| 摘要 |
Execution of an executable legacy or underlying program is controlled by a policy module. The policy enforcement agent (PEA) is an executable program including a header, an execution portion or program, and data. The PEA must be satisfied (the policy must be fulfilled) before the underlying program is executed. Separation of the PEA from the underlying program is rendered difficult by "encapsulating" the underlying program within the PEA. Encapsulation is accomplished by attaching the underlying module to the PEA, and amending the header of the PEA to conform to the combined program. The combined program is substituted for the original underlying program. The underlying program remains unchanged. When execution of the underlying program is invoked, the PEA executes and imposes its conditions. If the conditions are satisfied, the underlying program executes. In one embodiment, the underlying program generates a VPN tunnel, and the conditions imposed by the PEA include an active antivirus program and an active personal firewall.
|
