Patent ID: 8127412

Claim:
A computer system, comprising: one or more computing devices having one or more processors and one or more memory storing computer-executable instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of: establishing a plurality of controlled execution spaces, each controlled execution space configured to host an operating system and an application program of an application-operating system pair; creating and storing one or more vulnerability profiles, wherein each of the vulnerability profiles comprises an application program identifier, an operating system identifier, a vulnerability specification describing a vulnerability of the application program that the application program identifier indicates when executed with the operating system that the operating system identifier indicates, and a remedial action which when executed will remediate the vulnerability; monitoring, by a vulnerability monitoring agent, execution of the application program and monitoring execution of the operating system as the application-operating system pair, comprising the operating system and the application program, is executing in a controlled execution space; detecting an anomaly of corruption of the executions of the application program and the operating system; determining an appropriate action for the operating system and the application program based on one of the vulnerability profiles and the detected anomaly of corruption; in response to detecting that the application program executed under the operating system is corrupted, removing the application program and the operating system from the controlled execution space; requesting re-imaging the controlled execution space with new copies of the application program and the operating system from a repository storing copies of applications and operating systems.