CPC G06F 9/44526 (2013.01) [G06F 9/544 (2013.01)] | 20 Claims |
1. A method for controlling execution of application extensions, comprising:
launching an application;
injecting additional functionality into the application; and
utilizing the additional functionality to detect a file processing call with a hooking process to reroute normal execution of code in the application to an analysis process, the analysis process including:
determining, prior to execution of the file processing call, whether the file processing call involves execution of an extension file by evaluating the file processing call against a set of rules, the set of rules including a check to determine whether a name and a command line of a currently executing process is intended to execute code; and
calling an operating system (OS) application control function based on the file processing call being determined to involve execution of the extension file and the name and the command line of the currently executing process being intended to execute code, the OS application control function including a policy-based application control function configured to conditionally prevent execution of the extension file.
|