Patent ID: 9147069
Filing Date: 2015-09-29
Classification: G06F,H04L

Abstract:
1. A method for protecting resources from unauthorized access, comprising: providing, via a hardware processor, a library of handler functions, where the handler functions control an access of one or more applications to protected resources via a computer device; associating a security policy with each of the library of handler functions, where the security policy specifies a first set of access rules for accessing the protected resources on a network by the one or more applications via the computer device and a second set of access rules for accessing the protected resources on the computer device; modifying the one or more applications to access the library of handler functions instead of corresponding application program interface (API) functions of the computer device by replacing one or more classes or methods of the one or more applications that perform function calls to the protected resources with one or more function calls to corresponding handler functions contained in the library; receiving by a handler function an API function call from a modified application; determining whether the received API function call complies with the first and second sets of access rules; and when the API function call complies with the first and second sets of access rules, performing by the handler function the API function call from the modified application to the protected resources; and when the API function call violates the first and second sets of access rules, blocking the API function call.