| 摘要 |
One or more computer processes executing on a client computer are monitored for an anomalous condition relative to an adaptive reference model of the client computer. In response to detecting the anomalous condition, information is gathered regarding the anomalous condition as the processes continue to execute. A score is computed indicating a risk for continued execution of each of the processes based on the gathered information. Any of the processes for which the corresponding risk score meets a predetermined continued execution risk criterion is terminated. |
