Detecting apparatus, system, program, and detecting method

摘要

A detecting apparatus including a cluster storing unit that stores, for each of clusters into which execution time of previously executed monitored tasks are classified, the range of execution times belonging to the cluster, an acquiring unit that acquires an execution time of the monitored task in response to new execution of the monitored task on the information processing apparatus, and a determining unit that determines the occurrence of an extraordinary behavior during the execution of the monitored task if the execution time of the newly executed monitored task does not fall within any of the ranges corresponding to the clusters.