System and method for inserting security mechanisms into a software program

A method for increasing the tamper resistance of a host software program using a plurality of guards, the host software program having a predetermined functionality, each of the plurality of guards deterring tampering with the host software program, the method comprising:

• defining a guard schema comprising a syntax for a guard script language, the guard script language comprising a plurality of guard script commands;
• defining a guard script comprising a self-protection scheme desired for the host software program, the guard script comprising at least one guard script command of the guard script language;
• automatically building a document object model from the guard script using a guard script interpreter running on a computer having a processor;
• and
• automatically traversing the document object model using a document object model parser running on the computer, the document object model parser building a command list for injecting the plurality of guards into the host software program without disrupting the predetermined functionality of the host software program, the host software program executing improperly when one of the plurality of guards detects tampering with the host software program.

A method for increasing tamper resistance using of a plurality of guards, each of the plurality of guards being configured to deter tampering, the method comprising:

• loading a host software program having a predetermined functionality in a memory of a computer;
• inserting markers into the host software program, the markers being arranged within the host software program according to a protection scheme desired for the host software program;
• defining a threat model for the host software program, the threat model defining relative importance of defending against various threats to the host software program;
• defining constraints on size and performance of the host software program;
• and
• injecting the plurality of guards into the host software program in accordance with the markers, the threat model, and the constraints using a guard injection program running on the computer, the guard injection program injecting the plurality of guards without disrupting the predetermined functionality of the host software program, the host software program executing improperly when one of the plurality of guards detects tampering with the host software program.