Securing an application framework from shared library sideload vulnerabilities

One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions that, when executed by a computer processor, cause the computer processor to:

• provide a main .NET library having code for a primary application feature, the main .NET library file being non-executable outside of a .NET framework, wherein the.NET framework comprises instructions provide managed execution of a library file within an application virtual machine, and to search a target directory for a list of dynamic link libraries (DLLs), and to attempt to load one or more DLLs from the list, outside a purview of the main .NET library;
• and
• launch an unmanaged executable process and host the main .NET library on the unmanaged executable process, wherein the unmanaged executable process is independent of the .NET framework, and includes operating system hooks into an operating system to intercept the .NET framework's attempt to load the one or more DLLs, and to subject the DLLs, if found, to a security regimen, wherein the .NET framework's attempt to load a DLL is blocked if the DLL fails the security regimen.

A method of providing enhanced security to a .NET framework that provides managed execution of a library file within an application virtual machine, and searches a target directory for shared libraries by name, and attempts to load any shared libraries found, outside a purview of a main .NET process, the method comprising:

• hosting the main .NET process as a library file under an unmanaged executable process, wherein the unmanaged executable process is independent of the .NET framework;
• and
• wherein the unmanaged executable process includes operating system hooks to intercept the.NET framework's attempt to load the shared libraries within an operating system, and to subject the shared libraries, if found, to a security scan, wherein the .NET framework's attempt to load the shared libraries is blocked if a shared library fails the security scan.