A tool that interposes itself between the running application and the underlying platform, and can watch every single instruction that the application executes. We could build our security system by embedding checks in this runtime layer. We don't want to modify the hardware, the operating system, or the application: we want this software layer to operate on commodity systems with no special preparation. To be usable, this layer would have to satisfy several criteria...