System and method for building a security monitor for message delivery control

A system for building a security monitor, the system comprising:

• a hardware processor configured to:
• identify one or more objects of a microkernel Operating System (OS) participating in the transmission of the IPC message, wherein the one or more OS objects comprise one or more processes and/or one or more applications executed by the microkernel OS;
• select from a security policy database one or more security policies associated with the identified microkernel OS objects;
• configure a policy verification module based on the selected security policies to generate a decision related to controlling the transmission of the IPC message;
• and
• generate a security monitor using the configured policy verification to control the transmission of the IPC message based on the decision generated by the policy verification module.

A non-transitory computer readable medium storing thereon computer executable instructions for building a security monitor, including instructions for:

• identifying one or more objects of a microkernel Operating System (OS) participating in the transmission of the IPC message, wherein the one or more OS objects comprise one or more processes and/or one or more applications executed by the microkernel OS;
• selecting from a security policy database one or more security policies associated with the identified microkernel OS objects;
• configuring a policy verification module based on the selected security policies to generate a decision related to controlling the transmission of the IPC message;
• and
• generating a code for a security monitor using the configured policy verification module to control the transmission of the IPC message based on the decision generated by the policy verification module.