A computer-implemented method for detecting a security vulnerability in an application, the method comprising: reversing object code of a computer application to generate source code of the computer application; comparing the generated source code to trusted source code of the computer application to identify a difference between the generated source code and the trusted source code, wherein identifying the difference comprises at least one of: (i) determining exported and imported addresses from the generated source code, determining exported and imported addresses from the trusted source code, and identifying a difference between (a) the exported and imported addresses determined from the generated source code and (b) the exported and imported addresses determined from the trusted source code; and (ii) executing the generated source code to identify resource handles associated with the generated source code, executing the trusted source code to identify resource handles associated with the trusted source code, and identifying a difference between (a) the identified resource handles associated with the generated source code and (b) the identified resource handles associated with the trusted source code; and in response to identifying the difference, determining the object code of the computer application includes a security vulnerability. reversing object code of a computer application to generate source code of the computer application; comparing the generated source code to trusted source code of the computer application to identify a difference between the generated source code and the trusted source code, wherein identifying the difference comprises at least one of: (i) determining exported and imported addresses from the generated source code, determining exported and imported addresses from the trusted source code, and identifying a difference between (a) the exported and imported addresses determined from the generated source code and (b) the exported and imported addresses determined from the trusted source code; and (ii) executing the generated source code to identify resource handles associated with the generated source code, executing the trusted source code to identify resource handles associated with the trusted source code, and identifying a difference between (a) the identified resource handles associated with the generated source code and (b) the identified resource handles associated with the trusted source code; and (i) determining exported and imported addresses from the generated source code, determining exported and imported addresses from the trusted source code, and identifying a difference between (a) the exported and imported addresses determined from the generated source code and (b) the exported and imported addresses determined from the trusted source code; and (ii) executing the generated source code to identify resource handles associated with the generated source code, executing the trusted source code to identify resource handles associated with the trusted source code, and identifying a difference between (a) the identified resource handles associated with the generated source code and (b) the identified resource handles associated with the trusted source code; and in response to identifying the difference, determining the object code of the computer application includes a security vulnerability.