Patent ID: 8402553
Filing Date: 2013-03-19
Classification: G06F

Abstract:
1. A method of updating an operating system being subject to a strong system lockdown that does not allow changes to a list of approved executables and does not allow changes to a base system's configuration hosting said operating system, the method comprising: identifying at least one trusted updater process of the operating system; tracking each instance of the trusted updater process and each child-process spawned by the trusted updater process; identifying at least one spawned child-process as a trusted updater process based on said tracking; and if a trusted updater process attempts to make a change to a list of approved executables of the operating system or to the base system's configuration hosting said operating system, allowing said trusted updater process to make said change; and if a non-trusted updater process attempts to make changes to a list of approved executables of the operating system or to the base system's configuration hosting said operating system, denying the non-trusted updater process to make said change.