| CPC G06F 21/563 (2013.01) [G06F 21/562 (2013.01); G06F 21/566 (2013.01); G06F 21/577 (2013.01); G06F 2221/033 (2013.01)] | 20 Claims |

|
1. A computer-implemented method of protecting a computing workload from script-based attacks, the method comprising:
receiving, at a workload, a command to commence execution of code of a script;
determining whether:
(i) permissions of a user issuing the command comply with a permissions security standard;
(ii) an identifier of an interpreter supporting the script is included in an approved interpreter list;
(iii) an identifier of a selected parameter of the interpreter is included in an approved parameter list, wherein the selected parameter modifies operations performed by the interpreter and the identifier of the selected parameter is distinct from the identifier of the interpreter; and
(iv) an identifier of the script is included in an approved list of executables; and
allowing or denying the execution of the code of the script based on the determining, thereby protecting the workload from script-based attacks.
|