Patent ID: 7647629

Claim:
In a host of a virtual machine environment having one or more methods in a shared managed library, a process for managing calls from a first managed code caller to a first method, the process managing calls based on a hosting rule selected from the following hosting rules each stored in a data structure: authorizing, by a computing device, calls from one of a plurality of managed code callers to the first method; preventing, by the computing device, calls from one of a plurality of managed code callers to the first method due to the first method's inappropriateness for the virtual machine environment, the first method's inappropriateness being indicated by a query that determines whether a host protection custom attribute (HPCA) is associated with the first method, the query determining from the HPCA that the calls from one of the plurality of managed code callers are to be prevented when the HPCA is associated with the first method; and conditionally authorizing, by the computing device, calls from one of a plurality of managed code callers to the first method based on the first method's required level of trust, a level of trust attributed to the first managed code caller, and a rule demand that contains data quantifying a degree of the level of trust, the level of trust attributed to the first managed code caller corresponding to an identity of a provider of the first managed code caller.