A method and system are provided in which a broadband gateway may handle at least one physical layer connection to at least one corresponding network access service provider. The broadband gateway may receive content comprising an application through the at least one network access service provider and may store the content in a first portion of a memory. A software agent may be utilized to request the content and/or to store the received content in the first portion of the memory. The broadband gateway may execute the application after access by the application to a second portion of the memory is disabled. After the execution of the application is completed, access to the second portion of the memory may be enabled. In some instances, the application may be verified to determine whether it is secure for utilization and/or distribution. When verification fails, the application may be deleted.