Secure system for allowing the execution of authorized computer program code

A non-transitory program storage device readable by a computer system, tangibly embodying a program of instructions executable by one or more computer processors of the computer system to perform method steps for authenticating dependent code modules comprising:

• intercepting, by a kernel mode driver of the computer system, file system or operating system activity relating to a code module;
• selectively authorizing, by the kernel mode driver, the code module by authenticating a cryptographic hash value of the code module with reference to a multi-level whitelist, the multi-level whitelist comprising (i) a global whitelist database remote from the computer system and maintained by a trusted service provider, the global whitelist database containing cryptographic hash values of approved code modules, which are known not to contain viruses or malicious code and (ii) a local whitelist database containing cryptographic hash values of at least a subset of the approved code modules;
• and
• allowing the activity relating to the code module when the cryptographic hash value matches one of the cryptographic hash values of approved code modules within the multi-level whitelist.