Patent ID: 8850572

Claim:
A machine-implemented method for handling a file associated with a program, the method comprising: in response to a request for accessing a file that is received through a first program, storing the file in a first sandboxed storage area associated with a first sandbox associated with the first program, wherein the file is to be accessed by a second program; replicating the file from the first sandboxed storage area to a second sandboxed storage area that is associated with a second sandbox, wherein the second sandboxed storage area is not accessible by either the first program or the second program; performing a content analysis on the file within the second sandbox to determine whether the file contains malicious content; performing an atomic move operation on the file that atomically moves the file from the second sandboxed storage area to a third sandboxed storage area associated with a third sandbox, in response to determining that the file does not contain malicious content; and invoking the second program to access the file stored in the third sandboxed storage area within the third sandbox, wherein the third sandbox is not accessible by the first program.