A method for securing a system comprising an application owner (110, 310), a master application (120, 320), and a plurality secure platforms (P i), the method comprising: receiving, by the master application (120, 320) from the application owner (110, 310), an application and an input, the application configured to compute a function to calculate an output from the input when executed; deploying, by the master application (120, 320), a plurality of replicas (A i) of the application on a number of the secure platforms (P i); establishing, by the master application (120, 320), a secure channel with each of the replicas (A i); sending, by the master application (120, 320), at least a portion of the input to the replicas (A i); receiving, by the master application (120, 320), a result calculated by each of the replicas (A i), the result being determined according to the function and the at least the portion of input; determining, by the master application (120, 320), the output based on the result received from each of the replicas (A i); and sending, by the master application (120, 320) to the application owner (110, 310), the output, the method further comprising: instantiating, by the master application (120, 320), a threshold signature signing scheme, the instantiating comprising: distributing, by the master application (120, 320), a respective share (sk i) of a signing key (sk) of the threshold signature signing scheme to each of the replicas (A i); and sending, by the master application (120, 320), a verification key (vk) of the threshold signature signing scheme to the application owner (110, 310); and receiving, by the master application (120, 320) from each of the replicas (A i), a respective partial signature (σ i) of the result calculated by the respective one of the replicas (A i), the respective partial signature (σ i) being based on the respective share (sk i) of the signing key (sk). receiving, by the master application (120, 320) from the application owner (110, 310), an application and an input, the application configured to compute a function to calculate an output from the input when executed; deploying, by the master application (120, 320), a plurality of replicas (A i) of the application on a number of the secure platforms (P i); establishing, by the master application (120, 320), a secure channel with each of the replicas (A i); sending, by the master application (120, 320), at least a portion of the input to the replicas (A i); receiving, by the master application (120, 320), a result calculated by each of the replicas (A i), the result being determined according to the function and the at least the portion of input; determining, by the master application (120, 320), the output based on the result received from each of the replicas (A i); and sending, by the master application (120, 320) to the application owner (110, 310), the output, the method further comprising: instantiating, by the master application (120, 320), a threshold signature signing scheme, the instantiating comprising: distributing, by the master application (120, 320), a respective share (sk i) of a signing key (sk) of the threshold signature signing scheme to each of the replicas (A i); and sending, by the master application (120, 320), a verification key (vk) of the threshold signature signing scheme to the application owner (110, 310); and receiving, by the master application (120, 320) from each of the replicas (A i), a respective partial signature (σ i) of the result calculated by the respective one of the replicas (A i), the respective partial signature (σ i) being based on the respective share (sk i) of the signing key (sk). instantiating, by the master application (120, 320), a threshold signature signing scheme, the instantiating comprising: distributing, by the master application (120, 320), a respective share (sk i) of a signing key (sk) of the threshold signature signing scheme to each of the replicas (A i); and sending, by the master application (120, 320), a verification key (vk) of the threshold signature signing scheme to the application owner (110, 310); and distributing, by the master application (120, 320), a respective share (sk i) of a signing key (sk) of the threshold signature signing scheme to each of the replicas (A i); and sending, by the master application (120, 320), a verification key (vk) of the threshold signature signing scheme to the application owner (110, 310); and receiving, by the master application (120, 320) from each of the replicas (A i), a respective partial signature (σ i) of the result calculated by the respective one of the replicas (A i), the respective partial signature (σ i) being based on the respective share (sk i) of the signing key (sk).