Patent Number: 8,719,190

Title: Detecting anomalous process behavior

Abstract: A method for learning a process behavior model based on a process past instances and on one or more process attributes, and a method for detecting an anomalous process using the corresponding process behavior model.

Inventors: El-Rafei; Sherif M. (Nasr, EG), Farahat; Ahmed K. (Mabouseen, EG), Hassan; Hany M. (Cairo, EG), Mahfouz; Tamer A. (Cairo, EG)

Assignee: International Business Machines Corporation

International Classification: G06F 15/18 (20060101)

Expiration Date: 5/06/12018