1. A method for providing a conditional access system (CAS) to control access to services and content delivered to a set-top box, the method comprising: encapsulating a CAS application in a Next CAS (NCAS) container, wherein objects associated with the CAS application are executed in the NCAS container; pre-allocating resources for the CAS application and other applications running on the set-top box, wherein the pre-allocated resources for the CAS application are specified independently of the other applications, and wherein each of the CAS application and the other applications has a pre-fixed resource allocation upon startup of the set-top box; and validating an execution of the CAS application using a linked chain of trust.