System and method for monitoring and verifying software behavior

A system for monitoring and verifying software behavior comprising:

• a memory, and a processor in communication with the memory;
• a software behavior monitor, monitoring data packets transmitted in a transaction, and sending data packets to the software behavior verification system;
• a software behavior verification module, wherein the software behavior verification module comprises a software behavior model module, receiving legal user behavior data containing user activities performed during legal electronic transactions based, and storing the legal user behavior data as a software behavior model, an information extracting module, retrieving expected key sequences and information in the data packets, a comparing module, configure for comparing the key sequences and information retrieved from the data packets with that of the software behavior model, a warning module, closing the transaction when the key sequences and information retrieved from the data packets does not consistence with the software behavior model;
• the software behavior in the software behavior model has behavior logic;
• the software behavior in the software behavior model has behavior nodes, wherein the behavior nodes are arranged according to a transaction sequence.

A non-transitory computer-readable storage medium, containing a set of instructions which, when executed by a processor, cause the processor to perform a method for monitoring and verifying software behavior, the method comprising:

• the method is executed by a processor;
• receiving, by a software behavior verification system based on a physical hardware system, legal user behavior data containing user activities performed during legal electronic transactions and storing the legal user behavior data as a software behavior model;
• monitoring, by a software behavior monitor, data packets transmitted in a transaction, and sending data packets to the software behavior verification system;
• retrieving, by the behavior verification system, expected key sequences and information in the data packets;
• comparing, by the behavior verification system, the key sequences and information retrieved from the data packets with that of the software behavior model;
• if the key sequences and information retrieved from the data packets does not consistence with the software behavior model, it is determined that the transaction is an illegal electronic transactions, and the transaction is closed;
• the software behavior in the software behavior model has behavior logic;
• the software behavior in the software behavior model has behavior nodes, wherein the behavior nodes are arranged according to a transaction sequence.