SYSTEMS, METHODS, AND MEDIA FOR POLICY-BASED MONITORING AND CONTROLLING OF APPLICATIONS

• US 20140230012A1
• Filed: 08/15/2012
• Published: 08/14/2014
• Est. Priority Date: 08/15/2011
• Status: Abandoned Application

• Current Assignee: Arizona Board of Regents (University of Arizona)
• Original Assignee: Arizona Board of Regents (University of Arizona)
• Inventors: Ahn, Gail-Joon
• Application Number:
  US14/239,064
• Publication Number:
  US 20140230012A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2139 Recurrent verification

Abstract

Systems, methods, and media for policy-based monitoring and controlling of applications are provided. Methods for policy-based monitoring and controlling of applications are provided, the methods comprising: providing a policy engine that: receives system policies and user policies; determines whether any violations and/or conflicts exist between the system policies and the user policies; and determines whether the system policies and/or user policies are violated during an installation, launch, and/or execution of an application; and providing a user interface to alert a user of violations during the installation, launch, and/or execution of the application.

Claims

1. A system for policy-based monitoring and controlling of applications, comprising:

at least one hardware processor that;

provides a policy engine that;

receives system policies and user policies;

determines whether any violations and/or conflicts exist between the system policies and the user policies; and

determines whether the system policies arid/or user policies are violated during an installation, launch, and/or execution of an application; and

provides a user interface to alert a user of violations during the installation, launch, and/or execution of the application.

2. The system of claim 1, wherein the at least one hardware processor also stores the system policies and/or user policies in a database.

3. The system of claim 1, wherein the at least one hardware processor also monitors accesses to system resources by the application.

4. The system of claim 1, wherein the at least one hardware processor also checks system integrity of the device.

5. The system of claim 1, wherein the at east one hardware processor also provides a user agent and a system agent.

6. The system of claim 1, wherein the at least one hardware processor also receives a specification of a system policy and/or a user policy from a user.

7. A method for policy-based monitoring:

and controlling of applications, comprising;

providing a policy engine that executes in at least one hardware processor that;

receives system policies and user policies;

determines whether any violations and/or conflicts exist between the system policies and the user policies; and

determines whether the system policies and/or user policies are violated during an installation, launch, and/or execution of an application; and

providing a user interface using the at least one hardware processor to alert a user of Violations during the installation, launch, and or execution of the application.

8. The method of claim 7, further comprising, storing the system policies and/or user policies in a database.

9. The method of claim 7, further comprising monitoring accesses to system resources by the application.

10. The method of claim 7, further comprising checking system integrity of the device.

11. The method of claim 7, further comprising providing a user agent and a system agent.

12. The method of claim 7, further comprising receiving a specification of a system policy and/or a user policy.

13. A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method for policy-based monitoring and controlling of applications, the method comprising:

providing a policy engine that;

receives system policies and user policies;

determines whether any violations and/or conflicts exist between the system policies and the user policies; and

determines whether the system policies and/or user policies are violated during an installation, launch, and/or execution of an application; and

providing a user interface to alert a user of violations during the installation, launch, and/or execution of the application.

14. The non-transitory computer-readable medium of claim 13, wherein the method further comprises storing the system policies and/or user policies in a database.

15. The non-transitory computer-readable medium of claim 13, wherein the method further comprises monitoring accesses to system resources by the application.

16. The non-transitory computer-readable medium of claim 13, wherein the method further comprises checking system integrity of the device.

17. The non-transitory computer-readable medium of claim 13, wherein the method further comprises providing a user agent and a system agent.

18. The non-transitory computer-readable medium of claim 13, wherein the method further comprises receiving a specification of a system policy and/or a user policy from a user.