A new approach of capturing system call context for software behavior automaton model

Abstract

According to the problems of traditional methods of capturing calling context, a new approach of capturing system call context is proposed and applied to the software behavior automaton model based on system call. The approach represents system call context by context value computed, which can capture system call context accurately with low time overhead. The experimental results show that our approach is better than traditional methods of capturing calling context in the aspect of accuracy or time overhead for software behavior monitoring. © 2011 Springer-Verlag Berlin Heidelberg.