the present invention relates to a system and architecture for securing otherwise unsecured computer subsystems . according to one aspect , the invention provides an independent hardware platform for running software in a secure manner . according to another aspect , the invention provides the means to control and secure all disk , network and other i / o transactions . according to still further aspects , the invention provides a means to monitor and prevent unauthorized user and malicious software activity additional aspects include providing a secure platform for device and user authentication as well as encryption key management , providing a means to perform background backup snapshots , and providing the means for enabling full management over computer operations .