Patent ID: 8631468

Claim:
A computing system to make state-aware security decisions, comprising: an active state-aware reference monitor including: a state-based access policy manager component operable to: receive input that effectively defines one or more state-based access conditions and/or rules for allowing and/or disallowing access to one or more accessible components; generate based on said input one or more state-based access conditions and/or rules that include one or more state variables associated with said computing environment; and a state monitor operable to monitor said one or more state variables; the active state-aware reference monitor operable to perform state-based security access policies to control access to said one or more accessible components of a computing environment by: determining whether one or more state-based disallow-access conditions for disallowing access to said one or more accessible components are met after access to said one or more accessible components has been allowed to effectively grant permission to access said one or more accessible components; and determining to disallow access to said one or more accessible components when said determining determines that said one or more state-based disallow-access conditions have been met, thereby allowing said permission to access said one or more accessible components to be effectively withdrawn if said one or more disallow-access condition are met.