发明名称 DETECTION DEVICE, PROGRAM, AND DETECTION METHOD
摘要 [Object] To accurately detect whether a task on an information processing apparatus performed an extraordinary behavior. [Solution] A detecting apparatus for detecting whether an extraordinary behavior is performed or not when a monitoring task is executed on an information processing apparatus is provided. The detecting apparatus includes: an obtaining section for obtaining a measurement data including an executing timing and an execution time for each occasion of execution when the monitoring task is executed for a number of times on the information processing apparatus; a distance calculating section for calculating a distance between a measured point corresponding to each measurement data in a multi-dimensional space on which an executing timing and an execution time are allocated to different coordinates and another measured point placed in a predetermined range; and a determining section for determining whether an extraordinary behavior is performed when the monitoring task corresponding to the measurement data is executed based on the distance obtained for the measured point corresponding to the measurement data.
申请公布号 KR101006122(B1) 申请公布日期 2011.01.07
申请号 KR20097009804 申请日期 2007.12.12
申请人 发明人
分类号 G06F11/30;G06F11/34 主分类号 G06F11/30
代理机构 代理人
主权项
地址