Identifies and halts attacks in which malicious code is executed by pretending to originate on a trusted site.