Program instrumentation method and apparatus for constraining the behavior of embedded script in documents
OwnerDachuan Yu, Ajay Chander +1inventors
InventorsDachuan Yu, Ajay Chander, Nayeem Islam
Life of this patent
Estimating the term…
Abstract
A method and apparatus is disclosed herein for constraining the behavior of embedded script in documents using program instrumentation. In one embodiment, the method comprises downloading a document with a script program embedded therein, inspecting the script program, and rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security. The script program comprises self-modifying code (e.g., dynamically generated script).
Claims28
A method comprising:
- downloading a document with a script program embedded therein, wherein the script program comprises self-modifying code;
- inspecting the script program;
- and
- rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security.
A proxy comprising:
- a policy management module to implement a security policy;
- a rewriting module to perform a rewriting process to rewrite a script embedded in a document based on the security policy, wherein the script program comprises self-modifying code, wherein the rewriting process instruments the document based on one or more policies to control the script in the document so that behavior resulting from execution of the script conforms to safety and security requirements;
- an interpretation module to interpret instructions added to the scripts during rewriting.
An article of manufacturing having one or more machine-readable media storing instructions which, when executed by a machine, cause the machine to:
- download a document with a script program embedded therein, wherein the script program comprises self-modifying code;
- inspect the script program;
- and
- rewrite the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security.
Dependencies are inferred from the claim text.