1. A machine readable medium on which instructions are stored, comprising instructions that when executed cause a machine for detecting computing application malfunctions to: receive an event trace that comprises a plurality of computing events and a plurality of addresses associated with the computing events; construct at least one sample fingerprint associated with a computing application based on the plurality of computing events and the plurality of addresses; compare the at least one sample fingerprint with at least one fingerprint reference, wherein the at least one fingerprint reference represents an expected execution behavior of the computing application; and determine whether the computing application is malfunctioning based upon the comparison of the at least one sample fingerprint and the at least one fingerprint reference.