Monitoring program behavior is one of the highlighted research topics of host-based anomaly detection recently. The key is to construct a program behavior-based anomaly detection model.
监视程序行为是近年基于主机的异常入侵检测的研究热点，构建程序行为模型是进行异常检测的关键。
Two approaches to anomaly detection of program behaviors are presented which both use a Markov process to represent the normal behavior profile of a program.
研究了马尔可夫过程在程序行为异常检测中的应用，提出两种新的检测方法。
应用推荐