Detecting anomalous process behavior

US Patent US8719190B2

A method for learning a process behavior model based on a process past instances and on one or more process attributes, and a method for detecting an anomalous process using the corresponding process behavior model.