| 摘要 |
The present invention provides a method and system of creating an assured execution environment (AxE) for at least one computer program executable on a computer system. In an exemplary embodiment, the method and system include (1) converting the executable into a computer program targeted for the computer system and (2) providing the environment in which the program can be accessed on the computer system. In an exemplary embodiment, the converting includes scrambling the executable. In an exemplary embodiment, the converting includes attaching filesystem metadata to the executable. In an exemplary embodiment, the providing includes executing the program on the computer system only if the program complies with a policy. In an exemplary embodiment, the providing includes preventing malicious code from executing on the computer system before the environment is loaded on the computer system.
|
