Generic privilege escalation prevention
AssigneeMcAfee, Inc.
InventorsBing Sun, Chong Xu, Jeff Hetzler, Zheng Bu
Life of this patent
Estimating the term…
Abstract
An apparatus, method, computer readable storage medium are provided in one or more examples and comprise accessing an application, identifying an access token of the application, determining if the access token is a system token, and responsive to the access token failing to be a system token, enabling a runtime module.
Claims28
1-25. (canceled)
An apparatus for managing an application, comprising:
- a protection module, wherein the protection module is configured to:
- identify an access token of the application;
- determine if the access token is a system token;
- and
- responsive to the access token failing to be a system token, enable a runtime module.
At least one computer readable storage medium that includes code for execution for managing an application, and when executed by a processing element is operable to:
- identify an access token of the application;
- determine if the access token is a system token;
- and
- responsive to the access token failing to be a system token, enable a runtime module.
A method for managing an application, comprising:
- identifying an access token of the application;
- determining if the access token is a system token;
- and
- responsive to the access token failing to be a system token, enabling a runtime module.
An apparatus, comprising:
- a protection module coupled to a processing element, the processing element coupled to a memory element, wherein the protection module is configured to:
- add a plurality of hooks into a plurality of API locations;
- monitor the plurality of hooks;
- identify an execution of a hook of the plurality of hooks;
- determine whether the runtime module is enabled;
- and
- responsive to the runtime module being enabled, protect the application.
Dependencies are inferred from the claim text.