System and method for application isolation

1. A system, comprising:

one or more central processing units;

one or more isolated environments including one or more applications; and

one or more resource mappings between resources as requested by the one or more applications and the corresponding resources inside said isolated environments;

wherein the one or more central processing units and the one or more isolated environments are configured to interact with each other;

wherein a resource mapping for an application is created or updated during one or more of installing said application in an isolated environment, running said application in said isolated environment, or accessing a resource corresponding to said resource mapping; and

wherein a resource mapping for an application is removed or updated during one or more of uninstalling said application, deleting a resource corresponding to said resource mapping, archiving at least one of the one or more isolated environments, or copying an isolated environment to a new location.

2. The system according to claim 1 , wherein the one or more applications are isolated from other applications and a host operating system while the one or more applications run within the one or more isolated environments.

3. The system according to claim 1 comprising one or more interception layers configured to intercept access to host operating system resources and host operating system interfaces.

4. The system according to claim 3 , wherein the one or more interception layers intercept calls by the one or more applications to the host operating system and system libraries.

5. The system according to claim 1 , wherein updates to the one or more isolated environments occur as the one or more applications use additional resources.

6. The system according to claim 1 , wherein said one or more resource mappings are maintained in an interception database.

7. The system according to claim 1 , wherein the one or more isolated environments are stored on a local storage.

8. The system according to claim 1 , wherein the one or more isolated environments are stored on a networked storage and the one or more applications are delivered over a network.

9. The system according to claim 1 , wherein each of the one or more applications is installed into its own isolated environment.

10. The system according to claim 1 , wherein two or more applications are installed into a shared isolated environment.

11. The system according to claim 10 , wherein the two or more applications share resources inside the shared isolated environment.

12. The system according to claim 1 , wherein two or more applications are installed into separate isolated environments and the one or more applications run concurrently in the separate isolated environments.

13. The system according to claim 1 , wherein a first application of the one or more applications is installed twice into separate isolated environments, and the separate isolated environments run concurrently and independently.

14. A method, comprising:

creating one or more isolated environments during installation of one or more applications;

maintaining a mapping between a resource as requested by the one or more applications and the corresponding resource inside said isolated environments, wherein said mapping is created or updated during one or more of installing an application in an isolated environment, running said application in said isolated environment, or accessing a resource corresponding to said resource mapping; and

uninstalling an application of the one or more applications, wherein said uninstalling comprises one or more of removing at least one of said mappings, uninstalling said application, and removing isolated environment information from storage.

15. The method of claim 14 comprising intercepting access to system resources and interfaces at one or more interception layers.

16. The method of claim 14 comprising updating the one or more isolated environments as the one or more applications use additional resources.

17. The method 14 comprising isolating the one or more applications from other applications and a host operating system while running within the one or more isolated environments.

18. A non-transitory computer readable storage medium comprising instructions for:

creating one or more isolated environments during installation of one or more applications;

maintaining a mapping between a resource as requested by the one or more applications and the corresponding resource inside said isolated environments, wherein said mapping is created or updated during one or more of installing an application in an isolated environment, running said application in said isolated environment, or accessing a resource corresponding to said resource mapping; and

uninstalling an application of the one or more applications, wherein said uninstalling comprises one or more of removing at least one of said mappings, uninstalling said application, and removing isolated environment information from storage.

19. The non-transitory computer readable storage medium of claim 18 comprising instructions for updating the one or more isolated environments as the one or more applications use additional resources.

20. The non-transitory computer readable storage medium of claim 18 comprising instructions for isolating the one or more applications from other applications and a host operating system while running within the one or more isolated environments.