Protection of interpreted source code in virtual appliances

摘要

Protection of interpreted programming language code filesystem files from access and alteration may be provided by encrypting a file to be protected in a boot sequence. Run-time examination of a virtual appliance may be deterred by hiding the boot sequence in a restricted virtual appliance platform. No shell or filesystem access may be provided. Thus, permissions on a read-only filesystem (for example) may be kept from being altered. The permissions may be set along with filesystem access control lists to prevent unauthorized examination of the source files.

主权项

1. A computer program product for protecting interpreted code in a virtual appliance, the computer program product comprising a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code being configured to:
compress a file to be protected into a compressed filesystem file; encrypt an interpreted programming language code filesystem file prior to execution in a startup script, wherein the encrypted interpreted programming language code filesystem file includes the file to be protected; initiate the startup script employing the encrypted interpreted programming language code filesystem file with the compressed filesystem file; decrypt, via the startup script, the encrypted interpreted programming language code filesystem file; and run in the startup script the decrypted interpreted programming language code filesystem file.