1. A method for investigating an execution failure where a security cookie has been determined to have been corrupted, said method comprising: identifying function data, said function data regarding a function f θ associated with said security cookie, said function f θ comprising at least one instruction; identifying an address A 101 of said security cookie; determining a specific instruction from among said at least one instruction, where said specific instruction operates on address A Φ ; determining, using said specific instruction, a location ε associated with said security cookie; and identifying at least one storage structure proximate to location ε.