Patent ID: 9009822
Filing Date: 2015-04-14
Classification: G06F

Abstract:
1. A computer implemented method comprising: translating an application in a first code level to a second code level, the second level form being higher code level than the first code level; instrumenting the application in the second code level with one or more monitoring functions, the one or more monitoring functions detect behaviors of the application during processing within a virtual machine; re-translating the instrumented application to the first code level; providing the instrumented application in the first code level to a run time environment, wherein the run time environment comprises one or more virtual machines including the virtual machine; conducting virtual execution of the instrumented application within the run time environment by the one or more virtual machines; observing, by the one or more monitoring functions, behaviors of the instrumented application; and determining whether the observed behaviors identify that the application includes improperly behaving code.