| 摘要 |
<p>A computer device 200 includes a download unit 210 which downloads one or more files 302 into a storage device 205. A file logging unit 220 is arranged to record a resource locator 300 identifying a source network location 301 of the file 302, when the file 302 is downloaded, and to associate the resource locator (e.g. URL) 300 with a first fingerprint (e.g. cryptographic hash) 303 of the file 302. A system policy unit 230 stores the resource locator 300 associated with a process control policy 305 relevant to the file 302. A process control unit 240 is arranged to obtain a second fingerprint of the file 302 upon launching a process in a runtime execution environment 203, retrieve the resource locator 300 from the file logging unit 220 by matching the second fingerprint with the first fingerprint 303, retrieve the process control policy 305 from the system policy unit according to the retrieved resource locator 300, and selectively apply process execution privileges which determine execution of the process in the runtime execution environment 203 according to the retrieved process control policy 305.</p> |
