System and method for secure execution of script files

A system for execution of script files, the system comprising:

• a data storage for storing a security container associated with a script interpreter, wherein the security container includes at least action limiting policies for the interpreter;
• a hardware processor coupled to the data storage and configured to:
• intercept actions of the interpreter during execution of a script file comprising a trusted script file;
• determine using the security container whether an intercepted action is permitted;
• responsive to determining that the intercepted action is permitted, determine using the security container whether any limitations are associated with the intercepted action;
• responsive to determining that a limitation is associated with the intercepted action:
• perform a virtual action corresponding to the intercepted action instead of the intercepted action itself, wherein execution of the virtual action by a security application returns a result to the interpreter analogous to a result of the intercepted action but without execution by an operating system of the intercepted action,
• determine whether the intercepted action of the interpreter is a network operation for obtaining data from a network, and responsive to determining the intercepted action of the interpreter is a network operation for obtaining data from a network, the processor is further configured to perform a corresponding virtual action comprised of reading data from a file,
• determine whether the intercepted action of the interpreter is a request to read a target file, and responsive to determining the intercepted action of the interpreter is a request to read a target file, the processor is further configured to perform a corresponding virtual action comprised of copying the target file to another location, and providing the interpreter an empty file or a file containing predetermined secure content;
• and
• responsive to determining that no limitations are associated with the intercepted action, execute, by the operating system, the intercepted action.

A non-transitory computer readable medium comprising computer executable instructions for execution of script files, including instructions for:

• providing a security container associated with a script interpreter, wherein the security container includes at least action limiting policies for the interpreter;
• intercepting actions of the interpreter during execution of a script file comprising a trusted script file;
• determining using the security container whether an intercepted action is permitted;
• responsive to determining that the intercepted action is permitted, determining using the security container whether any limitations are associated with the intercepted action;
• responsive to determining that a limitation is associated with the intercepted action:
• performing a virtual action corresponding to the intercepted action instead of the intercepted action itself, wherein execution of the virtual action by a security application returns a result to the interpreter analogous to a result of the intercepted action but without execution by an operating system of the intercepted action,
• determining whether the intercepted action of the interpreter is a network operation for obtaining data from a network, and responsive to determining the intercepted action of the interpreter is a network operation for obtaining data from a network, performing a corresponding virtual action comprised of reading data from a file,
• determining whether the intercepted action of the interpreter is a request to read a target file, and responsive to determining the intercepted action of the interpreter is a request to read a target file, performing a corresponding virtual action comprised of copying the target file to another location, and providing the interpreter an empty file or a file containing predetermined secure content;
• and
• responsive to determining that no limitations are associated with the intercepted action, executing, by the operating system, the intercepted action.