发明授权
US08694833B2 Methods, media, and systems for detecting an anomalous sequence of function calls 有权
用于检测函数调用异常顺序的方法,介质和系统

Methods, media, and systems for detecting an anomalous sequence of function calls
摘要:
Methods, media, and systems for detecting an anomalous sequence of function calls are provided. The methods can include compressing a sequence of function calls made by the execution of a program using a compression model; and determining the presence of an anomalous sequence of function calls in the sequence of function calls based on the extent to which the sequence of function calls is compressed. The methods can further include executing at least one known program; observing at least one sequence of function calls made by the execution of the at least one known program; assigning each type of function call in the at least one sequence of function calls made by the at least one known program a unique identifier; and creating at least part of the compression model by recording at least one sequence of unique identifiers.
信息查询
0/0