| 摘要 |
Disclosed are a system for providing an isolated execution environment and a method for the same which is capable of executing a specified process (isolated process) which operates on a computing system in an execution environment in which the specified process is isolated from other processes. According to one aspect of the present invention, a system for providing a computing device with an isolated execution environment comprises: a profile storage module for storing a profile for recording information about reference system resources at a specified reference point of time on the computing device to which an operating system is installed; a determination module for determining whether actual system resources on the computing system are altered from the reference system resources on the basis of the information recorded in the profile if an isolated process executed in the isolated execution environment requests access to system resources; and a control module for controlling access to the system resources requested by the isolated process if the determination module determines that the actual system resources are not altered. [Reference numerals] (10) Computing device;(110) Control module;(120) Determination module;(130) Profile storage module;(20) System resource providing server;(200) Isolated execution environment;(210) Isolated process;(220) Isolated storage space;(300) Actual system resource |
