Google Inc.

Carlos E Pizano

Erik Kay

Aaron Boodman

Mark Larson

Jose Ricardo Vargas Puentes

Nicolas Sylvain

Finnur Breki Thorarinsson

Mark Alan Larson

According to one general aspect, a computer-implemented method may include receiving, at a server, a request from a computing device for an executable installation file. The executable installation file may be configured, when executed on the computing device, to install a web browser application on the computing device. The request may be associated with a specific network resource location that is hosted by the server. The method may include, in response to receiving the request, obtaining the executable installation file, dynamically incorporating a data file into the executable installation file. The data file may include a browser extension definition for a browser extension corresponding with the specific network resource location. The executable installation file, with the incorporated data file, may be further configured, when executed on the computing device, to install the defined browser extension on the computing device. The method may also include providing the executable installation file, with the incorporated data file, to the computing device.

Bundling extension installation with web browser installation

Embodiments of the present invention relate generally to application security. In an embodiment, a method for altered token sandboxing includes creating a process based on a naked token and suspending the process. The method further includes obtaining an impersonation token and resuming the process with the impersonation token. The method further includes acquiring resources needed for the process with the impersonation token. The method also includes replacing the impersonation token with the naked token. In a further embodiment, the method further includes executing the suspended process with the naked token and the acquired resources. In another embodiment, a system for user-mode, altered token sandboxing includes a security module, an acquisition module and a replacement module. In a further embodiment, the system may include an execution module. In another embodiment, the system may include a request module.

Altered token sandboxing

Growing community of inventors

Sunnyvale, CA, United States of America

Carlos E Pizano