behavior-based detection

基本解释

Monitoring program behavior is one of the highlighted research topics of host-based anomaly detection recently. The key is to construct a program behavior-based anomaly detection model.
监视程序行为是近年基于主机的异常入侵检测的研究热点，构建程序行为模型是进行异常检测的关键。
Behavior-based analysis of currently unknown virus detection methods, necessary to run an executable file can be detected after, can not be detected in static form of computer virus file.
目前基于行为分析的未知病毒检测方法，需要可执行文件运行后才能检测到，无法检测出以静态形式存在计算机中的病毒文件。
In behavior-based process detection technique, the process is regarded as a series of system call, and the process'normal behaviors are presented by the partial system call sequences in series.
在基于行为的进程检测技术中，进程被看作一系列系统调用的有序组合，进程的正常行为由该有序组合中出现的局部系统调用序列来刻画。