each data unit, analysis results from scanning the data unit content of metadata, and analysis results from examining the data unit content of metadata; an isolated-processing environment, operable to process said data units in an isolated manner and configured to send copies of the processed data units out of said isolated-processing environment to said target; and a processing environment selector, associated with said trust level assigner and said isolated-processing environment, operable to determine if a data unit is to be executed on said isolated-processing environment, in accordance with said respective trust level.