Patent ID: 8434067

Claim:
A method comprising: collecting, with a first manager of a computing device, runtime information about a first operating environment of the computing device including a list of all software components loaded in the first operating environment and runtime information about a software component executing in the first operating environment including code, data, external symbol tables, and relocation information for the software component; communicating the collected runtime information from the first manager to a second manager in a second operating environment isolated on the computing device from the first operating environment; comparing, with the second manager, the collected runtime information with a validated set of information about the first operating environment, including determining that the software component executing in the first operating environment is authorized to execute in the first operating environment based on a set of authorized software components, and comparing the runtime information about the software component executing in the first operating environment to a validated set of information about the code, data, external symbol tables, and relocation information for the software component; and sending, from the second manager to an administrator, an alert when the collected runtime information does not match the validated set of information.