1. A computer implemented method for monitoring and controlling services, the method comprising the steps of: a service manager intercepting calls to service related operations made by acting applications; the service manager determining which acting application made a specific intercepted call; the service manager determining a target service of the specific intercepted call made by the acting application; the service manager identifying a characteristic common to the acting application that made the specific intercepted call and the target service of the specific intercepted call, the common characteristic comprising a hash of content; the service manager determining whether to block the acting application from making the specific intercepted call based at least in part on the common characteristic; and responsive at least in part to the service manager determining to block the acting application from making the specific intercepted call, the service manager blocking the acting application from making the specific intercepted call.