Abstract: A plurality of devices in a system are identified, each device having an operational context. One of a plurality of agents are identified for each of the plurality of devices, which correspond to the device. Data is received from the plurality of agents that describes security attributes of the plurality of devices. Policy data is sent to each of the plurality of agents to cause a set of security policies to be applied to the plurality of devices through the security management instances. Each of the plurality of agents can be provided in a respective security management instance separate from the operational context.

Abstract: A virtualization environment is provided to include a security management instance and an application instance. The application instance is separated from the security management instance and includes a first operating system and a particular software application. The security management instance includes a second operating system and one or more security tools to provide security for the particular application. Data for the application instance is received at the security management instance, the data is processed using at least one of the security tools, and the processed data is securely passed from the security management instance to the application instance.

Abstract: A connection is established between a network gateway and a particular device. An identity is generated for the particular device and a secure communication tunnel is established with another device at the network gateway using the identity. The secure communication tunnel can be established by the network gateway on behalf of the other device and is for use by the particular device to communicate with the other device. Data to be received from the other device over the secure communication tunnel can be sent on the connection to the particular device.

Abstract: A system and method is disclosed for identifying and matching potential parties to a transaction involving an imbalance in a demand/supply situation. Users enter transaction data in a plurality of remote terminals of the system. The remote terminals include a first subset forming a part of at least one first (private) exchange and a second subset forming a part of a second (public) exchange. The aggregate transaction data of the first exchange define a first aggregate demand/supply imbalance of the first exchange, whereas the transaction data of the second subset define a second individual demand/supply imbalance of the individual users of the second subset. A communication network, which includes a server, links the first exchanges and the second subset of remote terminals with the server.