Dynamic runtime micro-segmentation of interpreted languages

A system comprising:

• a host computer comprising a processor and a memory, the host computer having an operating system, the operating system having a kernel and configured to provision distinct processing spaces to different executed programs;
• a function recorder module configured to record entries and exists from functions;
• a system call recorded module configured to record system call invocations;
• a dynamic loader module configured to dynamically operatively couple the function recorder module and the system call recorder module to a software program that is executed by a first process by said host computer, the software program is programmed in an interpreter-based language, the software program incorporates a software library, wherein said dynamic loader module is configured to utilize an extended Berkeley Packet Filter (eBPF) for operatively coupling at least one of the function recorder module and the system call recorder module, whereby the eBPF providing observability in kernel mode of the operating system;
• and
• a monitoring agent that is configured to be executed by a second process by said host computer, the second process having a separate processing space than the first process, said monitoring agent is configured to obtained recordings of said function recorder module and said system call recorded module,
• wherein said monitoring agent is configured to invoke a stack builder to build a stack trace of the software program, whereby tracking stack state in the separate processing space;
• wherein said monitoring agent is configured to perform a responsive action based on the stack trace of the software program.