【摘要】 基于进程行为的异常检测技术具有较好的检测效果,有望成为异常检测实用化的突破口。从看待正常的角度以及建模方法两方面对该领域研究进展进行总结,对主要方法的误差特性和检测复杂性进行分析,对后续研究工作具有参考意义。更多还原

【Abstract】 Because of good detection effects in practice,anomaly detection based on program behavior is expected to become the starting point for practical.This paper not only summarized the research progress of this field in two aspects: the angle of looking at normal and the methods of making models,but also analyzed error characteristics and complexity of main methods.This paper was worth referring to the future research.更多还原