Patent ID: 7620995

Claim:
A method of identifying application dependency upon a security context comprising: monitoring, by a computing device, privilege checks generated by an application running with a first set of privileges; monitoring, by the computing device, results of privilege checks submitted with the first set of privileges; re-submitting, by the computing device, a given privilege check with a second set of privileges if the given privilege check succeeds with the first set of privileges, wherein the second set of privileges is a subset of the first set of privileges; monitoring, by the computing device, the results of the given privilege check re-submitted with the second set of privileges; logging a state of execution of the application if the re-submitted privilege check fails; running the given application with the second set of privileges; intercepting a particular privilege check corresponding to the logged state of execution; modifying the particular privilege check to include the first set of privileges; and monitoring execution of the given application.