Microsoft Technology Licensing, LLC

Vikram Mangalore Rao

Hari R Pulapaka

Benjamin M Schultz

Frederick Justus Smith

Lars Reuther

Gerardo Diaz Cuellar

Poornananda R Gaddehosur

Ivan Dimitrov Pashov

Giridhar Viswanathan

Charles Glenn Jeffries

Michael Bishop Ebersol

Navin Narayan Pai

Charles G Jeffries

A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.

Hardware-based virtualized security isolation

Growing community of inventors

Redmond, WA, United States of America

Vikram Mangalore Rao