Agentless security
AssigneeMcAfee, Inc.
InventorLior Rudnik
Life of this patent
Estimating the term…
Abstract
There is disclosed in one example a computing apparatus, including: a hardware platform including a processor and a memory; a closed operating system including instructions within the memory to sandbox userspace applications; and a sandboxed userspace application, including: instructions to provide a user interface and user application code; and an agentless security library within the sandboxed userspace application, the agentless security library including instructions to provide security or privacy services to the sandboxed userspace application with minimal direct interaction from the user interface and user application code.
Claims19
A computing apparatus, comprising:
- a hardware platform comprising a processor and a memory;
- a closed operating system comprising instructions within the memory to sandbox userspace applications from one another, wherein sandboxing an application comprises assigning a memory space to the sandboxed application and restricting access to the memory space from other applications;
- and
- a sandboxed userspace application, comprising instructions to:
- provide a user interface and user application code;
- and
- provide an agentless security library within the sandboxed userspace application, the agentless security library comprising instructions to provide security or privacy services to the sandboxed userspace application with a single point of entry, comprising a single runtime or compile-time invocation of the agentless security library by the sandboxed userspace application.
One or more tangible, non-transitory computer-readable media having stored thereon executable instructions to provide an agentless security software development kit (SDK) for inclusion with a sandboxed application on a closed operating system, the agentless security SDK comprising a single point of entry for the sandboxed application to invoke security or privacy services of the agentless security SDK via a single runtime or compile-time invocation of the agentless security SDK by the sandboxed application.
A method of developing a secured application for a closed operating system, comprising invoking, at build time, an agentless security software development kit (SDK) for inclusion with the secured application, wherein the invocation comprises a single compile-time invocation of the agentless security SDK within the secured application, wherein the secured application is sandboxed by a host operating system into a private memory space not accessible to other applications.
The method of 18, wherein invoking the agentless security SDK comprises invoking a utility that overloads common communication procedures with communication procedures that are hooked by the agentless security SDK.
Dependencies are inferred from the claim text.