Patent ID: 7861297
Filing Date: 2010-12-28
Classification: G06F

Abstract:
1. A computer-implemented method for reducing security threats from untrusted code, comprising: providing a first component list that includes a listing for a directory containing all available components of an operating system and a second component list, the second component list being a subset of the first component list wherein the second component list contains a set of components required for an application to complete a task; receiving from the application a request for a global component, wherein the component is a member of the first component list but not a member of the second component list; generating a dummy file, wherein the dummy file is an empty file named after an executable portion of the requested global component; utilizing the dummy file to instruct the operating system to defer to components found in a local directory in response to the application request; generating a plurality of counterfeit components for every component found only in the second component list based on a comparison of the request for the global component and the second component list wherein the plurality of counterfeit components includes a local counterfeit version of the global component for the requested component wherein the counterfeit version redirects the application request for the global component to a the local directory and disables at least one item of functionality of the requested global component and wherein the local counterfeit version of the global component allows access of the application to components on the second component list but prevents the application from making unauthorized changes to other components of an operating system; and executing, utilizing one or more computing device, the generated local counterfeit version to provide the application a local counterfeit version of the global component.