System and method for executing an encrypted binary from a memory pool

A system for executing computer code, the system comprising:

• a processor;
• a first module configured to control the processor to receive a request to run executable computer code;
• a second module configured to control the processor to determine whether the executable computer code is encrypted;
• a third module configured to control the processor to identify a portion of the computer code for execution if the executable computer code is encrypted;
• a fourth module configured to control the processor to decrypt the portion to yield decrypted computer code;
• a fifth module configured to control the processor to store the decrypted computer code in a pool of memory;
• and
• a sixth module configured to control the processor to execute the decrypted computer code from the pool of memory.

A compiler for compiling code, the compiler comprising:

• a processor;
• a first module configured to control the processor to receive unencrypted code;
• a second module configured to control the processor, as part of a compilation process yielding a compiled binary, to divide the unencrypted code into slices and encrypt at least one of the slices;
• a third module configured to control the processor to embed a unpacking mechanism in the compiled binary, wherein during execution of the compiled binary the unpacking mechanism decrypts an encrypted slice on demand to yield a decrypted slice and stores the decrypted slice in a pool of memory for execution;
• and
• a fourth module configured to control the processor to provide the compiled binary including the unpacking mechanism.

A non-transitory computer-readable storage medium storing instructions which, when executed by a computing device, cause the computing device to perform steps comprising:

• identifying a portion of encrypted computer code for execution;
• decrypting the portion to yield decrypted computer code;
• temporarily storing the decrypted computer code in a pool of memory designated for decrypted computer code;
• executing the decrypted computer code from the pool of memory;
• and
• evicting the decrypted computer code from the pool of memory when the decrypted computer code is no longer needed.