Method and apparatus for security performance evaluation for determining defensive execution function

An apparatus for security performance evaluation for determining a defensive execution function, comprising:

• a performance criteria generation unit for determining performance criteria data for a defensive execution function by performing static analysis of a protection target program;
• a communication unit for receiving a performance level specification for the defensive execution function;
• a defensive execution function injection unit for injecting the defensive execution function within a defensive execution function pool into the protection target program;
• a trace code injection unit for injecting code for measuring security performance of the defensive execution function into the protection target program;
• a performance measurement unit for measuring security performance data of the protection target program;
• and
• a defensive execution function pool management unit for determining a combination of defensive execution functions within the defensive execution function pool based on the security performance data.