Process Monitoring on Sequences of System Call Count Vectors

Michael Dymshits, Ben Myara, David Tolpin

We introduce a methodology for efficient monitoring of processes running on hosts in a corporate network. The methodology is based on collecting streams of system calls produced by…