System for selectively blocking execution of applications on a computer system

摘要

The system for selectively blocking execution of applications on a computer system includes an interface that allows an administrator to set configuration settings and which includes tools that assist the administrator in establishing an application list. The application list specifies zero or more applications that are to be either blocked or that are to be allowed to run (i.e., all others to be blocked), depending on the selected configuration settings. The tools include a mechanism that automatically creates a historical database of applications that have been executed in the past on the computer system. The interface allows easy selection of applications from the historical database for inclusion on the application list.

主权项

1. A method of operating a computer comprising the steps of:
(A) tracking program files executed on the computer to thereby establish a historical database wherein the database lists program files that have executed on the computer; (B) using the historical database to create an application list wherein the application list defines designated program files that are permitted to execute on the computer; (C) detecting when a candidate program file has started execution on the computer through a detecting means independent of the candidate program file and evaluating, using the application list, whether the candidate program file is allowed to continue to execute on the computer.