A computer-based method, comprising:</claim-text> monitoring substantially in parallel a plurality of subsystems of the operating system during runtime for an event caused from a request made by a Downloadable; interrupting processing of the request; ring information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison. view more

The method of claim 1, further comprising determining whether information pertaining to the Downloadable violates a security rule.

The method of claim 5, further comprising determining whether violation of the security rule violates the security policy.

A system, comprising:</claim-text> a security policy; a plurality of operating system interfaces operating substantially in parallel, each interface for recognizing a runtime event in a subsystem of the operating system caused from a request made by nloadable; a first comparator coupled to the interfaces for comparing information pertaining to the received Downloadable with the security policy; and a response engine coupled to the first comparator for performing a predetermined responsive action based on the comparison with the security policy. view more

The system of claim 12, further comprising</claim-text> a security rule; and a second comparator, coupled to the interfaces and to the response engine, for determining whether information pertaining to the Downloadable violates the security rule.

The system of claim 12, wherein the predetermined suspicious action includes discarding the Downloadable.

A computer-readable storage medium storing program code for causing a computer to perform the steps of:</claim-text> monitoring substantially in parallel a plurality of subsystems of the operating system during runtime for an event caused from a st made by a Downloadable; interrupting processing of the request; comparing information pertaining to the Downloadable against a predetermined security policy; and performing a predetermined responsive action based on the comparison. view more

The medium of claim 33, further comprising determining whether information pertaining to the Downloadable violates a security rule.

The medium of claim 37, further comprising determining whether violation of the security rule violates the security policy.

The system of claim 12, wherein each subsystem includes one of a file system, network system, process system or memory system.

A computer-based method, comprising the steps of: receiving an incoming Downloadable addressed to a client, by a server that serves as a gateway to the client; comparing, by the server, Downloadable security profile data pertaining to the Downloadable, the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable, against a security policy to determine if the security policy has been violated; and preventing execution of the Downloadable by the client if the security policy has been violated. view more

The method of claim 1, further comprising the step of decomposing the Downloadable into the Downloadable security profile data.

A system for execution by a server that serves as a gateway to a client, the system comprising: a security policy; an interface for receiving an incoming Downloadable addressed to a client; a comparator, coupled to the interface, for comparing Downloadable security profile data pertaining to the Downloadable, the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable, against the security policy to determine if the security policy has been violated; and a logical engine for preventing execution of the Downloadable by the client if the security policy has been violated. view more

The system of claim 32, wherein the Downloadable includes a JavaScript.TM. script.

The system of claim 32, wherein the Downloadable includes a Visual Basic script.

The system of claim 32, wherein the security policy includes a default security policy to be applied regardless of the client to whom the Downloadable is addressed.

The system of claim 32, further comprising a URL comparator coupled to the comparator for comparing the URL from which the Downloadable originated against a known URL.

A computer-readable storage medium storing program code for causing a server that serves as a gateway to a client to perform the steps of: receiving an incoming Downloadable addressed to a client; comparing Downloadable security profile data pertaining to the Downloadable against a security policy to determine if the security policy has been violated; and preventing execution of the Downloadable by the client if the security policy has been violated. view more

A method, comprising: receiving a Downloadable; decomposing the Downloadable into Downloadable security profile data; the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable, comparing the Downloadable security profile data against a security policy; and preventing execution of the Downloadable if the Downloadable security profile data violates the security policy. view more