Patent ID: 8955142
Filing Date: 2015-02-10
Classification: G06F,H04W

Abstract:
1. A method of securing an unsecured app for execution on a device having an operating system, the method comprising: executing the unsecured app on the device; determining whether there is an app security policy on the device for the unsecured app; disassembling app object code of the unsecured app, thereby obtaining executable object code which includes class files; generating class files for an app security program based on the app security policy; replacing the class files of the unsecured app with the generated class files of the app security program, wherein operating system class files of the unsecured app are wrapped with the generated class files of the app security program such that the unsecured app becomes a secure app and thereby provides a bridge between the secure app and the device operating system; performing a security check on a call made by the secure app to the operating system, said security check made in an app enforcement layer operating above a hypervisor in the device; and based on said security check and said app security policy, performing one of (a) allowing the call to pass to the operating system; (b) enhancing the call; (c) blocking the call; and (d) terminating the secure app.