| 摘要 |
A method, system and article of manufacture are disclosed for detecting anomalies in a software program. The method comprises the steps of running the software program as a client; and the software program sending to a server a multitude of tokens at specified points in the program, each of the tokens having information about the software program. The server implements code to analyze said tokens and to compare information in the tokens to stored data to identify anomalies in the software program. In a preferred embodiment, the tokens identify patterns of operation of the software programs, and the implementing step includes the step of comparing these program patterns with stored acceptable patterns to identify anomalous program patterns. This comparing may be done by the logging, as potential anomalies, selected ones of the program patterns that do not match any of the stored acceptable patterns.
|
