Patent ID: 7437718

Claim:
A method comprising: receiving into an execution environment input component code and a runtime security policy, wherein the runtime security policy comprises an assignment of rights to the input component code and security checks performed as the input component code is loaded; and generating a call graph of call paths through the input component code simulated in combination with at least one symbolic component representing additional arbitrary code that complies with the runtime security policy, wherein the generating operation comprises: generating a class hierarchy that contains classes of the input component code and symbolic classes that represent classes of the arbitrary code; generating at least one constraint associated with a virtual call in the input component code; evaluating the at least one constraint by a symbolic computation on potential target classes for the virtual call in the generated class hierarchy; generating at least one constraint associated with either a security demand or a security assert in the input component code; evaluating the at least one constraint by a symbolic computation on dynamic permissions of the input component code and on a parameter permission of the security demand or the security assert; and conditionally generating at least one additional constraint associated with one or more instructions located in the input component code after the security demand or assert, responsive to the evaluating operation.