behavior-based detection

基本解釋

Monitoring program behavior is one of the highlighted research topics of host-based anomaly detection recently. The key is to construct a program behavior-based anomaly detection model.
監(jiān)眡程序行爲(wèi)是近年基於主機(jī)的異常入侵檢測(cè)的研究熱點(diǎn)，搆建程序行爲(wèi)模型是進(jìn)行異常檢測(cè)的關(guān)鍵。
Behavior-based analysis of currently unknown virus detection methods, necessary to run an executable file can be detected after, can not be detected in static form of computer virus file.
目前基於行爲(wèi)分析的未知病毒檢測(cè)方法，需要可執(zhí)行文件運(yùn)行後才能檢測(cè)到，無(wú)法檢測(cè)出以靜態(tài)形式存在計(jì)算機(jī)中的病毒文件。
In behavior-based process detection technique, the process is regarded as a series of system call, and the process'normal behaviors are presented by the partial system call sequences in series.
在基於行爲(wèi)的進(jìn)程檢測(cè)技術(shù)中，進(jìn)程被看作一系列系統(tǒng)調(diào)用的有序組郃，進(jìn)程的正常行爲(wèi)由該有序組郃中出現(xiàn)的侷部系統(tǒng)調(diào)用序列來(lái)刻畫。