User space virtualization system

A non-transitory computer-readable medium encoded with instructions for performing a method for utilizing a user space virtualization program in a user space through execution with a computer, the instructions comprising instructions for:

• retrieving a native code of an application;
• identifying, by a native instruction handler, an instruction sequence from the native code, before execution, and if the instruction sequence to perform processing is a possible security risk:
• (1):
• if executing the instruction sequence to perform processing is identified to be a possible security risk, confirming there is an execute authority for the application, wherein the confirming of execute authority for the application comprises adding a security check instruction to the instruction sequence to generate a safe instruction sequence;
• (1-1):
• if the application is confirmed to have the execute authority for processing, permitting execution of the instruction sequence with a processor;
• (1-2):
• if the application is confirmed to have no execute authority for processing, not permitting execution of the instruction sequence;
• (1-3):
• if the application is confirmed to have no execute authority for processing, providing an error indication;
• and
• (2):
• if executing the instruction sequence to perform processing is not a possible security risk, permitting execution of the instruction sequence with the processor.

An apparatus for controlling system resources and system security utilizing a user space virtualization program in a user space, the apparatus comprising:

• a memory adapted to store computer-readable instructions;
• and
• a processor adapted to execute the instructions, wherein the instructions, when executed by the processor, perform as:
• a native instruction handler that retrieves a native code of an application and that identifies an instruction sequence, before execution, from the native code associated with security;
• a dynamic compiler that determines if executing the instruction sequence to perform processing is a possible security risk, and that generates a safe instruction sequence;
• a security manager that determines if the application has authority for executing instruction sequences based on the safe instruction sequence;
• and
• wherein the processor is further adapted to execute for executing the instruction sequence.