Restricted Transmogrifying Driver Platform

摘要

A restricted transmogrifying driver platform is described herein. In one or more implementations, a platform is provided that enables a restricted execution environment for virtual private network (VPN) drivers and other transmogrifying drivers. The platform may be implemented as an operating system component that exposes an interface through which drivers may register with the platform and be invoked to perform functions supported by the platform. The restricted execution environment places one or more restrictions upon transmogrifying drivers that operate via the platform. For instance, execution may occur in user mode on a per-user basis and within a sandbox. Further, the platform causes associated drivers to run as background processes with relatively low privileges. Further, the platform may suspend the drivers and control operations of the driver by scheduling of background tasks. Accordingly, exposure of the transmogrifying drivers to the system is controlled and limited through the platform.

主权项

1. A method implemented by a computing device, the method comprising:
registering a transmogrifying driver with a driver security platform implemented by the computing device; instantiating a restricted execution environment for the transmogrifying driver via the driver security platform; and executing the transmogrifying driver within the restricted execution environment to perform one or more tasks at the direction of the driver security platform.