Abstract: A method of computer processing is for protecting against software misuse and malicious code. The method includes generating a formal specification defining permitted actions for an application, and linking the formal specification with the application so that the formal specification travels with the application. A signature is attached to the application to create a trusted application. The method further includes reading the trusted application to determine a requested action, and checking the signature to determine if the trusted application is authentic. The formal specification is checked and performance of the requested action is permitted if the requested action is among the permitted actions defined by the formal specification, and if the signature is authentic.