12. The method as recited in claim 11 , wherein the cryptographic certificates and policies repository includes policies requiring the unequivocal identification of the author of the file to be determined compliant.
11. A machine for enforcing security policies within a computer system, comprising: (a) a cryptographic certificates and policies repository for resources including, but not limited to, executable files, whereby the resource's author can be authenticated, and system calls that are necessary for malicious behaviour are identified, (b) a security policies repository, (c) a loaded files and processes repository able to hold state machine information, (d) a memory which is able to store executable code, (e) a security policies enforcement agent which will: (f) intercept a call, (g) determine whether the call is a request to load an executable file into said memory, (h) when it is determined that the call is a request to load an executable file into said memory, analyse the cryptographic compliance as per the said cryptographic certificates and policies repository and determine whether it is compliant, (i) when it is determined that the file is compliant with said cryptographic policies, load said file into said memory, assign it full rights, update state information related to the call, the associated file including, but not limited to, the unequivocal identification of the resource's author, and the newly loaded process into said memory, (j) when it is determined that the file is not compliant with cryptographic policies, load said file into said memory, assign it limited rights, update state information related to the call, the associated file, and the newly loaded process into said memory, (k) when it is determined that the call is not a request to load an executable file into memory, determine whether the call is a restricted call as per the security policies repository, (l) when it is determined that the call is restricted, determine the calling process rights based on the state machine information of the calling process hierarchy, (m) when it is determined that the process is not authorised, update the state machine information, and react to the unauthorised call, (n) when it is determined that the process is authorised, update the state machine information, and return control to the operating system, repeating (f)-(n); whereby executable files requiring full rights will need to comply with said cryptographic certificates and policies repository, including but not limited to unequivocal identification of the resource's author, whereby executable files with limited rights will not be able to perform activities, including, but not limited to, system calls, necessary for malware's malicious behaviour as defined in the initial policies; whereby the revocation of the cryptographic certificates of the resources, including, but not limited to, executable files, will prevent the propagation of malware without the need for distribution of updates for the security method here described; whereby the post-mortem analysis of the cryptographic certificates of malware allows for the legal prosecution and accountability of the malware's authors.