Apparatus For And Method Of Preventing Unsecured Data Access

摘要

Shown and depicted is preventing sensitive information from being exfiltrated from an organization using hypervisors. A Data Loss Prevention system is composed using virtual machines or domains to segment memory between domains which are assumed to be untrusted and domains which are known to be trusted. Sensitive information is cypher text when observed by software in Untrusted Domains, and clear text when observed by software in Trusted Domains. Sensitive information is unencrypted when it is in the address space of a protected process running inside a trusted domain.

主权项

1. Computer comprising a processor configured to: execute a domain, a trusted domain and a process in the trusted domain that is executed in response to a request; and
secure content written from the trusted domain; wherein the request is without an authentication protocol.