Patent ID: 9588803
Date: 2017-03-07
CPC Classifications: G06F,G06Q

Claim:
1. A method comprising: sending a request to execute an application comprising native code from a computing device; responsive at least in part to the sending of the request, receiving the native code of the application at the computing device; assigning, by a monitor process, a portion of memory of the computing device to the application comprising the native code, the portion of the memory being enforced by hardware of the computing device; making an operating system (OS)-specific kernel call that revokes an ability of the application to communicate kernel calls to an OS by causing an OS kernel to transfer control of intercepting kernel calls to the monitor process; executing the native code of the application within the portion of the memory being enforced by the hardware; within the portion of the memory being enforced by the hardware, translating OS-independent calls from the executing application to OS-specific calls based on a table of function pointers and calling conventions for corresponding functions; and monitoring, by the monitor process, calls made by the application for system services outside of the portion of the memory being enforced by the hardware to determine whether the respective calls are permissible.