THREAD LEVEL ACCESS CONTROL TO SOCKET DESCRIPTORS AND END-TO-END THREAD LEVEL POLICIES FOR THREAD PROTECTION

摘要

In one embodiment, a system includes a processing circuit and logic integrated with and/or executable by the processing circuit. The logic causes the processing circuit to monitor a plurality of application instances operating on a first host. The logic also causes the processing circuit to detect that a first application thread has been called by a first application instance operating on the first host and determine whether the first application thread is registered to be called by the first application instance on the first host by consulting a registration index. Moreover, the logic causes the processing circuit to quarantine the first application thread in response to a determination that the first application thread is not registered to be called by the first application instance on the first host.

主权项

1. A system, comprising:
a processing circuit and logic integrated with and/or executable by the processing circuit, the logic causing the processing circuit to:
monitor a plurality of application instances operating on a first host;detect that a first application thread has been called by a first application instance operating on the first host;determine whether the first application thread is registered to be called by the first application instance on the first host by consulting a registration index; andquarantine the first application thread in response to a determination that the first application thread is not registered to be called by the first application instance on the first host.