such references fig1 describes the software elements in the system for the generation of mimicked software objects and their monitoring for the detection of malicious software activities for generic computing systems there can be a single security program 12 for the whole system which can handle multiple applications as an alternative a security layer 12 is created per application this is a must in certain mobile phone systems and will be installed together with it as one application and u201c sandbagged u201d together with it this will have an advantage as its operations would look to attacker software as the original application 1 object reference monitor 13 2 mimicked object creator 14 3 mimicked object monitor 15 the object reference monitor 13 will observe all system calls made by the application it will observe if this is a new reference to an object or a repetitive reference the software objects can be files 17 a or network resource 16 a potentially internet resources the mimicked object creator 14 will create mimicked software objects like these referenced 16 b 17 b they will have the same characteristics as the original software objects file size network characteristics in addition all actions references done to the original object will be done on them read write transfer copy it is expected that malicious software aiming to attack this application will reference these software objects an unlimited number of such software objects can be created per application also.