Research Of Modeling Method For Networked Software Behavior Process

In the current networked environment, the software behaviormodeling has a very important application in system intrusion detectionand trusted software field, and it can provide support when discover andcapture abnormal behavior. At present, although the software behaviormodeling technology has been extensively studied, there are so manymodels according to various scenarios, a broader application fieldsoftware behavior modeling is lack. This paper starts from theperspective of the current development of today’s networked softwaresystem aiming at the above deficiency, a new networked softwarebehavior model is put forward, which is called the general behaviorprocess model GBMP, and give the corresponding model buildingmethod, and on this basis we combine the Petri net and GBMP modelingmethod to conduct the corresponding software behavior modeling.The main research work of this paper is as follows:(1) Proposing a general software behavior process model-GBMP.The general behavior process model which is set up based on eventinstance level considers the situation of the narrow application surfaceand the higher false alarm rate about the former models, which uses theevent instance as the basis elements, dynamic training data, and establisha practical software behavior model.(2) Proposing the construction method of GBMP model, and makethe related simulation experiment of the model. First, we design andimplement the constructing algorithm for the GBMP model, and make asimulation contrast experiment of the established model in intrusiondetection of software behavior with the model of software behaviorbased on system objects, and the experimental results show that theGBMP model has a better advantage in the execution efficiency, falsealarm rate, alarming rate and the early warming rate than the lattermodel, then we combine the Petri method and the GBMP modelingmethod to build the software behavior model, and analyze the rationalityof the software behavior for the model, verifying the completeness andaccuracy of the established model. (3) Designing and implementing a prototype system of thenetworked behavior model. According to the constructing GBMP modelmethod, combining the idea and method of process mining, we designand implement a simple prototype system of the behavior model, andanalyze and validate the feasibility and practicability of the establishedsystem.