1. A method, comprising: encapsulating resources in a software container; establishing a DMZ virtual area using one or more of a sand-boxing runtime model, an overlaying runtime model, and a hybrid runtime model to control access to the resources; executing an application; receiving from the application a request for one of the resources; providing the resource in response to the request if access is granted to the application at the DMZ virtual area.