Patent ID: 8650642

Claim:
A method for securing an electronic device, comprising: trapping, at a level below all of the operating systems of an electronic device accessing components of an operating system and a set of drivers, attempted accesses to the components of the operating system and the set of drivers executing on the electronic device; in response to trapping an attempted access, comparing contextual information associated with the attempted access to an access map; and determining if the attempted access is trusted based on the comparison; wherein, the access map is generated by: trapping, at a level below all of the operating systems of a second electronic device accessing the components of a second operating system and a second set of drivers, accesses to the components of the second operating system and the second set of drivers executing on the second electronic device, wherein the second operating system and the second set of drivers are substantially free of malware; and in response to trapping the accesses, recording contextual information regarding the accesses to the access map.