Program verification and malware detection

A trusted computing system comprising:

• a first processor and a first memory;
• the first memory stores a first program to be executed by the first processor;
• a second computing system comprising a second processor and a second memory;
• the second memory stores a second program to be executed by the second processor;
• the second computing system receives an input data set;
• the input data set is processed by the second program executed by the second processor, to result an output data set;
• the trusted computing system receives the input data set or the output data set;
• the trusted computing system communicates, the input data set or the output data set, to a third computing system for evaluation or
• carries an evaluation by the first program;
• the evaluation is based on statistical properties and dependency of the input data set and the output data set, where the first program or the third computing system, detects deviations or discrepancies, and determines, based on the evaluation, that the second program is faulty;
• the trusted computing system, by means of the input data set or output data set, carries any of transmitting, monitoring, containing, detecting malware infection, blocking, refreshing, backup operation by means of the input data set, or testing of the second program.