Abstract: Techniques for securing executable code on a computing device are provided. An example method according to the disclosure includes accessing an image file comprising intermediate code or binary object code; accessing metadata associated with the image file, the metadata providing layout information for a layout of one or more randomizable components in the image file, where the one or more randomizable components comprise variables of one or more structure types, objects of one or more class types, one or more data sections in the image file, function argument list, or a combination of two or more of these; and randomizing the layout of elements of instances of the one or more randomizable components using the metadata to generate randomized intermediate code executable by a virtual machine or randomized binary object code executable by the computing device.

Abstract: An optimizing compiler performs optimization that can employ complex transformations of the compiler input—such as transition table transpose of a transition table for a finite state machine and finding “hot spots” of the finite state machine—and provides compiled code for finite state machines that is more efficient (with regard either to time efficiency or space efficiency or both) than compiled code provided by general purpose optimizing compilers, which generally can not perform complex transformations like transition table transpose for finite state machines. Compiled code may be optimized for particular hardware for an embedded system. Performance of a finite state machine executing in hardware is optimized by finding states and transitions of the finite state machine that occur more or most frequently, referred to as “hot spots”, and generating optimized code tailored to execute the finite state machine more quickly, or using less instructions, for those states and transitions.