Systems and methods for selectively blocking application installation
View Patent ↗Methods and system for preventing or allowing an installer application from installing applications based on a comparison of the installer application actions to profiles and rules. The profiles and rules are established (and periodically updated) to identify a particular software installation process as undesirable and stop, it from occurring. An install blocker processes the profiles and rules and compares them against what the installer is trying to do as part of its installation process. If the installer is attempting to install an application deemed undesirable, the user could then be notified, provided all of the information about what the installer was trying to do, and provided choice to allow the installation to continue.
1. A method of blocking an installation of an application on a computing device, the computing device including a processor configured to execute the method, the method comprising:
determining an instance of an installer, the determining including detecting actions of said installer as said installer performs the installation of the application;
comparing actions performed by said installer as defined within an installer script to a predetermined set of rules, wherein said predetermined set of rules identify a particular software installation process as undesirable;
preventing said installer from continuing the installation of said application based on the comparison of said actions to said predetermined set of rules; and
updating periodically the predetermined set of rules.
2. The method of claim 1 , said actions comprising at least one of writing to a file system, writing to a registry, changing configuration settings, registering shared libraries, and downloading from a network location.
3. The method of claim 1 , further comprising allowing said installer to continue based on said installer meeting a second set of predetermined rules.
4. The method of claim 3 , wherein said second set of predetermined rules comprises at least one of a domain name, a cryptographic signature, file attributes, and a network location.
5. The method of claim 1 , further comprising applying said method to a bundled installer that installs a plurality of applications, wherein said method is applied to each of said plurality of applications individually.
6. A system for preventing an installation of an application on a computer, comprising:
a processor;
memory communicatively coupled with said computing processor, said memory comprising executable instructions executable by said computing processor for providing:
a database including a predetermined set of rules that describes actions taken by an installer when installing an application, wherein said predetermined set of rules identify a particular software installation process as undesirable; and
an install blocker application that detects actions performed by said installer during the installation of the application and compares said actions performed by said installer to said predetermined set of rules, and selectively prevents said installer from continuing the installation of said application based on the comparison of said actions to said predetermined set of rules, the predetermined set of rules being updated periodically,
wherein said actions comprising at least one of a script to be performed by said installer, writing to a file system, writing to a registry, changing configuration settings, registering shared libraries, and downloading from a network location.
7. The system of claim 6 , further comprising allowing said installer to continue based on said installer meeting a second set of rules.
8. The system of claim 6 , wherein said install blocker applies operates against a bundled installer that installs a plurality of applications, wherein said install blocker compares said rules to each of said plurality of applications individually.
9. A computer readable storage medium containing instructions for a method of blocking an installation of an application on a computing device, said instructions when executed by a processor causing the processor to execute the method, the method comprising:
determining an instance of an installer, the determining including detecting actions of said installer as said installer performs the installation of the application;
comparing, while said installer performs the installation of the application, actions performed by said installer as defined within an installer script to a predetermined set of rules, wherein said predetermined set of rules identify a particular software installation process as undesirable;
preventing said installer from continuing the installation of said application based on the comparison of said actins to said predetermined set of rules; and
updating periodically the predetermined set of rules.
10. The computer readable storage medium of claim 9 , said actions comprising at least one of writing to a file system, writing to a registry, changing configuration settings, registering shared libraries, and downloading from a network location.
11. The computer readable storage medium of claim 9 , further comprising instructions for allowing said installer to continue based on said installer meeting a second set of predetermined rules.
12. The computer readable storage medium of claim 11 , wherein said second set of predetermined rules comprises at least one of a domain name, a cryptographic signature, file attributes, and a network location.
13. The computer readable storage medium of claim 9 , further comprising instructions for applying said method to a bundled installer that installs a plurality of applications, wherein said method is applied to each of said plurality of applications individually.