Use of an application controller to monitor and control software file and application environments
View Patent ↗In embodiments of the present invention, a framework for an extensible, file-based security system is described for determining an appropriate application, application environment, and/or access or security control measure based at least in part on a file's reputation. In response to the selection of a file, an application controller may be used to select a software application from two or more software applications to open the selected file, based at least in part on the selected file's reputation. If launched, a software application may be configured to open the file in an environment, such as a virtual machine, quarantined environment, and the like, that is appropriate for the file based at least in part on the reputation information. A software application may be a secure software application configured to manage secure files, or an insecure software application configured to manage insecure files. The selected file, and communications relating to the selected software application, may be managed according to the selected software application's secure or insecure configuration. Further, the selected software application may associate reputation information with all files that are modified and/or created by the selected software application, including at least in part, reputation information matching that of the selected file.
1. A computer program product for operating an application controller on an endpoint in an enterprise network, the computer program product embodied in a non-transitory computer readable medium that, when executing on one or more computers, performs the steps of:
a. in response to a selection of a file, retrieving a reputation of the file stored in metadata for the file, wherein the reputation includes at least one access and security parameter for the file and wherein the reputation is remotely stored in a database independent of the application controller and accessible by the application controller, the access and security parameter corresponding to the file being a secure encrypted file or an insecure unencrypted file;
b. in response to the access and security parameter, selecting a software application from at least two software applications in an application environment on the endpoint to open the file based on a security configuration of each of the at least two software applications and a corresponding determination of whether the file is a secure encrypted file or an insecure unencrypted file, wherein one of the at least two software applications is a first software application configured to access secure encrypted files and another one of the at least two software applications is a second software application not configured to access secure encrypted files, and wherein the application controller can control access to encrypted files on the endpoint; and
c. launching the selected software application to open the file and access the file in accordance with the security configuration for the selected software application.
2. The computer program product of claim 1 , wherein the selection of the software application is made at least in part by an application controller software program that is enabled to identify a reputation that is associated with the file.
3. The computer program product of claim 1 , wherein the selection of the software application is made at least in part by an application controller software program that is enabled to store a reputation that is associated with the file.
4. The computer program product of claim 1 , wherein the selection of the software application is made at least in part by an application controller software program that is enabled to update a reputation that is associated with the file, and store the updated reputation in association with the file.
5. The computer program product of claim 1 , wherein communications relating to the selected software application include a network access communication.
6. The computer program product of claim 1 , wherein communications relating to the selected software application include a file access communication.
7. The computer program product of claim 1 , wherein communications relating to the selected software application include a process access communication.
8. The computer program product of claim 1 , wherein communications relating to the selected software application include a memory access communication.
9. The computer program product of claim 1 , wherein the metadata includes data relating to a file format.
10. The computer program product of claim 1 , wherein the metadata includes data relating to an originating location of the file.
11. The computer program product of claim 10 , wherein the originating location is an Internet URL.
12. The computer program product of claim 10 , wherein the originating location is an intranet.
13. The computer program product of claim 10 , wherein the originating location is a server address.
14. The computer program product of claim 10 , wherein the originating location is an IP address.
15. The computer program product of claim 10 , wherein the origination location is a third software application.
16. The computer program product of claim 15 , wherein the third software application is a secure application.
17. The computer program product of claim 15 , wherein the third software application is an insecure application.
18. The computer program product of claim 10 , wherein the originating location is a CPU.
19. The computer program product of claim 10 , wherein the originating location is a plurality of locations.
20. The computer program product of claim 19 , wherein the plurality of locations are prior locations in which the file has been located.
21. The computer program product of claim 1 , wherein the metadata includes data relating to an application that is used to interact with the file.
22. The computer program product of claim 21 , wherein the interaction with the file is opening the file.
23. The computer program product of claim 21 , wherein the interaction with the file is modifying the file.
24. The computer program product of claim 21 , wherein the interaction with the file is creating the file.
25. The computer program product of claim 21 , wherein the interaction with the file is saving the file.
26. The computer program product of claim 1 , wherein a new file created by the selected software application is further associated with the reputation the file.
27. The computer program product of claim 1 wherein the application controller determines an application environment to launch the selected software application.
28. The computer program product of claim 1 wherein the application controller determines at least one access or security control measure for the selected software application.