behavior-based detection

基本解釋

Monitoring program behavior is one of the highlighted research topics of host-based anomaly detection recently. The key is to construct a program behavior-based anomaly detection model.
監(jiān)視程序行為是近年基于主機(jī)的異常入侵檢測(cè)的研究熱點(diǎn)，構(gòu)建程序行為模型是進(jìn)行異常檢測(cè)的關(guān)鍵。
Behavior-based analysis of currently unknown virus detection methods, necessary to run an executable file can be detected after, can not be detected in static form of computer virus file.
目前基于行為分析的未知病毒檢測(cè)方法，需要可執(zhí)行文件運(yùn)行后才能檢測(cè)到，無(wú)法檢測(cè)出以靜態(tài)形式存在計(jì)算機(jī)中的病毒文件。
In behavior-based process detection technique, the process is regarded as a series of system call, and the process'normal behaviors are presented by the partial system call sequences in series.
在基于行為的進(jìn)程檢測(cè)技術(shù)中，進(jìn)程被看作一系列系統(tǒng)調(diào)用的有序組合，進(jìn)程的正常行為由該有序組合中出現(xiàn)的局部系統(tǒng)調(diào)用序列來(lái)刻畫(huà)。