Data access security

A system for securing a computer, comprising:

• a computer-readable storage medium storing executable computer program modules comprising:
• a user evidence module for determining a user group associated with a user of the computer;
• a code evidence module for considering code evidence indicating a trustworthiness of code on which a process executed on the computer by the user is based;
• a data evidence module for considering data evidence indicating a trustworthiness of data requested by the process;
• a permissions generation module for computing an initial permissions set responsive to the code evidence, the user group, and a security policy, applying the initial permissions set to the process, receiving a request from the process having the initial permissions set to access data, and computing an effective permissions set for the process responsive to the code evidence, the user group, the data evidence and the security policy, wherein the effective permissions set is a subset of the initial permissions set;
• and
• a permissions enforcement module for applying the effective permissions set to the process for the data access and restoring the initial permissions set to the process responsive to completion of the data access;
• and
• a processor for executing the computer program modules.

A non-transitory computer-readable storage medium having executable computer program instructions recorded thereon for securing a computer, comprising:

• a user evidence module for determining a user group associated with a user of the computer;
• a code evidence module for considering code evidence indicating a trustworthiness of code on which a process executed on the computer by the user is based;
• a data evidence module for considering data evidence indicating a trustworthiness of data requested by the process;
• a permissions generation module for computing an initial permissions set responsive to the code evidence, the user group, and a security policy, applying the initial permissions set to the process, receiving a request from the process having the initial permissions set to access data, and computing an effective permissions set for the process responsive to the code evidence, the user group, the data evidence and the security policy, wherein the effective permissions set is a subset of the initial permissions set;
• and
• a permissions enforcement module for applying the effective permissions set to the process for the data access and restoring the initial permissions set to the process responsive to completion of the data access.