a processor;

a memory; and

a network action processing module that processes network actions from one or more network services executing on the computer system, the network action processing module operating in a kernel mode;

wherein the computer system is configured to execute at least network service performing network actions in conjunction with the network action processing module; and

wherein the network action processing module, upon receiving from a network service a received network action having a plurality of disparate aspects:

determines whether the received network action is a valid network action by comparing each of the plurality of disparate aspects to a set of blacklist aspects and a set of whitelist aspects maintained in a network action control list, the blacklist aspects associated with aspects that tend to invalidate a network action, the whitelist aspects associated with aspects that tend to validate a network action, the received network action identified as a valid network action if any of a plurality of combinations of the disparate aspects corresponds to a valid network object;

blocks the received network action if the previous determination yields that the received network action is not a valid network action; and

permits the received network action to complete if the previous determination yields that the received network action is a valid network action.