Secure bytecode instrumentation facility

A computer implemented method for initializing a bytecode instrumentation facility, the computer implemented method comprising:

• determining if an encrypted registry has been corrupted since a last time the encrypted registry was accessed;
• if the encrypted registry has not been corrupted, extracting a digital certificate from a specified code fragment location for each code fragment in the encrypted registry;
• using the digital certificate to determine if a certification authority in the digital certificate is a registered trusted certification authority;
• if the certification authority is a registered trusted certification authority, determining if an origin of the code fragment is a registered trusted origin;
• if the origin of the code fragment is a registered trusted code origin, determining if the code fragment is authentic;
• if the code fragment is authentic, loading the code fragment in memory to prevent the code fragment from being accessed while the bytecode instrumentation facility is executing;
• and
• completing initialization of the bytecode instrumentation facility and beginning injection of code fragments, wherein security of the bytecode instrumentation facility is increased.

A computer program product for registering a new code fragment in an encrypted registry of a bytecode instrumentation facility, the computer program product comprising:

• a computer usable medium having computer usable program code tangibly embodied thereon, the computer usable program code comprising:
• computer usable program code for extracting a digital certificate from a specified code fragment location;
• computer usable program code for using the digital certificate to determine if a certification authority in the digital certificate is a registered trusted certification authority;
• computer usable program code for determining if an origin of the code fragment is a registered trusted origin in response to determining the certification authority is a registered trusted certification authority;
• computer usable program code for determining if the code fragment is authentic in response to determining the origin of the code fragment is a registered trusted code origin;
• and
• computer usable program code for recording information of the code fragment into the encrypted registry in response to determining the code fragment is authentic, wherein security of the bytecode instrumentation facility is increased.