Sandboxed Application Launcher Security Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional security systems are inconsistent and ineffective in preventing potentially harmful applications, such as malware, from running on computing devices after they have been launched, as they may not handle kill signals properly or require user interaction.
Innovation Solution
Implementing a system that loads an application launcher into a sandbox, monitors its functions, queries a policy manager to determine if the application is potentially harmful, and performs a security action based on a security policy to prevent the application from launching if it is deemed harmful, thereby preventing malicious applications from executing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security systems use kill signals to stop malicious applications after launch, then the application can be terminated, but the application may not handle kill signals properly or may have gone awry preventing proper handling
Solution Approach 1:
The patent implements pre-launch scanning and identification of potentially harmful applications before they are executed. The system scans applications upon installation or before launch, identifies malicious content, and prevents execution before the application can cause harm or fail to respond to kill signals. This preliminary action resolves the contradiction by stopping malicious applications at a stage where they cannot resist or ignore termination attempts.
2Reliability
If security systems require user interaction to stop malicious applications, then user control is maintained, but the response time is delayed and security effectiveness is reduced
Solution Approach 1:
The patent implements automated security mechanisms that operate without requiring user interaction. The system automatically scans applications, identifies malicious content, and prevents execution or terminates processes autonomously. This self-service approach resolves the contradiction by eliminating the time delay associated with user intervention while maintaining high security effectiveness through automated detection and response.
3Difficulty of detecting and measuring
If security scanning is performed after application launch, then the application is already running and may have caused damage, but scanning provides detection capability
Solution Approach 1:
The patent performs security scanning and identification of potentially harmful applications before they are launched or executed. By conducting detection activities in advance, the system prevents malicious applications from running and causing damage, thereby resolving the contradiction between detection capability and prevention of harmful effects.
4Ease of operation
If traditional systems allow applications to run and then attempt to stop them, then application functionality is preserved initially, but security risks are realized
Solution Approach 1:
The patent implements pre-launch security scanning that identifies potentially harmful applications before execution. By detecting malicious content in advance, the system prevents harmful applications from running while allowing legitimate applications to execute normally, thus resolving the contradiction between preserving functionality and preventing malicious actions.
Data Source
AI summary
The disclosed computer-implemented method for controlling an application launch based on a security policy may include (1) loading an application launcher into a sandbox, (2) monitoring one or more functions associated with launching an application from the application launcher, (3) determining that the functions associated with launching the application have been invoked by the application launcher, (4) querying a policy manager comprising a security policy to determine whether the application is potentially harmful, and (5) performing, based on the security policy, a security action preventing the application launcher from launching the application from the sandbox upon determining that the application is potentially harmful. Various other methods, systems, and computer-readable media are also disclosed.