Method for enabling hardware assisted operating system region for safe execution of untrusted code using trusted transitional memory

A method of reducing the risk of a JavaScript injection harming a computing device, comprising:

• installing an anti-trusted-security-zone into a memory of a computing device;
• placing dynamically downloaded JavaScript that is part of a web browser into the anti-trusted-security-zone for execution;
• restricting access of the JavaScript to at least part of the rest of the computing device, wherein when the JavaScript stored in the anti-trusted-security zone is executed, the JavaScript is allowed to write to a screen of the computing device but not to read from the screen of the computing device;
• alerting a user when the JavaScript inside the anti-trusted-security-zone desires access to any restricted resource of the computing device outside the anti-trusted-security-zone;
• asking the user for permission to access the desired resource outside the anti-trusted-security-zone;
• granting access for the JavaScript to the desired resource outside the anti-trusted-security-zone upon the user's permission;
• and
• moving the JavaScript from the anti-trusted-security-zone to a normal zone that is determined not to be malicious.

A method of managing untrusted applications on an electronic device to reduce the risk that the untrusted applications can cause harm to the electronic device, comprising:

• placing non-trusted applications into an anti-trusted-security-zone for execution;
• restricting access of the non-trusted applications to at least some resources outside the anti-trusted-security-zone;
• alerting a user when a non-trusted application of the non-trusted applications inside the anti-trusted-security-zone desires access to any restricted resource of the electronic device outside the anti-trusted-security-zone;
• asking the user for permission to access the desired resource outside the anti-trusted-security zone;
• granting access for the non-trusted application to the desired resource outside the anti-trusted-security-zone upon the permission by the user;
• moving one or more of the non-trusted applications from the anti-trusted-security-zone to a normal zone that are determined not to be malicious;
• keeping any of the non-trusted application within the anti-trusted-security-zone that do not need to execute outside the anti-trusted-security-zone;
• and
• deleting any of the non-trusted applications that are determined to be malicious.