1. A method of monitoring behaviors of a computing device that includes heterogeneous processing cores, comprising: repeatedly monitoring in a non-master processing core of the computing device activities of a software application to collect behavior information on a partial behavior of the software application; using the collected behavior information to generate in the non-master processing core a behavior signature that describes the partial behavior of the software application in a vector data-structure; generating a task graph in a master processing core of the computing device; and generating a global behavior vector data-structure that describes a complete behavior of the software application in the master processing core by using the generated task graph to combine two or more behavior signatures generated in non-master processing cores that each describe a partial behavior of the software application in a vector data-structure.