UNSUPERVISED ANOMALY-BASED MALWARE DETECTION USING HARDWARE FEATURES

摘要

comprising the steps of obtaining the current hardware performs data including, hardware performs the counter data for a first hardware device executing a first process associated with the performing the pre-recorded hardware data showing the normal behavior of the first process , and on the basis of a first degree of indicating the normal behavior of the deviation of the obtained current hardware performs data corresponding to the first process from performing the pre-recorded hardware data process of determining, influence the performance of the malicious process, the first process including a method comprising the step of determining how, devices, systems, devices, methods, articles of, media and other implementations are disclosed. ;