Back to results
US 2019/0095617 A1Published application
Systems and methods for intrinsic runtime security
AssigneeGitStar Inc.
InventorsDeian Stefan, Devon Rifkin, Christian Almenar
Life of this patent
Estimating the term…
Abstract
A system for intrinsic runtime security includes an application code repository, a security code repository, a trusted execution context, a first sandboxed execution context and a policy enforcement module, operating based on security policy, that enables the first sandboxed execution context to modify objects without enabling unrestricted access of the first sandboxed execution context to original prototypes of the objects.
Claims21
A system for intrinsic runtime security in a computing system comprises:
- an application code repository that stores application code written in a prototypal language and intended for execution;
- wherein the application code comprises trusted application code and untrusted application code;
- a security code repository that stores a security policy;
- a trusted execution context, having a first level of access to the computing system, that executes the trusted application code;
- a first sandboxed execution context, having a second level of access to the computing system more restricted than the first level of access, that executes the untrusted application code;
- wherein the first sandboxed execution context modifies an object present in the trusted application code;
- and
- a policy enforcement module, operating based on the security policy, that enables the first sandboxed execution context to modify the object without enabling unrestricted access of the first sandboxed execution context to an original prototype of the object.
5 more elements
Dependencies are inferred from the claim text.