Secure method and system for computer protection

A method of providing diverse instances of a software application resistant to malicious attack, the method comprising:

• identifying portions of the software application that effect first and second communications between components of the software application, the first and second communications being vulnerable to malicious attack;
• selecting a first tamper-resistant software (TRS) encoding to render the first communication resistant to malicious attack;
• selecting a second TRS encoding to render the second communication resistant to malicious attack, the second TRS encoding differing from the first TRS encoding;
• generating diverse instances of the software application by applying different instances of the first TRS encoding and different instances of the second TRS encoding to the portions of the software application that respectively effect the first and second communications, such that, for a given instance of the software application, data representations used in the first and second communications differ, and the data representations differ among instances.

A computer-readable medium embodying instruction, which, when executed by a processor, cause the processor to perform a method of providing diverse instances of a software application resistant to malicious attack, the method comprising:

• identifying portions of the software application that effect first and second communications between components of the software application, the first and second communications being vulnerable to malicious attack;
• selecting a first tamper-resistant software (TRS) encoding to render the first communication resistant to malicious attack;
• selecting a second TRS encoding to render the second communication resistant to malicious attack, the second TRS encoding differing from the first TRS encoding;
• generating diverse instances of the software application by applying different instances of the first TRS encoding and different instances of the second TRS encoding to the portions of the software application that respectively effect the first and second communications, such that, for a given instance of the software application, data representations used in the first and second communications differ, and the data representations differ among instances.