Patent ID: 7870613
Filing Date: 2011-01-11
Classification: G06F

Abstract:
1. A computer-implemented method for automating creation of a script for use with a managed computer system, the method comprising: storing a set of descriptions of unauthorized software applications in a database accessible to one or more computer systems, a description of an unauthorized software application including one or more items that uniquely identify the unauthorized software application or that describe a behavior of the unauthorized software application when it executes; retrieving, with one or more processors associated with the one or more computer systems, at least one description of an unauthorized software application from the database in response to querying the database for at least one of a location, a signature, and a certificate; creating, with the one or more processors associated with the one or more computer systems, an introductory section in a script that causes security components of managed computer systems to apply software restrictions to software applications, the introductory section in the script specifying that the script is formatted to be directly usable by registry utilities natively provided by the operating system of the managed computer systems to configure the security components; generating, with the one or more processors associated with the one or more computer systems, a set of rules that block execution of the unauthorized software application on the managed computer system when characteristics of the unauthorized software application match items from the at least one description of the unauthorized software application incorporated into one or more rules in the set of rules; determining whether to create, with the one or more processors associated with the one or more computer systems, a first type of entry in the script based on the set of rules, the first type of entry corresponding to a security component setting on the managed computer system, adapted to control execution privileges of unauthorized software applications on the managed computer system when characteristics of the unauthorized software applications match one or more path rules in the set of rules; determining whether to create, with the one or more processors associated with the one or more computer systems, a second type of entry in the script based on the set of rules, the second type of entry corresponding to a security component setting on the managed computer system adapted to control execution privileges of unauthorized software applications on the managed computer system when characteristics of the unauthorized software applications match one or more signature rules in the set of rules; determining whether to create, with the one or more processors associated with the one or more computer systems, a third type of entry in the script based on the set of rules, the third type of entry corresponding to a security component setting on the managed computer system adapted to control execution privileges of unauthorized software applications on the managed computer system when characteristics of the unauthorized software applications match one or more certificate rules in the set of rules; and storing the script in a storage device associated with the one or more computer systems, wherein the stored script includes at least one of the first, second, and third type of entry.