System and Method for Protecting Computer Resources from Unauthorized Access Using Isolated Environment

A system for protecting resources from unauthorized access, comprising:

• a memory containing a library of handler functions, wherein the handler functions are configured to control access of one or more applications to protected resources on a computer device;
• a processor coupled to the memory and configured to:
• associate a security policy with the library of handler functions, wherein the security policy specifies access rules for accessing protected resources by the applications;
• modify the one or more applications to access the library of handler functions instead of corresponding application program interface (API) functions of the computer device;
• receive by a handler function an API function call from a modified application;
• determine whether the received API function call complies with the access rules;
• when the API function call complies with the access rules, the processor is configured to perform via the handler function the API function call from the modified application to the protected resources;
• and
• when the API function call violates the access rules, the processor is configured to block the API function call.

A computer program product stored on a non-transitory computer-readable storage medium, the computer program product comprising computer-executable instructions for protecting resources from unauthorized access, including instructions for:

• providing a library of handler functions, wherein the handler functions control access of one or more applications to protected resources on a computer device;
• associating a security policy with the library of handler functions, wherein the security policy specifies access rules for accessing protected resources by the applications;
• modifying the one or more applications to access the library of handler functions instead of corresponding application program interface (API) functions of the computer device;
• receiving by a handler function an API function call from a modified application;
• determining whether the received API function call complies with the access rules;
• and
• when the API function call complies with the access rules, performing by the handler function the API function call from the modified application to the protected resources;
• and
• when the API function call violates the access rules, blocking the API function call.