Patent ID: 7657927

Claim:
A system comprising: a plurality of host computers storing program instructions executable to implement: a control manager; a plurality of agents, wherein each host computer has installed thereon a respective agent of the plurality of agents, and wherein each respective agent includes a behavior control engine configured to group one or more processes of one or more applications executing on the corresponding host computer into one or more process sets according to a corresponding process binding module that includes rules that map a given process to one of the process sets, and further configured to restrict execution of the processes of each process set according to a corresponding behavior control description module; and a management infrastructure configured to manage a central storage of the corresponding behavior control description module of each of the plurality of agents, wherein the management infrastructure includes an interface configured to facilitate loading of the corresponding process binding module and the corresponding behavior control description module into the behavior control engine of each agent and an interface configured to facilitate modifications to the corresponding process binding module and the corresponding behavior control description module of each of the plurality of agents modules by the control manager.