A method includes executing a virtual machine, which executes on a data processing device and includes an application container and an agent. The application container includes a file system mount interfaced with a file system residing outside the application container, an application programming interface (API), and a software application including a reference to the API. The agent is configured to monitor whether the software application attempts to access any resources outside of the application container. When the software application attempts to access any resources outside of the application container, the agent is configured to execute a remediation routine.