ENHANCED SECURITY USING SCRIPTING LANGUAGE-BASED HYPERVISOR

摘要

Various systems and methods for providing multiple secure code execution environments within a single instance of a language runtime are described herein. A system for providing a code execution environment includes a processor subsystem; and a memory coupled to the processor subsystem, the memory including instructions, which when executed by the processor subsystem, cause the processor subsystem to: obtain source code for executing a process; search the source code for a scope violation; rewrite the source code to change a name corresponding to the scope violation with a replacement name; search the source code for a restricted function call; rewrite the source code to change the restricted function call to call a proxy for the restricted function call, and rewrite the source code to insert instrumentation to monitor and limit resource consumption.