Patent ID: 8245289

Claim:
A method for improving security of a binary executable file by using a security payload, the method comprising: receiving the binary executable file; attaching the security payload to the binary executable file, including changing an address entry point of the binary executable file so that the security payload is executed first upon execution of the binary executable file, the security payload adapted to intercept application programming interface (API) calls to system resources from the binary executable file via export address redirection back to the security payload; and, upon execution of the binary executable file, the security payload replacing system library export addresses within a process address space for the binary executable computer file with security monitoring stub addresses to the security payload, the API calls associated with the system library export addresses within the process address space, wherein attaching the security payload to the binary executable file comprises: increasing a number of sections value of the binary executable file by one to accommodate the security payload embedded within the binary executable file; creating a new section header for the security payload and adding the new section header to header information of the binary executable file; and, adding the security payload to an end of the binary executable file.