%0 Journal Article
%T Analyses and research of the program behavior in computer system<br>对计算机系统中程序行为的分析和研究
%A ZHU Guo-qiang
%A LIU Zhen
%A LI Zong-bo
%A <br>朱国强
%A 刘真
%A 李宗伯
%J 计算机应用
%D 2005
%I 
%X Three methods of distillation in the program behavior were introduced, and the program behavior was distilled and analyzed in LKM. The system call arguments was anlalyzed from the length distribution of character string, characteristic distribution of character string and special system call arguments, which rich the technique to analyze the program behavior and improve the exactness of detection of program anomalism.
%K program behavior
%K system call arguments
%K Linux Kernel Module(LKM)<br>程序行为
%K 系统调用参数
%K Linux内核模块
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=831E194C147C78FAAFCC50BC7ADD1732&aid=0948C43C8057B11D&yid=2DD7160C83D0ACED&vid=C5154311167311FE&iid=59906B3B2830C2C5&sid=D87173A90452242E&eid=311D553474BE2E39&journal_id=1001-9081&journal_name=计算机应用&referenced_num=2&reference_num=6