1. A method, comprising: identifying execution of an interface, including identifying by utilizing a callback function that a code segment internal to the interface has been executed; in response to the execution of the interface, determining whether the interface was executed as a result of executing a defined entry point of the interface, the entry point located logically before the code segment; determining that the execution of the interface is malicious based upon the determination that the interface was executed as a result of executing the code segment prior to executing the defined entry point of the interface; and in response to the determination that the execution is malicious, initiating an action including at least one of: preventing further execution of the interface; transmitting an alert; or recording information associated with the execution of the interface.