a system and method for providing enhanced security with regard to obtained files is presented . upon obtaining a file from an external location , the obtained file is tagged with tagging information regarding the origin of the obtained file . additionally , an operating system suitable for execution on a computing device is also presented . the operating system includes at least one application - callable function for obtaining content from an external location . each application - callable function for obtaining content from an external location is configured to associate tagging information with each obtained file , the tagging information comprising the origin of the obtained file . the origin of the obtained file can be used for subsequent security policy decisions , such as whether to allow or block execution or rendering of the content , as well as whether the content will be accessed in a constrained environment such as a “ sandbox ” or virtual machine .