Abstract: A machine-executable method implementable in a system operable to execute a browser application having at least one security-context zone and operable to apply at least one security policy to interaction between the system and web sites corresponding to domain identifiers populating the at least one security-context zone includes comparing a first set of domain identifiers populating a first security-context zone of the at least one security-context zone with a second set of domain identifiers. The method further includes populating the first security-context zone with at least one second-set identifier not included in the first set of domain identifiers.

Abstract: A method of controlling the access by an application to system resources includes accessing data related to access by the application to at least one of the system resources. A request to run the application is received. A first access token is created and has a first set of attributes that enable access to at least one of the system resources and that are selected based on the data. The first token is based on a second access token having a second set of the attributes. The first-set attributes are fewer in number than the second-set attributes. The first token is then associated with the application.

Abstract: A method executable in a system having a security mechanism that determines access by an application to system resources based on a security context in which the application is run includes receiving definitions of a plurality of security contexts. Each security context provides access to a respective set of the system resources. An association of each application of a plurality of applications with a respective one of the security contexts is received from the user. A first one of the applications is run subject to a first associated security context.