Abstract: A system and method is provided that makes sure the instruction sets executing on a computer are certified and secure. The system and method further facilitates a generic way to intercept the instruction loading process to inspect a loaded code segment first, before the computer gets a chance to execute the code segment. Further, a profiling component can monitor all executing processes running in a system and profile the behavior of the program. If the behavior is suspicious, established by a set of predefined rules, the profiler can take necessary actions to notify a system administrator and suspend or terminate execution of the program.