Ways to secure non-native code

Abstract

A method to secure a non-native application. The non-native application is processed to obtain an application stub to be triggered within a virtual machine. The processing of the non-native application also provide a native code function upon which the application stub depends. The non-native function is part of a trusted module that extends security services from the trusted module to the virtual machine. The trusted module is a native code application that creates a trusted zone as a root of trustiness extending to the virtual machine by an execution-enabling mechanism between the application tab and the non-native function.

Description

technical field [0001] The present disclosure relates generally to security in software applications. More specifically, the present disclosure relates to securing non-native applications executing in virtual machines. Background technique [0002] Virtual machines and script interpreters are known. A software application designed for execution by a process virtual machine or script interpreter is shielded from the underlying hardware and the operating system of the computing platform running thereon. Likewise, these applications, which can be referred to as non-native applications, cannot access secure resources provided by the computing platform and cannot use protection measures available to native applications. Additionally, many established software security and protection techniques are not directly adapted to handle non-native applications, which are designed to protect native code (eg, machine code). Security approaches that provide limited protection of computing...

AI Technical Summary

Problems solved by technology

Likewise, these applications, which can be called non-native applications, cannot access secure resources provided by the computing platform and cannot use protections available to native applications

Additionally, many established software security and protection techniques are not directly adaptable to handle non-native applications, which are designed to protect native code (e.g. machine code)

Security approaches that provide limited protection of computing systems (e.g., sandbox security) within which non-native applications are able to run can limit this adaptability even further

Likewise, process virtual machines or script interpreters are basically untrusted and vulnerable to attacks

Images