Securing data on a computing system

A computing system to secure data, the computing system comprising:

• a memory;
• a processor(s);
• a role generation module coupled to the processor(s) to:
• receive a request, for a user, to execute a plurality of application instances of an application, wherein the plurality of application instances are executed in parallel, and wherein each application instance of the plurality of application instances corresponds to a different use of the application;
• identify a separate role to be associated with each application instance of the plurality of application instances, for the user, based on one of user inputs, an object-role mapping, and a set of rules in a corresponding application instance, wherein the application is executable in a plurality of application instances, and wherein the role of the application instance is indicative of a nature of activity to be performed in the corresponding application instance, and wherein the role of the application instance is defined based on the different use of the application in the corresponding application instance;
• and
• associate the separate role with each application instance;
• and
• a data security module coupled to the processor(s) to,
• store, based on the role, data pertaining to the application instance in a memory location allocated to the role of the application instance, wherein each role has a separate dedicated memory location to achieve data isolation for the application instance based on the role associated with the application instance.

A non-transitory computer readable medium having embodied thereon a set of computer readable instructions that, when executed, perform a method to secure data on a computing system, the method comprising:

• receiving a request, for a user, to execute a plurality of application instances of an application, wherein the plurality of application instances are executed in parallel, and wherein each application instance of the plurality of application instances corresponds to a different use of the application;
• identifying a separate role to be associated with each application instance of the plurality of application instances, for the user, based on one of user inputs, an object-role mapping, and a set of rules in a corresponding application instance, wherein the application is executable in a plurality of application instances, and wherein the role of the application instance is indicative of a nature of activity to be performed in the corresponding application instance, and wherein the role of the application instance is defined based on the different use of the application in the corresponding application instance;
• associating, based on the identifying, the separate role with each application instance;
• and
• storing, based on the role, data pertaining to the application instance in a memory location allocated to the role of the application instance, wherein each role has a separate dedicated memory location to achieve data isolation for the application instance based on the role associated with the application instance.