METHOD OF SECURING COMPUTER SYSTEMS BY MEANS OF SOFTWARE CONTAINMENT

摘要

The method involves separating data based on an owner of a memory allocation unit and encryption of the data. Memory allocation is performed by a memory manager based on a request by a component of an operating system. The memory allocation units are controlled by the memory manager. The manager denies access to the allocation unit if an identity of the component is not identical to the owner of the allocation unit. The memory manager verifies by using a secret related to each owner and key derived from the secret are used.