1. A method for securing an electronic device, comprising: trapping an attempt to access a secured system resource of the electronic device; determining a module associated with the attempt, the module comprising a plurality of distinct subsections; determining a subsection of the module associated with the attempt, the subsection including a memory location associated with the attempt, including: determining a byte string corresponding to a range including an instruction address that caused the attempt, the range to include a defined number of bytes surrounding the instruction address; and comparing the byte string against mappings of the subsection in a security rule; based on the determination of the module and the determination of the subsection, accessing the security rule to determine whether to allow the attempt; and handling the attempt based on the security rule.