Apparatus for and Method of Preventing Unsecured Data Access

摘要

Shown and depicted is preventing sensitive information from being exfiltrated from an organization using hypervisors. A Data Loss Prevention system is composed using virtual machines or domains to segment memory between domains which are assumed to be untrusted and domains which are known to be trusted. Sensitive information is cypher text when observed by software in Untrusted Domains, and clear text when observed by software in Trusted Domains. Sensitive information is unencrypted when it is in the address space of a protected process running inside a trusted domain.

主权项

1. Computer comprising a processor configured to:
execute a trusted domain and a process in the trusted domain that is executed in response to a request that is without an authentication protocol; prevent output of unsecured content from the trusted domain other than as necessary for user sensory stimulation; and one or both of: secure content from the trusted domain so as to be unsecurable only within a controlled environment; and unsecure content from data that is unsecurable only within a controlled environment.