PROGRAM INSTRUMENTATION METHOD AND APPARATUS FOR CONSTRAINING THE BEHAVIOR OF EMBEDDED SCRIPT IN DOCUMENTS
First Claim
Patent Images
1. A method comprising:
- downloading a document with a script program embedded therein, wherein the script program comprises self-modifying code;
inspecting the script program; and
rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security.
3 Assignments
0 Petitions
Accused Products
Abstract
A method and apparatus is disclosed herein for constraining the behavior of embedded script in documents using program instrumentation. In one embodiment, the method comprises downloading a document with a script program embedded therein, inspecting the script program, and rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security. The script program comprises self-modifying code (e.g., dynamically generated script).
-
Citations
28 Claims
-
1. A method comprising:
-
downloading a document with a script program embedded therein, wherein the script program comprises self-modifying code;
inspecting the script program; and
rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19)
-
-
20. A proxy comprising:
-
a policy management module to implement a security policy;
a rewriting module to perform a rewriting process to rewrite a script embedded in a document based on the security policy, wherein the script program comprises self-modifying code, wherein the rewriting process instruments the document based on one or more policies to control the script in the document so that behavior resulting from execution of the script conforms to safety and security requirements;
an interpretation module to interpret instructions added to the scripts during rewriting. - View Dependent Claims (21, 22, 23, 24, 25, 26, 27)
-
-
28. An article of manufacturing having one or more machine-readable media storing instructions which, when executed by a machine, cause the machine to:
-
download a document with a script program embedded therein, wherein the script program comprises self-modifying code;
inspect the script program; and
rewrite the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security.
-
Specification