1. A method of modeling a behavior of a computer program that is executed in a computer system, the method comprising: collecting system use information about resources of the computer system that the computer program uses; extracting a behavior signature of the computer program from the collected system use information; and encoding the extracted behavior signature to generate a behavior vector.