System and method for sanitizing a computer program

• US 20070234337A1
• Filed: 11/08/2006
• Published: 10/04/2007
• Est. Priority Date: 03/31/2006
• Status: Abandoned Application

• Current Assignee: Prowess Consulting, LLC
• Original Assignee: Prowess Consulting, LLC
• Inventors: Suzuki, Aaron T., Johnson, Nathan Stanley
• Application Number:
  US11/557,687
• Publication Number:
  US 20070234337A1
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

A system and method that may include deploying a base computer file on a computer, activating a computer program by processing the base computer file, and generating a file for storing data associated with operation of the computer program. The system and method may further include processing an event trigger triggering sanitation of the file and replacing the file with a sanitized file.

Claims

1. A method comprising:

deploying a base computer file on a computer;

activating a computer program by processing the base computer file;

generating a file for storing data associated with operation of the computer program;

processing an event trigger triggering sanitation of the file; and

replacing the file with a sanitized file.

2. The method of claim 1, wherein the base computer file is write protected.

3. The method of claim 1, wherein processing the event trigger comprises terminating operation of the computer program.

4. The method of claim 3, further comprising reactivating the computer program by processing the base computer file and the sanitized file.

5. The method of claim 1, wherein processing the event trigger comprises quarantining the file.

6. The method of claim 1, wherein the sanitized file is based on a locally cached or remotely stored image of the file.

7. The method of claim 1, wherein the sanitized file is generated based on the base computer file.

8. The method of claim 1, further comprising deploying a second base computer file on the computer, wherein the sanitized file is generated based on the second base computer file.

9. The method of claim 1, further comprising processing an update file, wherein the sanitized file is generated based on the base computer file and on the update file.

10. The method of claim 1, wherein the sanitation trigger event is generated by a software agent.

11. The method of claim 10, wherein the software agent comprises anti-virus software.

12. The method of claim 10, wherein the software agent comprises anti-spyware software.

13. The method of claim 10, wherein the software agent comprises intrusion detection software.

14. The method of claim 1, wherein the sanitation trigger event is generated in response to user input at the computer or at a management server.

15. The method of claim 1, wherein the sanitation trigger event is generated by a management server.

16. The method of claim 1, wherein the sanitized file comprises a previous version of the file.

17. A computer readable media comprising code to perform the acts of the method of claim 1.

18. A system comprising:

a deployment module to deploy a base computer file to a computer for operating a computer program;

an activation module communicatively coupled to the deployment module, the activation module being configured to activate the computer program by processing the base computer file and to generate a file for storing information associated with operation of the computer program; and

a sanitation module communicatively coupled to the activation module, the sanitation module being configured to process a trigger event triggering sanitization of the file and to instruct the activation module to replace the file with a sanitized file.

19. The system of claim 18, wherein the sanitation module is further configured to instruct the activation module to terminate operation of the computer program.

20. The system of claim 18, further comprising a quarantine module coupled to the sanitation module and being configured to quarantine the file.

21. The system of claim 18, wherein the activation module generates the sanitized file based on a remotely stored file image.

22. A system comprising:

a management server; and

a computer communicatively coupled to the management server, the computer comprising;

a deployment module to deploy a base computer file on the computer for operating a computer program;

an activation module communicatively coupled to the deployment module, the activation module being configured to activate the computer program based on the base computer file and to generate a file for storing information associated with operation of the computer program; and

a sanitation module communicatively coupled to the activation module, the sanitation module being configured to receive a trigger event from the management server, to process the trigger event, and to instruct the activation module to replace the file with a sanitized file.

23. A system comprising:

means for deploying a base computer file on a computer for operation of a computer program;

means for activating a computer program by processing the base computer file;

means for generating a file for storing information associated with operation of the computer program;

means for processing a trigger event triggering sanitation of the file; and

means for replacing the file with a sanitized file.