Patent ID: 8788845
Filing Date: 2014-07-22
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for securing a computer, comprising: determining a user group associated with a user of the computer; considering code evidence indicating a trustworthiness of code on which a process executed on the computer by the user is based; computing an initial permissions set for the process responsive to the code evidence, the user group, and a security policy; applying the initial permissions set to the process; receiving a request from the process having the initial permissions set to access data; considering data evidence indicating a trustworthiness of the requested data; computing an effective permissions set for the process responsive to the code evidence, the user group, the data evidence and the security policy, wherein the effective permissions set is a subset of the initial permissions set; applying the effective permissions set to the process for the data access; and restoring the initial permissions set to the process responsive to completion of the data access.