Automating software security restrictions on system resources

A computer-implemented method for automating creation of scripts for use with managed computer systems, the method comprising:

• storing, in a database accessible to one or more computer systems, a set of descriptions of software applications, a description of a software application including one or more items that uniquely identify the software application or that describe a resource accessed by the software application during execution of the software application;
• retrieving, with one or more processors associated with the one or more computer systems, at least one description of at least one software application from the database in response to a query at the database for at least one of a registry key, a file system object, and a service;
• creating, with the one or more processors associated with the one or more computer systems, an introductory section in a script that causes security components of the managed computer systems to apply resource restrictions to software applications, the introductory section in the script specifying that the script is formatted to be directly usable by registry utilities natively provided by operating systems of the managed computer systems to configure the security components;
• generating, with the one or more processors associated with the one or more computer systems, a set of rules that manage access to a resource on the managed computer systems when characteristics of software applications on the managed computer systems match items from the at least one description of the at least one software application incorporated into one or more rules in the set of rules;
• determining whether to create, with the one or more processors associated with the one or more computer systems, a first type of entry in the script based on the set of rules, the first type of entry corresponding to a security component setting of a security component on the managed computer systems adapted to control access permissions for registry keys on the managed computer systems when characteristics of software applications on the managed computer systems match one or more registry rules in the set of rules;
• determining whether to create, with the one or more processors associated with the one or more computer systems, a second type of entry in the script based on the set of rules, the second type of entry corresponding to a security component setting of a security component on the managed computer systems adapted to control access permissions for file system objects on the managed computer systems when characteristics of software applications on the managed computer systems match one or more file system object rules in the set of rules;
• determining whether to create, with the one or more processors associated with the one or more computer systems, a third type of entry in the script based on the set of rules, the third type of entry corresponding to a security component setting of a security component on the managed computer system adapted to control access permissions for services on the managed computer systems when characteristics of software applications on the managed computer systems match one or more services rules in the set of rules;
• and
• storing the script in a storage device associated with the one or more computer systems operated by the inoculation data provider, wherein the stored script includes at least one of the first, second, and third type of entry.