A security technique that monitors the runtime behavior of programs and processes in real time, detecting and blocking suspicious actions such as unauthorized outbound communication or unexpected file modifications. Because it does not rely on known virus signature databases, it can counter unknown threats including zero-day attacks. It is a form of heuristic detection widely incorporated into anti-malware software.

Past questions testing this term · 1 questions

• 2017h29a #70ゼロデイ攻撃のような未知の脅威からシステムを守るための，振る舞い検知の技術に関する記述として，適切なものはどれか。