Patent ID: 8763147

Claim:
A computer-implemented method for data security in a multi-nodal computer system, the method comprising the steps of: starting a plurality of execution units on a plurality of compute nodes while insuring each new execution unit that is started does not violate security relationships in security relationship records, wherein starting the plurality of execution units comprises the steps of: getting a list of historical running and currently running execution units; for each execution unit on the historical list, checking a time relationship and a data relationship in the security relationship records to determine whether there is a security violation; wherein there is no security violation as determined, running the new execution unit; wherein there is a security violation as determined, select an action from the following: move, delay or kill the new execution unit; monitoring execution unit data that flows in and out of the execution units to detect security violations based on data relationships in the security relationship records; monitoring the execution unit's use of services to detect security violations based on service relationships in the security relationship records; wherein the method steps are implemented in a computer software program stored in computer memory and executed by a computer processor: and wherein the plurality of compute nodes is a portion of a multi-nodal computer system chosen from the following: a combination of nodes, trunks, logical and physical machine breakdowns of nodes, locational breakdowns of nodes and IP breakdowns of nodes.