Securely executing an application on a computer system
A method of and system for securely executing an application on a computer system such that a user of the computer system cannot access or view unauthorized content available on the computer system or accessible using the computer system. To securely execute an such method and system may terminate any unauthorized processes executing (i.e., running) on the computer system application prior to execution of the application, and may configure the application such that unauthorized content cannot be accessed, including configuring the application such that unauthorized processes cannot be initiated (i.e., launched) by the application. Further, such system and method may terminate any unauthorized processes detected during execution of the application, and may disable any functions of the computer system that are capable of accessing unauthorized content, including disabling any functions capable of initiating processes on the computer system. The application being securely executed may be any of a variety of types of applications, for example, a browser application or an application for receiving answers to questions of an examination (i.e., an exam-taking application). Securely executing an application may be used for any of a variety of purposes, including, among other purposes, to assist preventing students from cheating on exams, to assist preventing students from not paying attention in class, to assist preventing employees from wasting time at work, and to assist preventing children from viewing content that their parents deem inappropriate.
1. A method for securely administering a computer-based examination, the method comprising:
providing a set of authorized application processes, the set of authorized application processes comprising processes other than essential operating system processes that are permitted to execute on a computer during administration of an examination;
monitoring commands being provided to the computer, the commands instructing the computer to execute one or more requested processes;
determining if one or more of the requested processes are in the set of authorized application processes; and
prohibiting the execution of any requested processes that are not in the set of authorized processes.
2. The method of claim 1 , wherein the set of authorized application processes further comprises essential operating system processes.
3. The method of claim 1 , wherein one or more of the non-essential operating system processes provides user access to content.
4. The method of claim 1 , wherein providing the set of authorized application processes comprises reading a data file.
5. The method of claim 1 , further comprising instructing an operating system to close a first application process associated with an application processes not in the set of authorized application processes.
6. The method of claim 1 , further comprising:
providing a set of unauthorized application processes that are not permitted to execute on a computer during administration of an examination;
determining if one or more of the requested processes are unauthorized processes; and
prohibiting the execution of any requested processes that are in the set of unauthorized processes.
7. The method of claim 1 , further comprising:
providing a set of unauthorized application processes that are not permitted to execute on a computer during administration of an examination; and
instructing an operating system to close a first application process associated with an application process in the set of unauthorized application processes.
8. A system for securely administering a computer-based examination, the system comprising;
a data storage module for storing a set of authorized application processes, the authorized processes comprising processes other than essential operating system processes that are permitted to execute on a computer during administration of an examination; and
a security module for:
monitoring, during the administration of the examination, commands being provided to the computer, the commands instructing the computer to execute one or more requested processes for execution on the computer;
determining if one or more of the requested processes are in the set of authorized application processes; and
blocking the execution of those requested processes that are not in the set of authorized processes.