Protecting systems from unauthorized access to system resources using browser independent web page technology

摘要

In some embodiments, a filter may filter web graphics library code executing on the graphics processing unit. As a result the web graphics library code may be prevented from accessing memory or other resources that are not allocated specifically for the web graphics library module. Likewise web graphics library code may not access any shared resources that have been explicitly assigned to the process specific web graphics library module.

主权项

1. A method comprising:
sandboxing a browser independent web page technology code; filtering the code based on a user security configuration to limit resources accessible by said code; verifying the code in a graphics processing unit, wherein sandboxing includes submitting the code to an access control module that filters the code based on the user security configuration and then sends the filtered code to the graphics processing unit; and preventing, in the graphics processing unit, the filtered browser independent web page technology code from accessing a resource not specifically allocated to the code.