1. A computer-implemented method, comprising: receiving code; and using a processor, detecting malware based on a definition of a portion of said code according to at least one functional operation embedded in said portion of said code, wherein the definition defines the portion of said code without requiring consideration of semantics of said portion of said code.