| 摘要 |
A process monitoring method and device. The method comprises: acquiring current file characteristic information of a specified monitored file many times, the monitored file being generated when the monitored process runs (S102); processing, according to a preset monitoring policy, the current file characteristic information acquired many times, and obtaining current file characteristic parameters (S104); comparing the current file characteristic parameters with valid file characteristic parameters of the monitored file, and obtaining a comparison result (S106); and determining whether the monitored process is abnormal according to the comparison result (S108). By means of the method and device, it is accurately determined whether a monitored process is abnormal, and the problem in the related art that the method of monitoring ports is unreliable is solved. |
