Patent ID: 8646100

Claim:
A computer-implemented method, comprising: determining one or more application-level permissions requested from an application for accessing one or more resources, wherein the one or more resources are a subset of a plurality of resources associated with execution of the application; translating the one or more application-level permissions to one or more user-comprehensible functions based on a first permission mapping table that maps each of the one or more application-level permissions to at least one of the one or more user-comprehensible functions; presenting in a user interface the one or more user-comprehensible functions in a user understandable language or mode of expression, wherein the one or more user-comprehensible functions represent the one or more application-level permissions requested from the application for accessing the one or more resources; receiving an input corresponding to a user interacting with the user interface; determining, based on the received input, that the user has authorized at least one of the user-comprehensible functions presented in the user interface; converting the one or more application-level permissions into one or more operating system (OS)-level permissions based on a second permission mapping table that maps each of the one or more application-level permissions to at least one of the one or more OS-level permissions; generating a security profile having the one or more OS-level permissions, wherein the security profile is generated based on the at least one of the user-comprehensible functions authorized by the user; and enforcing the security profile to restrict the application to accessing the one or more resources based on the one or more OS-level permissions.