Vikram M Rao

US Patent:

20170353496, Dec 7, 2017

Filed:

Jun 2, 2016

Appl. No.:

15/171917

Inventors:

- Redmond WA, US
Charles G. Jeffries - Sammamish WA, US
Giridhar Viswanathan - Redmond WA, US
Benjamin M. Schultz - Bellevue WA, US
Frederick J. Smith - Remond WA, US
Lars Reuther - Kirkland WA, US
Michael B. Ebersol - Woodinville WA, US
Gerardo Diaz Cuellar - Kirkland WA, US
Ivan Dimitrov Pashov - Woodinville WA, US
Poornananda R. Gaddehosur - Redmond WA, US
Hari R. Pulapaka - Redmond WA, US
Vikram Mangalore Rao - Redmond WA, US

Assignee:

Microsoft Technology Licensing, LLC - Redmond WA

International Classification:

H04L 29/06
H04L 12/46
H04L 29/08

Abstract:

A host operating system running on a computing device monitors network communications for the computing device to identify network resources that are requested by the computing device. The host operating system compares requested network resources against security policies to determine if the requested network resources are trusted. When an untrusted network resource is identified, the host operating system accesses the untrusted network resource within a container that is isolated from the host operating system kernel using techniques discussed herein. By restricting access to untrusted network resources to isolated containers, the host operating system is protected from even kernel-level attacks or infections that may result from an untrusted network resource.