1. A computer implemented method for automatically curing a detected anomaly in executing target software during the continuing execution of the target software, the method comprising the steps of: storing ranges of parameters associated with acceptable behaviors of the target software; detecting at least one behavior of the executing target software having a corresponding first parameter that is outside the stored range of parameters for acceptable behavior for the corresponding at least one behavior; predicting a probability of successfully restoring the at least one behavior to acceptable behavior during continuous execution of the target software by replacing first bytes stored in memory and associated with the execution by the target software of the at least one behavior with other bytes, the probability prediction at least partially based on accuracy of previous historical predictions of future states of the target software based on past and current state models at a time just prior to the future state prediction of the target software; replacing the first bytes with the other bytes upon the predicted probability of successfully restoring the at least one behavior to acceptable behavior exceeding a predetermined success threshold, thereby automatically attempting to cure a detected anomaly in the target software during the continuously executing target software.