Visual Indicator for Organizational Computing Resource
A computer stores, within a single user account, multiple supervised computing resources and multiple additional computing resources. The multiple supervised computing resources are associated with a security policy. The computer executes a first instance of a specified application that lacks read access and lacks write access to any and all of the multiple supervised computing resources. The computer executes, simultaneously with the first instance, a second instance of the specified application that accesses at least a portion of the multiple supervised computing resources. The computer applies rules from the security policy to the second instance of the specified application while foregoing applying the rules from the security policy to the first instance of the specified application.
1 . A method comprising:
storing, in a memory of a computing machine, computing resources including supervised computing resources;
receiving a request to display a computing resource from the computing resources stored in the memory;
causing display of the computing resource within a display region of a display device;
determining whether the computing resource is a supervised computing resource from the supervised computing resources based on identification criteria; and
upon determining that the computing resource is the supervised computing resource:
causing display of an indicator adjacent to an edge of the display region, wherein the indicator indicates that the computing resource is the supervised computing resource; or
upon determining that the computing resource is not the supervised computing resource: foregoing causing display of the indicator.
2 . The method of claim 1 , wherein the identification criteria comprise at least one of: the computing resource residing in a directory in a filesystem of the computing machine or of a cloud storage unit, a file type of the computing resource, an application associated with the computing resource, a website associated with the computing resource, or the computing resource having been provided to or installed at the computing machine by a specified entity.
3 . The method of claim 1 , wherein the identification criteria comprise presence of the computing resource within a predefined zone of the memory, wherein the predefined zone has at least one security policy that is applicable to the computing resources within the predefined organizational zone and not applicable to the computing resources external to the predefined organizational zone.
4 . The method of claim 1 , wherein the identification criteria comprise presence of the computing resource within a predefined zone of the memory, wherein the predefined zone has at least one network interface that is accessible to the computing resources within the predefined zone and not accessible to the computing resources external to the predefined zone.
5 . The method of claim 1 , wherein the identification criteria comprise a computing resource being accessed via a supervised launcher at the computing machine or including data from an additional supervised computing resource.
6 . The method of claim 5 , wherein the additional supervised computing resource comprises at least one of: a file, an email, a Software as a Service (SaaS) application or website, or a network destination or subnet.
7 . The method of claim 1 , wherein the indicator comprises a border occupying pixels external to the display region with a distance less than or equal to n pixels from the display region, wherein n is a positive integer, wherein the border has a predefined color or design.
8 . The method of claim 1 , wherein the indicator comprises a badge having a circular or elliptical shape overlaying a portion of the edge of the display region.
9 . The method of claim 1 , wherein the memory of the computing machine stores the supervised computing resources and unsupervised computing resources, wherein the supervised computing resources and the unsupervised computing resources are mutually exclusive.
10 . The method of claim 1 , wherein the display region comprises a portion of display space on the display device.
11 . A non-transitory machine-readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
storing, in a memory of a computing machine, computing resources including supervised computing resources;
receiving a request to display a computing resource from the computing resources stored in the memory;
causing display of the computing resource within a display region of a display device;
determining whether the computing resource is a supervised computing resource from the supervised computing resources based on identification criteria; and
upon determining that the computing resource is the supervised computing resource: causing display of an indicator adjacent to an edge of the display region, wherein the indicator indicates that the computing resource is the supervised computing resource; or
upon determining that the computing resource is not the supervised computing resource: foregoing causing display of the indicator.
12 . The machine-readable medium of claim 11 , wherein the identification criteria comprise at least one of: the computing resource residing in a directory in a filesystem of the computing machine or of a cloud storage unit, a file type of the computing resource, an application associated with the computing resource, a website associated with the computing resource, or the computing resource having been provided to or installed at the computing machine by a specified entity.
13 . The machine-readable medium of claim 11 , wherein the identification criteria comprise presence of the computing resource within a predefined zone of the memory, wherein the predefined zone has at least one security policy that is applicable to the computing resources within the predefined organizational zone and not applicable to the computing resources external to the predefined organizational zone.
14 . The machine-readable medium of claim 11 , wherein the identification criteria comprise presence of the computing resource within a predefined zone of the memory, wherein the predefined zone has at least one network interface that is accessible to the computing resources within the predefined zone and not accessible to the computing resources external to the predefined zone.
15 . The machine-readable medium of claim 11 , wherein the identification criteria comprise a computing resource being accessed via a supervised launcher at the computing machine or including data from an additional supervised computing resource.
16 . The machine-readable medium of claim 15 , wherein the additional supervised computing resource comprises at least one of: a file, an email, a Software as a Service (SaaS) application or website, or a network destination or subnet.
17 . The machine-readable medium of claim 11 , wherein the indicator comprises a border occupying pixels external to the display region with a distance less than or equal to n pixels from the display region, wherein n is a positive integer, wherein the border has a predefined color or design.
18 . The machine-readable medium of claim 11 , wherein the indicator comprises a badge having a circular or elliptical shape overlaying a portion of the edge of the display region.
19 . The machine-readable medium of claim 11 , wherein the memory of the computing machine stores the supervised computing resources and unsupervised computing resources, wherein the supervised computing resources and the unsupervised computing resources are mutually exclusive.
20 . A system comprising:
processing circuitry; and
a memory storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
storing, in the memory of a computing machine, computing resources including supervised computing resources;
receiving a request to display a computing resource from the computing resources stored in the memory;
causing display of the computing resource within a display region of a display device;
determining whether the computing resource is a supervised computing resource from the supervised computing resources based on identification criteria; and
upon determining that the computing resource is the supervised computing resource: causing display of an indicator adjacent to an edge of the display region, wherein the indicator indicates that the computing resource is the supervised computing resource; or
upon determining that the computing resource is not the supervised computing resource: foregoing causing display of the indicator.